Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.mft
File: 4-RuLEAWqNc5LIV0E0_UeTuUFaQ.mft (raw, json)
Hash identifier: OPo5ktg5AdUTXtcxMVZY9lakpC+8bEBomVav4pma/tk=
Subject key identifier: 5C:9B:2A:E8:1B:4D:C7:76:00:61:E0:09:AF:E3:F8:D3:25:AA:8E:1E
Authority key identifier: E3:E4:6E:2C:40:16:A8:D7:39:2C:85:74:13:4F:D4:79:3B:94:15:A4
Certificate issuer: /CN=e3e46e2c4016a8d7392c8574134fd4793b9415a4
Certificate serial: 01965CF105E1EC0E2DBF4DF628A327633BE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.mft
Manifest number: 1070
Signing time: Tue 22 Apr 2025 10:00:21 +0000
Manifest this update: Tue 22 Apr 2025 10:00:21 +0000
Manifest next update: Wed 23 Apr 2025 10:00:21 +0000
Files and hashes: 1: 4-RuLEAWqNc5LIV0E0_UeTuUFaQ.crl (hash: /vEicco4N1bg+wpC9AE4ujWXXZPi35sxC2N42vACfQA=)
2: rxnNIrhG3QldlOPtvjeA2wvjFbs.roa (hash: 2BblVg4dCI71TgTK0hUX2laI8AdtzWYFSV42O2qiwl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:f1:05:e1:ec:0e:2d:bf:4d:f6:28:a3:27:63:3b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3e46e2c4016a8d7392c8574134fd4793b9415a4
Validity
Not Before: Apr 22 10:00:21 2025 GMT
Not After : Apr 23 10:00:21 2025 GMT
Subject: CN=5c9b2ae81b4dc7760061e009afe3f8d325aa8e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b3:b7:fb:18:68:9a:2c:1a:ad:89:72:49:52:
77:76:e8:43:3f:f8:e6:61:2d:af:85:f0:a4:a6:3e:
ab:45:4f:1b:63:11:11:a9:44:5f:ae:98:cd:71:6e:
18:e8:44:ac:0f:71:07:4c:c8:08:42:d3:87:32:6a:
e6:a5:b6:e2:3d:2c:1d:d4:be:62:18:4a:df:eb:0b:
f3:0a:2a:a9:79:f3:62:4a:bf:07:00:b0:7a:4f:ea:
56:ab:5c:71:04:87:ec:16:16:ce:d7:5b:c9:0c:a7:
cd:15:59:40:98:d5:24:c3:5e:cc:be:51:fa:ba:5a:
5c:10:bb:dd:fe:2f:5b:f8:b2:c5:06:11:e6:22:cc:
32:2e:bf:f9:16:15:51:0a:ce:36:33:27:8f:22:f6:
3b:4a:ac:c5:50:1b:c5:51:f7:c7:73:ef:5e:df:12:
20:21:4f:48:8a:79:ef:f2:79:7b:bf:c2:de:5b:aa:
dd:47:63:6e:4b:67:03:24:02:45:53:68:92:0b:48:
8d:c6:29:94:02:f5:4c:4f:87:ca:6a:a9:e7:10:51:
c5:f8:83:0b:3b:d7:8f:68:a4:70:12:52:c0:cb:a1:
d9:94:23:7d:33:50:1f:36:5d:d4:b7:17:49:c7:8b:
0b:97:29:8c:7b:91:18:7a:f1:59:a4:6f:4d:04:e7:
d9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:9B:2A:E8:1B:4D:C7:76:00:61:E0:09:AF:E3:F8:D3:25:AA:8E:1E
X509v3 Authority Key Identifier:
keyid:E3:E4:6E:2C:40:16:A8:D7:39:2C:85:74:13:4F:D4:79:3B:94:15:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:01:06:d7:ef:de:17:70:1d:5d:06:48:b1:f6:a8:38:c2:a9:
e9:14:c8:2e:35:e6:40:02:e7:c2:9f:d4:19:a4:ed:87:ac:03:
37:99:4c:c0:b5:39:9d:09:c8:10:e9:40:2c:3f:a5:12:f2:f2:
02:93:95:6f:66:4c:29:eb:89:57:76:f0:76:f0:5d:35:0e:ae:
aa:c5:41:99:80:fe:c9:8a:c1:ed:39:0d:a2:7a:87:ec:5f:4c:
c9:95:de:ff:27:6b:c3:6f:61:62:41:f4:f8:b4:5b:d3:aa:39:
df:98:f0:7a:0b:d7:ec:9a:44:9f:ec:5c:32:42:dc:d0:6f:22:
85:6f:71:b0:99:51:04:58:4e:fc:61:50:55:eb:9f:0e:c5:b6:
4b:f6:a5:73:f1:d0:b9:cf:ab:88:6b:cc:e1:71:fe:ec:28:e0:
0c:a3:af:54:55:fb:0d:65:54:bc:ec:c6:7d:56:47:89:1c:ad:
e1:6b:c6:c8:b0:55:c8:cb:7e:70:74:85:4d:8c:39:0b:3d:d7:
c9:0e:14:57:b8:16:9d:6e:97:b2:ad:84:8c:22:17:06:3f:9b:
52:ba:ae:c6:d4:60:51:d2:f9:05:41:ba:a7:96:c8:3e:98:59:
e5:f9:52:c3:5f:86:96:91:3a:41:28:c4:0d:1d:61:1a:1f:5e:
3f:35:e6:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZc8QXh7A4tv032KKMnYzvgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZTQ2ZTJjNDAxNmE4ZDczOTJjODU3NDEzNGZkNDc5M2I5
NDE1YTQwHhcNMjUwNDIyMTAwMDIxWhcNMjUwNDIzMTAwMDIxWjAzMTEwLwYDVQQD
Eyg1YzliMmFlODFiNGRjNzc2MDA2MWUwMDlhZmUzZjhkMzI1YWE4ZTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbO3+xhomiwarYlySVJ3duhDP/jm
YS2vhfCkpj6rRU8bYxERqURfrpjNcW4Y6ESsD3EHTMgIQtOHMmrmpbbiPSwd1L5i
GErf6wvzCiqpefNiSr8HALB6T+pWq1xxBIfsFhbO11vJDKfNFVlAmNUkw17MvlH6
ulpcELvd/i9b+LLFBhHmIswyLr/5FhVRCs42MyePIvY7SqzFUBvFUffHc+9e3xIg
IU9Iinnv8nl7v8LeW6rdR2NuS2cDJAJFU2iSC0iNximUAvVMT4fKaqnnEFHF+IML
O9ePaKRwElLAy6HZlCN9M1AfNl3UtxdJx4sLlymMe5EYevFZpG9NBOfZ3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFybKugbTcd2AGHgCa/j+NMlqo4eMB8GA1UdIwQY
MBaAFOPkbixAFqjXOSyFdBNP1Hk7lBWkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNC1SdUxFQVdxTmM1TElWMEUwX1VlVHVVRmFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy81NzJlYzgtNzQ1Ni00ZTU1LWI3NzYt
ZDhlY2UyNmFmZWMwLzEvNC1SdUxFQVdxTmM1TElWMEUwX1VlVHVVRmFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy81NzJlYzgtNzQ1Ni00ZTU1LWI3NzYtZDhlY2UyNmFmZWMw
LzEvNC1SdUxFQVdxTmM1TElWMEUwX1VlVHVVRmFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWgEG1+/e
F3AdXQZIsfaoOMKp6RTILjXmQALnwp/UGaTth6wDN5lMwLU5nQnIEOlALD+lEvLy
ApOVb2ZMKeuJV3bwdvBdNQ6uqsVBmYD+yYrB7TkNonqH7F9MyZXe/ydrw29hYkH0
+LRb06o535jwegvX7JpEn+xcMkLc0G8ihW9xsJlRBFhO/GFQVeufDsW2S/alc/HQ
uc+riGvM4XH+7CjgDKOvVFX7DWVUvOzGfVZHiRyt4WvGyLBVyMt+cHSFTYw5Cz3X
yQ4UV7gWnW6Xsq2EjCIXBj+bUrquxtRgUdL5BUG6p5bIPphZ5flSw1+GlpE6QSjE
DR1hGh9ePzXmFg==
-----END CERTIFICATE-----
Generated at Tue Apr 22 13:07:57 2025 by rpki-client