Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.mft
File: 4PcIYcfPbv530i_HBJvpbGdopQA.mft (raw, json)
Hash identifier: XHklRAbg94GOzUOGgsKuwgZVQCZUNjy3FzN+eXuSi2Q=
Subject key identifier: 7B:99:B5:F3:93:38:6B:1D:B7:4B:4F:FD:76:CF:C8:BB:90:96:C2:9C
Authority key identifier: E0:F7:08:61:C7:CF:6E:FE:77:D2:2F:C7:04:9B:E9:6C:67:68:A5:00
Certificate issuer: /CN=e0f70861c7cf6efe77d22fc7049be96c6768a500
Certificate serial: 0196586FD04A9D55E012C3F62976DC42D7E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4PcIYcfPbv530i_HBJvpbGdopQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.mft
Manifest number: 04C3
Signing time: Mon 21 Apr 2025 13:00:44 +0000
Manifest this update: Mon 21 Apr 2025 13:00:44 +0000
Manifest next update: Tue 22 Apr 2025 13:00:44 +0000
Files and hashes: 1: 4PcIYcfPbv530i_HBJvpbGdopQA.crl (hash: FBmPGVYFhJrTxVaPtqZljMIxZh2GnC0cMIIgDEhsEjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4PcIYcfPbv530i_HBJvpbGdopQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:6f:d0:4a:9d:55:e0:12:c3:f6:29:76:dc:42:d7:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0f70861c7cf6efe77d22fc7049be96c6768a500
Validity
Not Before: Apr 21 13:00:44 2025 GMT
Not After : Apr 22 13:00:44 2025 GMT
Subject: CN=7b99b5f393386b1db74b4ffd76cfc8bb9096c29c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:62:a8:0f:e7:e5:30:01:a4:f3:72:6e:f9:e7:
f8:3e:51:b5:21:8f:e4:4c:2a:0a:b6:9c:87:02:21:
15:cf:e9:0f:7e:bb:cd:7a:b7:8b:e5:38:c8:e9:14:
89:f7:2a:33:5c:94:09:91:5e:7f:70:d9:74:21:ac:
95:dc:87:8c:42:0a:9f:4f:e4:1a:dc:a6:b6:85:2c:
46:af:11:22:ca:49:27:57:21:87:97:1e:46:46:0f:
d0:11:88:2f:12:2b:a3:b6:6f:ab:0f:e5:6e:8b:3e:
84:cc:2b:23:1c:cc:da:42:58:13:1b:f1:b2:59:2d:
80:80:71:03:69:52:c2:4c:05:4f:76:2b:85:83:ae:
0c:11:19:ac:5c:a9:7c:75:88:b0:8e:7d:ca:60:e3:
8c:ef:4c:e3:51:b3:90:b6:4f:3c:cd:20:c5:00:da:
09:23:c2:bb:66:57:17:78:2b:a0:a4:8d:4e:8b:74:
6e:9d:97:c7:c1:61:20:77:d6:02:f1:33:be:8a:95:
82:ec:f8:4f:fb:9c:a9:ed:d5:18:7a:eb:84:1f:57:
92:71:99:e4:b2:cf:aa:04:2d:09:ba:bf:d6:a2:b2:
8a:3a:c3:d8:75:8d:f4:b5:ba:0d:ee:61:12:fd:ed:
55:8f:2a:b6:cf:69:4b:c1:d9:ef:d9:c2:a1:ab:59:
14:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:99:B5:F3:93:38:6B:1D:B7:4B:4F:FD:76:CF:C8:BB:90:96:C2:9C
X509v3 Authority Key Identifier:
keyid:E0:F7:08:61:C7:CF:6E:FE:77:D2:2F:C7:04:9B:E9:6C:67:68:A5:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4PcIYcfPbv530i_HBJvpbGdopQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:0a:c7:8c:85:10:82:c4:eb:33:21:04:b7:b7:b0:24:e3:b7:
46:fe:72:24:68:1b:c9:aa:9d:c4:9f:ac:5a:e0:15:ac:4a:38:
01:c7:e9:15:2f:ad:e7:82:a6:e6:b4:14:81:5f:1a:ad:b2:60:
8f:c7:c9:27:c2:56:32:75:65:ba:8c:db:ab:9e:5d:2f:dc:f0:
97:1f:da:d2:06:c6:21:47:ad:ca:2a:01:82:a9:86:7e:b9:b1:
b4:57:ee:a7:18:28:92:a2:f9:10:95:37:54:92:86:3c:22:4b:
77:5d:cc:9e:f7:8d:fa:d5:71:88:06:12:95:57:d1:c3:7f:bc:
ff:14:bd:23:dd:a5:a9:a7:56:18:c1:77:59:d7:00:e4:7c:01:
26:c9:43:79:4c:de:41:3f:7a:f3:10:06:b4:3a:bd:e5:da:db:
76:b6:82:b3:4c:26:dc:39:95:d8:cf:53:9d:1c:bd:ec:8d:a0:
fb:e4:af:1b:a8:67:45:f5:b0:33:f7:23:50:14:8d:d9:b5:ab:
46:11:f8:3e:bd:7b:7a:69:67:70:c6:29:8b:f4:71:25:8c:8a:
44:29:fe:c5:4a:72:78:7b:5b:82:44:8e:9d:7a:34:de:a2:96:
28:21:fe:1c:c1:62:bf:af:f5:2a:29:d6:79:05:85:2e:71:ba:
17:fa:a7:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZYb9BKnVXgEsP2KXbcQtfpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwZjcwODYxYzdjZjZlZmU3N2QyMmZjNzA0OWJlOTZjNjc2
OGE1MDAwHhcNMjUwNDIxMTMwMDQ0WhcNMjUwNDIyMTMwMDQ0WjAzMTEwLwYDVQQD
Eyg3Yjk5YjVmMzkzMzg2YjFkYjc0YjRmZmQ3NmNmYzhiYjkwOTZjMjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWKoD+flMAGk83Ju+ef4PlG1IY/k
TCoKtpyHAiEVz+kPfrvNereL5TjI6RSJ9yozXJQJkV5/cNl0IayV3IeMQgqfT+Qa
3Ka2hSxGrxEiykknVyGHlx5GRg/QEYgvEiujtm+rD+Vuiz6EzCsjHMzaQlgTG/Gy
WS2AgHEDaVLCTAVPdiuFg64MERmsXKl8dYiwjn3KYOOM70zjUbOQtk88zSDFANoJ
I8K7ZlcXeCugpI1Oi3RunZfHwWEgd9YC8TO+ipWC7PhP+5yp7dUYeuuEH1eScZnk
ss+qBC0Jur/WorKKOsPYdY30tboN7mES/e1Vjyq2z2lLwdnv2cKhq1kUjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHuZtfOTOGsdt0tP/XbPyLuQlsKcMB8GA1UdIwQY
MBaAFOD3CGHHz27+d9IvxwSb6WxnaKUAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFBjSVljZlBidjUzMGlfSEJKdnBiR2RvcFFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS81NDI4MzAtY2M0OS00MTVhLTk3YjYt
NDQ3M2MwYjFlMDQ2LzEvNFBjSVljZlBidjUzMGlfSEJKdnBiR2RvcFFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS81NDI4MzAtY2M0OS00MTVhLTk3YjYtNDQ3M2MwYjFlMDQ2
LzEvNFBjSVljZlBidjUzMGlfSEJKdnBiR2RvcFFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMgrHjIUQ
gsTrMyEEt7ewJOO3Rv5yJGgbyaqdxJ+sWuAVrEo4AcfpFS+t54Km5rQUgV8arbJg
j8fJJ8JWMnVluozbq55dL9zwlx/a0gbGIUetyioBgqmGfrmxtFfupxgokqL5EJU3
VJKGPCJLd13MnveN+tVxiAYSlVfRw3+8/xS9I92lqadWGMF3WdcA5HwBJslDeUze
QT968xAGtDq95drbdraCs0wm3DmV2M9TnRy97I2g++SvG6hnRfWwM/cjUBSN2bWr
RhH4Pr17emlncMYpi/RxJYyKRCn+xUpyeHtbgkSOnXo03qKWKCH+HMFiv6/1KinW
eQWFLnG6F/qnZg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 16:39:26 2025 by rpki-client