Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.mft
File: 4Xa6TSueAPu_jsQzEekblUqqU24.mft (raw, json)
Hash identifier: x2Ua2XQB/mXb+EPvGcgSWubIqbn/HxZLzjSIitFzs4M=
Subject key identifier: 0A:66:86:33:87:28:E0:C1:99:B5:DF:32:D1:3E:06:D1:ED:FA:96:8C
Authority key identifier: E1:76:BA:4D:2B:9E:00:FB:BF:8E:C4:33:11:E9:1B:95:4A:AA:53:6E
Certificate issuer: /CN=e176ba4d2b9e00fbbf8ec43311e91b954aaa536e
Certificate serial: 019685112BB401AFEC78ABC3563E6CD4904E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Xa6TSueAPu_jsQzEekblUqqU24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.mft
Manifest number: 0476
Signing time: Wed 30 Apr 2025 05:00:17 +0000
Manifest this update: Wed 30 Apr 2025 05:00:17 +0000
Manifest next update: Thu 01 May 2025 05:00:17 +0000
Files and hashes: 1: 4Xa6TSueAPu_jsQzEekblUqqU24.crl (hash: b/81hdIVJ7lVzVRcmXoYRXiXIF9VMMk3MY81/K4aguc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Xa6TSueAPu_jsQzEekblUqqU24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 05:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:11:2b:b4:01:af:ec:78:ab:c3:56:3e:6c:d4:90:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e176ba4d2b9e00fbbf8ec43311e91b954aaa536e
Validity
Not Before: Apr 30 05:00:17 2025 GMT
Not After : May 1 05:00:17 2025 GMT
Subject: CN=0a6686338728e0c199b5df32d13e06d1edfa968c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:20:cc:01:d1:26:ac:75:74:30:03:bc:54:97:
85:1a:8e:94:bc:07:78:a5:02:76:9c:88:1a:41:1f:
3e:97:88:af:02:42:a3:9f:36:a0:c3:e0:15:f8:42:
a2:ac:88:42:d0:0f:df:e0:b6:64:4a:bd:1a:2c:ca:
8a:b4:8a:c7:39:ec:bc:2e:28:58:7b:7c:33:1f:d3:
f1:23:67:5d:95:32:e6:d7:8a:4c:36:75:5b:ab:69:
80:42:6f:e3:16:2a:56:b4:a0:7c:f7:57:4a:ef:b1:
26:48:8b:95:f8:e6:83:22:28:71:36:8a:ce:6b:8a:
95:da:1e:df:a0:e3:68:e2:9e:8a:a6:02:7a:b9:41:
fd:6d:33:5d:df:fe:0c:8b:8b:98:c6:34:5d:38:2d:
5f:43:a5:97:98:49:fd:09:51:6a:55:db:d6:6c:ad:
70:df:b1:d6:5d:2c:17:2c:18:d0:19:23:85:2e:34:
c9:ee:65:fc:51:3f:d3:26:88:68:e3:90:2c:0d:49:
1c:2e:55:6b:69:95:ae:51:25:17:a9:dd:d0:78:ac:
94:fa:8a:00:0d:41:b5:ba:74:2a:9d:d5:74:15:d7:
a3:b2:71:49:52:77:72:67:9e:9f:f8:03:b1:41:b6:
b9:3a:33:e6:39:54:eb:35:18:6d:98:a5:18:cc:59:
c3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:66:86:33:87:28:E0:C1:99:B5:DF:32:D1:3E:06:D1:ED:FA:96:8C
X509v3 Authority Key Identifier:
keyid:E1:76:BA:4D:2B:9E:00:FB:BF:8E:C4:33:11:E9:1B:95:4A:AA:53:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Xa6TSueAPu_jsQzEekblUqqU24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:2f:19:94:76:87:71:e2:dd:60:ae:a8:22:87:0a:b6:53:cf:
30:84:f6:ca:2c:96:f6:c5:d0:1a:8e:c0:8a:ca:94:92:d1:d7:
d9:ad:31:16:31:6b:16:ca:81:90:26:17:bc:77:c4:4c:76:d6:
b9:a1:30:7a:f4:1e:82:a7:90:58:d4:a8:6a:a7:8d:28:88:31:
db:7e:a0:57:68:a8:ec:c3:e7:58:1e:da:68:27:f2:d6:78:92:
d1:9d:bd:c8:56:b5:03:e0:03:d6:49:e8:15:5a:1f:12:25:b8:
64:ed:ad:28:6f:13:8e:98:b9:fc:da:21:2a:15:54:0f:68:b4:
eb:68:49:77:7a:70:a4:db:95:17:78:d7:3a:17:36:83:1c:3f:
f1:d4:36:4a:37:58:36:fd:8d:7e:df:1c:84:3d:b7:23:d7:02:
3d:5e:4b:4c:18:75:ef:08:53:61:ad:24:e6:61:00:b9:04:65:
54:ac:99:7f:30:fc:bc:9f:1d:a3:78:87:cf:5c:cc:3f:7b:68:
83:22:29:ee:c7:2d:9b:c0:0b:b8:d2:65:7d:c9:b7:15:89:12:
51:7c:cc:21:95:2f:d9:57:20:ef:0f:c4:3a:8d:a5:be:73:33:
81:5e:0c:ba:26:77:ef:d1:02:cf:55:51:15:8c:06:8d:2a:9b:
ed:81:cc:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:20:01 2025 by rpki-client