Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
File: 4GU20rF8RcF1c58zExGb4hnTMaw.mft (raw, json)
Hash identifier: 1T3kkVNJdM/LoTu+23hfLHDXfP4gcu1unGb0vWof83M=
Subject key identifier: EA:A2:6B:EB:6F:14:E0:8C:A5:B5:C2:66:79:DE:A7:B3:AE:18:81:BD
Authority key identifier: E0:65:36:D2:B1:7C:45:C1:75:73:9F:33:13:11:9B:E2:19:D3:31:AC
Certificate issuer: /CN=e06536d2b17c45c175739f3313119be219d331ac
Certificate serial: 01963EE73FA2D9A4FBCAA2BB8DF2711DCD26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
Manifest number: 1302
Signing time: Wed 16 Apr 2025 14:01:04 +0000
Manifest this update: Wed 16 Apr 2025 14:01:04 +0000
Manifest next update: Thu 17 Apr 2025 14:01:04 +0000
Files and hashes: 1: 4GU20rF8RcF1c58zExGb4hnTMaw.crl (hash: 5Qd94v7KKbOv5S3ulrDILY1Lpj/dU5FPc0YdYktS/kY=)
2: UI1__jiZeKmutEsj1q3GQDM4G-M.roa (hash: 9sMXrW5behwUEYOSItq82zCqNDvrla3Ktrtlxw/s2dc=)
3: XYSwDgEDu2AsDXqJSeXTfFwYkMs.roa (hash: 4IZPclZa/Ab6eD/hUighnjIphAqh1KKYEqn+pFsOdrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:e7:3f:a2:d9:a4:fb:ca:a2:bb:8d:f2:71:1d:cd:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e06536d2b17c45c175739f3313119be219d331ac
Validity
Not Before: Apr 16 14:01:04 2025 GMT
Not After : Apr 17 14:01:04 2025 GMT
Subject: CN=eaa26beb6f14e08ca5b5c26679dea7b3ae1881bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d6:8a:36:e5:fd:4e:84:2c:01:42:b0:68:d7:
78:a2:6c:6b:24:b5:c3:33:d9:6b:de:e7:9c:38:5a:
c4:f9:52:d7:60:91:c1:06:9d:67:e4:17:7b:2c:51:
37:d6:58:cc:95:56:98:b0:5e:60:0f:aa:30:68:bc:
4f:9f:74:12:62:55:c9:a1:88:8e:06:e3:78:5d:ed:
33:fd:3a:7b:a7:7b:8d:ed:05:4a:74:1d:de:b9:83:
c8:40:7c:87:50:c1:d8:39:b8:42:e4:a6:9f:71:f3:
d2:7e:db:59:2f:64:a3:b3:1e:77:b4:bc:ca:7b:4d:
c8:4a:27:d4:2d:6d:c7:ab:0f:f9:fa:98:b5:06:2c:
97:ff:94:2a:72:97:93:04:5b:a4:af:65:d0:2f:ef:
70:0e:f7:1e:1e:0b:dd:e2:f8:86:41:d8:fe:8a:b6:
f4:57:55:f6:dd:f9:30:b3:97:f5:63:d2:7b:31:a8:
03:09:b3:45:78:68:cb:55:10:9b:c5:b3:56:e7:c2:
c5:56:ab:83:81:33:a0:30:e1:3c:7f:f1:8b:e7:48:
17:8d:1a:25:36:96:33:0c:94:a4:ee:be:ef:32:af:
be:1e:1c:3e:8e:88:5a:fa:3b:6c:eb:ca:1b:b6:f3:
82:7a:fc:d3:61:00:42:a5:34:13:b1:20:c3:fe:2b:
a9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A2:6B:EB:6F:14:E0:8C:A5:B5:C2:66:79:DE:A7:B3:AE:18:81:BD
X509v3 Authority Key Identifier:
keyid:E0:65:36:D2:B1:7C:45:C1:75:73:9F:33:13:11:9B:E2:19:D3:31:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:53:6b:f7:fd:4f:0f:b9:fa:f0:ee:b7:37:14:14:ea:d1:cf:
6f:37:7d:ff:bf:d2:f4:0d:b1:bb:05:55:3d:ce:be:4d:87:5e:
e5:2a:5b:0c:5d:5e:09:63:95:be:bb:01:c4:f5:9a:58:3b:5b:
0b:b5:b6:ce:84:bc:cf:43:81:ec:7e:dc:55:ad:34:b3:cd:b6:
e1:79:e1:71:b2:05:b3:d2:67:6f:95:e1:fb:5a:da:df:d8:9a:
eb:dd:19:64:a0:bb:4a:39:10:b4:a4:f8:de:12:31:bd:d6:55:
ac:dd:64:18:ad:0c:5f:ad:66:28:3d:08:2a:dd:79:45:d1:36:
13:84:09:c4:6e:8e:31:2a:70:1d:24:8b:bf:c9:2a:a5:6a:50:
f3:57:03:1d:24:f1:86:6a:cc:f2:50:90:f9:f1:a3:3d:44:98:
fd:8b:e1:93:4c:30:db:bc:26:6a:29:34:b8:ef:70:ea:2c:05:
9c:4f:3b:32:05:c6:d5:65:52:92:64:2f:9c:ee:40:2e:33:f7:
ce:70:73:11:de:91:a7:a3:4a:da:e2:3a:5c:49:99:c4:6f:d6:
32:25:b2:6d:1d:79:5e:50:dc:a2:2a:e7:0f:a8:f6:85:dc:54:
ea:31:46:91:9f:77:04:30:31:c4:78:ce:3f:b9:56:71:6b:50:
52:92:34:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY+5z+i2aT7yqK7jfJxHc0mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNjUzNmQyYjE3YzQ1YzE3NTczOWYzMzEzMTE5YmUyMTlk
MzMxYWMwHhcNMjUwNDE2MTQwMTA0WhcNMjUwNDE3MTQwMTA0WjAzMTEwLwYDVQQD
EyhlYWEyNmJlYjZmMTRlMDhjYTViNWMyNjY3OWRlYTdiM2FlMTg4MWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNaKNuX9ToQsAUKwaNd4omxrJLXD
M9lr3uecOFrE+VLXYJHBBp1n5Bd7LFE31ljMlVaYsF5gD6owaLxPn3QSYlXJoYiO
BuN4Xe0z/Tp7p3uN7QVKdB3euYPIQHyHUMHYObhC5KafcfPSfttZL2Sjsx53tLzK
e03ISifULW3Hqw/5+pi1BiyX/5QqcpeTBFukr2XQL+9wDvceHgvd4viGQdj+irb0
V1X23fkws5f1Y9J7MagDCbNFeGjLVRCbxbNW58LFVquDgTOgMOE8f/GL50gXjRol
NpYzDJSk7r7vMq++Hhw+joha+jts68obtvOCevzTYQBCpTQTsSDD/iupsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOqia+tvFOCMpbXCZnnep7OuGIG9MB8GA1UdIwQY
MBaAFOBlNtKxfEXBdXOfMxMRm+IZ0zGsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEdVMjByRjhSY0YxYzU4ekV4R2I0aG5UTWF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy82ZTQzYjktYzZhNy00ZDUxLTgwNjEt
MDZjOGJiMzc0YTU4LzEvNEdVMjByRjhSY0YxYzU4ekV4R2I0aG5UTWF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy82ZTQzYjktYzZhNy00ZDUxLTgwNjEtMDZjOGJiMzc0YTU4
LzEvNEdVMjByRjhSY0YxYzU4ekV4R2I0aG5UTWF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQlNr9/1P
D7n68O63NxQU6tHPbzd9/7/S9A2xuwVVPc6+TYde5SpbDF1eCWOVvrsBxPWaWDtb
C7W2zoS8z0OB7H7cVa00s8224XnhcbIFs9Jnb5Xh+1ra39ia690ZZKC7SjkQtKT4
3hIxvdZVrN1kGK0MX61mKD0IKt15RdE2E4QJxG6OMSpwHSSLv8kqpWpQ81cDHSTx
hmrM8lCQ+fGjPUSY/Yvhk0ww27wmaik0uO9w6iwFnE87MgXG1WVSkmQvnO5ALjP3
znBzEd6Rp6NK2uI6XEmZxG/WMiWybR15XlDcoirnD6j2hdxU6jFGkZ93BDAxxHjO
P7lWcWtQUpI0QA==
-----END CERTIFICATE-----
Generated at Thu Apr 17 03:34:32 2025 by rpki-client