Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.mft
File: 4IEr3duyOb5jncddzS4pbE_PSpc.mft (raw, json)
Hash identifier: 6MBXyyXZbasJRCbiPwJejGI3+15RsMF+/uYX7XcsuFo=
Subject key identifier: DF:F1:84:E2:A4:C3:9D:31:81:92:86:AA:C2:73:63:50:D5:DC:14:D5
Authority key identifier: E0:81:2B:DD:DB:B2:39:BE:63:9D:C7:5D:CD:2E:29:6C:4F:CF:4A:97
Certificate issuer: /CN=e0812bdddbb239be639dc75dcd2e296c4fcf4a97
Certificate serial: 01974D0D8E4895A7DE72B5F4299A22E8E96D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IEr3duyOb5jncddzS4pbE_PSpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.mft
Manifest number: 1204
Signing time: Sun 08 Jun 2025 01:00:23 +0000
Manifest this update: Sun 08 Jun 2025 01:00:23 +0000
Manifest next update: Mon 09 Jun 2025 01:00:23 +0000
Files and hashes: 1: 4IEr3duyOb5jncddzS4pbE_PSpc.crl (hash: pjYtfbs/gq+GQ0RFcnSUpkI9Ic4jcM/Noz2HrNOONZc=)
2: el5qFDMV5hMW1NAGRbmjGI68Zeg.roa (hash: u+tO/pc49AyT7XnqsS0vc/mFjJM4zzaHLzr71ZyNaRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4IEr3duyOb5jncddzS4pbE_PSpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0d:8e:48:95:a7:de:72:b5:f4:29:9a:22:e8:e9:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0812bdddbb239be639dc75dcd2e296c4fcf4a97
Validity
Not Before: Jun 8 01:00:23 2025 GMT
Not After : Jun 9 01:00:23 2025 GMT
Subject: CN=dff184e2a4c39d31819286aac2736350d5dc14d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7d:98:e8:74:b5:1a:4b:cc:62:c9:65:12:4b:
17:ef:8e:4d:33:7a:6a:ab:11:30:3f:fc:fe:c6:3f:
42:4b:2a:cf:c6:74:3e:25:f4:df:18:af:38:48:50:
14:8b:d5:d0:3f:1e:92:de:55:7e:95:bf:55:b7:04:
4a:24:ab:76:39:09:d1:58:ce:c6:af:54:a0:e8:f9:
fd:4b:e4:a6:c5:82:d7:97:f0:6e:0d:72:48:64:6c:
42:5b:5c:50:6b:38:94:1d:f7:2d:ab:70:8e:8a:93:
a8:bd:d0:12:46:ab:4a:57:e0:cf:17:63:60:1a:33:
04:a6:36:c8:e0:f1:7a:59:7a:45:ef:73:06:66:2a:
b8:f4:ff:69:42:9c:84:47:c3:36:25:ea:dc:28:a8:
b3:4f:a0:a2:a0:0e:eb:1b:9e:b6:21:27:45:ea:20:
82:36:1f:fe:29:2a:e0:5a:6e:84:86:76:38:63:4b:
7d:09:2b:89:ff:6e:fa:1d:6e:09:a0:1c:7d:66:6d:
95:76:6d:91:aa:3a:8b:74:e9:71:71:b1:2c:3b:2a:
84:0c:58:24:1d:af:8c:48:5f:0f:65:69:5b:34:e2:
24:f4:99:83:51:d9:9e:48:e5:5f:e6:07:63:0c:cd:
4c:35:51:68:3a:9d:bb:05:93:6c:44:10:61:ed:6c:
c9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:F1:84:E2:A4:C3:9D:31:81:92:86:AA:C2:73:63:50:D5:DC:14:D5
X509v3 Authority Key Identifier:
keyid:E0:81:2B:DD:DB:B2:39:BE:63:9D:C7:5D:CD:2E:29:6C:4F:CF:4A:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IEr3duyOb5jncddzS4pbE_PSpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:a8:71:6e:b1:83:a0:66:fe:3e:57:5f:e2:38:1a:1f:1b:82:
a0:4a:e1:08:45:83:dd:c2:49:11:8e:af:a7:fc:e8:7a:1a:3d:
95:31:8a:06:45:ba:ce:e2:ca:07:6f:3d:df:d5:9e:7f:28:9f:
27:7a:9e:05:bb:bc:1b:d8:b4:ca:a7:f2:93:fa:c4:5b:3c:e0:
2d:3d:5d:77:c8:f7:63:05:6a:a8:85:9f:52:27:4a:fc:03:34:
00:ad:8f:11:e7:bb:4e:f8:b2:b3:a1:55:03:9d:3b:cf:dd:88:
a0:87:8b:3b:4a:aa:b4:6d:e0:e8:7c:86:2e:a2:f5:ea:ab:b3:
93:6f:ae:00:a6:50:56:4b:65:d1:8b:7e:c5:91:37:38:21:96:
e5:57:73:0f:89:63:44:79:e0:bc:70:d1:08:2f:f5:73:93:48:
99:81:36:5d:35:d6:b4:3d:6e:04:da:90:6b:13:37:9b:2d:03:
8a:c1:20:25:99:17:d1:15:37:5a:18:75:a2:d7:db:26:47:d7:
43:e4:c7:16:f4:83:36:e5:0a:e4:22:cb:0f:20:be:30:32:c8:
6f:88:35:65:96:b4:af:c5:7e:f1:b0:35:c8:e6:7c:25:b2:41:
d4:18:ce:1c:6c:75:7c:94:61:c9:16:e1:83:63:65:a5:2b:72:
9e:8c:65:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNDY5IlafecrX0KZoi6OltMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwODEyYmRkZGJiMjM5YmU2MzlkYzc1ZGNkMmUyOTZjNGZj
ZjRhOTcwHhcNMjUwNjA4MDEwMDIzWhcNMjUwNjA5MDEwMDIzWjAzMTEwLwYDVQQD
EyhkZmYxODRlMmE0YzM5ZDMxODE5Mjg2YWFjMjczNjM1MGQ1ZGMxNGQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp32Y6HS1GkvMYsllEksX745NM3pq
qxEwP/z+xj9CSyrPxnQ+JfTfGK84SFAUi9XQPx6S3lV+lb9VtwRKJKt2OQnRWM7G
r1Sg6Pn9S+SmxYLXl/BuDXJIZGxCW1xQaziUHfctq3COipOovdASRqtKV+DPF2Ng
GjMEpjbI4PF6WXpF73MGZiq49P9pQpyER8M2JercKKizT6CioA7rG562ISdF6iCC
Nh/+KSrgWm6EhnY4Y0t9CSuJ/276HW4JoBx9Zm2Vdm2RqjqLdOlxcbEsOyqEDFgk
Ha+MSF8PZWlbNOIk9JmDUdmeSOVf5gdjDM1MNVFoOp27BZNsRBBh7WzJOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN/xhOKkw50xgZKGqsJzY1DV3BTVMB8GA1UdIwQY
MBaAFOCBK93bsjm+Y53HXc0uKWxPz0qXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNElFcjNkdXlPYjVqbmNkZHpTNHBiRV9QU3BjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8xZjY4YTgtNDlkZC00MTJiLWJiYTkt
MGJmNTM5YjNiNzE0LzEvNElFcjNkdXlPYjVqbmNkZHpTNHBiRV9QU3BjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8xZjY4YTgtNDlkZC00MTJiLWJiYTktMGJmNTM5YjNiNzE0
LzEvNElFcjNkdXlPYjVqbmNkZHpTNHBiRV9QU3BjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABqhxbrGD
oGb+Pldf4jgaHxuCoErhCEWD3cJJEY6vp/zoeho9lTGKBkW6zuLKB28939Wefyif
J3qeBbu8G9i0yqfyk/rEWzzgLT1dd8j3YwVqqIWfUidK/AM0AK2PEee7Tviys6FV
A507z92IoIeLO0qqtG3g6HyGLqL16quzk2+uAKZQVktl0Yt+xZE3OCGW5VdzD4lj
RHngvHDRCC/1c5NImYE2XTXWtD1uBNqQaxM3my0DisEgJZkX0RU3Whh1otfbJkfX
Q+THFvSDNuUK5CLLDyC+MDLIb4g1ZZa0r8V+8bA1yOZ8JbJB1BjOHGx1fJRhyRbh
g2NlpStynoxlew==
-----END CERTIFICATE-----
Generated at Sun Jun 8 11:06:15 2025 by rpki-client