Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/46f147-173f-4260-aa7b-3a6bf890a01d/1/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.mft
File: 4KAQbNKFfvEyNIZ8t_FqI6k_qpM.mft (raw, json)
Hash identifier: yF0mMQG/r4TaOjOZ5EiXfAw5AHBn7cx31t3YC8r1Jfs=
Subject key identifier: 06:4A:30:F2:BC:D2:F9:59:F5:57:29:EF:3C:8C:61:39:AE:83:7B:2C
Authority key identifier: E0:A0:10:6C:D2:85:7E:F1:32:34:86:7C:B7:F1:6A:23:A9:3F:AA:93
Certificate issuer: /CN=e0a0106cd2857ef13234867cb7f16a23a93faa93
Certificate serial: 0196575D0FDBE25D5A1719E6EBABDE92D8FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/46f147-173f-4260-aa7b-3a6bf890a01d/1/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.mft
Manifest number: 1501
Signing time: Mon 21 Apr 2025 08:00:38 +0000
Manifest this update: Mon 21 Apr 2025 08:00:38 +0000
Manifest next update: Tue 22 Apr 2025 08:00:38 +0000
Files and hashes: 1: 4KAQbNKFfvEyNIZ8t_FqI6k_qpM.crl (hash: C0wtytdOSRVfoy3hJ3LeTr3rHHtefFhuq5Gdr1YPZ+8=)
2: NAPyyzZUEw4Zn65wAuFDux_YC9U.roa (hash: lU32nj8CJcUtMjGhuL2rXmP4Es+fbhl1wJhVBrmgarI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/46f147-173f-4260-aa7b-3a6bf890a01d/1/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/46f147-173f-4260-aa7b-3a6bf890a01d/1/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:5d:0f:db:e2:5d:5a:17:19:e6:eb:ab:de:92:d8:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0a0106cd2857ef13234867cb7f16a23a93faa93
Validity
Not Before: Apr 21 08:00:38 2025 GMT
Not After : Apr 22 08:00:38 2025 GMT
Subject: CN=064a30f2bcd2f959f55729ef3c8c6139ae837b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:14:08:fd:0b:49:9f:81:d1:60:11:fb:ca:fb:
a0:bf:34:22:7b:be:c8:a4:48:07:72:7e:95:21:68:
58:c3:dc:ae:71:4e:6b:17:dd:55:d7:e1:70:d9:da:
f9:02:aa:2b:32:45:53:6b:a1:c7:d9:a8:db:16:ba:
ef:d9:5b:ff:ce:28:42:8c:9c:5a:41:bb:9d:10:5d:
d3:67:99:0e:fe:a9:8b:0f:55:6c:a9:f8:f0:68:c1:
80:00:4d:ad:70:e4:38:4e:ba:fd:33:34:d5:0a:72:
ba:e5:03:20:c5:ea:38:a4:f2:11:3d:e2:8c:82:14:
c6:4d:5e:c3:46:51:e8:35:fe:f7:81:9a:46:1d:9f:
28:2e:97:7d:15:56:68:e5:94:9e:9e:44:aa:9e:cc:
b9:b6:1c:b8:4d:bf:fd:fe:db:70:f4:2d:36:ff:56:
80:2a:c9:c5:a0:fe:82:54:16:4b:4b:3d:97:7b:e1:
b5:03:30:a6:2f:db:2a:0f:5e:5f:91:eb:b8:b3:61:
ea:89:e6:57:8a:1c:b2:a1:de:09:fa:0a:7a:ae:2c:
45:e2:91:3d:51:e9:13:0e:9a:d2:6c:75:7e:b2:1d:
3b:fb:e6:c6:d6:31:7d:ce:48:6c:fd:ff:5c:6c:d0:
64:97:88:48:66:8b:6a:4b:6e:ff:d5:57:af:92:43:
4c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:4A:30:F2:BC:D2:F9:59:F5:57:29:EF:3C:8C:61:39:AE:83:7B:2C
X509v3 Authority Key Identifier:
keyid:E0:A0:10:6C:D2:85:7E:F1:32:34:86:7C:B7:F1:6A:23:A9:3F:AA:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/46f147-173f-4260-aa7b-3a6bf890a01d/1/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/46f147-173f-4260-aa7b-3a6bf890a01d/1/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:9c:5a:71:be:70:06:86:44:d8:4d:de:b2:9d:97:a7:0f:4e:
21:a1:93:cc:06:a0:e6:bc:f7:c6:53:45:c5:5d:c0:65:e3:ef:
6e:c4:63:65:d1:e1:d5:a1:a9:a1:82:c3:66:a1:e5:51:d2:16:
a5:2a:d8:53:60:1e:43:8e:e1:28:31:49:67:04:21:3a:e8:6d:
f1:bf:a7:51:a9:87:9a:ca:57:a2:e1:5c:9d:02:ea:b3:e7:69:
0d:40:6a:b5:18:10:f4:a2:20:6b:b4:89:f4:23:f2:0b:d2:a8:
f2:73:00:aa:8e:00:11:8e:19:29:a1:cc:f6:a1:96:d3:37:23:
e9:48:d5:18:26:cf:0b:d9:d2:e1:ef:f1:16:2a:bb:f0:61:8d:
b2:62:4a:1d:97:3f:d8:ec:8f:87:b7:09:ca:5d:32:ff:15:1b:
34:12:b9:b1:d4:7b:75:8f:c4:e8:1e:08:38:00:d0:11:df:ae:
0a:23:da:8e:d8:1c:a2:ca:a8:b5:94:1c:1c:ef:80:f5:b3:e5:
9a:75:26:53:57:a7:43:38:61:89:6c:10:0e:36:79:d2:8a:32:
96:b7:17:93:b9:50:62:b4:e0:0c:88:7c:70:b8:bf:2d:ef:cf:
ac:d7:a8:77:31:19:a0:47:1f:b7:c9:55:9c:c9:97:9a:7a:4a:
59:5e:05:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZXXQ/b4l1aFxnm66vektj+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwYTAxMDZjZDI4NTdlZjEzMjM0ODY3Y2I3ZjE2YTIzYTkz
ZmFhOTMwHhcNMjUwNDIxMDgwMDM4WhcNMjUwNDIyMDgwMDM4WjAzMTEwLwYDVQQD
EygwNjRhMzBmMmJjZDJmOTU5ZjU1NzI5ZWYzYzhjNjEzOWFlODM3YjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxQI/QtJn4HRYBH7yvugvzQie77I
pEgHcn6VIWhYw9yucU5rF91V1+Fw2dr5AqorMkVTa6HH2ajbFrrv2Vv/zihCjJxa
QbudEF3TZ5kO/qmLD1VsqfjwaMGAAE2tcOQ4Trr9MzTVCnK65QMgxeo4pPIRPeKM
ghTGTV7DRlHoNf73gZpGHZ8oLpd9FVZo5ZSenkSqnsy5thy4Tb/9/ttw9C02/1aA
KsnFoP6CVBZLSz2Xe+G1AzCmL9sqD15fkeu4s2HqieZXihyyod4J+gp6rixF4pE9
UekTDprSbHV+sh07++bG1jF9zkhs/f9cbNBkl4hIZotqS27/1VevkkNM9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAZKMPK80vlZ9Vcp7zyMYTmug3ssMB8GA1UdIwQY
MBaAFOCgEGzShX7xMjSGfLfxaiOpP6qTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEtBUWJOS0ZmdkV5TklaOHRfRnFJNmtfcXBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi80NmYxNDctMTczZi00MjYwLWFhN2It
M2E2YmY4OTBhMDFkLzEvNEtBUWJOS0ZmdkV5TklaOHRfRnFJNmtfcXBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi80NmYxNDctMTczZi00MjYwLWFhN2ItM2E2YmY4OTBhMDFk
LzEvNEtBUWJOS0ZmdkV5TklaOHRfRnFJNmtfcXBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnJxacb5w
BoZE2E3esp2Xpw9OIaGTzAag5rz3xlNFxV3AZePvbsRjZdHh1aGpoYLDZqHlUdIW
pSrYU2AeQ47hKDFJZwQhOuht8b+nUamHmspXouFcnQLqs+dpDUBqtRgQ9KIga7SJ
9CPyC9Ko8nMAqo4AEY4ZKaHM9qGW0zcj6UjVGCbPC9nS4e/xFiq78GGNsmJKHZc/
2OyPh7cJyl0y/xUbNBK5sdR7dY/E6B4IOADQEd+uCiPajtgcosqotZQcHO+A9bPl
mnUmU1enQzhhiWwQDjZ50ooylrcXk7lQYrTgDIh8cLi/Le/PrNeodzEZoEcft8lV
nMmXmnpKWV4FWQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:38:12 2025 by rpki-client