Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
File: 4dl0w71P6k6f61Ep2-0gPAdcjWg.mft (raw, json)
Hash identifier: 2KrtvrX5kuyh/IyQuuibp5J2YmiX0xdjWAZStJqL+Nw=
Subject key identifier: FC:4B:6A:82:4F:D4:1B:EA:A5:D0:38:D9:39:AB:C0:AA:7D:6F:74:7D
Authority key identifier: E1:D9:74:C3:BD:4F:EA:4E:9F:EB:51:29:DB:ED:20:3C:07:5C:8D:68
Certificate issuer: /CN=e1d974c3bd4fea4e9feb5129dbed203c075c8d68
Certificate serial: 019644442AE377BD7F5168EE177401BABB7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4dl0w71P6k6f61Ep2-0gPAdcjWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
Manifest number: 07C1
Signing time: Thu 17 Apr 2025 15:00:40 +0000
Manifest this update: Thu 17 Apr 2025 15:00:40 +0000
Manifest next update: Fri 18 Apr 2025 15:00:40 +0000
Files and hashes: 1: 4dl0w71P6k6f61Ep2-0gPAdcjWg.crl (hash: At446U+F1x1MXdLSQB442yCelunr+SBlTuWVG39rLyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4dl0w71P6k6f61Ep2-0gPAdcjWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 15:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:44:2a:e3:77:bd:7f:51:68:ee:17:74:01:ba:bb:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1d974c3bd4fea4e9feb5129dbed203c075c8d68
Validity
Not Before: Apr 17 15:00:40 2025 GMT
Not After : Apr 18 15:00:40 2025 GMT
Subject: CN=fc4b6a824fd41beaa5d038d939abc0aa7d6f747d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e4:a8:c6:8b:d2:e6:bb:ea:d4:91:2e:b7:16:
b0:85:89:05:e1:60:09:bc:a5:f5:40:5d:d0:58:c6:
7a:a7:e9:eb:3e:89:30:12:96:f4:a8:9b:7e:65:ab:
10:cf:d8:26:84:8a:fd:79:2f:ce:d2:04:c1:7f:01:
31:b5:8d:53:0f:b2:e5:3d:07:4a:a1:b1:30:6d:dd:
64:02:7d:42:34:96:5e:bf:b5:e6:2b:20:37:5a:3a:
8d:89:4e:4e:8f:96:72:63:e1:c9:16:4b:8b:03:6f:
91:ec:fd:af:7e:fd:83:a5:59:37:49:34:e0:a0:60:
f9:8c:b0:2d:d0:00:cb:ac:c0:ef:df:30:9e:09:6e:
22:d2:74:1e:86:c4:24:5a:d5:f7:44:a5:72:37:77:
a3:53:30:22:1b:b9:e2:1d:5e:84:35:8a:ac:82:f2:
e7:b5:72:4e:ae:8d:10:f9:07:0a:f9:ea:f1:1a:0d:
e6:c6:a0:c3:69:21:86:69:31:56:0a:ce:32:e3:8e:
1e:e0:56:e1:76:19:16:28:ad:81:c4:f9:dc:f2:be:
6a:f7:dc:6a:1d:f3:eb:d1:6d:2b:2c:47:e3:af:1d:
22:a1:c1:a1:b3:81:26:f4:69:a1:98:f8:8c:2e:7e:
6d:66:e4:19:6e:d6:12:ec:a9:fb:41:90:cc:1d:59:
1a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:4B:6A:82:4F:D4:1B:EA:A5:D0:38:D9:39:AB:C0:AA:7D:6F:74:7D
X509v3 Authority Key Identifier:
keyid:E1:D9:74:C3:BD:4F:EA:4E:9F:EB:51:29:DB:ED:20:3C:07:5C:8D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dl0w71P6k6f61Ep2-0gPAdcjWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:83:10:69:17:66:84:bc:48:ab:5e:59:8c:3f:49:3b:44:f8:
23:6b:fe:74:e8:e4:d2:9d:be:84:23:38:fc:65:9a:24:d7:eb:
53:f8:5c:50:1e:af:e5:e4:55:2d:51:7e:02:27:ae:bf:ee:af:
8d:c1:ab:02:b2:16:56:4f:79:1d:5b:70:1a:0f:e1:5a:3d:0d:
d5:7c:06:07:ba:fe:f0:2a:4f:98:07:5a:9c:3b:68:4c:8f:a1:
0d:fa:e3:2d:94:7a:2c:c5:81:b5:97:6d:25:64:a0:ac:3e:4c:
4d:38:4f:dd:cd:e8:33:e2:05:54:c7:1b:d3:bc:35:65:d1:09:
f1:d1:43:a2:02:2f:38:83:c2:e1:45:59:44:81:59:22:94:0b:
32:28:96:22:4c:b9:25:a9:c5:f4:60:cb:70:9a:a4:a5:ba:cf:
28:b3:9c:db:b4:96:8f:75:a2:a5:be:ca:8e:e4:71:7f:dd:9e:
3b:58:6f:4f:a0:89:49:c6:80:71:cd:b4:7c:5a:f0:d6:10:02:
b5:cd:9f:a4:6b:80:d9:ed:0c:de:3b:8b:9c:cd:9b:11:74:48:
95:4d:ff:69:2f:cd:9f:c8:a2:f0:16:bc:7b:33:c6:4a:c7:b8:
3b:12:a9:67:22:f0:8d:5f:61:77:69:65:12:26:28:99:84:2e:
98:bc:01:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZERCrjd71/UWjuF3QBurt9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxZDk3NGMzYmQ0ZmVhNGU5ZmViNTEyOWRiZWQyMDNjMDc1
YzhkNjgwHhcNMjUwNDE3MTUwMDQwWhcNMjUwNDE4MTUwMDQwWjAzMTEwLwYDVQQD
EyhmYzRiNmE4MjRmZDQxYmVhYTVkMDM4ZDkzOWFiYzBhYTdkNmY3NDdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeSoxovS5rvq1JEutxawhYkF4WAJ
vKX1QF3QWMZ6p+nrPokwEpb0qJt+ZasQz9gmhIr9eS/O0gTBfwExtY1TD7LlPQdK
obEwbd1kAn1CNJZev7XmKyA3WjqNiU5Oj5ZyY+HJFkuLA2+R7P2vfv2DpVk3STTg
oGD5jLAt0ADLrMDv3zCeCW4i0nQehsQkWtX3RKVyN3ejUzAiG7niHV6ENYqsgvLn
tXJOro0Q+QcK+erxGg3mxqDDaSGGaTFWCs4y444e4FbhdhkWKK2BxPnc8r5q99xq
HfPr0W0rLEfjrx0iocGhs4Em9GmhmPiMLn5tZuQZbtYS7Kn7QZDMHVkaMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPxLaoJP1BvqpdA42TmrwKp9b3R9MB8GA1UdIwQY
MBaAFOHZdMO9T+pOn+tRKdvtIDwHXI1oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGRsMHc3MVA2azZmNjFFcDItMGdQQWRjaldnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9jNDllNjAtOWY5Yi00ZmZlLWFkYTAt
YzAzNDEwOTRiMDlhLzEvNGRsMHc3MVA2azZmNjFFcDItMGdQQWRjaldnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9jNDllNjAtOWY5Yi00ZmZlLWFkYTAtYzAzNDEwOTRiMDlh
LzEvNGRsMHc3MVA2azZmNjFFcDItMGdQQWRjaldnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl4MQaRdm
hLxIq15ZjD9JO0T4I2v+dOjk0p2+hCM4/GWaJNfrU/hcUB6v5eRVLVF+Aieuv+6v
jcGrArIWVk95HVtwGg/hWj0N1XwGB7r+8CpPmAdanDtoTI+hDfrjLZR6LMWBtZdt
JWSgrD5MTThP3c3oM+IFVMcb07w1ZdEJ8dFDogIvOIPC4UVZRIFZIpQLMiiWIky5
JanF9GDLcJqkpbrPKLOc27SWj3Wipb7KjuRxf92eO1hvT6CJScaAcc20fFrw1hAC
tc2fpGuA2e0M3juLnM2bEXRIlU3/aS/Nn8ii8Ba8ezPGSse4OxKpZyLwjV9hd2ll
EiYomYQumLwBzQ==
-----END CERTIFICATE-----
Generated at Thu Apr 17 22:27:46 2025 by rpki-client