Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.mft
File: S4x70MRIa6Bzzi3lO6B01w5Ftec.mft (raw, json)
Hash identifier: C+SS2X8ag/GOnwww2a1S9OHOOXCoV34FJxENUFnQ0e8=
Subject key identifier: C7:CF:8A:4D:E7:0A:1A:15:41:AA:09:99:AF:16:59:58:2D:90:30:4E
Authority key identifier: 4B:8C:7B:D0:C4:48:6B:A0:73:CE:2D:E5:3B:A0:74:D7:0E:45:B5:E7
Certificate issuer: /CN=4b8c7bd0c4486ba073ce2de53ba074d70e45b5e7
Certificate serial: 01964DECAAEE87EC5ECB2041DEC857AB0291
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4x70MRIa6Bzzi3lO6B01w5Ftec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.mft
Manifest number: 14F8
Signing time: Sat 19 Apr 2025 12:01:17 +0000
Manifest this update: Sat 19 Apr 2025 12:01:17 +0000
Manifest next update: Sun 20 Apr 2025 12:01:17 +0000
Files and hashes: 1: 3JM1DqiUyjfx5MdpsDwZLHS0SmA.roa (hash: q6Ea605SgtRXxY5NI/ZcpQt4PK8j0Kx+z2u5Y/QaL0k=)
2: S4x70MRIa6Bzzi3lO6B01w5Ftec.crl (hash: vlIwPOP8QNajd6B8vV1xootiOMq74WPu2jSMuuE6DRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.mft
rsync://rpki.ripe.net/repository/DEFAULT/S4x70MRIa6Bzzi3lO6B01w5Ftec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:ec:aa:ee:87:ec:5e:cb:20:41:de:c8:57:ab:02:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b8c7bd0c4486ba073ce2de53ba074d70e45b5e7
Validity
Not Before: Apr 19 12:01:17 2025 GMT
Not After : Apr 20 12:01:17 2025 GMT
Subject: CN=c7cf8a4de70a1a1541aa0999af1659582d90304e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:18:f9:bf:37:ce:e4:5f:c7:3e:51:e6:9e:cc:
7a:58:27:80:01:fd:49:e4:9f:80:fa:cf:55:75:d4:
4d:70:d1:c1:5f:3d:ad:0d:79:c7:87:e1:eb:8c:c8:
43:59:28:41:12:9c:05:8b:e3:7d:00:b5:bf:bb:5a:
af:a4:1b:bd:e9:9e:d9:0a:28:9e:7b:07:8a:f9:0b:
6e:4d:fe:4e:f6:7b:de:ea:9b:6d:bb:28:71:55:0d:
c5:d5:5b:76:3d:15:ba:75:d9:87:32:b8:40:bc:c7:
3c:fa:e0:2b:62:09:7e:21:43:77:25:a7:a8:a8:21:
ee:93:76:fa:6e:81:0a:ce:87:da:59:00:3d:8e:e6:
24:5a:be:03:21:29:70:16:a2:6e:17:5b:12:a7:fd:
cb:51:3a:60:2e:8c:23:33:43:d4:81:85:49:9a:f3:
be:58:91:31:e2:b5:d0:b4:18:35:52:20:5d:98:bd:
79:f0:c6:e9:e1:41:d6:8a:a8:2f:e9:de:62:25:ba:
3b:88:70:bb:7b:8a:65:86:20:b8:f6:fd:1f:18:60:
0a:a8:a1:38:e0:2f:28:60:8a:8b:8c:26:db:5d:d6:
a6:ea:ed:26:d8:4f:57:0c:93:f1:a1:65:e4:9e:20:
76:00:24:87:82:38:ba:1b:af:67:59:47:c2:ed:91:
87:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:CF:8A:4D:E7:0A:1A:15:41:AA:09:99:AF:16:59:58:2D:90:30:4E
X509v3 Authority Key Identifier:
keyid:4B:8C:7B:D0:C4:48:6B:A0:73:CE:2D:E5:3B:A0:74:D7:0E:45:B5:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4x70MRIa6Bzzi3lO6B01w5Ftec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:8a:1d:59:e1:54:4e:21:2e:a2:b9:cd:6d:05:ee:6a:2d:d8:
f5:6d:ae:46:3e:49:ae:9c:7f:a3:8a:43:d4:28:74:b2:45:0c:
81:a1:d1:ce:4b:fd:0c:44:05:fd:76:34:d8:e0:82:58:a7:d8:
f4:e3:52:61:d6:f4:80:d6:cd:d3:49:b3:aa:73:66:e7:b3:d0:
e5:71:45:3b:61:5e:e1:a2:d5:90:4c:af:5d:6f:b3:d5:b1:f3:
4e:db:87:c9:51:88:ae:07:03:88:12:af:8e:56:c5:31:4e:65:
27:00:f8:70:00:8f:74:82:b1:05:55:a5:6c:f3:4a:fc:99:08:
61:cc:8b:6e:17:86:22:65:6e:04:5d:70:62:26:12:3a:bd:8c:
1e:eb:ac:8f:d9:d5:19:40:6c:00:06:c0:ab:3d:2b:d5:7e:8b:
d8:81:c6:10:69:e0:9f:a8:39:0d:32:19:f6:4a:2e:b7:b0:f0:
74:4d:ec:81:cb:ea:bc:0b:16:b2:a0:15:8b:24:24:4b:6d:ba:
9f:9c:8d:e0:44:f5:e6:b6:97:31:a2:1e:90:b9:e8:6b:f0:b7:
9f:0e:61:b4:57:c5:c4:a3:3c:9f:af:a5:ce:00:20:34:90:03:
b6:c6:29:ff:5a:a7:47:88:6e:6b:aa:4c:f0:2a:f7:87:07:81:
cc:76:59:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZN7Kruh+xeyyBB3shXqwKRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiOGM3YmQwYzQ0ODZiYTA3M2NlMmRlNTNiYTA3NGQ3MGU0
NWI1ZTcwHhcNMjUwNDE5MTIwMTE3WhcNMjUwNDIwMTIwMTE3WjAzMTEwLwYDVQQD
EyhjN2NmOGE0ZGU3MGExYTE1NDFhYTA5OTlhZjE2NTk1ODJkOTAzMDRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthj5vzfO5F/HPlHmnsx6WCeAAf1J
5J+A+s9VddRNcNHBXz2tDXnHh+HrjMhDWShBEpwFi+N9ALW/u1qvpBu96Z7ZCiie
eweK+QtuTf5O9nve6pttuyhxVQ3F1Vt2PRW6ddmHMrhAvMc8+uArYgl+IUN3Jaeo
qCHuk3b6boEKzofaWQA9juYkWr4DISlwFqJuF1sSp/3LUTpgLowjM0PUgYVJmvO+
WJEx4rXQtBg1UiBdmL158Mbp4UHWiqgv6d5iJbo7iHC7e4plhiC49v0fGGAKqKE4
4C8oYIqLjCbbXdam6u0m2E9XDJPxoWXkniB2ACSHgji6G69nWUfC7ZGHbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMfPik3nChoVQaoJma8WWVgtkDBOMB8GA1UdIwQY
MBaAFEuMe9DESGugc84t5TugdNcORbXnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzR4NzBNUklhNkJ6emkzbE82QjAxdzVGdGVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wYjU4YWItZjcwNy00YWI2LTlhZTgt
MDI0MGU3NDQ3NmE3LzEvUzR4NzBNUklhNkJ6emkzbE82QjAxdzVGdGVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8wYjU4YWItZjcwNy00YWI2LTlhZTgtMDI0MGU3NDQ3NmE3
LzEvUzR4NzBNUklhNkJ6emkzbE82QjAxdzVGdGVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALYodWeFU
TiEuornNbQXuai3Y9W2uRj5Jrpx/o4pD1Ch0skUMgaHRzkv9DEQF/XY02OCCWKfY
9ONSYdb0gNbN00mzqnNm57PQ5XFFO2Fe4aLVkEyvXW+z1bHzTtuHyVGIrgcDiBKv
jlbFMU5lJwD4cACPdIKxBVWlbPNK/JkIYcyLbheGImVuBF1wYiYSOr2MHuusj9nV
GUBsAAbAqz0r1X6L2IHGEGngn6g5DTIZ9kout7DwdE3sgcvqvAsWsqAViyQkS226
n5yN4ET15raXMaIekLnoa/C3nw5htFfFxKM8n6+lzgAgNJADtsYp/1qnR4hua6pM
8Cr3hweBzHZZhQ==
-----END CERTIFICATE-----
Generated at Sat Apr 19 15:12:03 2025 by rpki-client