Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.mft
File: 4Pi55HhWy7oIK3r0KXobcj2vxAI.mft (raw, json)
Hash identifier: GZIl2+/5SGBAcCKba5FHdZ8i/tCMiYO64ZrhWpTd94U=
Subject key identifier: 57:17:1D:F8:10:39:D1:54:A2:F5:EF:34:6A:21:D1:54:1C:70:EC:01
Authority key identifier: E0:F8:B9:E4:78:56:CB:BA:08:2B:7A:F4:29:7A:1B:72:3D:AF:C4:02
Certificate issuer: /CN=e0f8b9e47856cbba082b7af4297a1b723dafc402
Certificate serial: 019646D79F1B36A37520283D7C17EBDC4F80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Pi55HhWy7oIK3r0KXobcj2vxAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.mft
Manifest number: 0DA8
Signing time: Fri 18 Apr 2025 03:00:58 +0000
Manifest this update: Fri 18 Apr 2025 03:00:58 +0000
Manifest next update: Sat 19 Apr 2025 03:00:58 +0000
Files and hashes: 1: 4Pi55HhWy7oIK3r0KXobcj2vxAI.crl (hash: w4KT48MgBdRV1pdiR4bnUbGjRt+WGhxiq04z5g+LUOw=)
2: Mz3zdOLpdrQGVZtJncItYpvPliE.roa (hash: 6F2PNmZ9ECufEFXZhtjXXLlbHL0vIzCdtjQEK5a/NJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Pi55HhWy7oIK3r0KXobcj2vxAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 03:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:d7:9f:1b:36:a3:75:20:28:3d:7c:17:eb:dc:4f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0f8b9e47856cbba082b7af4297a1b723dafc402
Validity
Not Before: Apr 18 03:00:58 2025 GMT
Not After : Apr 19 03:00:58 2025 GMT
Subject: CN=57171df81039d154a2f5ef346a21d1541c70ec01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:27:06:5f:2c:38:60:0c:62:cc:a6:26:65:de:
29:74:dd:1d:a5:59:6e:d2:8a:7a:04:df:3e:d8:88:
ec:29:d5:2f:7f:22:a1:02:ce:1d:ce:1f:b2:95:bd:
dd:6d:f2:db:dc:1d:84:9d:6d:05:35:7c:4e:e0:44:
22:d5:31:a8:d5:14:23:8b:48:4e:fe:f8:da:36:0b:
9d:ad:1e:16:4d:09:ee:bc:17:4a:66:d6:33:0c:c6:
ff:23:1a:d1:9d:04:47:b0:94:20:d7:f2:79:24:0c:
46:50:1e:50:4b:8e:3d:ed:6d:99:8c:df:84:44:bd:
50:cd:21:74:a3:ea:fa:bd:c8:67:d6:6b:58:8a:33:
8d:56:35:4f:63:2b:26:e8:1c:a6:67:ba:9b:0a:65:
5c:42:cc:60:d8:6a:45:38:15:04:00:f2:70:52:8c:
a2:5d:9d:42:c0:35:90:c7:d3:34:d4:eb:41:3a:8e:
cc:d5:1d:32:bc:b4:1c:46:94:73:d8:07:17:cf:0d:
2a:c7:5f:92:7f:63:84:3f:7d:7e:f0:01:65:50:32:
18:14:f2:b9:80:79:82:41:c5:42:94:92:b4:44:d5:
59:4a:c9:b5:8c:75:68:cb:7e:a7:8f:3a:43:0b:18:
a2:29:9b:07:ea:b4:f9:65:a6:84:44:1e:6b:e0:bf:
7d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:17:1D:F8:10:39:D1:54:A2:F5:EF:34:6A:21:D1:54:1C:70:EC:01
X509v3 Authority Key Identifier:
keyid:E0:F8:B9:E4:78:56:CB:BA:08:2B:7A:F4:29:7A:1B:72:3D:AF:C4:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Pi55HhWy7oIK3r0KXobcj2vxAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:9e:7f:24:6c:a5:4e:55:d5:29:69:67:5c:1a:13:f2:40:86:
3a:5f:fa:39:1a:42:16:d0:a6:e4:ed:17:58:75:5b:de:73:06:
e0:cf:c3:ec:19:5c:e8:f1:a2:9e:15:0e:e7:ad:32:68:53:a6:
d7:66:41:d7:e0:41:fc:ee:bc:73:26:ed:4c:6a:7e:61:48:6e:
f9:34:66:66:64:b9:80:0b:8c:29:33:61:f6:13:92:25:46:1e:
9f:d2:2c:80:e3:05:1e:94:bb:ad:3a:be:6b:01:5e:21:f0:17:
21:93:93:98:12:a6:92:a9:39:3b:72:20:5b:68:5d:d4:2b:af:
ca:7a:17:78:da:a6:71:42:ba:ef:6b:2b:bf:d1:9d:9c:98:17:
e1:06:fa:9a:bb:4a:8a:c6:c5:6b:a4:b7:c1:60:6a:4d:d9:90:
42:f2:26:fa:d7:ef:6d:dd:b1:14:47:d0:2c:70:0d:c7:87:08:
e6:2c:05:b9:e3:22:0a:8c:17:fe:09:e7:25:c9:63:24:bb:b4:
cd:10:05:fd:86:81:9e:ad:ca:bb:52:b0:39:67:30:f9:08:d3:
53:5d:5a:b6:21:7b:75:5f:03:a5:9e:ba:13:26:85:6e:00:5d:
86:ab:9d:e3:a8:9f:a1:c1:bf:2c:d6:99:ab:a5:ec:12:04:74:
46:9c:e4:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZG158bNqN1ICg9fBfr3E+AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwZjhiOWU0Nzg1NmNiYmEwODJiN2FmNDI5N2ExYjcyM2Rh
ZmM0MDIwHhcNMjUwNDE4MDMwMDU4WhcNMjUwNDE5MDMwMDU4WjAzMTEwLwYDVQQD
Eyg1NzE3MWRmODEwMzlkMTU0YTJmNWVmMzQ2YTIxZDE1NDFjNzBlYzAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqScGXyw4YAxizKYmZd4pdN0dpVlu
0op6BN8+2IjsKdUvfyKhAs4dzh+ylb3dbfLb3B2EnW0FNXxO4EQi1TGo1RQji0hO
/vjaNgudrR4WTQnuvBdKZtYzDMb/IxrRnQRHsJQg1/J5JAxGUB5QS4497W2ZjN+E
RL1QzSF0o+r6vchn1mtYijONVjVPYysm6BymZ7qbCmVcQsxg2GpFOBUEAPJwUoyi
XZ1CwDWQx9M01OtBOo7M1R0yvLQcRpRz2AcXzw0qx1+Sf2OEP31+8AFlUDIYFPK5
gHmCQcVClJK0RNVZSsm1jHVoy36njzpDCxiiKZsH6rT5ZaaERB5r4L992QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFcXHfgQOdFUovXvNGoh0VQccOwBMB8GA1UdIwQY
MBaAFOD4ueR4Vsu6CCt69Cl6G3I9r8QCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFBpNTVIaFd5N29JSzNyMEtYb2JjajJ2eEFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8xMmViY2MtYTlmZi00MDJmLWE1MWUt
YTU3OTY2MmYwOTUwLzEvNFBpNTVIaFd5N29JSzNyMEtYb2JjajJ2eEFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS8xMmViY2MtYTlmZi00MDJmLWE1MWUtYTU3OTY2MmYwOTUw
LzEvNFBpNTVIaFd5N29JSzNyMEtYb2JjajJ2eEFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP55/JGyl
TlXVKWlnXBoT8kCGOl/6ORpCFtCm5O0XWHVb3nMG4M/D7Blc6PGinhUO560yaFOm
12ZB1+BB/O68cybtTGp+YUhu+TRmZmS5gAuMKTNh9hOSJUYen9IsgOMFHpS7rTq+
awFeIfAXIZOTmBKmkqk5O3IgW2hd1CuvynoXeNqmcUK672srv9GdnJgX4Qb6mrtK
isbFa6S3wWBqTdmQQvIm+tfvbd2xFEfQLHANx4cI5iwFueMiCowX/gnnJcljJLu0
zRAF/YaBnq3Ku1KwOWcw+QjTU11atiF7dV8DpZ66EyaFbgBdhqud46ifocG/LNaZ
q6XsEgR0RpzkHQ==
-----END CERTIFICATE-----
Generated at Fri Apr 18 12:27:39 2025 by rpki-client