Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft
File: 4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft (raw, json)
Hash identifier: kry/hnmlR/nl95dMlFLLW6PumOheythDHTXRST0T4E4=
Subject key identifier: 39:04:62:A3:20:C8:47:E4:10:BD:BA:8B:B0:DC:FF:EA:88:86:AA:AA
Authority key identifier: E0:77:6B:08:38:FA:0E:1D:A1:BE:4E:DC:CF:89:24:BD:41:3B:1D:B7
Certificate issuer: /CN=e0776b0838fa0e1da1be4edccf8924bd413b1db7
Certificate serial: 019658A65E3D247143F77A4ECC280FB51CCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft
Manifest number: 95
Signing time: Mon 21 Apr 2025 14:00:20 +0000
Manifest this update: Mon 21 Apr 2025 14:00:20 +0000
Manifest next update: Tue 22 Apr 2025 14:00:20 +0000
Files and hashes: 1: 4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.crl (hash: uapKxShT+POhDlvTSqZOX4AaBFDIt22Zi0pojwpf8Tw=)
2: U8sue3gZLueOLUNHI3zh7NTbaBA.roa (hash: aGzdRWMTM0/YLdPvutTc1s3WsmhuwZtks1XpZ/1ew6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:a6:5e:3d:24:71:43:f7:7a:4e:cc:28:0f:b5:1c:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0776b0838fa0e1da1be4edccf8924bd413b1db7
Validity
Not Before: Apr 21 14:00:20 2025 GMT
Not After : Apr 22 14:00:20 2025 GMT
Subject: CN=390462a320c847e410bdba8bb0dcffea8886aaaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:52:37:59:e8:0b:e0:36:32:21:d2:77:e6:f2:
9e:5f:bf:81:0f:46:86:5c:d7:d5:0f:0e:45:90:da:
d2:5b:69:8d:4e:c0:8e:bf:b1:96:2a:e0:0f:2f:1e:
22:e1:0e:84:59:22:a6:56:2b:3c:22:ac:20:cc:af:
37:23:69:ea:fa:83:f8:99:d4:98:ce:48:f8:70:fe:
b0:e4:93:98:f3:e2:7b:34:b7:69:5f:8e:4b:f4:71:
a6:6b:90:8d:74:1c:e7:54:08:ce:70:25:d7:26:c4:
11:e9:90:da:f9:a7:12:16:11:77:44:3d:3b:11:f2:
bf:c8:4b:94:f2:c6:2f:51:1c:7a:b2:84:d1:11:1b:
1f:c2:57:a2:f4:85:7f:fe:2c:77:d9:ef:36:06:fe:
da:6b:de:07:47:c5:f7:99:5b:94:08:e1:81:16:31:
bf:a0:64:f9:f4:cb:67:11:7b:61:74:83:27:ac:3a:
45:e9:52:b5:5a:7f:fc:78:06:bb:a9:ea:01:b7:46:
5e:56:bc:40:10:15:cc:7c:a2:52:bb:9c:a8:ab:82:
17:69:f7:70:da:d9:78:5d:5f:3b:b3:a6:45:f8:4c:
86:63:c4:73:4e:40:4d:11:f4:f2:38:8a:bd:ba:ed:
62:da:2c:c5:39:f3:ac:f5:fd:a9:f7:c4:b0:61:3b:
44:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:04:62:A3:20:C8:47:E4:10:BD:BA:8B:B0:DC:FF:EA:88:86:AA:AA
X509v3 Authority Key Identifier:
keyid:E0:77:6B:08:38:FA:0E:1D:A1:BE:4E:DC:CF:89:24:BD:41:3B:1D:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:25:18:14:64:d9:b1:af:7f:bc:6d:67:23:78:42:eb:80:d6:
7e:55:f7:73:3b:a3:aa:1c:a1:8d:ed:38:8b:37:25:cd:98:af:
4e:5d:23:26:11:e3:84:bf:0f:5c:d7:9f:55:3f:e1:de:15:c0:
9a:70:a1:3a:1f:8a:75:53:91:bc:50:50:80:a9:f1:9e:e9:68:
2b:a9:65:87:d2:b2:25:4e:0e:80:6d:56:22:e8:58:4f:05:48:
fa:6f:2f:5f:0b:74:21:33:0b:3a:d7:9e:f9:be:7c:b1:ed:81:
3a:53:d4:06:d1:de:e8:17:87:2f:f7:fc:36:1c:24:09:19:3b:
f2:a4:93:4d:21:56:b8:02:b0:a7:c2:aa:ea:95:5d:e1:54:d9:
e6:f2:bc:e4:e9:a6:c9:1e:b1:50:29:cb:62:e0:cb:8b:c7:71:
77:77:fa:ca:ac:6f:93:43:b5:57:65:6e:69:dc:44:1b:c8:3e:
75:27:14:7e:c2:34:f0:ac:b4:24:c0:f8:17:c1:05:80:9a:9b:
41:31:b1:5a:88:9b:cf:07:fc:95:74:d2:14:95:e1:af:89:99:
de:3a:3b:a6:87:ee:d4:8a:d2:e5:c4:43:1b:d1:6f:ff:30:7a:
46:0d:56:a3:d7:d6:44:a4:c7:2a:4e:ac:ac:bc:f6:7c:3c:41:
8d:99:1d:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZYpl49JHFD93pOzCgPtRzKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNzc2YjA4MzhmYTBlMWRhMWJlNGVkY2NmODkyNGJkNDEz
YjFkYjcwHhcNMjUwNDIxMTQwMDIwWhcNMjUwNDIyMTQwMDIwWjAzMTEwLwYDVQQD
EygzOTA0NjJhMzIwYzg0N2U0MTBiZGJhOGJiMGRjZmZlYTg4ODZhYWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA71I3WegL4DYyIdJ35vKeX7+BD0aG
XNfVDw5FkNrSW2mNTsCOv7GWKuAPLx4i4Q6EWSKmVis8IqwgzK83I2nq+oP4mdSY
zkj4cP6w5JOY8+J7NLdpX45L9HGma5CNdBznVAjOcCXXJsQR6ZDa+acSFhF3RD07
EfK/yEuU8sYvURx6soTRERsfwlei9IV//ix32e82Bv7aa94HR8X3mVuUCOGBFjG/
oGT59MtnEXthdIMnrDpF6VK1Wn/8eAa7qeoBt0ZeVrxAEBXMfKJSu5yoq4IXafdw
2tl4XV87s6ZF+EyGY8RzTkBNEfTyOIq9uu1i2izFOfOs9f2p98SwYTtEqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDkEYqMgyEfkEL26i7Dc/+qIhqqqMB8GA1UdIwQY
MBaAFOB3awg4+g4dob5O3M+JJL1BOx23MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEhkckNEajZEaDJodms3Y3o0a2t2VUU3SGJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9iZTlkYWItNWYyNy00M2NlLWFiMjIt
NzM5YTkxYzYyMGFjLzEvNEhkckNEajZEaDJodms3Y3o0a2t2VUU3SGJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9iZTlkYWItNWYyNy00M2NlLWFiMjItNzM5YTkxYzYyMGFj
LzEvNEhkckNEajZEaDJodms3Y3o0a2t2VUU3SGJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhSUYFGTZ
sa9/vG1nI3hC64DWflX3czujqhyhje04izclzZivTl0jJhHjhL8PXNefVT/h3hXA
mnChOh+KdVORvFBQgKnxnuloK6llh9KyJU4OgG1WIuhYTwVI+m8vXwt0ITMLOtee
+b58se2BOlPUBtHe6BeHL/f8NhwkCRk78qSTTSFWuAKwp8Kq6pVd4VTZ5vK85Omm
yR6xUCnLYuDLi8dxd3f6yqxvk0O1V2VuadxEG8g+dScUfsI08Ky0JMD4F8EFgJqb
QTGxWoibzwf8lXTSFJXhr4mZ3jo7pofu1IrS5cRDG9Fv/zB6Rg1Wo9fWRKTHKk6s
rLz2fDxBjZkdqw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:02:03 2025 by rpki-client