Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft
File: 4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft (raw, json)
Hash identifier: KuOOTB2BQuLLt0h2v22JXkzf16frxTjq8LCe7pw1Spo=
Subject key identifier: 39:9B:45:C2:D8:0C:58:5E:36:81:8A:9B:8B:A1:B4:71:E6:E4:31:8F
Authority key identifier: E0:89:45:D1:FC:7B:47:0E:68:73:65:5F:75:59:30:0E:09:7A:65:E8
Certificate issuer: /CN=e08945d1fc7b470e6873655f7559300e097a65e8
Certificate serial: 019678D6C278F1A8054D2392453409A0DB58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft
Manifest number: 1512
Signing time: Sun 27 Apr 2025 20:01:02 +0000
Manifest this update: Sun 27 Apr 2025 20:01:02 +0000
Manifest next update: Mon 28 Apr 2025 20:01:02 +0000
Files and hashes: 1: 4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.crl (hash: xowZvTJkSGGIOlBIrxWR7X3yYSL8Vm1nzF/1NX961wg=)
2: v8biWOV_nsNX1ilIaxvt6SJe6Ow.roa (hash: ncGnxGmhlyRE3Vp5tuC1OddbegBnGSDwDfQcrYZJehw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:d6:c2:78:f1:a8:05:4d:23:92:45:34:09:a0:db:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e08945d1fc7b470e6873655f7559300e097a65e8
Validity
Not Before: Apr 27 20:01:02 2025 GMT
Not After : Apr 28 20:01:02 2025 GMT
Subject: CN=399b45c2d80c585e36818a9b8ba1b471e6e4318f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2d:b4:ab:fb:8b:78:04:b1:fe:09:8f:58:38:
b8:c0:29:7e:a6:e9:b1:d4:d2:22:e4:52:43:d6:45:
b8:e8:34:94:d5:ae:e0:10:c2:db:96:79:cd:12:57:
67:92:e7:a4:2a:9d:d7:2e:25:20:c6:77:90:6c:33:
39:c9:c2:91:31:0a:65:7c:62:73:7b:da:02:3d:e2:
df:d3:d5:27:aa:42:51:07:5a:4f:95:89:84:b2:96:
56:29:af:e4:7a:ec:8b:65:68:0b:eb:0b:2d:aa:fc:
eb:26:a2:71:c4:a0:9a:63:ee:fa:19:e9:8c:d6:fa:
e7:79:30:49:93:1e:c0:d0:ed:83:62:9e:0a:c5:40:
ae:ea:8d:8d:9e:29:0e:9f:e9:2d:2c:37:15:cc:18:
15:8e:27:65:8f:86:cf:1a:79:9c:f2:47:b8:89:7f:
25:d1:fb:34:aa:a6:ee:1d:c3:cc:60:9e:df:80:d5:
4c:a0:ac:ef:6b:59:a0:b0:e4:9b:8b:51:99:d7:5e:
e3:90:f5:ec:d5:87:2a:ba:fd:db:0f:2b:de:b4:cb:
a2:a5:f6:f7:fc:08:bb:29:e6:00:75:93:33:05:ac:
cf:21:19:5e:16:83:c0:4b:84:5d:d9:41:e3:30:7d:
18:4a:59:1a:42:0d:50:0c:4a:4a:47:02:3b:c0:86:
3b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:9B:45:C2:D8:0C:58:5E:36:81:8A:9B:8B:A1:B4:71:E6:E4:31:8F
X509v3 Authority Key Identifier:
keyid:E0:89:45:D1:FC:7B:47:0E:68:73:65:5F:75:59:30:0E:09:7A:65:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:d4:88:7c:19:60:e2:d0:ce:a7:83:51:d8:29:ee:fa:1e:4e:
cb:71:ce:e4:81:e2:03:f0:ca:ca:cf:3a:d7:fe:ec:fe:0d:fe:
61:ec:29:90:5d:63:ef:4f:f5:54:de:59:49:99:10:7e:76:aa:
48:c0:25:ee:3f:2b:4b:3f:40:05:a1:09:60:80:fe:63:bc:3c:
89:8b:69:cf:64:5e:4b:01:3a:0a:93:ce:6f:06:02:46:9b:af:
22:0e:92:7d:60:60:be:1e:86:60:08:0a:cf:2a:b3:06:8e:d6:
14:cf:57:cc:03:76:34:32:7b:22:44:25:9c:a1:ad:87:26:03:
b2:a9:ea:0c:3c:98:96:52:2b:45:5e:2b:5c:07:92:7d:b4:7f:
6f:c8:01:0f:d9:8e:88:d4:b5:79:c3:66:14:77:4c:c4:f1:9a:
7b:7d:29:c8:75:c1:bc:f7:08:44:aa:29:82:c7:d6:b8:fc:20:
96:b4:cf:68:bf:f6:6b:bc:d4:2e:03:5c:ed:cd:d0:2c:42:8c:
fa:f1:f6:e6:10:34:b5:5c:59:d6:c7:75:2f:5c:d5:04:b9:c8:
72:be:c0:c6:b8:da:04:01:88:d1:27:c4:a3:00:e8:98:a6:86:
28:d0:3e:12:67:dd:b8:0c:61:ba:26:a1:f6:d3:b7:74:9d:f6:
b6:2e:35:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:18:06 2025 by rpki-client