Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/de37fa-1bd2-47f5-9e2b-ac4c8f19876d/1/4TcnopRRvk3Zkitg0cWW6Aaplfs.mft
File: 4TcnopRRvk3Zkitg0cWW6Aaplfs.mft (raw, json)
Hash identifier: QQLmKU+UumjKtZrG+K/zjbOAz/ag2b/Nx4ktXQlM19M=
Subject key identifier: E0:8E:74:67:DB:14:66:56:82:62:1A:38:B9:2A:6D:E2:B7:FF:96:08
Authority key identifier: E1:37:27:A2:94:51:BE:4D:D9:92:2B:60:D1:C5:96:E8:06:A9:95:FB
Certificate issuer: /CN=e13727a29451be4dd9922b60d1c596e806a995fb
Certificate serial: 019510C6F755F0A97F763A081FBFD56DB86D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4TcnopRRvk3Zkitg0cWW6Aaplfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/de37fa-1bd2-47f5-9e2b-ac4c8f19876d/1/4TcnopRRvk3Zkitg0cWW6Aaplfs.mft
Manifest number: 1452
Signing time: Sun 16 Feb 2025 22:00:29 +0000
Manifest this update: Sun 16 Feb 2025 22:00:29 +0000
Manifest next update: Mon 17 Feb 2025 22:00:29 +0000
Files and hashes: 1: 4TcnopRRvk3Zkitg0cWW6Aaplfs.crl (hash: cItqy2PErNxjQjvqHRBOz+nGJEbSUCz0HZzET+9BpRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/de37fa-1bd2-47f5-9e2b-ac4c8f19876d/1/4TcnopRRvk3Zkitg0cWW6Aaplfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/de37fa-1bd2-47f5-9e2b-ac4c8f19876d/1/4TcnopRRvk3Zkitg0cWW6Aaplfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/4TcnopRRvk3Zkitg0cWW6Aaplfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:f7:55:f0:a9:7f:76:3a:08:1f:bf:d5:6d:b8:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e13727a29451be4dd9922b60d1c596e806a995fb
Validity
Not Before: Feb 16 22:00:29 2025 GMT
Not After : Feb 17 22:00:29 2025 GMT
Subject: CN=e08e7467db14665682621a38b92a6de2b7ff9608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c7:42:91:42:c4:d2:22:61:b4:a4:09:2c:80:
11:6e:80:ee:f9:76:5b:9a:5a:77:cc:ae:e3:c0:01:
6e:4e:56:e7:f9:d4:67:de:6e:97:59:4b:0b:3e:49:
41:f7:d4:b1:01:8f:2c:24:7d:c2:ee:1d:82:a0:16:
48:c7:d8:c1:2b:1d:c5:17:cd:7a:85:0c:a2:11:1a:
c7:0a:fa:fc:a6:69:b2:90:00:cf:e4:65:96:84:56:
9f:04:8a:ac:29:6f:81:6b:09:63:38:c0:e8:61:d3:
b5:c6:33:b5:55:f5:f9:dd:3e:86:5a:6c:14:e8:fc:
40:e0:58:9e:68:03:e8:b4:49:0f:98:0a:6e:55:77:
ad:b8:2c:aa:79:e7:75:6e:a9:3d:0b:77:13:e5:dc:
0d:7d:df:66:cf:30:ce:e1:38:b0:c9:db:50:ac:09:
b4:a7:ad:65:c0:f5:fc:a8:1f:ad:68:8f:66:de:0a:
6a:5a:cd:3d:2d:91:ce:92:cb:cb:08:96:be:d3:85:
15:05:41:26:f7:d9:14:43:4e:8c:77:f7:43:24:91:
4c:e1:90:d5:33:58:f0:9d:9b:50:bd:08:d7:33:ed:
cb:9a:7d:e4:7d:10:10:0b:51:ff:0c:82:67:4b:17:
2b:8a:3c:7a:a4:07:be:ea:2d:8a:d3:58:e9:e2:78:
fa:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:8E:74:67:DB:14:66:56:82:62:1A:38:B9:2A:6D:E2:B7:FF:96:08
X509v3 Authority Key Identifier:
keyid:E1:37:27:A2:94:51:BE:4D:D9:92:2B:60:D1:C5:96:E8:06:A9:95:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TcnopRRvk3Zkitg0cWW6Aaplfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/de37fa-1bd2-47f5-9e2b-ac4c8f19876d/1/4TcnopRRvk3Zkitg0cWW6Aaplfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/de37fa-1bd2-47f5-9e2b-ac4c8f19876d/1/4TcnopRRvk3Zkitg0cWW6Aaplfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:9b:ca:38:63:54:0f:50:97:74:7b:6f:56:f8:1a:de:b4:40:
0f:6e:53:2f:96:c4:f1:10:59:34:b4:58:60:b7:bd:01:b4:09:
38:9b:27:b0:98:df:47:5f:8b:18:51:82:e3:13:78:cb:2f:3b:
ee:b3:e9:94:2a:2c:e9:28:4b:84:7d:c0:c4:b8:fd:9e:77:4c:
ea:9b:af:ec:29:80:82:9c:b3:90:c5:84:17:c9:28:b0:1f:f3:
af:74:02:e4:0f:3c:53:a9:fb:a7:25:55:03:17:ef:1e:10:f1:
2c:ce:38:78:e5:36:e6:c3:41:dd:a8:0a:8e:89:b2:5f:81:bd:
86:cb:27:6b:b2:98:88:a4:6c:fc:8b:17:18:62:7a:e2:76:38:
9b:df:2d:7e:4b:71:49:85:4b:f4:1e:10:e6:9a:43:83:46:42:
10:f4:fe:71:8c:eb:88:e5:5e:fb:b4:67:c7:2c:c6:f3:e3:bd:
ac:dd:ff:db:d6:ea:45:62:ed:df:d1:2c:37:57:62:ca:82:9d:
50:d6:0b:c0:85:5a:2d:dd:25:3f:6c:c3:82:45:19:4e:ef:f2:
cc:cf:6b:03:e1:d0:66:12:78:e2:04:f2:2c:2c:77:fd:8c:94:
64:26:39:a2:79:6c:02:94:75:57:02:14:2b:66:e1:95:43:37:
7d:c4:02:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQxvdV8Kl/djoIH7/VbbhtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMzcyN2EyOTQ1MWJlNGRkOTkyMmI2MGQxYzU5NmU4MDZh
OTk1ZmIwHhcNMjUwMjE2MjIwMDI5WhcNMjUwMjE3MjIwMDI5WjAzMTEwLwYDVQQD
EyhlMDhlNzQ2N2RiMTQ2NjU2ODI2MjFhMzhiOTJhNmRlMmI3ZmY5NjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsdCkULE0iJhtKQJLIARboDu+XZb
mlp3zK7jwAFuTlbn+dRn3m6XWUsLPklB99SxAY8sJH3C7h2CoBZIx9jBKx3FF816
hQyiERrHCvr8pmmykADP5GWWhFafBIqsKW+BawljOMDoYdO1xjO1VfX53T6GWmwU
6PxA4FieaAPotEkPmApuVXetuCyqeed1bqk9C3cT5dwNfd9mzzDO4TiwydtQrAm0
p61lwPX8qB+taI9m3gpqWs09LZHOksvLCJa+04UVBUEm99kUQ06Md/dDJJFM4ZDV
M1jwnZtQvQjXM+3Lmn3kfRAQC1H/DIJnSxcrijx6pAe+6i2K01jp4nj6WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOCOdGfbFGZWgmIaOLkqbeK3/5YIMB8GA1UdIwQY
MBaAFOE3J6KUUb5N2ZIrYNHFlugGqZX7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFRjbm9wUlJ2azNaa2l0ZzBjV1c2QWFwbGZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9kZTM3ZmEtMWJkMi00N2Y1LTllMmIt
YWM0YzhmMTk4NzZkLzEvNFRjbm9wUlJ2azNaa2l0ZzBjV1c2QWFwbGZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9kZTM3ZmEtMWJkMi00N2Y1LTllMmItYWM0YzhmMTk4NzZk
LzEvNFRjbm9wUlJ2azNaa2l0ZzBjV1c2QWFwbGZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA5vKOGNU
D1CXdHtvVvga3rRAD25TL5bE8RBZNLRYYLe9AbQJOJsnsJjfR1+LGFGC4xN4yy87
7rPplCos6ShLhH3AxLj9nndM6puv7CmAgpyzkMWEF8kosB/zr3QC5A88U6n7pyVV
AxfvHhDxLM44eOU25sNB3agKjomyX4G9hssna7KYiKRs/IsXGGJ64nY4m98tfktx
SYVL9B4Q5ppDg0ZCEPT+cYzriOVe+7RnxyzG8+O9rN3/29bqRWLt39EsN1diyoKd
UNYLwIVaLd0lP2zDgkUZTu/yzM9rA+HQZhJ44gTyLCx3/YyUZCY5onlsApR1VwIU
K2bhlUM3fcQCqQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:29 2025 by rpki-client