Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft
File: 4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft (raw, json)
Hash identifier: XNl2tg4lYTe1XN230oZRSUi20hsf2AhfDiu2eX8ooV0=
Subject key identifier: 52:66:D7:BA:AE:80:44:10:20:6A:34:71:B2:5F:4A:CC:FA:0E:35:4E
Authority key identifier: E1:9C:BB:88:D2:B1:A8:96:65:85:06:77:86:62:E7:5C:73:2A:67:E7
Certificate issuer: /CN=e19cbb88d2b1a896658506778662e75c732a67e7
Certificate serial: 01965D284A3DA6EE7F6F423B26AA36F21248
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft
Manifest number: 1502
Signing time: Tue 22 Apr 2025 11:00:43 +0000
Manifest this update: Tue 22 Apr 2025 11:00:43 +0000
Manifest next update: Wed 23 Apr 2025 11:00:43 +0000
Files and hashes: 1: 4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.crl (hash: TJDGDzonKyN6MwpRbreBJAjq4nb907Egb4v0kxNXWxs=)
2: E3bOWVadiTMoov1haUFyRTwduJA.roa (hash: sxYsSioAFV3M4+urFT6FLkeq4ts+IfaNfTA80Mu3sng=)
3: qBf7Ld8e0ZEc7SC83qsc-EpQ6wo.roa (hash: 1F0G1lB8+dsYp3xA4GqGoykNUR9+r6OUzve6mTfWaFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:28:4a:3d:a6:ee:7f:6f:42:3b:26:aa:36:f2:12:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e19cbb88d2b1a896658506778662e75c732a67e7
Validity
Not Before: Apr 22 11:00:43 2025 GMT
Not After : Apr 23 11:00:43 2025 GMT
Subject: CN=5266d7baae804410206a3471b25f4accfa0e354e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:eb:43:10:53:13:c9:2d:15:e1:f1:30:36:48:
40:b0:76:05:a6:f9:56:5e:a1:3e:b2:d2:ca:99:78:
c4:ec:af:d4:c1:19:b3:d6:6a:4a:df:25:5d:fd:27:
93:08:d4:62:60:c9:4a:57:c2:7e:c6:74:14:13:8a:
f9:93:90:59:14:e9:6e:e8:12:9e:46:4a:cc:88:99:
f6:1f:72:19:e9:d3:ef:ef:42:51:19:f3:cf:5d:a8:
fc:5d:7b:07:e3:e3:50:e4:4f:d5:bb:4c:2e:27:63:
a5:21:66:d9:d8:fe:3b:b0:05:bc:ab:11:74:f9:81:
57:21:d3:17:c2:16:6a:2a:2f:28:ca:df:6d:f3:f4:
a0:25:72:f3:92:84:63:95:a3:dd:8d:8d:99:cb:ee:
db:9f:08:2d:df:08:7a:4d:7e:a4:f3:39:8a:00:33:
cf:be:5d:19:62:b2:7d:88:50:f4:c7:09:98:a7:9f:
31:81:d4:31:8a:1a:93:86:64:d5:ee:ec:76:c0:6e:
07:c3:0c:d7:c0:c2:c4:44:5a:fa:ea:8b:e7:71:4e:
bc:03:ca:a1:76:53:15:5d:ea:dc:ad:18:59:bb:28:
ef:1e:04:d8:07:82:67:92:f0:05:37:b7:d2:e1:19:
5b:4b:e7:de:1b:54:76:f6:20:88:66:cd:45:50:00:
4d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:66:D7:BA:AE:80:44:10:20:6A:34:71:B2:5F:4A:CC:FA:0E:35:4E
X509v3 Authority Key Identifier:
keyid:E1:9C:BB:88:D2:B1:A8:96:65:85:06:77:86:62:E7:5C:73:2A:67:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:2d:ab:b6:bd:0a:94:d8:f9:89:f6:59:41:7b:fd:46:8d:00:
f8:43:e2:23:e8:e4:58:c5:a2:c4:fc:3c:b1:50:76:da:4d:ac:
0b:db:15:30:bd:f2:f3:59:26:5e:31:da:b0:96:d5:3b:d9:22:
c5:92:de:f9:86:db:13:4b:35:c5:1f:50:61:8d:20:cf:1c:d6:
26:bb:fa:77:e2:ea:5a:92:d4:a9:d2:bb:42:d8:b6:c1:1c:2d:
77:42:05:1a:e9:27:e4:4e:80:86:0f:79:f7:83:09:08:e6:d7:
01:34:2a:29:ac:cb:1c:51:c4:31:ab:da:d5:62:48:01:66:0f:
59:15:3c:71:76:53:99:36:c5:f4:4b:5a:f7:14:f6:13:41:58:
38:93:36:a0:6d:78:76:d2:3f:a5:09:a4:cf:2c:5d:12:e8:9a:
54:a6:01:0a:c3:1b:fa:f6:98:1f:92:1b:a1:45:f1:02:4c:a6:
6b:67:ef:63:8f:1f:45:b1:1e:fa:74:eb:dc:71:5b:77:87:2d:
9e:6d:71:52:1f:8b:76:5d:81:9c:d5:94:e8:ba:cf:af:7d:41:
6d:7d:3d:87:92:ce:2d:c1:ab:e0:aa:49:62:61:1b:d9:91:57:
f4:ca:d1:7e:b9:80:cc:07:6c:98:2d:52:30:42:50:20:ef:46:
e5:36:17:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZdKEo9pu5/b0I7Jqo28hJIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxOWNiYjg4ZDJiMWE4OTY2NTg1MDY3Nzg2NjJlNzVjNzMy
YTY3ZTcwHhcNMjUwNDIyMTEwMDQzWhcNMjUwNDIzMTEwMDQzWjAzMTEwLwYDVQQD
Eyg1MjY2ZDdiYWFlODA0NDEwMjA2YTM0NzFiMjVmNGFjY2ZhMGUzNTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2OtDEFMTyS0V4fEwNkhAsHYFpvlW
XqE+stLKmXjE7K/UwRmz1mpK3yVd/SeTCNRiYMlKV8J+xnQUE4r5k5BZFOlu6BKe
RkrMiJn2H3IZ6dPv70JRGfPPXaj8XXsH4+NQ5E/Vu0wuJ2OlIWbZ2P47sAW8qxF0
+YFXIdMXwhZqKi8oyt9t8/SgJXLzkoRjlaPdjY2Zy+7bnwgt3wh6TX6k8zmKADPP
vl0ZYrJ9iFD0xwmYp58xgdQxihqThmTV7ux2wG4HwwzXwMLERFr66ovncU68A8qh
dlMVXercrRhZuyjvHgTYB4JnkvAFN7fS4RlbS+feG1R29iCIZs1FUABNLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFJm17qugEQQIGo0cbJfSsz6DjVOMB8GA1UdIwQY
MBaAFOGcu4jSsaiWZYUGd4Zi51xzKmfnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFp5N2lOS3hxSlpsaFFaM2htTG5YSE1xWi1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hZDEyMTYtYjcxZC00NTU3LWEwODYt
ZWZlYTYzZDA2ZjgwLzEvNFp5N2lOS3hxSlpsaFFaM2htTG5YSE1xWi1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9hZDEyMTYtYjcxZC00NTU3LWEwODYtZWZlYTYzZDA2Zjgw
LzEvNFp5N2lOS3hxSlpsaFFaM2htTG5YSE1xWi1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGS2rtr0K
lNj5ifZZQXv9Ro0A+EPiI+jkWMWixPw8sVB22k2sC9sVML3y81kmXjHasJbVO9ki
xZLe+YbbE0s1xR9QYY0gzxzWJrv6d+LqWpLUqdK7Qti2wRwtd0IFGukn5E6Ahg95
94MJCObXATQqKazLHFHEMava1WJIAWYPWRU8cXZTmTbF9Eta9xT2E0FYOJM2oG14
dtI/pQmkzyxdEuiaVKYBCsMb+vaYH5IboUXxAkyma2fvY48fRbEe+nTr3HFbd4ct
nm1xUh+Ldl2BnNWU6LrPr31BbX09h5LOLcGr4KpJYmEb2ZFX9MrRfrmAzAdsmC1S
MEJQIO9G5TYXrw==
-----END CERTIFICATE-----
Generated at Tue Apr 22 13:03:00 2025 by rpki-client