Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft
File: S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft (raw, json)
Hash identifier: MbWtqs0Pad3qBdjyJjB+2zfPdyeg0/91CBgKiu6WOEg=
Subject key identifier: 91:EF:98:69:C8:D0:32:4E:51:D7:81:7A:6D:6E:20:F7:DE:2E:5E:45
Authority key identifier: 4B:89:D8:7F:8E:41:B5:08:2D:38:91:60:15:E0:59:E5:6D:D0:11:4E
Certificate issuer: /CN=4b89d87f8e41b5082d38916015e059e56dd0114e
Certificate serial: 019656EF34C9A46577EAEAF7224AB29CD9BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4nYf45BtQgtOJFgFeBZ5W3QEU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft
Manifest number: 0D6F
Signing time: Mon 21 Apr 2025 06:00:39 +0000
Manifest this update: Mon 21 Apr 2025 06:00:39 +0000
Manifest next update: Tue 22 Apr 2025 06:00:39 +0000
Files and hashes: 1: S4nYf45BtQgtOJFgFeBZ5W3QEU4.crl (hash: Xzd9Iag+Mu9OT6yOCOz8RiHh0yq/8VjrI+vCUnXyO/k=)
2: crOsrOXIXenqmjjK7E42FO9nzAY.roa (hash: FavBc7FYhPnbTZq/1FuhdovJ2d7YJv+63Ene4V7HX3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/S4nYf45BtQgtOJFgFeBZ5W3QEU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:ef:34:c9:a4:65:77:ea:ea:f7:22:4a:b2:9c:d9:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b89d87f8e41b5082d38916015e059e56dd0114e
Validity
Not Before: Apr 21 06:00:39 2025 GMT
Not After : Apr 22 06:00:39 2025 GMT
Subject: CN=91ef9869c8d0324e51d7817a6d6e20f7de2e5e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8e:7a:6e:a1:cb:ae:f5:e3:5a:f9:1b:f7:e3:
54:94:fb:32:e2:82:2f:b8:d8:88:a9:f9:37:a7:a9:
df:87:03:78:ea:0d:84:07:ad:a8:86:fe:97:a4:67:
40:57:99:7a:89:fd:ae:ec:e0:81:71:10:33:e3:08:
ed:67:2c:31:5a:c7:64:0d:cb:67:b6:89:d8:3e:0c:
27:1c:e5:c8:ad:b5:20:41:21:00:84:66:bc:2f:6f:
ac:6d:59:fb:98:55:07:3e:27:89:73:43:94:b6:1f:
e3:3b:2f:ba:a9:d3:ae:ec:c2:44:ef:aa:99:0d:67:
66:a4:38:6f:85:31:ce:54:5e:b4:2b:a8:4a:7c:92:
ce:14:8e:9c:98:9e:41:78:56:d5:9d:e0:1a:e2:a7:
06:fe:f6:aa:1c:35:9b:0a:86:33:aa:3d:5d:b3:ae:
2b:67:ac:c6:d9:65:db:46:94:77:ed:77:3e:8f:97:
a3:ad:8a:b0:9f:84:e8:44:51:95:f1:3e:e3:1f:5e:
1b:57:70:a5:a4:cc:99:d2:2e:10:db:a8:43:ce:0b:
9f:5d:a0:0b:c5:7c:bd:2d:4f:60:6a:6c:66:a7:dd:
6e:87:91:b1:08:5e:57:34:4f:de:40:77:73:fc:9d:
bf:cb:4c:e1:eb:37:b8:ea:7c:90:ed:2b:a4:8d:43:
6d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:EF:98:69:C8:D0:32:4E:51:D7:81:7A:6D:6E:20:F7:DE:2E:5E:45
X509v3 Authority Key Identifier:
keyid:4B:89:D8:7F:8E:41:B5:08:2D:38:91:60:15:E0:59:E5:6D:D0:11:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4nYf45BtQgtOJFgFeBZ5W3QEU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:d1:d8:82:1b:b5:b4:22:e7:ba:5c:e9:f2:a3:d7:ae:b1:27:
d4:d1:c5:51:47:9a:99:87:e1:86:7f:8d:b0:54:9f:f0:e2:f1:
f7:19:24:af:20:68:d4:3a:a9:f2:16:37:50:a8:cf:f0:a8:a1:
d0:0d:bc:7d:dd:13:6c:1c:05:61:1d:b7:82:da:94:70:a4:64:
be:b7:ad:eb:6b:cc:d9:e6:7d:d9:a3:df:3f:e6:b2:c5:e9:e6:
8e:40:c2:69:12:04:06:9c:41:75:7d:31:9b:dd:77:e3:4e:3c:
15:d0:08:1d:0a:5c:df:ab:ad:bb:0e:3f:a1:e9:82:8c:c2:66:
62:5f:0f:93:8c:0b:e4:a2:96:34:89:a0:ad:37:d6:69:d3:36:
1b:cc:87:a0:b0:dc:86:75:87:4e:02:b1:64:bc:76:05:97:16:
c7:f6:ce:56:d9:cb:77:10:fa:06:94:b4:de:50:9e:c9:8d:bf:
76:cd:25:83:d7:62:d6:99:66:28:7a:ad:6a:e2:8b:fe:b3:16:
a4:ec:29:bf:72:3e:82:61:da:a0:9d:b3:cb:bc:be:29:a5:0e:
3d:65:b2:1b:05:f8:34:47:4a:a4:2f:dd:07:2c:c2:77:8c:d1:
6f:0e:2b:2c:c6:30:fb:b8:37:5c:37:c7:66:6a:4a:c7:da:ea:
77:0f:a6:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZW7zTJpGV36ur3IkqynNm/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiODlkODdmOGU0MWI1MDgyZDM4OTE2MDE1ZTA1OWU1NmRk
MDExNGUwHhcNMjUwNDIxMDYwMDM5WhcNMjUwNDIyMDYwMDM5WjAzMTEwLwYDVQQD
Eyg5MWVmOTg2OWM4ZDAzMjRlNTFkNzgxN2E2ZDZlMjBmN2RlMmU1ZTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0456bqHLrvXjWvkb9+NUlPsy4oIv
uNiIqfk3p6nfhwN46g2EB62ohv6XpGdAV5l6if2u7OCBcRAz4wjtZywxWsdkDctn
tonYPgwnHOXIrbUgQSEAhGa8L2+sbVn7mFUHPieJc0OUth/jOy+6qdOu7MJE76qZ
DWdmpDhvhTHOVF60K6hKfJLOFI6cmJ5BeFbVneAa4qcG/vaqHDWbCoYzqj1ds64r
Z6zG2WXbRpR37Xc+j5ejrYqwn4ToRFGV8T7jH14bV3ClpMyZ0i4Q26hDzgufXaAL
xXy9LU9gamxmp91uh5GxCF5XNE/eQHdz/J2/y0zh6ze46nyQ7SukjUNtZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJHvmGnI0DJOUdeBem1uIPfeLl5FMB8GA1UdIwQY
MBaAFEuJ2H+OQbUILTiRYBXgWeVt0BFOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzRuWWY0NUJ0UWd0T0pGZ0ZlQlo1VzNRRVU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi80YmE5NzMtMGU5Zi00MzUyLTk4Mzgt
NjQyZGM5MTI3NjgwLzEvUzRuWWY0NUJ0UWd0T0pGZ0ZlQlo1VzNRRVU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi80YmE5NzMtMGU5Zi00MzUyLTk4MzgtNjQyZGM5MTI3Njgw
LzEvUzRuWWY0NUJ0UWd0T0pGZ0ZlQlo1VzNRRVU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgdHYghu1
tCLnulzp8qPXrrEn1NHFUUeamYfhhn+NsFSf8OLx9xkkryBo1Dqp8hY3UKjP8Kih
0A28fd0TbBwFYR23gtqUcKRkvret62vM2eZ92aPfP+ayxenmjkDCaRIEBpxBdX0x
m9134048FdAIHQpc36utuw4/oemCjMJmYl8Pk4wL5KKWNImgrTfWadM2G8yHoLDc
hnWHTgKxZLx2BZcWx/bOVtnLdxD6BpS03lCeyY2/ds0lg9di1plmKHqtauKL/rMW
pOwpv3I+gmHaoJ2zy7y+KaUOPWWyGwX4NEdKpC/dByzCd4zRbw4rLMYw+7g3XDfH
ZmpKx9rqdw+mXQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:57:55 2025 by rpki-client