Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
File: 4_cHBvbAz72cc6fz2DAjJApC9Q0.mft (raw, json)
Hash identifier: odT9B3EhAmo8A37ODBhWNJKOL2LMTZiIL4iVH6o+c2g=
Subject key identifier: C5:E7:E0:8A:CA:15:87:22:E2:DE:71:D0:AE:53:70:13:E8:7B:6B:D2
Authority key identifier: E3:F7:07:06:F6:C0:CF:BD:9C:73:A7:F3:D8:30:23:24:0A:42:F5:0D
Certificate issuer: /CN=e3f70706f6c0cfbd9c73a7f3d83023240a42f50d
Certificate serial: 01960E323D0ADC46685F8D04364F64F30A69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
Manifest number: 0BE7
Signing time: Mon 07 Apr 2025 03:01:35 +0000
Manifest this update: Mon 07 Apr 2025 03:01:35 +0000
Manifest next update: Tue 08 Apr 2025 03:01:35 +0000
Files and hashes: 1: 4_cHBvbAz72cc6fz2DAjJApC9Q0.crl (hash: 4sn6E+HDch2PQPME5kbejeFaeWpsqssiuMz0gZTZYb4=)
2: JZBToS-O_vrT2aeKBSNggNB5se0.roa (hash: D8kzrex63NBxCoEgyWN4HyqVj2eRzOdT3Da1FU0u+nI=)
3: cKLdHjbMHa9DWXygLYK3fJRjYqw.roa (hash: aXunewdhx0tio/kXThZoUaubUGfQctWD4RTkIiazOVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 03:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0e:32:3d:0a:dc:46:68:5f:8d:04:36:4f:64:f3:0a:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3f70706f6c0cfbd9c73a7f3d83023240a42f50d
Validity
Not Before: Apr 7 03:01:35 2025 GMT
Not After : Apr 8 03:01:35 2025 GMT
Subject: CN=c5e7e08aca158722e2de71d0ae537013e87b6bd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f4:2c:f6:b3:8e:4f:64:08:0f:47:1e:5f:d8:
06:1d:b2:6e:f6:3c:a5:86:ce:44:56:56:58:f4:76:
32:ce:b0:32:d7:5b:61:56:48:16:2f:95:0a:39:dd:
3a:5a:a9:04:2f:2d:74:51:5c:5d:a9:8f:60:b5:01:
93:8b:ae:5d:b4:73:81:43:d5:5b:83:86:3b:45:da:
94:8d:e5:8f:a6:13:14:a5:e3:fe:bc:8d:65:98:c1:
43:11:53:79:a5:54:fe:3f:7a:31:04:78:cb:84:a7:
f6:1c:d6:2b:83:f5:05:80:5d:74:f8:16:6f:20:dc:
2a:6f:44:0b:45:8a:a1:78:5f:d8:a0:1c:b0:e5:c8:
2b:17:60:3b:f8:56:a1:e9:40:98:7f:c1:32:6d:47:
83:87:f1:ec:77:16:0d:6d:38:4e:a1:6c:01:16:93:
01:0b:a6:33:a7:c0:f3:69:5b:e6:c4:b2:43:07:a8:
4e:65:19:ad:65:e7:79:19:8f:52:d3:84:1f:3e:7a:
4d:c0:a9:ca:fa:f5:2f:d9:c7:54:82:81:d4:f0:12:
14:17:cb:60:2d:85:0f:1a:22:95:6c:19:61:87:c4:
32:b3:5d:02:1f:82:40:a0:cd:20:47:cf:ec:fb:74:
11:ee:3a:96:af:2a:1a:8a:58:b4:6a:e4:17:77:d3:
06:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E7:E0:8A:CA:15:87:22:E2:DE:71:D0:AE:53:70:13:E8:7B:6B:D2
X509v3 Authority Key Identifier:
keyid:E3:F7:07:06:F6:C0:CF:BD:9C:73:A7:F3:D8:30:23:24:0A:42:F5:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:f2:c0:3a:6f:2e:cf:f3:53:78:42:f9:21:4b:7e:3c:ef:8f:
e0:d0:c4:df:be:67:ca:ca:2a:33:02:a8:44:c0:2f:a5:ee:67:
f1:cd:0e:9c:60:e9:9d:c1:16:ad:e4:c4:0d:25:a4:73:9c:e8:
99:37:67:b3:8e:16:6e:46:1c:88:f1:d8:76:f9:78:c3:f2:ac:
3b:7d:ba:a4:1a:f5:50:e7:6a:6a:6d:90:ea:5a:e2:78:e2:a1:
89:1d:7d:8f:48:ef:59:ec:4e:22:69:38:d4:bb:28:47:bb:c7:
6a:ed:c1:96:a0:27:b5:76:9f:c1:15:e4:c0:bd:2e:36:2a:d5:
d1:c0:a3:59:9a:8b:23:31:1c:ca:c2:43:17:7c:b2:f7:fa:88:
79:88:ff:e8:0b:55:07:c0:05:20:f5:99:3b:e1:24:8e:64:71:
f9:21:5f:35:4a:db:83:1b:97:99:7c:8e:1a:fe:34:e5:76:7a:
e3:26:1c:30:cf:ed:a5:b3:34:f1:4d:47:03:2b:85:b8:7d:e3:
d0:33:62:3a:d2:58:3b:2a:1a:dc:9d:0c:b5:44:b4:c7:c7:7d:
16:90:ae:25:83:d9:22:41:82:c3:a4:5a:e8:9a:64:7c:82:28:
f9:3a:3a:fb:d3:67:fb:ce:c1:8f:7a:60:3e:2f:80:0d:c5:c3:
5f:3b:a8:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYOMj0K3EZoX40ENk9k8wppMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZjcwNzA2ZjZjMGNmYmQ5YzczYTdmM2Q4MzAyMzI0MGE0
MmY1MGQwHhcNMjUwNDA3MDMwMTM1WhcNMjUwNDA4MDMwMTM1WjAzMTEwLwYDVQQD
EyhjNWU3ZTA4YWNhMTU4NzIyZTJkZTcxZDBhZTUzNzAxM2U4N2I2YmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPQs9rOOT2QID0ceX9gGHbJu9jyl
hs5EVlZY9HYyzrAy11thVkgWL5UKOd06WqkELy10UVxdqY9gtQGTi65dtHOBQ9Vb
g4Y7RdqUjeWPphMUpeP+vI1lmMFDEVN5pVT+P3oxBHjLhKf2HNYrg/UFgF10+BZv
INwqb0QLRYqheF/YoByw5cgrF2A7+Fah6UCYf8EybUeDh/HsdxYNbThOoWwBFpMB
C6Yzp8DzaVvmxLJDB6hOZRmtZed5GY9S04QfPnpNwKnK+vUv2cdUgoHU8BIUF8tg
LYUPGiKVbBlhh8Qys10CH4JAoM0gR8/s+3QR7jqWryoaili0auQXd9MGWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMXn4IrKFYci4t5x0K5TcBPoe2vSMB8GA1UdIwQY
MBaAFOP3Bwb2wM+9nHOn89gwIyQKQvUNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNF9jSEJ2YkF6NzJjYzZmejJEQWpKQXBDOVEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8yODZkNDctNjQzNC00MWJkLTlhYTIt
MDlmZjc5MzA4YmJlLzEvNF9jSEJ2YkF6NzJjYzZmejJEQWpKQXBDOVEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC8yODZkNDctNjQzNC00MWJkLTlhYTItMDlmZjc5MzA4YmJl
LzEvNF9jSEJ2YkF6NzJjYzZmejJEQWpKQXBDOVEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYvLAOm8u
z/NTeEL5IUt+PO+P4NDE375nysoqMwKoRMAvpe5n8c0OnGDpncEWreTEDSWkc5zo
mTdns44WbkYciPHYdvl4w/KsO326pBr1UOdqam2Q6lrieOKhiR19j0jvWexOImk4
1LsoR7vHau3BlqAntXafwRXkwL0uNirV0cCjWZqLIzEcysJDF3yy9/qIeYj/6AtV
B8AFIPWZO+EkjmRx+SFfNUrbgxuXmXyOGv405XZ64yYcMM/tpbM08U1HAyuFuH3j
0DNiOtJYOyoa3J0MtUS0x8d9FpCuJYPZIkGCw6Ra6JpkfIIo+To6+9Nn+87Bj3pg
Pi+ADcXDXzuoSg==
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:05:00 2025 by rpki-client