Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft
File: r4jIvS2oviecF3KhEQqjiPDvEQI.mft (raw, json)
Hash identifier: opQYw4illP3sujk878gMUsbVu1gojcbxETS07lv6l6c=
Subject key identifier: CE:AF:D8:8D:1A:1E:01:F8:D9:39:E3:7C:54:65:0D:28:95:68:9B:57
Authority key identifier: AF:88:C8:BD:2D:A8:BE:27:9C:17:72:A1:11:0A:A3:88:F0:EF:11:02
Certificate issuer: /CN=af88c8bd2da8be279c1772a1110aa388f0ef1102
Certificate serial: 01965500DF2F417641C1A3E8E4773C886006
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 21:00:42 +0000
Manifest this update: Sun 20 Apr 2025 21:00:42 +0000
Manifest next update: Mon 21 Apr 2025 21:00:42 +0000
Files and hashes: 1: V6I7xtb-s540gCh7ELkbFAWWNm8.roa (hash: 4XfEuv+JUU8dRovsqOYBux0Sp8hqu4SxoGQivq4ciLk=)
2: r4jIvS2oviecF3KhEQqjiPDvEQI.crl (hash: 5qbgOd0e+FDHQxrCU48l1JAly/VkFbHSob5DuoVHrmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 21:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:df:2f:41:76:41:c1:a3:e8:e4:77:3c:88:60:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af88c8bd2da8be279c1772a1110aa388f0ef1102
Validity
Not Before: Apr 20 21:00:42 2025 GMT
Not After : Apr 21 21:00:42 2025 GMT
Subject: CN=ceafd88d1a1e01f8d939e37c54650d2895689b57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9d:b0:49:90:12:fa:2b:01:69:32:a6:26:12:
bd:49:36:87:95:40:85:1f:e5:81:88:a6:a1:fb:aa:
5e:fa:dd:f6:8e:5b:f9:c1:a3:91:54:31:ea:05:a4:
b8:c3:f8:2d:ec:d1:c0:61:31:c8:94:7e:c3:d7:b5:
ed:38:a3:91:a9:4d:f6:59:f9:73:ff:f9:6a:b1:32:
44:bb:9b:40:ad:f5:62:54:f7:b5:21:73:3e:e0:61:
5b:08:3d:a4:f7:92:66:e0:fb:31:e4:ec:91:c4:15:
7e:d5:e3:ab:86:b2:79:e5:0c:1c:19:c3:a5:90:d8:
fc:b6:81:c5:1f:46:a9:b6:40:c1:4c:a4:fb:ea:52:
8f:88:8d:48:d6:7e:51:f5:eb:97:aa:b5:c6:58:85:
4b:a0:3b:b5:54:60:99:c2:bd:74:7f:83:62:cc:3c:
a2:d9:18:47:cc:6d:79:bd:a5:5e:f3:28:b1:87:6e:
bc:d6:b1:2c:4b:0e:73:df:8a:c0:ac:bf:20:f8:ae:
97:e6:1c:66:0d:df:99:64:e5:64:d0:11:e3:72:ba:
b9:de:be:4c:8d:f5:83:fb:3a:c5:9f:22:7a:b1:b9:
f3:c2:de:8e:b6:5f:07:e5:9a:51:dd:35:94:d5:d3:
aa:69:8d:5c:51:30:82:2f:86:af:ef:27:04:2c:f6:
7a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:AF:D8:8D:1A:1E:01:F8:D9:39:E3:7C:54:65:0D:28:95:68:9B:57
X509v3 Authority Key Identifier:
keyid:AF:88:C8:BD:2D:A8:BE:27:9C:17:72:A1:11:0A:A3:88:F0:EF:11:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:59:ec:ce:54:20:55:fd:88:68:04:de:45:41:3a:3f:2e:65:
8d:40:c7:59:54:51:66:a5:d6:30:8d:70:03:52:7d:17:af:9a:
b8:d1:b9:0a:95:e2:c7:ff:35:27:17:2a:98:90:6d:49:3a:64:
99:8a:67:06:3e:ff:17:67:d2:0d:4b:ee:de:49:e5:fa:10:40:
68:34:62:98:83:cf:90:7a:39:f9:c6:36:2b:11:fc:75:c9:22:
fa:92:c3:e9:17:56:bc:38:2e:98:a2:cd:ce:2d:2f:61:a4:31:
62:b2:ff:0e:ea:a2:b2:94:2f:01:b4:5c:b2:6f:f9:fd:c9:03:
bd:fc:8d:19:b9:61:1a:7b:2d:13:1a:6d:c7:fa:e3:14:40:35:
b1:5e:a6:d0:79:64:5b:cf:8c:35:7b:76:c8:9b:b1:2a:81:ec:
da:21:db:7a:66:55:87:e3:d5:6a:66:ba:29:3d:34:dd:17:0f:
8e:b6:41:ca:fc:15:18:cb:06:dc:45:5e:97:4b:aa:21:99:41:
08:01:d3:f9:b9:30:d3:de:17:7a:f3:a3:4b:e8:b2:a3:98:6d:
43:d6:aa:ae:27:20:38:69:2b:df:07:f9:db:f7:20:c7:a8:60:
30:e4:bb:f8:0c:6f:29:5b:fe:45:17:0a:0c:cb:92:89:5e:6a:
46:49:ac:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVAN8vQXZBwaPo5Hc8iGAGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmODhjOGJkMmRhOGJlMjc5YzE3NzJhMTExMGFhMzg4ZjBl
ZjExMDIwHhcNMjUwNDIwMjEwMDQyWhcNMjUwNDIxMjEwMDQyWjAzMTEwLwYDVQQD
EyhjZWFmZDg4ZDFhMWUwMWY4ZDkzOWUzN2M1NDY1MGQyODk1Njg5YjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZ2wSZAS+isBaTKmJhK9STaHlUCF
H+WBiKah+6pe+t32jlv5waORVDHqBaS4w/gt7NHAYTHIlH7D17XtOKORqU32Wflz
//lqsTJEu5tArfViVPe1IXM+4GFbCD2k95Jm4Psx5OyRxBV+1eOrhrJ55QwcGcOl
kNj8toHFH0aptkDBTKT76lKPiI1I1n5R9euXqrXGWIVLoDu1VGCZwr10f4NizDyi
2RhHzG15vaVe8yixh2681rEsSw5z34rArL8g+K6X5hxmDd+ZZOVk0BHjcrq53r5M
jfWD+zrFnyJ6sbnzwt6Otl8H5ZpR3TWU1dOqaY1cUTCCL4av7ycELPZ6fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM6v2I0aHgH42TnjfFRlDSiVaJtXMB8GA1UdIwQY
MBaAFK+IyL0tqL4nnBdyoREKo4jw7xECMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjRqSXZTMm92aWVjRjNLaEVRcWppUER2RVFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9mMmYxZDMtZjRjMS00OWRmLTlkNDEt
YmM3NmNhZjA3ODYwLzEvcjRqSXZTMm92aWVjRjNLaEVRcWppUER2RVFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9mMmYxZDMtZjRjMS00OWRmLTlkNDEtYmM3NmNhZjA3ODYw
LzEvcjRqSXZTMm92aWVjRjNLaEVRcWppUER2RVFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO1nszlQg
Vf2IaATeRUE6Py5ljUDHWVRRZqXWMI1wA1J9F6+auNG5CpXix/81JxcqmJBtSTpk
mYpnBj7/F2fSDUvu3knl+hBAaDRimIPPkHo5+cY2KxH8dcki+pLD6RdWvDgumKLN
zi0vYaQxYrL/DuqispQvAbRcsm/5/ckDvfyNGblhGnstExptx/rjFEA1sV6m0Hlk
W8+MNXt2yJuxKoHs2iHbemZVh+PVama6KT003RcPjrZByvwVGMsG3EVel0uqIZlB
CAHT+bkw094XevOjS+iyo5htQ9aqricgOGkr3wf52/cgx6hgMOS7+AxvKVv+RRcK
DMuSiV5qRkmsZg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 03:54:05 2025 by rpki-client