Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.mft
File: g4heOKx3ysBEgptTyzslq-Yen2Q.mft (raw, json)
Hash identifier: ZTIg+qGTzw01jspEhJxYm+bbRzAHnxYTrccz8WiCM+w=
Subject key identifier: EB:1E:C1:27:25:0C:FB:E6:D1:D1:55:E7:DC:8D:22:1F:6D:0F:95:3A
Authority key identifier: 83:88:5E:38:AC:77:CA:C0:44:82:9B:53:CB:3B:25:AB:E6:1E:9F:64
Certificate issuer: /CN=83885e38ac77cac044829b53cb3b25abe61e9f64
Certificate serial: 019648FC4F08EE67D86A997271A37D8BE4DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4heOKx3ysBEgptTyzslq-Yen2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.mft
Manifest number: 0508
Signing time: Fri 18 Apr 2025 13:00:16 +0000
Manifest this update: Fri 18 Apr 2025 13:00:16 +0000
Manifest next update: Sat 19 Apr 2025 13:00:16 +0000
Files and hashes: 1: c8jr9RK1jYIIU9J_37XkvdpDKPQ.roa (hash: FypzDCTYnJOnd+60Jv/bTV7/TP6pt9nWegIKGFpscqo=)
2: g4heOKx3ysBEgptTyzslq-Yen2Q.crl (hash: 4S+hbJLvMoFNL3OGsx7cjDodtiTh2a8Te4fr//hZtp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/g4heOKx3ysBEgptTyzslq-Yen2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:fc:4f:08:ee:67:d8:6a:99:72:71:a3:7d:8b:e4:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83885e38ac77cac044829b53cb3b25abe61e9f64
Validity
Not Before: Apr 18 13:00:16 2025 GMT
Not After : Apr 19 13:00:16 2025 GMT
Subject: CN=eb1ec127250cfbe6d1d155e7dc8d221f6d0f953a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fc:3c:2d:54:2b:af:8f:0b:22:b4:e9:fc:57:
64:07:f5:74:fa:c1:f3:a7:f1:b0:f3:31:b3:0d:9b:
db:84:2c:4f:91:e5:82:f9:59:14:f7:ff:62:4c:f0:
6f:af:40:05:c4:c3:89:87:81:d0:3a:0b:a2:96:23:
bf:92:19:af:16:de:03:3a:c6:a9:7a:80:c2:42:bf:
cd:85:84:cd:96:b8:f6:b6:be:8d:31:b6:87:44:f0:
1a:68:11:14:d3:11:ea:72:78:61:37:04:25:5b:1e:
a6:ae:d6:52:b9:14:f3:93:14:da:fa:6d:a3:80:14:
8f:e0:a0:c1:96:8a:36:8f:df:dc:d5:af:08:31:4b:
ce:64:6b:ac:53:ea:c8:ab:50:ed:45:33:0b:ce:46:
18:b2:01:b4:d0:6c:bc:dd:39:55:30:b9:b7:81:e9:
d4:06:36:dd:ca:b5:08:63:ab:66:e2:31:de:22:3b:
c7:f4:72:32:38:b4:d7:92:56:1e:e5:d2:b1:42:72:
d7:44:d3:ec:f3:a9:3c:ae:1b:7f:fa:b4:f6:05:2e:
58:b6:39:45:94:6d:e5:a5:6a:6b:9b:7b:44:a0:2c:
ae:8b:d5:07:e6:55:51:e3:a8:b5:65:ea:a3:78:8c:
34:ab:a2:a5:b0:c9:a5:26:ef:ab:df:57:3a:f3:e8:
4b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:1E:C1:27:25:0C:FB:E6:D1:D1:55:E7:DC:8D:22:1F:6D:0F:95:3A
X509v3 Authority Key Identifier:
keyid:83:88:5E:38:AC:77:CA:C0:44:82:9B:53:CB:3B:25:AB:E6:1E:9F:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4heOKx3ysBEgptTyzslq-Yen2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:8b:c9:2b:01:92:26:98:6e:04:d3:a1:bd:4e:7a:d6:30:16:
fa:3a:53:6b:f6:8e:ce:88:a6:18:c0:c4:0b:dc:5e:77:a0:12:
6e:49:f0:7d:2e:99:e6:fc:ff:96:80:c6:26:e5:cd:0f:af:90:
6a:51:61:8e:59:13:46:1a:36:07:77:37:53:7d:a5:27:77:4c:
23:12:6b:cf:7c:ef:14:e4:96:9a:6e:c4:34:4b:d0:11:b1:9d:
84:a8:10:7b:c7:c2:1d:9c:2f:45:fd:cb:a2:66:7b:cc:66:31:
76:75:52:91:8c:80:27:bf:47:23:01:97:29:d7:67:54:15:e7:
37:c9:fe:84:81:78:d5:75:d4:24:93:d9:5c:fc:b1:a3:04:43:
0d:a7:b6:17:70:22:04:13:cb:6c:2e:de:77:7b:bb:3c:36:26:
4d:36:13:6d:94:6a:cc:fc:9c:36:de:d5:bb:77:dd:ed:93:bf:
16:c3:4d:44:f8:99:87:62:08:53:62:66:33:e2:7e:86:43:d8:
e9:5c:37:df:61:d6:7d:f3:69:25:79:ba:43:1a:96:18:10:75:
e7:0b:a9:d8:22:4b:fc:4e:d6:be:ca:4a:9c:6b:95:63:1c:36:
90:91:77:30:91:1e:52:0f:ce:bc:d1:19:a5:7b:1f:8b:9e:8f:
71:36:ff:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZI/E8I7mfYaplycaN9i+TeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzODg1ZTM4YWM3N2NhYzA0NDgyOWI1M2NiM2IyNWFiZTYx
ZTlmNjQwHhcNMjUwNDE4MTMwMDE2WhcNMjUwNDE5MTMwMDE2WjAzMTEwLwYDVQQD
EyhlYjFlYzEyNzI1MGNmYmU2ZDFkMTU1ZTdkYzhkMjIxZjZkMGY5NTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/w8LVQrr48LIrTp/FdkB/V0+sHz
p/Gw8zGzDZvbhCxPkeWC+VkU9/9iTPBvr0AFxMOJh4HQOguiliO/khmvFt4DOsap
eoDCQr/NhYTNlrj2tr6NMbaHRPAaaBEU0xHqcnhhNwQlWx6mrtZSuRTzkxTa+m2j
gBSP4KDBloo2j9/c1a8IMUvOZGusU+rIq1DtRTMLzkYYsgG00Gy83TlVMLm3genU
BjbdyrUIY6tm4jHeIjvH9HIyOLTXklYe5dKxQnLXRNPs86k8rht/+rT2BS5YtjlF
lG3lpWprm3tEoCyui9UH5lVR46i1ZeqjeIw0q6KlsMmlJu+r31c68+hLqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOsewSclDPvm0dFV59yNIh9tD5U6MB8GA1UdIwQY
MBaAFIOIXjisd8rARIKbU8s7JavmHp9kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzRoZU9LeDN5c0JFZ3B0VHl6c2xxLVllbjJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC80NjM2ODYtY2U0OC00ODdjLWJjM2Qt
YTJmNTllYWU4NmQwLzEvZzRoZU9LeDN5c0JFZ3B0VHl6c2xxLVllbjJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC80NjM2ODYtY2U0OC00ODdjLWJjM2QtYTJmNTllYWU4NmQw
LzEvZzRoZU9LeDN5c0JFZ3B0VHl6c2xxLVllbjJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS4vJKwGS
JphuBNOhvU561jAW+jpTa/aOzoimGMDEC9xed6ASbknwfS6Z5vz/loDGJuXND6+Q
alFhjlkTRho2B3c3U32lJ3dMIxJrz3zvFOSWmm7ENEvQEbGdhKgQe8fCHZwvRf3L
omZ7zGYxdnVSkYyAJ79HIwGXKddnVBXnN8n+hIF41XXUJJPZXPyxowRDDae2F3Ai
BBPLbC7ed3u7PDYmTTYTbZRqzPycNt7Vu3fd7ZO/FsNNRPiZh2IIU2JmM+J+hkPY
6Vw332HWffNpJXm6QxqWGBB15wup2CJL/E7WvspKnGuVYxw2kJF3MJEeUg/OvNEZ
pXsfi56PcTb/GA==
-----END CERTIFICATE-----
Generated at Fri Apr 18 16:08:41 2025 by rpki-client