
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft
File: pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft (raw, json)
Hash identifier: /Q0QsAFgQ5mq20ePZR657+nU4HQLmd/nxshkqgcy7bM=
Subject key identifier: 8D:71:24:41:26:87:12:DA:3E:58:4C:96:25:D2:2F:4B:49:F9:8C:36
Authority key identifier: A4:40:B8:5F:0F:7B:A6:38:5C:D4:FE:E8:A0:EC:04:E8:18:41:54:2C
Certificate issuer: /CN=a440b85f0f7ba6385cd4fee8a0ec04e81841542c
Certificate serial: 0196501164DB862753690DD1646319E7FFE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEC4Xw97pjhc1P7ooOwE6BhBVCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft
Manifest number: 148F
Signing time: Sat 19 Apr 2025 22:00:39 +0000
Manifest this update: Sat 19 Apr 2025 22:00:39 +0000
Manifest next update: Sun 20 Apr 2025 22:00:39 +0000
Files and hashes: 1: LnuT6eEdb88-TghvQ_FZnRefVyk.roa (hash: XQk1e8dAGrgYT1azOGp5hpmR57maWf6UhLO79IbQj1k=)
2: pEC4Xw97pjhc1P7ooOwE6BhBVCw.crl (hash: kXUeIAhKsBG5ZCTO2cmsQwaJhqD0jJpPajzpLmQY7ik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pEC4Xw97pjhc1P7ooOwE6BhBVCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:11:64:db:86:27:53:69:0d:d1:64:63:19:e7:ff:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a440b85f0f7ba6385cd4fee8a0ec04e81841542c
Validity
Not Before: Apr 19 22:00:39 2025 GMT
Not After : Apr 20 22:00:39 2025 GMT
Subject: CN=8d712441268712da3e584c9625d22f4b49f98c36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cf:e2:97:ec:2d:ad:fb:74:42:03:8e:fa:ff:
37:e3:7f:2e:75:67:43:54:26:2f:93:b4:90:ac:51:
6d:d6:40:f8:c3:8e:8d:92:8e:4b:4f:fd:9c:db:a7:
cf:6c:10:ee:ef:24:4c:a6:ed:bf:40:02:31:1b:c8:
c4:bb:46:e0:be:39:e7:ee:ba:49:4b:f0:54:93:75:
71:e1:98:79:cd:a3:e4:6c:cd:41:f8:1d:e7:f1:c8:
22:a2:b1:f6:00:54:23:56:fe:3c:1a:ad:2f:4e:87:
b7:bc:a0:47:db:ff:37:4c:1b:e1:1d:59:4d:f6:8f:
f5:94:75:f6:fc:40:ce:f6:4c:eb:63:82:4d:cf:0e:
d0:e5:b5:8e:ea:22:11:a8:54:ad:ac:cc:75:1a:14:
e3:0b:02:1e:32:ea:28:1d:a9:88:71:d7:47:0a:ed:
b1:82:4f:ee:f5:2b:b4:ce:e3:ea:11:b0:b5:fd:d0:
e6:27:19:fb:10:b2:bc:10:2e:de:81:65:ba:d9:aa:
b0:88:f9:c8:a0:48:3f:4c:09:fb:ed:7a:3f:29:38:
71:02:77:3a:75:cb:b0:01:05:94:f7:87:63:48:f6:
cc:78:ec:af:5c:e3:8d:f3:a0:d5:e4:77:46:27:45:
76:26:ca:43:75:f1:9a:a5:fb:70:f1:15:4f:50:cd:
e7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:71:24:41:26:87:12:DA:3E:58:4C:96:25:D2:2F:4B:49:F9:8C:36
X509v3 Authority Key Identifier:
keyid:A4:40:B8:5F:0F:7B:A6:38:5C:D4:FE:E8:A0:EC:04:E8:18:41:54:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEC4Xw97pjhc1P7ooOwE6BhBVCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:fe:74:a0:52:63:24:f4:ea:c5:71:b9:d5:5d:19:9b:8c:ae:
20:45:61:36:65:3e:a1:79:15:b4:f2:ce:20:8e:46:42:72:79:
24:80:56:77:76:13:cd:be:e6:df:fb:a3:4f:c1:23:e5:49:2a:
c1:68:5c:2c:6e:1a:b4:a8:62:8a:b2:ec:55:fc:98:1e:55:66:
e2:bf:c3:40:dd:e5:62:26:d1:3e:65:5e:c6:ce:f3:fd:5f:3b:
c1:85:e3:b9:a3:eb:8d:d0:e9:d1:60:f1:5d:62:46:d8:29:0b:
58:38:a2:5f:d3:27:40:2c:85:01:90:29:13:3c:8b:03:f5:71:
72:77:e3:63:13:2b:6d:d6:4a:b7:1a:b5:e9:8e:a6:48:2e:3e:
20:27:05:12:1b:f3:36:79:40:dd:65:03:88:b3:e6:9e:29:4a:
d5:fa:66:8f:c3:2d:ca:04:a3:9b:d0:b7:75:3c:76:ba:97:e9:
5c:a9:63:57:ce:c6:e4:52:40:f6:ab:82:3c:e7:ef:12:5e:73:
ff:66:89:b3:9b:cb:79:ad:81:2d:38:ad:1b:4b:7f:06:55:30:
9d:26:d1:c5:f1:20:d2:cc:6a:88:ee:3a:af:87:40:91:a7:9a:
5c:01:9c:ce:3e:9c:b8:82:08:be:2b:0e:ef:41:2b:55:df:ae:
89:bd:57:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZQEWTbhidTaQ3RZGMZ5//gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0NDBiODVmMGY3YmE2Mzg1Y2Q0ZmVlOGEwZWMwNGU4MTg0
MTU0MmMwHhcNMjUwNDE5MjIwMDM5WhcNMjUwNDIwMjIwMDM5WjAzMTEwLwYDVQQD
Eyg4ZDcxMjQ0MTI2ODcxMmRhM2U1ODRjOTYyNWQyMmY0YjQ5Zjk4YzM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnM/il+wtrft0QgOO+v83438udWdD
VCYvk7SQrFFt1kD4w46Nko5LT/2c26fPbBDu7yRMpu2/QAIxG8jEu0bgvjnn7rpJ
S/BUk3Vx4Zh5zaPkbM1B+B3n8cgiorH2AFQjVv48Gq0vToe3vKBH2/83TBvhHVlN
9o/1lHX2/EDO9kzrY4JNzw7Q5bWO6iIRqFStrMx1GhTjCwIeMuooHamIcddHCu2x
gk/u9Su0zuPqEbC1/dDmJxn7ELK8EC7egWW62aqwiPnIoEg/TAn77Xo/KThxAnc6
dcuwAQWU94djSPbMeOyvXOON86DV5HdGJ0V2JspDdfGapftw8RVPUM3nDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI1xJEEmhxLaPlhMliXSL0tJ+Yw2MB8GA1UdIwQY
MBaAFKRAuF8Pe6Y4XNT+6KDsBOgYQVQsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEVDNFh3OTdwamhjMVA3b29Pd0U2QmhCVkN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8yMWVjMGYtYTFlYy00YWQ0LWE3NDkt
ZGRjZmUzNmY0MzNiLzEvcEVDNFh3OTdwamhjMVA3b29Pd0U2QmhCVkN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi8yMWVjMGYtYTFlYy00YWQ0LWE3NDktZGRjZmUzNmY0MzNi
LzEvcEVDNFh3OTdwamhjMVA3b29Pd0U2QmhCVkN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJv50oFJj
JPTqxXG51V0Zm4yuIEVhNmU+oXkVtPLOII5GQnJ5JIBWd3YTzb7m3/ujT8Ej5Ukq
wWhcLG4atKhiirLsVfyYHlVm4r/DQN3lYibRPmVexs7z/V87wYXjuaPrjdDp0WDx
XWJG2CkLWDiiX9MnQCyFAZApEzyLA/VxcnfjYxMrbdZKtxq16Y6mSC4+ICcFEhvz
NnlA3WUDiLPmnilK1fpmj8MtygSjm9C3dTx2upfpXKljV87G5FJA9quCPOfvEl5z
/2aJs5vLea2BLTitG0t/BlUwnSbRxfEg0sxqiO46r4dAkaeaXAGczj6cuIIIvisO
70ErVd+uib1Xpw==
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:17:10 2025 by rpki-client