Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft
File: 4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft (raw, json)
Hash identifier: wn+yEDzdmAZ3oByI5+NjedxYe72vyU3hhtpk7bD8QkA=
Subject key identifier: EE:7E:E3:51:71:CE:07:93:72:B8:CA:9A:92:53:AE:20:E7:25:80:EA
Authority key identifier: E0:7E:00:8D:6E:D2:38:8A:D3:1B:74:22:42:31:52:A9:2A:54:DE:71
Certificate issuer: /CN=e07e008d6ed2388ad31b7422423152a92a54de71
Certificate serial: 0196556EB137104FCD5F60FC1A44439C0DBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4H4AjW7SOIrTG3QiQjFSqSpU3nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft
Manifest number: 1500
Signing time: Sun 20 Apr 2025 23:00:39 +0000
Manifest this update: Sun 20 Apr 2025 23:00:39 +0000
Manifest next update: Mon 21 Apr 2025 23:00:39 +0000
Files and hashes: 1: 4H4AjW7SOIrTG3QiQjFSqSpU3nE.crl (hash: QxQMynZzQhbq678rLBfC/JyPRJg0WoIjz3l2X69BxRo=)
2: DRmZJybrlbdXMMtCv-LzVRORQZk.roa (hash: 5OPrd1Swg2Ws5p7BB56DIY7Qpw55Ar+XvquToD8doCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4H4AjW7SOIrTG3QiQjFSqSpU3nE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:b1:37:10:4f:cd:5f:60:fc:1a:44:43:9c:0d:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e07e008d6ed2388ad31b7422423152a92a54de71
Validity
Not Before: Apr 20 23:00:39 2025 GMT
Not After : Apr 21 23:00:39 2025 GMT
Subject: CN=ee7ee35171ce079372b8ca9a9253ae20e72580ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6c:e5:2a:1b:42:a7:ea:59:16:fe:41:f3:37:
74:4d:29:23:de:43:98:dd:9e:f3:8f:04:ae:01:f7:
15:b8:8a:d5:3a:da:3f:fe:10:c8:3f:96:a1:c2:14:
57:b4:b3:12:4b:35:fd:36:46:db:d1:01:63:bc:73:
7b:69:e9:6f:50:38:91:51:38:21:52:1b:af:db:c4:
b1:ed:34:e2:4c:52:36:67:be:11:54:0a:69:e4:94:
b5:0a:61:37:40:d6:e0:aa:73:0b:92:55:97:59:1b:
1a:39:90:21:28:33:11:2c:c3:c1:8d:8c:6f:d6:23:
d3:52:1a:8c:82:64:5c:46:c4:1d:75:4e:3b:4f:27:
72:e2:0d:44:6a:28:f6:a6:a5:1b:0a:90:64:f6:cb:
d8:98:1c:dd:53:05:f8:53:3c:32:70:cd:1f:e2:17:
20:a3:54:e1:db:b1:d1:ad:c1:04:41:60:d5:fd:11:
5e:82:48:27:12:95:a2:db:86:3a:0b:10:d0:93:4c:
d7:9d:79:78:1f:f3:fc:72:2f:ed:ee:41:19:68:7f:
33:d5:55:63:bb:58:05:76:ba:6b:11:77:83:54:90:
a8:fe:86:9d:aa:07:6d:93:d3:f1:1c:9a:7c:ad:a3:
d5:36:0d:32:26:17:58:78:7c:27:89:45:80:7d:68:
5c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:7E:E3:51:71:CE:07:93:72:B8:CA:9A:92:53:AE:20:E7:25:80:EA
X509v3 Authority Key Identifier:
keyid:E0:7E:00:8D:6E:D2:38:8A:D3:1B:74:22:42:31:52:A9:2A:54:DE:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4H4AjW7SOIrTG3QiQjFSqSpU3nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:e0:a3:ee:c0:45:84:c2:bb:3a:40:37:0d:e9:50:88:12:98:
36:f2:00:3a:62:23:54:07:cf:99:aa:ed:b3:68:1f:e0:29:c3:
0d:5c:e7:23:04:76:fa:42:06:c7:80:4c:bc:4f:4c:e0:7d:dd:
cc:d7:cd:58:82:5c:18:72:ea:f7:6b:f7:ac:6a:41:ba:01:25:
63:90:b5:40:b9:e6:e7:56:6d:2d:b2:49:df:7d:32:cd:d7:a1:
0a:58:a6:b1:70:e9:dc:91:f8:3a:19:87:fe:6c:8b:10:0a:4c:
da:06:3e:bf:9f:fe:a8:8c:a0:7f:ee:43:ab:71:fa:e4:0a:66:
fb:2a:76:4c:a2:6d:9b:3a:82:29:ac:3d:0a:10:8c:94:6b:88:
3c:53:39:31:f6:7b:25:eb:51:d9:27:23:92:d3:f8:df:a1:9b:
52:9c:71:67:a7:72:c7:be:0f:ea:42:0b:c4:10:6c:8e:1b:f2:
60:9c:91:6e:66:26:53:03:9c:eb:f9:b7:97:5d:20:28:4e:b4:
f9:5a:49:65:2e:a6:47:6a:69:df:f9:a3:66:30:fc:bb:d0:f7:
ec:9a:27:53:97:9a:26:34:4e:e7:a5:c0:76:21:76:2b:03:11:
1d:c4:03:4f:71:cb:6d:0d:41:fb:d4:ca:06:7a:50:05:98:4e:
04:b4:f1:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVbrE3EE/NX2D8GkRDnA2/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwN2UwMDhkNmVkMjM4OGFkMzFiNzQyMjQyMzE1MmE5MmE1
NGRlNzEwHhcNMjUwNDIwMjMwMDM5WhcNMjUwNDIxMjMwMDM5WjAzMTEwLwYDVQQD
EyhlZTdlZTM1MTcxY2UwNzkzNzJiOGNhOWE5MjUzYWUyMGU3MjU4MGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWzlKhtCp+pZFv5B8zd0TSkj3kOY
3Z7zjwSuAfcVuIrVOto//hDIP5ahwhRXtLMSSzX9Nkbb0QFjvHN7aelvUDiRUTgh
Uhuv28Sx7TTiTFI2Z74RVApp5JS1CmE3QNbgqnMLklWXWRsaOZAhKDMRLMPBjYxv
1iPTUhqMgmRcRsQddU47Tydy4g1Eaij2pqUbCpBk9svYmBzdUwX4UzwycM0f4hcg
o1Th27HRrcEEQWDV/RFegkgnEpWi24Y6CxDQk0zXnXl4H/P8ci/t7kEZaH8z1VVj
u1gFdrprEXeDVJCo/oadqgdtk9PxHJp8raPVNg0yJhdYeHwniUWAfWhcWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO5+41FxzgeTcrjKmpJTriDnJYDqMB8GA1UdIwQY
MBaAFOB+AI1u0jiK0xt0IkIxUqkqVN5xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEg0QWpXN1NPSXJURzNRaVFqRlNxU3BVM25FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9kNDc5Y2MtYTcxMi00YmMzLTgzMmQt
MjcyNzI0N2FmMjEwLzEvNEg0QWpXN1NPSXJURzNRaVFqRlNxU3BVM25FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9kNDc5Y2MtYTcxMi00YmMzLTgzMmQtMjcyNzI0N2FmMjEw
LzEvNEg0QWpXN1NPSXJURzNRaVFqRlNxU3BVM25FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZOCj7sBF
hMK7OkA3DelQiBKYNvIAOmIjVAfPmarts2gf4CnDDVznIwR2+kIGx4BMvE9M4H3d
zNfNWIJcGHLq92v3rGpBugElY5C1QLnm51ZtLbJJ330yzdehClimsXDp3JH4OhmH
/myLEApM2gY+v5/+qIygf+5Dq3H65Apm+yp2TKJtmzqCKaw9ChCMlGuIPFM5MfZ7
JetR2ScjktP436GbUpxxZ6dyx74P6kILxBBsjhvyYJyRbmYmUwOc6/m3l10gKE60
+VpJZS6mR2pp3/mjZjD8u9D37JonU5eaJjRO56XAdiF2KwMRHcQDT3HLbQ1B+9TK
BnpQBZhOBLTx5g==
-----END CERTIFICATE-----
Generated at Mon Apr 21 04:06:58 2025 by rpki-client