Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
File: 4fR8EaOjyuBqGShgqWxQU-wEtdw.mft (raw, json)
Hash identifier: GrBGdEHtOiUBFmVQ5Kz8YihxxqiV3zPaR2tLYW+vg0U=
Subject key identifier: 12:E2:CF:96:BD:87:76:A9:90:68:AA:30:6C:25:04:17:98:BE:B7:D2
Authority key identifier: E1:F4:7C:11:A3:A3:CA:E0:6A:19:28:60:A9:6C:50:53:EC:04:B5:DC
Certificate issuer: /CN=e1f47c11a3a3cae06a192860a96c5053ec04b5dc
Certificate serial: 01963F8BB7BDBD1C757492E1798399369B23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
Manifest number: 1203
Signing time: Wed 16 Apr 2025 17:00:43 +0000
Manifest this update: Wed 16 Apr 2025 17:00:43 +0000
Manifest next update: Thu 17 Apr 2025 17:00:43 +0000
Files and hashes: 1: 1-HjAvExmkGaxksSqn85_Dy6VvJM.roa (hash: 8D5kTAs24JEFoR1NyKeFUo+R/Y6CsZUzK26/NpwtHaw=)
2: 4fR8EaOjyuBqGShgqWxQU-wEtdw.crl (hash: Qntzldi86a7bPbgiv88JrXeTH0Vq9SUnr2I/K71s7tA=)
3: UBam_LF0XAef-2xohQdZlRl7HBg.roa (hash: 7WO0S2f70pIralvylysZjQGv/GwrHdv9TmJ840KoDXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 17:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:8b:b7:bd:bd:1c:75:74:92:e1:79:83:99:36:9b:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f47c11a3a3cae06a192860a96c5053ec04b5dc
Validity
Not Before: Apr 16 17:00:43 2025 GMT
Not After : Apr 17 17:00:43 2025 GMT
Subject: CN=12e2cf96bd8776a99068aa306c25041798beb7d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c3:0f:94:96:20:aa:6a:e8:a9:7b:21:7f:f1:
61:05:a6:37:63:0b:5e:7c:4d:85:c4:ca:64:67:f0:
94:90:18:bc:37:9d:82:67:2d:27:fe:f4:05:e2:04:
6c:1d:d8:03:c7:ea:57:86:b6:3f:41:0a:f2:9d:8e:
5e:85:12:b4:11:9e:10:53:6d:3f:4e:38:93:74:de:
62:b3:29:90:25:3a:0e:33:69:e0:52:20:95:8b:c2:
e4:de:dc:f5:61:ff:40:12:07:b5:29:9b:0a:62:ff:
a1:27:cd:d2:2e:e3:06:4f:3c:9b:00:63:60:d4:a2:
b1:74:aa:48:a1:4d:eb:65:5d:6f:03:10:23:dd:06:
2d:35:ec:04:1d:d0:f6:e1:58:97:4f:b4:74:80:2c:
6b:88:f2:18:85:6d:bf:8b:2c:6f:f8:89:87:1d:5e:
a0:c1:93:23:bc:a2:d8:fd:2f:89:9e:cd:16:77:7e:
28:76:87:7c:ab:bb:5d:de:ba:11:23:95:72:87:d9:
c5:7e:96:6f:9e:ed:ed:c6:b6:d0:1c:84:34:56:99:
58:4b:b0:c7:db:d1:77:98:45:1c:02:f1:1b:89:24:
9e:29:aa:09:e0:60:d6:2a:66:3d:6c:27:6f:c1:7f:
b7:2b:c2:83:e7:3b:93:f9:06:1a:1d:05:b8:d4:bd:
1b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E2:CF:96:BD:87:76:A9:90:68:AA:30:6C:25:04:17:98:BE:B7:D2
X509v3 Authority Key Identifier:
keyid:E1:F4:7C:11:A3:A3:CA:E0:6A:19:28:60:A9:6C:50:53:EC:04:B5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:68:23:f1:e0:85:8c:3e:6b:59:63:21:da:47:26:ec:3a:54:
f2:e9:a6:68:ac:ec:73:81:f7:79:d0:ad:44:2e:21:1e:2a:cc:
10:a0:44:4d:3a:71:3e:af:61:7c:48:44:2c:f3:5a:c0:30:67:
02:b0:6a:10:d3:f4:ed:4d:25:d0:a9:5c:70:50:81:97:38:b2:
d4:27:de:05:0a:1c:da:8c:2d:26:12:34:42:a7:26:a7:11:4d:
45:07:1e:cf:84:9f:c3:9a:e9:47:bc:90:23:a1:85:2e:d8:8c:
b0:cf:78:e8:71:63:79:a3:55:8a:9b:b3:9a:15:1f:1f:55:55:
25:d9:70:fa:0e:67:d6:db:1e:69:d6:5a:cb:d8:54:a9:ce:ba:
98:89:16:20:18:63:f0:e9:1f:6d:ea:de:5b:55:ac:63:c0:46:
65:00:b3:a0:3d:cd:4a:74:fa:a8:7c:2b:7d:6f:44:20:94:33:
a8:d7:de:83:ea:1d:f0:41:8b:c9:d3:56:bc:95:a1:af:dc:23:
58:c6:fa:66:2e:9a:61:1d:41:a6:45:ae:09:e7:10:03:6c:b5:
69:bb:e8:f1:8d:98:a8:9c:33:e7:26:75:7d:05:84:3c:3c:a2:
40:08:aa:b4:3e:ed:be:f4:fc:c6:42:e5:7f:15:4e:d9:83:00:
7f:e6:9a:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY/i7e9vRx1dJLheYOZNpsjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxZjQ3YzExYTNhM2NhZTA2YTE5Mjg2MGE5NmM1MDUzZWMw
NGI1ZGMwHhcNMjUwNDE2MTcwMDQzWhcNMjUwNDE3MTcwMDQzWjAzMTEwLwYDVQQD
EygxMmUyY2Y5NmJkODc3NmE5OTA2OGFhMzA2YzI1MDQxNzk4YmViN2QyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosMPlJYgqmroqXshf/FhBaY3Ywte
fE2FxMpkZ/CUkBi8N52CZy0n/vQF4gRsHdgDx+pXhrY/QQrynY5ehRK0EZ4QU20/
TjiTdN5isymQJToOM2ngUiCVi8Lk3tz1Yf9AEge1KZsKYv+hJ83SLuMGTzybAGNg
1KKxdKpIoU3rZV1vAxAj3QYtNewEHdD24ViXT7R0gCxriPIYhW2/iyxv+ImHHV6g
wZMjvKLY/S+Jns0Wd34odod8q7td3roRI5Vyh9nFfpZvnu3txrbQHIQ0VplYS7DH
29F3mEUcAvEbiSSeKaoJ4GDWKmY9bCdvwX+3K8KD5zuT+QYaHQW41L0bHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBLiz5a9h3apkGiqMGwlBBeYvrfSMB8GA1UdIwQY
MBaAFOH0fBGjo8rgahkoYKlsUFPsBLXcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGZSOEVhT2p5dUJxR1NoZ3FXeFFVLXdFdGR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC85MDgwNzAtZmQ5NC00YTc1LTk4NzIt
MzFjNzMzMTk3MDczLzEvNGZSOEVhT2p5dUJxR1NoZ3FXeFFVLXdFdGR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC85MDgwNzAtZmQ5NC00YTc1LTk4NzItMzFjNzMzMTk3MDcz
LzEvNGZSOEVhT2p5dUJxR1NoZ3FXeFFVLXdFdGR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd2gj8eCF
jD5rWWMh2kcm7DpU8ummaKzsc4H3edCtRC4hHirMEKBETTpxPq9hfEhELPNawDBn
ArBqENP07U0l0KlccFCBlziy1CfeBQoc2owtJhI0QqcmpxFNRQcez4Sfw5rpR7yQ
I6GFLtiMsM946HFjeaNVipuzmhUfH1VVJdlw+g5n1tseadZay9hUqc66mIkWIBhj
8OkfbereW1WsY8BGZQCzoD3NSnT6qHwrfW9EIJQzqNfeg+od8EGLydNWvJWhr9wj
WMb6Zi6aYR1BpkWuCecQA2y1abvo8Y2YqJwz5yZ1fQWEPDyiQAiqtD7tvvT8xkLl
fxVO2YMAf+aaFQ==
-----END CERTIFICATE-----
Generated at Thu Apr 17 02:44:24 2025 by rpki-client