Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
File: 4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft (raw, json)
Hash identifier: 4TzRkDCRLfBTQJtFRhEIMiCv2MzoAhFXToC+stUpods=
Subject key identifier: 45:F6:DF:02:0C:7E:25:CB:3C:10:8C:C0:4E:AE:CF:7D:13:1C:D9:FE
Authority key identifier: E1:F5:C6:40:B4:AA:14:B2:61:19:29:3D:C6:13:DC:63:66:A5:67:F6
Certificate issuer: /CN=e1f5c640b4aa14b26119293dc613dc6366a567f6
Certificate serial: 01965EE02BE33239567674623629C5B8BAC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
Manifest number: 14FF
Signing time: Tue 22 Apr 2025 19:01:11 +0000
Manifest this update: Tue 22 Apr 2025 19:01:11 +0000
Manifest next update: Wed 23 Apr 2025 19:01:11 +0000
Files and hashes: 1: 4fXGQLSqFLJhGSk9xhPcY2alZ_Y.crl (hash: sMBfVFee9S4Z/ix+lHkiIWGAiIMJy4IcQZZ52rnZv8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:e0:2b:e3:32:39:56:76:74:62:36:29:c5:b8:ba:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f5c640b4aa14b26119293dc613dc6366a567f6
Validity
Not Before: Apr 22 19:01:11 2025 GMT
Not After : Apr 23 19:01:11 2025 GMT
Subject: CN=45f6df020c7e25cb3c108cc04eaecf7d131cd9fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:60:f7:ed:48:8f:40:aa:7b:5b:a5:a4:c6:67:
b6:a7:97:28:33:43:93:0f:0b:ff:72:71:67:d1:c7:
44:0e:dc:10:00:fb:2a:13:74:3a:8b:19:13:2a:ab:
30:60:7a:35:bd:77:b0:95:4b:e5:43:b4:30:ce:77:
b1:c5:dd:bb:b6:82:1e:f2:ef:a6:7b:4d:73:f3:43:
99:13:93:f0:74:78:09:2c:2d:2a:25:66:82:69:5b:
10:12:c9:9e:f1:ef:f2:7b:57:13:ce:53:b3:8e:ae:
8a:fc:7b:22:30:fa:8d:fd:fa:f6:8a:c1:5c:cd:2e:
7a:b5:25:76:5d:40:79:4d:e3:c9:8e:78:7b:d1:cd:
06:cb:00:ab:5e:99:28:3e:c4:ed:c9:aa:e8:5a:c8:
89:cc:7d:2c:88:c1:33:de:58:f9:57:7b:cc:00:87:
24:91:aa:b3:5f:40:ea:77:f0:22:c9:dd:05:bd:41:
37:5f:7d:d1:5a:2c:3f:ee:1c:2c:35:3c:2f:e2:32:
e6:c1:62:8e:bc:59:c4:4a:ab:bc:be:2d:ca:5e:0f:
03:85:de:14:a8:c6:3b:c7:ad:51:49:9b:5e:63:c6:
f1:0b:0a:34:cb:8d:97:37:ec:40:d6:f1:42:ea:c6:
52:c7:64:01:46:9e:2f:c9:3d:6b:76:a5:3d:ae:93:
e5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F6:DF:02:0C:7E:25:CB:3C:10:8C:C0:4E:AE:CF:7D:13:1C:D9:FE
X509v3 Authority Key Identifier:
keyid:E1:F5:C6:40:B4:AA:14:B2:61:19:29:3D:C6:13:DC:63:66:A5:67:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:0b:a8:d6:89:cc:f6:0d:eb:fc:43:4e:f8:cd:ce:5c:7b:06:
f6:6e:8f:31:d3:2a:b3:49:78:3f:d4:3a:43:74:8b:8a:75:11:
16:1d:a3:4b:d1:d1:c6:f4:82:b1:7b:f2:ce:13:b1:fb:81:a0:
dd:ad:0f:01:80:48:cc:a1:93:fc:54:96:2f:cc:7e:43:3c:8c:
f1:db:bb:3d:9d:8f:5e:8a:7a:4f:a2:69:35:1d:3e:04:8d:d8:
e1:95:8b:49:7a:de:08:0f:34:93:a5:de:f7:fa:0a:34:9a:d6:
73:f9:52:b7:87:65:26:92:af:65:c4:f9:84:c9:7b:e7:da:a3:
f8:43:6b:7b:94:91:67:10:6e:0f:a4:77:a3:41:31:c0:f3:40:
71:e8:c4:66:61:be:2f:b5:f2:67:06:72:ed:8d:8c:25:48:b9:
6a:bc:bb:b5:84:d2:a7:f7:45:f6:b2:a4:36:59:8d:bd:13:e4:
2a:a5:1b:4a:b2:c1:fc:9e:b7:72:3e:53:f1:58:2d:6b:88:75:
54:98:b6:f9:e8:1d:fa:ff:29:04:96:fa:05:f0:32:e9:1e:7e:
f7:78:4f:ae:a7:a7:a2:40:7e:a3:c8:ff:fc:90:d0:00:72:3e:
43:0e:14:87:66:0e:b4:c3:cb:2e:2a:65:82:98:08:18:97:e5:
46:7b:d1:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZe4CvjMjlWdnRiNinFuLrCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxZjVjNjQwYjRhYTE0YjI2MTE5MjkzZGM2MTNkYzYzNjZh
NTY3ZjYwHhcNMjUwNDIyMTkwMTExWhcNMjUwNDIzMTkwMTExWjAzMTEwLwYDVQQD
Eyg0NWY2ZGYwMjBjN2UyNWNiM2MxMDhjYzA0ZWFlY2Y3ZDEzMWNkOWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8mD37UiPQKp7W6Wkxme2p5coM0OT
Dwv/cnFn0cdEDtwQAPsqE3Q6ixkTKqswYHo1vXewlUvlQ7Qwznexxd27toIe8u+m
e01z80OZE5PwdHgJLC0qJWaCaVsQEsme8e/ye1cTzlOzjq6K/HsiMPqN/fr2isFc
zS56tSV2XUB5TePJjnh70c0GywCrXpkoPsTtyaroWsiJzH0siMEz3lj5V3vMAIck
kaqzX0Dqd/Aiyd0FvUE3X33RWiw/7hwsNTwv4jLmwWKOvFnESqu8vi3KXg8Dhd4U
qMY7x61RSZteY8bxCwo0y42XN+xA1vFC6sZSx2QBRp4vyT1rdqU9rpPlpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEX23wIMfiXLPBCMwE6uz30THNn+MB8GA1UdIwQY
MBaAFOH1xkC0qhSyYRkpPcYT3GNmpWf2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGZYR1FMU3FGTEpoR1NrOXhoUGNZMmFsWl9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS80MzA4YWItYmMwNC00OWFmLWJiMDEt
ODk4YjI3Y2JmYzQ3LzEvNGZYR1FMU3FGTEpoR1NrOXhoUGNZMmFsWl9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS80MzA4YWItYmMwNC00OWFmLWJiMDEtODk4YjI3Y2JmYzQ3
LzEvNGZYR1FMU3FGTEpoR1NrOXhoUGNZMmFsWl9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmwuo1onM
9g3r/ENO+M3OXHsG9m6PMdMqs0l4P9Q6Q3SLinURFh2jS9HRxvSCsXvyzhOx+4Gg
3a0PAYBIzKGT/FSWL8x+QzyM8du7PZ2PXop6T6JpNR0+BI3Y4ZWLSXreCA80k6Xe
9/oKNJrWc/lSt4dlJpKvZcT5hMl759qj+ENre5SRZxBuD6R3o0ExwPNAcejEZmG+
L7XyZwZy7Y2MJUi5ary7tYTSp/dF9rKkNlmNvRPkKqUbSrLB/J63cj5T8Vgta4h1
VJi2+egd+v8pBJb6BfAy6R5+93hPrqenokB+o8j//JDQAHI+Qw4Uh2YOtMPLLipl
gpgIGJflRnvRaQ==
-----END CERTIFICATE-----
Generated at Tue Apr 22 23:10:11 2025 by rpki-client