Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.mft
File: 4MijkN3l4VGaS9PadUqT6YhJLWc.mft (raw, json)
Hash identifier: 2I7e4f8MKWlBavdH/c9UGV5m5FDqpGs6TK5dkaIL/Xo=
Subject key identifier: 57:E3:93:AE:DD:1C:4D:BC:25:B1:0B:6A:37:A5:C5:E9:27:4D:BD:58
Authority key identifier: E0:C8:A3:90:DD:E5:E1:51:9A:4B:D3:DA:75:4A:93:E9:88:49:2D:67
Certificate issuer: /CN=e0c8a390dde5e1519a4bd3da754a93e988492d67
Certificate serial: 01965312268C6247EE93C80F54017AB41372
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4MijkN3l4VGaS9PadUqT6YhJLWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.mft
Manifest number: 1509
Signing time: Sun 20 Apr 2025 12:00:20 +0000
Manifest this update: Sun 20 Apr 2025 12:00:20 +0000
Manifest next update: Mon 21 Apr 2025 12:00:20 +0000
Files and hashes: 1: 4MijkN3l4VGaS9PadUqT6YhJLWc.crl (hash: HUl0LHUzXp5elmBpjh96fwDL29iZKk/njW5YYpxG2qs=)
2: YqwVujDHhfLEawoR2PJTNXDGOkQ.roa (hash: HReVdGArp33wnWKEmG0bJpK865E8KNNuSsxXzjPZYbc=)
3: vkyQ9sRT6gVwv-_r5Hxs_vmkNXI.roa (hash: GjybPH2LVIWOFxXMsKltGKhDG48Wj0AmaSelmA4NfrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4MijkN3l4VGaS9PadUqT6YhJLWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 12:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:12:26:8c:62:47:ee:93:c8:0f:54:01:7a:b4:13:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0c8a390dde5e1519a4bd3da754a93e988492d67
Validity
Not Before: Apr 20 12:00:20 2025 GMT
Not After : Apr 21 12:00:20 2025 GMT
Subject: CN=57e393aedd1c4dbc25b10b6a37a5c5e9274dbd58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:20:0e:a8:12:d3:4f:15:cc:af:6b:9c:e9:b1:
23:b9:42:b8:3a:83:c4:25:24:c3:c9:9d:85:c2:fe:
b5:fd:d4:bc:6b:fc:3c:7d:40:6c:84:15:01:4d:54:
92:1d:51:94:ce:05:29:f0:f9:28:d6:5a:d8:1a:c3:
83:81:be:fd:b9:d3:c1:1e:fa:0f:04:6d:ea:02:65:
7a:ef:d9:0e:4f:b5:25:4c:8d:f3:29:f6:e5:9c:d9:
60:9a:9b:0a:ee:f7:56:a2:75:50:0b:f9:b6:df:67:
b8:cf:6e:14:48:ad:ab:2f:ed:2e:91:4f:e4:dd:72:
1c:d2:5e:a1:18:66:3b:1a:a1:73:58:1b:7e:22:50:
9f:da:77:32:08:86:39:31:67:76:5b:54:d5:a1:52:
0b:17:46:f9:9c:fe:2b:cc:1d:e0:00:8f:98:ea:5a:
5f:e6:b0:c9:ab:af:aa:e8:6c:98:ca:c3:9d:84:37:
ae:9f:b3:6a:ce:a2:37:d6:f6:af:b6:25:70:9f:4b:
5e:1d:3f:0d:7d:bf:95:1f:ce:5f:cc:02:3b:3e:da:
da:8e:44:a9:17:bc:ab:f3:e4:cc:51:aa:20:5e:60:
23:14:cc:ed:eb:c5:e1:e0:a8:8b:cb:ad:94:47:6b:
86:bf:ff:a9:69:85:76:b0:20:99:76:75:fe:4b:97:
c4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:E3:93:AE:DD:1C:4D:BC:25:B1:0B:6A:37:A5:C5:E9:27:4D:BD:58
X509v3 Authority Key Identifier:
keyid:E0:C8:A3:90:DD:E5:E1:51:9A:4B:D3:DA:75:4A:93:E9:88:49:2D:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MijkN3l4VGaS9PadUqT6YhJLWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:ff:65:11:ad:b5:4b:45:f6:e6:1b:f2:18:54:22:bb:0b:ab:
65:25:9c:06:08:5e:55:3c:22:8e:c2:a5:9a:0c:a6:a2:19:3f:
2d:5f:3f:b0:ca:b5:65:29:c7:da:1c:2f:36:cc:60:8c:75:af:
5e:0d:ac:70:f9:4e:d8:2b:c4:b0:af:23:37:3f:00:a1:c7:78:
91:a9:53:21:5f:fc:3b:f3:0c:a9:ab:b2:27:64:c1:a1:b2:7d:
bc:ad:60:19:de:5c:68:7e:62:69:97:ae:3d:8b:83:de:f2:4b:
5e:fc:3e:34:5b:d1:33:e3:57:f2:18:a4:77:a5:94:f1:12:07:
f7:67:fb:5c:81:f2:da:18:57:7c:2b:49:be:21:ca:61:b6:fe:
e2:da:f1:b2:36:78:7c:63:94:5e:ac:97:01:fe:dc:0c:75:d2:
82:f3:44:ab:00:cd:fb:3b:65:97:43:f7:8f:fb:b4:85:5d:ec:
a5:3b:8e:44:66:38:88:fa:75:aa:2d:64:6f:70:8a:2e:c4:73:
56:f1:96:bc:d4:b9:b2:9e:e5:e2:16:ce:70:5f:bc:7f:27:ea:
86:d0:6f:1a:6b:2f:8f:b5:29:8e:5f:59:49:d7:f4:0c:4a:59:
27:6a:97:8a:3f:d7:ed:56:9c:cf:bc:8d:77:5d:08:54:3c:3c:
12:f8:d8:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZTEiaMYkfuk8gPVAF6tBNyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwYzhhMzkwZGRlNWUxNTE5YTRiZDNkYTc1NGE5M2U5ODg0
OTJkNjcwHhcNMjUwNDIwMTIwMDIwWhcNMjUwNDIxMTIwMDIwWjAzMTEwLwYDVQQD
Eyg1N2UzOTNhZWRkMWM0ZGJjMjViMTBiNmEzN2E1YzVlOTI3NGRiZDU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCAOqBLTTxXMr2uc6bEjuUK4OoPE
JSTDyZ2Fwv61/dS8a/w8fUBshBUBTVSSHVGUzgUp8Pko1lrYGsODgb79udPBHvoP
BG3qAmV679kOT7UlTI3zKfblnNlgmpsK7vdWonVQC/m232e4z24USK2rL+0ukU/k
3XIc0l6hGGY7GqFzWBt+IlCf2ncyCIY5MWd2W1TVoVILF0b5nP4rzB3gAI+Y6lpf
5rDJq6+q6GyYysOdhDeun7NqzqI31vavtiVwn0teHT8Nfb+VH85fzAI7PtrajkSp
F7yr8+TMUaogXmAjFMzt68Xh4KiLy62UR2uGv/+paYV2sCCZdnX+S5fEuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFfjk67dHE28JbELajelxeknTb1YMB8GA1UdIwQY
MBaAFODIo5Dd5eFRmkvT2nVKk+mISS1nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNE1pamtOM2w0VkdhUzlQYWRVcVQ2WWhKTFdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS84NjliMzAtZmNkNi00OGRmLThkMjUt
YmVmM2JhMjFjNzE1LzEvNE1pamtOM2w0VkdhUzlQYWRVcVQ2WWhKTFdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS84NjliMzAtZmNkNi00OGRmLThkMjUtYmVmM2JhMjFjNzE1
LzEvNE1pamtOM2w0VkdhUzlQYWRVcVQ2WWhKTFdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaf9lEa21
S0X25hvyGFQiuwurZSWcBgheVTwijsKlmgymohk/LV8/sMq1ZSnH2hwvNsxgjHWv
Xg2scPlO2CvEsK8jNz8Aocd4kalTIV/8O/MMqauyJ2TBobJ9vK1gGd5caH5iaZeu
PYuD3vJLXvw+NFvRM+NX8hikd6WU8RIH92f7XIHy2hhXfCtJviHKYbb+4trxsjZ4
fGOUXqyXAf7cDHXSgvNEqwDN+ztll0P3j/u0hV3spTuORGY4iPp1qi1kb3CKLsRz
VvGWvNS5sp7l4hbOcF+8fyfqhtBvGmsvj7Upjl9ZSdf0DEpZJ2qXij/X7Vacz7yN
d10IVDw8EvjY5Q==
-----END CERTIFICATE-----
Generated at Sun Apr 20 18:58:10 2025 by rpki-client