
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft
File: PB4_3feITXhacI_U5mS2LekQ6-g.mft (raw, json)
Hash identifier: SxWmW3qA/q+AMtuOyBPjZUM4THacavkFWzHG9yVBFvw=
Subject key identifier: 04:82:DC:56:A5:6A:AF:57:F2:EF:64:E8:4C:F9:45:E2:8C:2B:B9:4F
Authority key identifier: 3C:1E:3F:DD:F7:88:4D:78:5A:70:8F:D4:E6:64:B6:2D:E9:10:EB:E8
Certificate issuer: /CN=3c1e3fddf7884d785a708fd4e664b62de910ebe8
Certificate serial: 01963F54E1BAF85CED1BA032F19F43D4F32C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PB4_3feITXhacI_U5mS2LekQ6-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft
Manifest number: 14F5
Signing time: Wed 16 Apr 2025 16:00:49 +0000
Manifest this update: Wed 16 Apr 2025 16:00:49 +0000
Manifest next update: Thu 17 Apr 2025 16:00:49 +0000
Files and hashes: 1: PB4_3feITXhacI_U5mS2LekQ6-g.crl (hash: MBJ+bhazURDMTvie7BbI0RqCKaJAqBy5tzbWKigryZw=)
2: rVIEtQUeZ960hMeEwx6AF679dhM.roa (hash: s8qUIneeKVi7X6yParz6sZwUc96D/kko1q8RujoMkJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/PB4_3feITXhacI_U5mS2LekQ6-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:54:e1:ba:f8:5c:ed:1b:a0:32:f1:9f:43:d4:f3:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1e3fddf7884d785a708fd4e664b62de910ebe8
Validity
Not Before: Apr 16 16:00:49 2025 GMT
Not After : Apr 17 16:00:49 2025 GMT
Subject: CN=0482dc56a56aaf57f2ef64e84cf945e28c2bb94f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9b:f1:73:90:ba:65:f7:bc:72:26:7d:cc:8c:
32:ef:97:42:35:da:05:33:c9:cb:f0:e1:26:71:71:
94:47:3d:e5:9e:4b:5b:50:81:1a:63:c0:ed:88:3f:
88:5d:30:5f:1d:ad:64:0a:cc:30:d1:ce:08:5f:2e:
96:bb:e0:82:7c:5f:c4:e8:98:8a:1c:ee:d4:a6:f2:
a3:35:2f:16:db:14:f7:69:3d:c0:b3:d9:71:7e:cb:
dd:86:54:dc:0b:7d:c7:d9:06:4b:90:13:0d:d6:f2:
82:c3:a1:69:e6:ed:f6:51:da:b3:25:2c:32:d1:00:
66:a3:1e:5d:fd:4e:f5:6b:22:b4:b2:28:36:9a:8c:
fe:3a:b5:6a:2d:27:07:6b:1d:d4:03:c6:6b:0c:d6:
9a:5e:50:a4:9b:58:1b:e9:d2:40:47:cb:66:74:c0:
e3:8a:34:93:0f:7e:cd:10:f2:11:bb:76:e7:da:2d:
b9:9f:e0:e2:9d:a7:84:ab:b1:41:6c:40:ad:64:fd:
9f:4d:ed:a3:df:d0:31:41:c8:79:45:9e:30:c0:40:
a6:63:d0:67:65:92:0f:2d:db:55:5c:08:f4:c4:d9:
5e:22:26:05:4f:64:f1:17:2b:e0:6f:ed:73:f5:d3:
cf:c3:29:f7:84:e6:17:9e:d9:b1:13:06:0f:0e:a6:
c5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:82:DC:56:A5:6A:AF:57:F2:EF:64:E8:4C:F9:45:E2:8C:2B:B9:4F
X509v3 Authority Key Identifier:
keyid:3C:1E:3F:DD:F7:88:4D:78:5A:70:8F:D4:E6:64:B6:2D:E9:10:EB:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PB4_3feITXhacI_U5mS2LekQ6-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:b7:fb:05:e6:f4:3b:9f:ea:3e:b2:3b:e4:dd:f5:1e:94:7d:
6e:4d:71:c3:d4:f0:eb:6f:f0:a1:dd:84:e8:22:4b:f2:a1:f3:
be:f2:51:de:1a:cd:3e:e8:ce:81:35:70:9c:58:90:a6:90:44:
91:1c:95:80:d8:80:3f:0e:48:6c:fa:26:d1:57:ef:9a:1d:79:
ba:0d:c7:64:25:3e:09:ba:09:58:a9:fb:71:9e:ef:78:38:17:
b2:b1:e6:f0:08:43:b5:73:6e:80:84:30:8b:17:f6:a6:19:89:
19:6d:6e:a2:d6:b5:bf:54:78:82:78:e9:a5:d4:4d:6a:27:28:
d8:d1:82:e0:27:40:ac:e3:2e:ba:3b:59:2e:ba:6b:74:fe:33:
c8:4f:ad:d9:00:2a:b2:0e:90:62:0a:b6:75:a7:46:af:b7:d6:
e1:48:87:8a:52:28:f2:a5:7a:b8:23:3b:ed:2a:46:9f:25:5a:
5f:0b:3d:37:d0:29:30:f3:77:08:24:54:e9:d0:96:41:dc:b8:
51:37:b3:c4:b1:e2:a6:28:c3:f0:05:36:c9:e9:a8:d6:56:4d:
73:48:df:23:64:5e:9d:09:d3:f5:3c:fb:f3:c1:2c:55:ea:86:
31:cd:41:7c:c6:7a:c0:06:a2:ac:2a:26:9d:9b:cf:40:3b:3a:
a5:21:b4:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY/VOG6+FztG6Ay8Z9D1PMsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjMWUzZmRkZjc4ODRkNzg1YTcwOGZkNGU2NjRiNjJkZTkx
MGViZTgwHhcNMjUwNDE2MTYwMDQ5WhcNMjUwNDE3MTYwMDQ5WjAzMTEwLwYDVQQD
EygwNDgyZGM1NmE1NmFhZjU3ZjJlZjY0ZTg0Y2Y5NDVlMjhjMmJiOTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pvxc5C6Zfe8ciZ9zIwy75dCNdoF
M8nL8OEmcXGURz3lnktbUIEaY8DtiD+IXTBfHa1kCsww0c4IXy6Wu+CCfF/E6JiK
HO7UpvKjNS8W2xT3aT3As9lxfsvdhlTcC33H2QZLkBMN1vKCw6Fp5u32UdqzJSwy
0QBmox5d/U71ayK0sig2moz+OrVqLScHax3UA8ZrDNaaXlCkm1gb6dJAR8tmdMDj
ijSTD37NEPIRu3bn2i25n+DinaeEq7FBbECtZP2fTe2j39AxQch5RZ4wwECmY9Bn
ZZIPLdtVXAj0xNleIiYFT2TxFyvgb+1z9dPPwyn3hOYXntmxEwYPDqbFoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFASC3Falaq9X8u9k6Ez5ReKMK7lPMB8GA1UdIwQY
MBaAFDweP933iE14WnCP1OZkti3pEOvoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEI0XzNmZUlUWGhhY0lfVTVtUzJMZWtRNi1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS80ZThlNzQtNzdlNi00MWViLTkwNDct
NTljMThhZGEzNTJmLzEvUEI0XzNmZUlUWGhhY0lfVTVtUzJMZWtRNi1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS80ZThlNzQtNzdlNi00MWViLTkwNDctNTljMThhZGEzNTJm
LzEvUEI0XzNmZUlUWGhhY0lfVTVtUzJMZWtRNi1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATbf7Beb0
O5/qPrI75N31HpR9bk1xw9Tw62/wod2E6CJL8qHzvvJR3hrNPujOgTVwnFiQppBE
kRyVgNiAPw5IbPom0Vfvmh15ug3HZCU+CboJWKn7cZ7veDgXsrHm8AhDtXNugIQw
ixf2phmJGW1uota1v1R4gnjppdRNaico2NGC4CdArOMuujtZLrprdP4zyE+t2QAq
sg6QYgq2dadGr7fW4UiHilIo8qV6uCM77SpGnyVaXws9N9ApMPN3CCRU6dCWQdy4
UTezxLHipijD8AU2yemo1lZNc0jfI2RenQnT9Tz788EsVeqGMc1BfMZ6wAairCom
nZvPQDs6pSG0tg==
-----END CERTIFICATE-----
Generated at Thu Apr 17 06:28:46 2025 by rpki-client