Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft
File: u4K408Gw94w6GfYWTrKCHiMM_k4.mft (raw, json)
Hash identifier: UaoX5oLXt9StdlC1P1V99TXlxeqiBVfm+cKt+c01hkM=
Subject key identifier: 86:EF:14:8D:71:4A:BA:DF:AC:59:D5:32:63:37:84:EB:B0:FD:4A:C1
Authority key identifier: BB:82:B8:D3:C1:B0:F7:8C:3A:19:F6:16:4E:B2:82:1E:23:0C:FE:4E
Certificate issuer: /CN=bb82b8d3c1b0f78c3a19f6164eb2821e230cfe4e
Certificate serial: 0196583875B98D17A2A702469376657880A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4K408Gw94w6GfYWTrKCHiMM_k4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft
Manifest number: 0EF9
Signing time: Mon 21 Apr 2025 12:00:17 +0000
Manifest this update: Mon 21 Apr 2025 12:00:17 +0000
Manifest next update: Tue 22 Apr 2025 12:00:17 +0000
Files and hashes: 1: sZvwZMkTNt-iUTiQmQ2RW61JCrY.roa (hash: ILtUTNlj+OmXDu1giFXN+JTJafdCM0FAh4hCT6vGfZc=)
2: u4K408Gw94w6GfYWTrKCHiMM_k4.crl (hash: P/p3a6AdRcUMj3pvUCVdo//9pDtC8wOT4HLAGq23pFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft
rsync://rpki.ripe.net/repository/DEFAULT/u4K408Gw94w6GfYWTrKCHiMM_k4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:38:75:b9:8d:17:a2:a7:02:46:93:76:65:78:80:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb82b8d3c1b0f78c3a19f6164eb2821e230cfe4e
Validity
Not Before: Apr 21 12:00:17 2025 GMT
Not After : Apr 22 12:00:17 2025 GMT
Subject: CN=86ef148d714abadfac59d532633784ebb0fd4ac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:47:b2:ed:a6:48:92:58:e1:b1:9e:cb:a7:8e:
0d:93:1b:f0:11:66:a5:9e:86:af:50:b0:02:7c:5c:
c8:ba:1c:75:9e:1e:d9:07:ac:40:f0:53:d0:b2:0e:
58:fe:36:c6:d5:53:af:24:94:a2:44:ab:ee:45:71:
60:66:21:07:33:b6:34:54:c0:25:19:55:2a:da:48:
d7:18:6d:23:2c:ac:70:1c:51:fe:af:c2:e9:b5:58:
36:e7:2b:e0:e2:f1:0d:cb:5e:d1:34:a8:d7:bf:34:
a3:66:c1:ae:b8:5d:4e:59:ed:8f:84:1d:b4:03:4d:
bb:d9:72:0f:09:c9:0f:60:0c:1b:92:b8:c2:ce:0e:
90:7f:69:0f:20:f4:80:e3:88:5c:01:a9:ef:7a:06:
53:08:c2:1c:81:47:67:92:c2:63:9d:fc:f2:60:87:
49:ea:c2:8c:13:5c:f0:40:a1:5a:6f:78:4c:be:f5:
ca:08:43:eb:49:c5:ae:ce:fd:c2:13:25:ce:ee:d7:
64:7e:81:d6:0c:bb:cc:a4:81:63:f9:c6:ac:92:88:
07:ee:13:06:d9:7f:3a:f7:c7:b9:6b:b0:8d:6d:8d:
e4:ec:b4:a4:03:26:1f:1e:db:74:1f:69:01:29:a4:
4b:69:41:81:51:c6:9f:41:b4:1a:41:5e:df:6a:d5:
24:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:EF:14:8D:71:4A:BA:DF:AC:59:D5:32:63:37:84:EB:B0:FD:4A:C1
X509v3 Authority Key Identifier:
keyid:BB:82:B8:D3:C1:B0:F7:8C:3A:19:F6:16:4E:B2:82:1E:23:0C:FE:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4K408Gw94w6GfYWTrKCHiMM_k4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:46:d3:84:0d:f3:bb:d9:7d:00:a4:c0:35:8a:e7:74:24:46:
98:30:82:69:3c:48:a3:23:1e:76:e0:7d:90:ae:67:62:cc:3f:
c2:14:2b:e9:d9:1a:5e:3a:a3:e3:3d:5b:98:44:c3:45:d1:68:
de:82:63:09:13:60:84:1e:c1:a5:d7:6e:09:18:f0:6b:17:46:
51:03:07:d9:18:f8:38:52:c3:1f:1c:dd:37:1e:c8:5f:bf:50:
a2:02:dd:bd:6a:55:75:2e:27:16:a4:30:de:f7:cc:98:6f:e2:
62:a8:1c:17:95:89:cb:2e:a1:03:45:d4:a7:34:36:14:18:ff:
71:fa:2e:82:16:a7:53:59:67:cd:a6:0d:e9:5d:e5:a8:4d:e2:
45:cc:be:0d:c0:7a:7f:ea:02:ee:68:82:64:75:56:03:2e:98:
da:b9:f2:c5:85:c1:c0:8e:ab:c4:19:6d:f8:93:84:d4:ca:cf:
ed:30:5f:53:6c:47:8f:84:89:59:0b:2d:f7:6a:b8:b6:9f:2a:
76:25:76:a5:55:07:3e:aa:75:85:66:93:e1:6b:18:e2:ea:9a:
31:07:24:df:ac:d0:45:29:b5:42:9c:aa:f2:9f:9d:14:2f:c9:
08:e2:ea:9a:d6:da:87:43:96:65:a5:4a:94:cb:c9:47:25:91:
2b:77:fd:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZYOHW5jReipwJGk3ZleICoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiODJiOGQzYzFiMGY3OGMzYTE5ZjYxNjRlYjI4MjFlMjMw
Y2ZlNGUwHhcNMjUwNDIxMTIwMDE3WhcNMjUwNDIyMTIwMDE3WjAzMTEwLwYDVQQD
Eyg4NmVmMTQ4ZDcxNGFiYWRmYWM1OWQ1MzI2MzM3ODRlYmIwZmQ0YWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Uey7aZIkljhsZ7Lp44NkxvwEWal
noavULACfFzIuhx1nh7ZB6xA8FPQsg5Y/jbG1VOvJJSiRKvuRXFgZiEHM7Y0VMAl
GVUq2kjXGG0jLKxwHFH+r8LptVg25yvg4vENy17RNKjXvzSjZsGuuF1OWe2PhB20
A0272XIPCckPYAwbkrjCzg6Qf2kPIPSA44hcAanvegZTCMIcgUdnksJjnfzyYIdJ
6sKME1zwQKFab3hMvvXKCEPrScWuzv3CEyXO7tdkfoHWDLvMpIFj+caskogH7hMG
2X8698e5a7CNbY3k7LSkAyYfHtt0H2kBKaRLaUGBUcafQbQaQV7fatUkFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIbvFI1xSrrfrFnVMmM3hOuw/UrBMB8GA1UdIwQY
MBaAFLuCuNPBsPeMOhn2Fk6ygh4jDP5OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTRLNDA4R3c5NHc2R2ZZV1RyS0NIaU1NX2s0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8yODBjYTktZjdkOC00ZmZhLWJhMzQt
YTEzZjQ0ODFiYzZjLzEvdTRLNDA4R3c5NHc2R2ZZV1RyS0NIaU1NX2s0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8yODBjYTktZjdkOC00ZmZhLWJhMzQtYTEzZjQ0ODFiYzZj
LzEvdTRLNDA4R3c5NHc2R2ZZV1RyS0NIaU1NX2s0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANEbThA3z
u9l9AKTANYrndCRGmDCCaTxIoyMeduB9kK5nYsw/whQr6dkaXjqj4z1bmETDRdFo
3oJjCRNghB7BpdduCRjwaxdGUQMH2Rj4OFLDHxzdNx7IX79QogLdvWpVdS4nFqQw
3vfMmG/iYqgcF5WJyy6hA0XUpzQ2FBj/cfoughanU1lnzaYN6V3lqE3iRcy+DcB6
f+oC7miCZHVWAy6Y2rnyxYXBwI6rxBlt+JOE1MrP7TBfU2xHj4SJWQst92q4tp8q
diV2pVUHPqp1hWaT4WsY4uqaMQck36zQRSm1Qpyq8p+dFC/JCOLqmtbah0OWZaVK
lMvJRyWRK3f9Aw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 19:20:58 2025 by rpki-client