Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.mft
File: 4Fx81akbRFhmDQcOBHf75pXBKws.mft (raw, json)
Hash identifier: fnzYWiIoPyR9ECYC00qecdJEeYF3c2TZhsCU4cdGnDo=
Subject key identifier: 82:09:0B:60:FE:2A:2E:77:C4:B6:F4:0D:1E:B1:20:FC:6F:02:25:A8
Authority key identifier: E0:5C:7C:D5:A9:1B:44:58:66:0D:07:0E:04:77:FB:E6:95:C1:2B:0B
Certificate issuer: /CN=e05c7cd5a91b4458660d070e0477fbe695c12b0b
Certificate serial: 019659F0A7547ADA95695B512647834FEF12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Fx81akbRFhmDQcOBHf75pXBKws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.mft
Manifest number: 0B7F
Signing time: Mon 21 Apr 2025 20:01:05 +0000
Manifest this update: Mon 21 Apr 2025 20:01:05 +0000
Manifest next update: Tue 22 Apr 2025 20:01:05 +0000
Files and hashes: 1: 4Fx81akbRFhmDQcOBHf75pXBKws.crl (hash: HJLajhn8HqLfab8I0ppyZZZjwXGHcVmfZpkTHQnd+ts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Fx81akbRFhmDQcOBHf75pXBKws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:f0:a7:54:7a:da:95:69:5b:51:26:47:83:4f:ef:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e05c7cd5a91b4458660d070e0477fbe695c12b0b
Validity
Not Before: Apr 21 20:01:05 2025 GMT
Not After : Apr 22 20:01:05 2025 GMT
Subject: CN=82090b60fe2a2e77c4b6f40d1eb120fc6f0225a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:75:7d:e2:a8:2b:13:8b:f4:11:1e:c7:e6:ef:
5b:8f:8c:62:f8:ea:ca:2e:f0:f1:c3:4d:0a:86:b5:
63:0b:73:2a:dd:ec:44:c7:fa:df:4e:98:99:4a:f0:
b7:c9:7c:7d:14:f2:95:11:7f:c8:37:cd:ad:31:7c:
d2:df:11:32:c9:dd:ce:4f:0b:7d:cd:80:1a:3a:c6:
b5:b2:0d:e2:08:f7:fd:33:26:32:43:5c:f2:9b:c5:
b4:b1:db:61:6b:5a:d9:c2:c7:90:9d:67:52:6e:cc:
6c:41:3c:58:72:3a:10:9c:88:ad:b0:72:d8:ec:5a:
fd:77:38:8d:ad:b9:30:80:68:be:00:65:14:ae:3c:
0e:f6:d7:cf:95:bc:63:37:a2:4c:a5:22:e0:e4:bd:
60:92:80:a5:1b:0a:69:21:e1:20:c5:b6:02:d6:98:
92:79:d7:f6:58:6e:02:9e:5e:77:32:f9:82:95:30:
eb:26:b2:7b:04:ff:4c:3e:08:10:79:1d:71:16:56:
9c:30:f0:53:91:68:37:0a:8a:7d:b5:56:7a:2b:be:
47:c6:9a:97:8f:1b:dd:35:e4:d8:eb:30:ae:23:7d:
7a:ca:7b:91:a2:5c:a5:02:33:7f:8e:04:97:00:48:
ae:d5:43:d5:eb:54:5c:1a:57:1f:18:4d:45:dc:ac:
8d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:09:0B:60:FE:2A:2E:77:C4:B6:F4:0D:1E:B1:20:FC:6F:02:25:A8
X509v3 Authority Key Identifier:
keyid:E0:5C:7C:D5:A9:1B:44:58:66:0D:07:0E:04:77:FB:E6:95:C1:2B:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Fx81akbRFhmDQcOBHf75pXBKws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:3c:20:da:52:53:69:86:5e:d7:6d:60:4a:10:05:61:57:0d:
73:f0:8e:a5:65:ef:0d:45:79:ac:21:a1:b7:97:74:f3:be:f9:
31:25:e5:6f:85:b9:2e:e7:74:33:98:41:08:f4:73:e5:29:93:
de:33:f9:e1:05:1b:a4:36:de:50:51:01:ef:77:07:c8:34:07:
ec:31:64:2a:6a:05:b8:c4:25:3e:58:4c:c7:df:61:8c:78:36:
11:41:4e:36:c6:5a:06:f9:0c:e3:57:b5:18:5f:32:36:9d:1d:
9b:01:46:6f:76:bd:86:64:c6:f5:3b:d5:bd:78:8c:4a:13:e0:
d7:d4:37:70:bc:d3:80:c3:a5:70:a4:92:3b:d3:87:46:80:cb:
ca:a4:eb:45:0b:8a:04:2e:16:75:81:cf:35:df:3b:9a:ad:7c:
28:36:15:09:82:bd:96:1c:87:e9:8a:14:a3:b6:f2:2a:57:a1:
c9:2d:9e:c8:74:5d:3a:73:e4:ea:5f:45:67:20:a8:8f:36:2e:
8d:2d:46:5d:c4:e0:d1:2d:92:f0:b0:fa:d3:ef:74:38:2f:22:
cf:68:02:7f:8d:88:76:ed:ea:69:ca:4c:6c:c9:62:92:89:d5:
7b:e0:1b:86:92:b2:c1:03:e8:ed:55:9e:98:de:61:81:b4:b5:
f2:1f:9e:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZZ8KdUetqVaVtRJkeDT+8SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNWM3Y2Q1YTkxYjQ0NTg2NjBkMDcwZTA0NzdmYmU2OTVj
MTJiMGIwHhcNMjUwNDIxMjAwMTA1WhcNMjUwNDIyMjAwMTA1WjAzMTEwLwYDVQQD
Eyg4MjA5MGI2MGZlMmEyZTc3YzRiNmY0MGQxZWIxMjBmYzZmMDIyNWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXV94qgrE4v0ER7H5u9bj4xi+OrK
LvDxw00KhrVjC3Mq3exEx/rfTpiZSvC3yXx9FPKVEX/IN82tMXzS3xEyyd3OTwt9
zYAaOsa1sg3iCPf9MyYyQ1zym8W0sdtha1rZwseQnWdSbsxsQTxYcjoQnIitsHLY
7Fr9dziNrbkwgGi+AGUUrjwO9tfPlbxjN6JMpSLg5L1gkoClGwppIeEgxbYC1piS
edf2WG4Cnl53MvmClTDrJrJ7BP9MPggQeR1xFlacMPBTkWg3Cop9tVZ6K75HxpqX
jxvdNeTY6zCuI316ynuRolylAjN/jgSXAEiu1UPV61RcGlcfGE1F3KyNJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIIJC2D+Ki53xLb0DR6xIPxvAiWoMB8GA1UdIwQY
MBaAFOBcfNWpG0RYZg0HDgR3++aVwSsLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEZ4ODFha2JSRmhtRFFjT0JIZjc1cFhCS3dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mMTE5MTMtMTA0NS00YWJhLWI4NzEt
ODMyYjVkZWY1YWQ4LzEvNEZ4ODFha2JSRmhtRFFjT0JIZjc1cFhCS3dzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9mMTE5MTMtMTA0NS00YWJhLWI4NzEtODMyYjVkZWY1YWQ4
LzEvNEZ4ODFha2JSRmhtRFFjT0JIZjc1cFhCS3dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQzwg2lJT
aYZe121gShAFYVcNc/COpWXvDUV5rCGht5d08775MSXlb4W5Lud0M5hBCPRz5SmT
3jP54QUbpDbeUFEB73cHyDQH7DFkKmoFuMQlPlhMx99hjHg2EUFONsZaBvkM41e1
GF8yNp0dmwFGb3a9hmTG9TvVvXiMShPg19Q3cLzTgMOlcKSSO9OHRoDLyqTrRQuK
BC4WdYHPNd87mq18KDYVCYK9lhyH6YoUo7byKlehyS2eyHRdOnPk6l9FZyCojzYu
jS1GXcTg0S2S8LD60+90OC8iz2gCf42Idu3qacpMbMlikonVe+AbhpKywQPo7VWe
mN5hgbS18h+eLQ==
-----END CERTIFICATE-----
Generated at Tue Apr 22 05:04:52 2025 by rpki-client