Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
File: 4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft (raw, json)
Hash identifier: afpFQakNNAjU5bauzcWUQTXSS0j+wwpVTEEID9vFyok=
Subject key identifier: 59:9B:69:78:E0:2F:1A:71:0B:76:61:F9:DF:17:DB:D6:32:1F:D2:1B
Authority key identifier: E2:22:77:FD:F6:58:28:EF:40:B5:8C:E1:01:94:65:95:50:7F:13:30
Certificate issuer: /CN=e22277fdf65828ef40b58ce101946595507f1330
Certificate serial: 01974E57841E167B082297B498D609F20DFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
Manifest number: 157F
Signing time: Sun 08 Jun 2025 07:00:47 +0000
Manifest this update: Sun 08 Jun 2025 07:00:47 +0000
Manifest next update: Mon 09 Jun 2025 07:00:47 +0000
Files and hashes: 1: 4iJ3_fZYKO9AtYzhAZRllVB_EzA.crl (hash: INJtAZncEPq+qxlVswxInq1Y/hrrgoXGNXXk+vtgrpw=)
2: aWUQzBuRutK2_qLKMIBREYhWNS0.roa (hash: EEbZn4pmevKGtGGTKH3kqnYuG7haulAx42CNa2YJjd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:84:1e:16:7b:08:22:97:b4:98:d6:09:f2:0d:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e22277fdf65828ef40b58ce101946595507f1330
Validity
Not Before: Jun 8 07:00:47 2025 GMT
Not After : Jun 9 07:00:47 2025 GMT
Subject: CN=599b6978e02f1a710b7661f9df17dbd6321fd21b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:19:86:e8:cd:12:96:b4:c8:67:ff:0f:79:a9:
b6:93:99:3b:a0:9c:37:0b:68:ba:34:32:f5:60:8c:
3b:61:f7:14:2c:cd:a7:8e:54:c6:93:81:cd:fc:59:
87:c1:53:1a:f0:a5:cb:11:24:38:29:84:ce:80:be:
83:ee:34:ae:83:5e:51:30:d1:68:82:14:17:ca:a1:
70:fc:a6:a8:1b:12:fc:ac:b3:7e:0c:0e:08:3b:20:
79:8b:46:cf:0e:aa:9c:ce:ab:52:9c:73:af:c1:ad:
76:72:02:b5:e2:3c:a0:3c:65:6a:af:8f:40:bf:97:
e2:f0:67:e4:84:df:a5:b0:8d:61:a0:f6:01:86:d2:
9b:4b:b7:c8:10:0a:99:38:c9:7d:29:b5:93:8e:cc:
b5:4f:54:f8:18:40:c6:ee:c9:e1:6c:04:4d:70:7d:
f2:77:92:52:fa:8b:37:b9:98:d1:e3:19:ae:be:8c:
97:2b:ad:db:69:b2:46:24:13:26:05:85:ef:8b:a0:
57:83:d6:50:77:7a:dd:49:17:c1:c8:01:a4:44:46:
10:fe:4e:07:16:81:a5:d8:4e:8c:6f:42:72:5a:aa:
0c:fd:62:ef:1f:af:6d:5e:29:00:7a:01:20:69:c8:
8a:4f:fd:ad:3c:1b:b9:2a:1b:10:ea:96:da:71:bc:
01:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:9B:69:78:E0:2F:1A:71:0B:76:61:F9:DF:17:DB:D6:32:1F:D2:1B
X509v3 Authority Key Identifier:
keyid:E2:22:77:FD:F6:58:28:EF:40:B5:8C:E1:01:94:65:95:50:7F:13:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:16:18:40:8e:74:d1:ac:9d:7c:1c:95:f6:d7:7c:f2:52:1e:
b3:d2:b4:b7:b7:18:43:dd:a5:c7:a3:c8:19:c2:ea:bf:92:cb:
b5:c3:8f:37:17:e3:95:f9:07:7f:68:f3:c6:2f:d8:f4:13:cc:
c1:c5:1a:cf:a5:80:c0:1c:53:19:da:d8:6e:58:61:10:3e:23:
ef:b1:24:ac:f1:d9:67:85:e3:08:33:e8:eb:eb:d4:65:41:48:
f6:03:78:4e:91:e0:94:39:fd:28:3a:61:8f:69:a1:bc:03:75:
ac:f9:dc:b9:7a:f1:be:6d:42:1f:b8:36:f1:fd:b0:a8:ee:84:
dd:b5:4a:85:72:54:cb:fb:b9:b3:1b:57:1e:72:82:4f:fe:fa:
5c:6b:94:da:e9:ac:e3:54:98:1f:ef:0f:cf:53:cf:9d:18:bb:
64:5c:3a:f9:13:8b:ce:63:3d:f6:95:1a:ab:41:02:5c:e1:97:
24:ea:51:60:b4:9c:2e:55:e8:a8:ea:f5:35:33:00:df:1e:a0:
5b:9c:03:8d:22:4b:12:40:32:d1:ba:e6:68:16:b1:f0:09:cf:
75:a3:99:6f:91:20:b0:8b:8a:f7:0c:7b:23:d4:f9:6b:7c:3f:
76:f2:f8:32:1b:d5:4c:e5:34:e9:a3:83:a6:73:62:d0:6b:af:
36:db:1f:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOV4QeFnsIIpe0mNYJ8g3+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyMjI3N2ZkZjY1ODI4ZWY0MGI1OGNlMTAxOTQ2NTk1NTA3
ZjEzMzAwHhcNMjUwNjA4MDcwMDQ3WhcNMjUwNjA5MDcwMDQ3WjAzMTEwLwYDVQQD
Eyg1OTliNjk3OGUwMmYxYTcxMGI3NjYxZjlkZjE3ZGJkNjMyMWZkMjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6hmG6M0SlrTIZ/8Peam2k5k7oJw3
C2i6NDL1YIw7YfcULM2njlTGk4HN/FmHwVMa8KXLESQ4KYTOgL6D7jSug15RMNFo
ghQXyqFw/KaoGxL8rLN+DA4IOyB5i0bPDqqczqtSnHOvwa12cgK14jygPGVqr49A
v5fi8GfkhN+lsI1hoPYBhtKbS7fIEAqZOMl9KbWTjsy1T1T4GEDG7snhbARNcH3y
d5JS+os3uZjR4xmuvoyXK63babJGJBMmBYXvi6BXg9ZQd3rdSRfByAGkREYQ/k4H
FoGl2E6Mb0JyWqoM/WLvH69tXikAegEgaciKT/2tPBu5KhsQ6pbacbwBwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFmbaXjgLxpxC3Zh+d8X29YyH9IbMB8GA1UdIwQY
MBaAFOIid/32WCjvQLWM4QGUZZVQfxMwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGlKM19mWllLTzlBdFl6aEFaUmxsVkJfRXpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy80ODE3ODYtNzdmZC00MzE2LTk2Y2Ut
ODIyYjg0MmMzYzBlLzEvNGlKM19mWllLTzlBdFl6aEFaUmxsVkJfRXpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy80ODE3ODYtNzdmZC00MzE2LTk2Y2UtODIyYjg0MmMzYzBl
LzEvNGlKM19mWllLTzlBdFl6aEFaUmxsVkJfRXpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnxYYQI50
0aydfByV9td88lIes9K0t7cYQ92lx6PIGcLqv5LLtcOPNxfjlfkHf2jzxi/Y9BPM
wcUaz6WAwBxTGdrYblhhED4j77EkrPHZZ4XjCDPo6+vUZUFI9gN4TpHglDn9KDph
j2mhvAN1rPncuXrxvm1CH7g28f2wqO6E3bVKhXJUy/u5sxtXHnKCT/76XGuU2ums
41SYH+8Pz1PPnRi7ZFw6+ROLzmM99pUaq0ECXOGXJOpRYLScLlXoqOr1NTMA3x6g
W5wDjSJLEkAy0brmaBax8AnPdaOZb5EgsIuK9wx7I9T5a3w/dvL4MhvVTOU06aOD
pnNi0GuvNtsfrg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 13:36:26 2025 by rpki-client