Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft
File: 4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft (raw, json)
Hash identifier: 2+1ru4vThCV7n6Pm8YWHnLzuu9govkGdaZt4O2K9fTc=
Subject key identifier: A2:ED:8C:1A:1D:61:9F:5E:AC:84:ED:67:2B:75:14:98:2A:6C:39:10
Authority key identifier: E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73
Certificate issuer: /CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73
Certificate serial: 0196447B383665332F403AA2B0B6643786F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft
Manifest number: 150A
Signing time: Thu 17 Apr 2025 16:00:48 +0000
Manifest this update: Thu 17 Apr 2025 16:00:48 +0000
Manifest next update: Fri 18 Apr 2025 16:00:48 +0000
Files and hashes: 1: 1-KQ3lCQc8t0kQtkE6-_iQqUbP9Q.roa (hash: gNrv97avvDkank7EdDvcD5kAcTLpL7MBGtGaNujTfjw=)
2: 1-ZowhWdJlnO1J6ckMiCzFpO4NqA.roa (hash: YFDJetm10wMx3y43nkOzbjWKZjU+niDmUY27/YG6EhM=)
3: 4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl (hash: oLhLypodI7hZkt49LHnVezrGnwSj0F6ghmOef8UGNno=)
4: P54Qz9AI09JDOlqysqt799AeQRI.roa (hash: nIDEtW0TBUZxo5dIDtHdP7iLVF2Wse6E2BuTqfPasv8=)
5: _dP89dJHE-YZKAUIAMAKH5hCybo.roa (hash: RwLTyGyMw54nCLsLFUIuCCv0sJSfUYZ8s2qq98bQOs0=)
6: baI3T-QVvPK6b76nYUCZm85ZrSs.roa (hash: JldtWM10Ffd/1qvivADvuf6lNYl9UTodEd29bMMwfcg=)
7: eAV-d8BbWJ1sJQuFdRvhLNIzJUA.roa (hash: T3JT9dws49hGRBqX3Lqw/F5GMKuYnFZbEjUfdpuIhGs=)
8: jXfsq-_2CipGq0wifdzOP5Bu42E.roa (hash: B+Vl6cetYE9FE60cfwuEU2uuw7BLT4iX6yuDh5BtpGk=)
9: yMoGVUgWkLcjGd-eCHwp0f7sYEw.roa (hash: zWDi7LVWgZCgN22tu3iijDKXUYSQ4BnSDtV5uO573e0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:7b:38:36:65:33:2f:40:3a:a2:b0:b6:64:37:86:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73
Validity
Not Before: Apr 17 16:00:48 2025 GMT
Not After : Apr 18 16:00:48 2025 GMT
Subject: CN=a2ed8c1a1d619f5eac84ed672b7514982a6c3910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:17:24:52:7c:9b:b8:4e:17:dd:c0:83:a9:bf:
c7:9b:2b:a6:89:95:14:75:92:14:9a:f2:d9:e9:f3:
dd:a6:1a:e9:03:1c:7e:c6:42:28:30:e7:a6:7d:bc:
b1:cf:fc:82:fa:0b:f6:eb:53:2e:26:76:d9:95:0b:
2e:ea:2d:80:7f:32:7a:28:6a:bf:6e:72:85:19:b6:
6f:94:4c:60:d6:05:70:00:59:6b:58:23:30:34:ab:
cd:64:5e:bd:30:d9:b4:08:34:17:b3:c9:b9:a5:2b:
9e:8a:8c:e4:53:5f:5b:1d:94:19:be:9c:65:fd:15:
23:6f:be:04:c2:0a:35:88:a5:7f:2f:74:2a:6a:de:
e0:cb:4e:14:19:7c:e3:ea:76:d1:dd:6c:f2:b1:d0:
a8:07:6b:c6:da:41:72:73:ec:ec:19:d7:2c:d5:8c:
a0:ba:26:57:f3:d1:b2:51:99:e0:7b:e8:8d:ff:57:
6a:75:f9:31:39:a3:b2:c8:d3:0a:e8:47:60:f1:86:
83:2e:ab:7e:62:35:b3:65:cd:1e:6f:c1:44:b4:1e:
e9:fc:44:a0:a5:5a:41:64:8f:1d:92:f4:ce:53:3f:
e0:8d:84:21:61:d5:2b:b3:2b:67:ad:57:5a:ab:c7:
3f:49:1c:7d:ca:22:77:71:1a:08:2f:21:42:86:ff:
48:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:ED:8C:1A:1D:61:9F:5E:AC:84:ED:67:2B:75:14:98:2A:6C:39:10
X509v3 Authority Key Identifier:
keyid:E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:1f:bb:52:59:d9:91:8a:de:52:92:80:3b:b7:1c:dc:bf:4f:
ac:6c:41:cf:c4:84:6d:32:a3:62:3c:55:58:37:98:cb:b8:6b:
26:b0:83:13:e1:f2:44:4d:17:5f:5c:01:8d:40:38:df:53:67:
ca:be:c2:ca:b6:fb:a6:95:9e:38:c4:1c:59:c2:6e:32:a1:da:
60:28:5a:d8:d1:2c:64:23:72:06:c3:2f:25:89:c8:e5:d2:fe:
a7:20:d3:b6:9a:0a:49:14:6e:9e:45:43:70:f6:a3:e1:e8:fe:
60:b3:10:2a:c9:5d:6d:f4:82:52:37:99:79:03:32:c1:a1:51:
f8:1a:20:15:ae:7a:03:31:02:09:72:0e:f7:ae:b4:f1:e8:5d:
04:32:94:8c:a3:d0:e4:ad:5f:11:d7:d6:db:92:ef:5f:ce:c1:
8f:34:9f:ab:6b:ed:2c:a4:eb:f7:9e:e5:99:35:b4:26:16:51:
e7:17:49:e1:f6:59:db:73:72:4b:a1:28:a2:6a:97:d9:61:99:
cf:1d:70:54:21:ec:60:ce:73:10:d4:b4:e9:99:23:23:36:54:
65:2a:45:31:65:b0:87:af:97:d3:8a:f0:f5:9b:bb:0d:36:89:
6e:52:0d:c5:47:b6:42:3d:20:eb:92:d1:a0:cf:f0:d2:76:39:
1d:d0:36:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZEezg2ZTMvQDqisLZkN4b4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwZGVlMWIwNmJhMjRhNjc2MjEzZjk3NmE0YjUwYzEyOWRj
YjJiNzMwHhcNMjUwNDE3MTYwMDQ4WhcNMjUwNDE4MTYwMDQ4WjAzMTEwLwYDVQQD
EyhhMmVkOGMxYTFkNjE5ZjVlYWM4NGVkNjcyYjc1MTQ5ODJhNmMzOTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRckUnybuE4X3cCDqb/HmyumiZUU
dZIUmvLZ6fPdphrpAxx+xkIoMOemfbyxz/yC+gv261MuJnbZlQsu6i2AfzJ6KGq/
bnKFGbZvlExg1gVwAFlrWCMwNKvNZF69MNm0CDQXs8m5pSueiozkU19bHZQZvpxl
/RUjb74Ewgo1iKV/L3Qqat7gy04UGXzj6nbR3WzysdCoB2vG2kFyc+zsGdcs1Yyg
uiZX89GyUZnge+iN/1dqdfkxOaOyyNMK6Edg8YaDLqt+YjWzZc0eb8FEtB7p/ESg
pVpBZI8dkvTOUz/gjYQhYdUrsytnrVdaq8c/SRx9yiJ3cRoILyFChv9IYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKLtjBodYZ9erITtZyt1FJgqbDkQMB8GA1UdIwQY
MBaAFODe4bBrokpnYhP5dqS1DBKdyytzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNE43aHNHdWlTbWRpRV9sMnBMVU1FcDNMSzNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9jMjJkYzktYzdiYS00MTU2LWE3OWMt
MTVlOTBiZjg3ZmFiLzEvNE43aHNHdWlTbWRpRV9sMnBMVU1FcDNMSzNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9jMjJkYzktYzdiYS00MTU2LWE3OWMtMTVlOTBiZjg3ZmFi
LzEvNE43aHNHdWlTbWRpRV9sMnBMVU1FcDNMSzNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgh+7UlnZ
kYreUpKAO7cc3L9PrGxBz8SEbTKjYjxVWDeYy7hrJrCDE+HyRE0XX1wBjUA431Nn
yr7Cyrb7ppWeOMQcWcJuMqHaYCha2NEsZCNyBsMvJYnI5dL+pyDTtpoKSRRunkVD
cPaj4ej+YLMQKsldbfSCUjeZeQMywaFR+BogFa56AzECCXIO96608ehdBDKUjKPQ
5K1fEdfW25LvX87BjzSfq2vtLKTr957lmTW0JhZR5xdJ4fZZ23NyS6EoomqX2WGZ
zx1wVCHsYM5zENS06ZkjIzZUZSpFMWWwh6+X04rw9Zu7DTaJblINxUe2Qj0g65LR
oM/w0nY5HdA2YQ==
-----END CERTIFICATE-----
Generated at Thu Apr 17 22:21:26 2025 by rpki-client