Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft
File: 4z5OBZxk_xm-EKehUEV1YeRV0U8.mft (raw, json)
Hash identifier: E0vDMpzLT02YGcQOJdd2BbvKmp/qhJuuAUKAWBfz8t8=
Subject key identifier: E9:65:2E:14:7E:97:AC:81:32:AC:8A:2E:C2:18:62:57:9D:1B:64:98
Authority key identifier: E3:3E:4E:05:9C:64:FF:19:BE:10:A7:A1:50:45:75:61:E4:55:D1:4F
Certificate issuer: /CN=e33e4e059c64ff19be10a7a150457561e455d14f
Certificate serial: 019658DD54F647166DFA86B9C841C8C44DFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4z5OBZxk_xm-EKehUEV1YeRV0U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft
Manifest number: 0608
Signing time: Mon 21 Apr 2025 15:00:22 +0000
Manifest this update: Mon 21 Apr 2025 15:00:22 +0000
Manifest next update: Tue 22 Apr 2025 15:00:22 +0000
Files and hashes: 1: 4Vx5uY-wUi0YX0Kfqz3unLfjiuA.roa (hash: CqAh2hOC6+tjEARJLtXVTVdqWTjo1Zk7c/vuGkdSa5s=)
2: 4z5OBZxk_xm-EKehUEV1YeRV0U8.crl (hash: EVwLP7p/UpxtlQXeSCPDQbxjo5h3fDOEZ128KHv5Zic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4z5OBZxk_xm-EKehUEV1YeRV0U8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 13:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:dd:54:f6:47:16:6d:fa:86:b9:c8:41:c8:c4:4d:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e33e4e059c64ff19be10a7a150457561e455d14f
Validity
Not Before: Apr 21 15:00:22 2025 GMT
Not After : Apr 22 15:00:22 2025 GMT
Subject: CN=e9652e147e97ac8132ac8a2ec21862579d1b6498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f7:b6:2e:f1:3d:2c:e6:de:4a:83:c1:74:d2:
2e:cd:30:b2:52:5e:ec:2c:55:ae:86:5e:23:ce:96:
f7:bc:73:b8:79:ed:1d:d8:b8:d9:4c:cf:28:98:86:
d4:12:32:1d:9e:cd:e6:25:b6:bc:50:09:42:93:f3:
26:4a:4a:50:0d:0e:6a:19:2f:31:45:c7:4f:4d:e9:
9d:ef:ad:53:a2:b2:66:36:e1:58:79:11:6f:f7:f5:
ae:f4:7a:d5:d6:a1:75:ee:55:f4:47:51:3d:fa:c1:
52:fb:fe:44:6b:3e:39:3c:d5:9e:1c:01:16:f3:94:
4f:4a:ed:d1:ff:c3:e0:62:e0:ec:8f:ee:47:54:d7:
34:32:ba:16:eb:56:df:b8:4d:fa:58:a3:40:4a:ab:
0a:ce:6c:e0:39:a4:cd:ab:6e:ab:a4:02:51:55:49:
77:f5:4d:f6:59:ff:f6:e1:17:f5:a1:2c:52:9d:88:
b5:e8:e4:9a:fc:94:a6:d8:fd:51:57:5e:62:f2:8e:
b9:76:1c:8c:06:1f:8b:8d:64:18:9d:42:14:24:34:
4e:54:0e:df:bf:d1:eb:da:50:d1:7b:a8:10:73:d7:
9f:66:65:4f:86:1c:09:cf:6e:a4:9a:78:ca:c9:cf:
11:79:05:67:43:48:53:4b:cf:67:db:7f:73:95:aa:
50:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:65:2E:14:7E:97:AC:81:32:AC:8A:2E:C2:18:62:57:9D:1B:64:98
X509v3 Authority Key Identifier:
keyid:E3:3E:4E:05:9C:64:FF:19:BE:10:A7:A1:50:45:75:61:E4:55:D1:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4z5OBZxk_xm-EKehUEV1YeRV0U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:b6:37:61:83:41:24:d2:bb:ad:27:c2:17:39:68:cb:7d:02:
2a:54:80:38:42:2e:22:3a:7f:72:a1:d0:ee:26:17:6e:25:93:
bb:bd:a5:96:74:27:a6:30:c9:c3:92:dd:48:4c:f6:fc:7f:03:
f6:c1:03:af:50:b5:e8:cc:7b:f8:0d:8a:e7:81:fa:f1:28:85:
e2:4b:3e:e2:78:45:4c:10:2c:a5:37:c2:2e:1a:e6:91:f4:0e:
36:e3:f5:e1:d8:3f:51:df:ba:12:6c:b1:45:29:7c:7c:65:19:
db:ea:04:c5:0f:00:c5:3b:40:a9:a5:96:2b:b4:f1:c2:c4:59:
05:6d:cf:8b:ae:be:da:e6:1a:d6:cc:20:42:10:d6:db:96:8e:
d7:e6:9f:62:08:bd:99:71:bc:83:7f:47:18:53:b9:c3:04:b3:
68:5f:01:43:ef:8d:92:d2:ea:0c:db:05:0c:fe:16:a0:86:c7:
51:89:5d:10:6d:33:00:f8:da:ea:d7:32:d5:1e:de:61:5c:b8:
70:36:14:49:f3:34:22:42:69:22:5b:4f:82:1c:b7:0e:fc:11:
6e:9e:54:ac:89:2d:f1:e0:29:4d:47:d4:2c:33:40:83:d2:0b:
ea:f4:3a:2b:9b:11:88:cf:13:39:8e:8a:c5:2f:c0:51:e8:fc:
a5:d8:ff:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZY3VT2RxZt+oa5yEHIxE39MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzM2U0ZTA1OWM2NGZmMTliZTEwYTdhMTUwNDU3NTYxZTQ1
NWQxNGYwHhcNMjUwNDIxMTUwMDIyWhcNMjUwNDIyMTUwMDIyWjAzMTEwLwYDVQQD
EyhlOTY1MmUxNDdlOTdhYzgxMzJhYzhhMmVjMjE4NjI1NzlkMWI2NDk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPe2LvE9LObeSoPBdNIuzTCyUl7s
LFWuhl4jzpb3vHO4ee0d2LjZTM8omIbUEjIdns3mJba8UAlCk/MmSkpQDQ5qGS8x
RcdPTemd761TorJmNuFYeRFv9/Wu9HrV1qF17lX0R1E9+sFS+/5Eaz45PNWeHAEW
85RPSu3R/8PgYuDsj+5HVNc0MroW61bfuE36WKNASqsKzmzgOaTNq26rpAJRVUl3
9U32Wf/24Rf1oSxSnYi16OSa/JSm2P1RV15i8o65dhyMBh+LjWQYnUIUJDROVA7f
v9Hr2lDRe6gQc9efZmVPhhwJz26kmnjKyc8ReQVnQ0hTS89n239zlapQCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOllLhR+l6yBMqyKLsIYYledG2SYMB8GA1UdIwQY
MBaAFOM+TgWcZP8ZvhCnoVBFdWHkVdFPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHo1T0JaeGtfeG0tRUtlaFVFVjFZZVJWMFU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8zYmJlMDEtMGExNC00MWJmLTk3ZGEt
MmIyYThiYTYxMmZkLzEvNHo1T0JaeGtfeG0tRUtlaFVFVjFZZVJWMFU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni8zYmJlMDEtMGExNC00MWJmLTk3ZGEtMmIyYThiYTYxMmZk
LzEvNHo1T0JaeGtfeG0tRUtlaFVFVjFZZVJWMFU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZLY3YYNB
JNK7rSfCFzloy30CKlSAOEIuIjp/cqHQ7iYXbiWTu72llnQnpjDJw5LdSEz2/H8D
9sEDr1C16Mx7+A2K54H68SiF4ks+4nhFTBAspTfCLhrmkfQONuP14dg/Ud+6Emyx
RSl8fGUZ2+oExQ8AxTtAqaWWK7TxwsRZBW3Pi66+2uYa1swgQhDW25aO1+afYgi9
mXG8g39HGFO5wwSzaF8BQ++NktLqDNsFDP4WoIbHUYldEG0zAPja6tcy1R7eYVy4
cDYUSfM0IkJpIltPghy3DvwRbp5UrIkt8eApTUfULDNAg9IL6vQ6K5sRiM8TOY6K
xS/AUej8pdj/zA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:48:40 2025 by rpki-client