Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft
File: 4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft (raw, json)
Hash identifier: uU/ttcZxYIgAvj1ni0TrvAnU0Ac+r6KmU4pACxTvNrM=
Subject key identifier: A9:05:B3:57:CC:E7:C6:72:D8:6C:0E:45:26:6F:AB:EF:DB:80:73:B0
Authority key identifier: E1:15:1D:48:9B:36:69:41:92:AC:BF:CA:A5:E0:BB:46:FC:9E:5B:E0
Certificate issuer: /CN=e1151d489b36694192acbfcaa5e0bb46fc9e5be0
Certificate serial: 01965123EA8D0F7FEBF8A62ABC867275AFA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4RUdSJs2aUGSrL_KpeC7RvyeW-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft
Manifest number: 0527
Signing time: Sun 20 Apr 2025 03:00:30 +0000
Manifest this update: Sun 20 Apr 2025 03:00:30 +0000
Manifest next update: Mon 21 Apr 2025 03:00:30 +0000
Files and hashes: 1: 4RUdSJs2aUGSrL_KpeC7RvyeW-A.crl (hash: sIVGnPxuTWM8k9kEZ9F1GX7Qrg9UR3HrouGzjsoJ3NA=)
2: HYom0-kciwsBpHtG02N8IppZ_kA.roa (hash: gd8Ptnlp+eybQYq2eGs8Iys0wttljsxiJW6GYdz0ar4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/4RUdSJs2aUGSrL_KpeC7RvyeW-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 03:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:23:ea:8d:0f:7f:eb:f8:a6:2a:bc:86:72:75:af:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1151d489b36694192acbfcaa5e0bb46fc9e5be0
Validity
Not Before: Apr 20 03:00:30 2025 GMT
Not After : Apr 21 03:00:30 2025 GMT
Subject: CN=a905b357cce7c672d86c0e45266fabefdb8073b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bc:c3:5f:a7:a3:45:dc:16:58:28:2d:c2:db:
04:3c:ea:a3:a8:a6:6c:26:bc:60:8c:38:b3:0d:fa:
60:34:9a:8e:f2:da:c4:77:31:de:45:a9:60:f6:ca:
44:62:48:0c:f1:f9:e9:00:b2:49:32:d5:74:0c:0d:
d5:00:41:d9:61:23:d8:db:06:f3:a5:e1:ae:d8:80:
5f:cb:78:d6:cd:a7:df:26:83:fb:9c:93:94:9c:ab:
61:0b:68:c0:15:36:ac:ed:4e:9f:52:36:05:56:2a:
79:fb:59:b7:9c:25:0b:32:2b:ef:e4:56:85:89:30:
fd:68:b6:a1:38:d8:55:27:c2:ef:b4:ef:bf:24:26:
8c:15:89:6e:c9:28:f4:7c:e3:86:57:fc:47:12:a7:
ae:74:fd:44:1c:01:71:ac:c6:26:60:60:a8:c8:c7:
80:84:0b:f0:ef:84:c0:65:e7:35:c2:18:ff:37:a6:
ad:21:a1:7d:1e:8b:a6:84:4a:ef:25:4e:45:40:27:
9b:4f:ac:ee:8c:dd:4f:a5:49:4f:80:e8:82:c0:43:
79:2d:ef:b3:1d:1c:47:1f:ad:6b:f8:d4:0d:ef:c3:
a0:83:d9:e1:2d:a9:b1:96:9d:18:9f:88:52:cd:99:
b3:cb:4e:12:22:b9:42:43:0b:91:1a:1e:d1:f3:c6:
7a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:05:B3:57:CC:E7:C6:72:D8:6C:0E:45:26:6F:AB:EF:DB:80:73:B0
X509v3 Authority Key Identifier:
keyid:E1:15:1D:48:9B:36:69:41:92:AC:BF:CA:A5:E0:BB:46:FC:9E:5B:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4RUdSJs2aUGSrL_KpeC7RvyeW-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:5a:54:96:ed:c4:21:82:08:86:35:02:f9:6f:9b:fd:29:3f:
33:c6:43:cc:04:f3:dd:4e:39:7c:35:d8:cf:de:83:6a:1a:57:
50:20:89:4e:62:a8:81:27:05:40:8a:79:61:07:47:02:c1:37:
6f:d1:63:99:df:c2:5d:4c:67:71:31:07:60:4c:b5:28:2f:a2:
aa:43:0d:5a:cf:9d:b9:ed:3f:bb:7e:a2:6e:6a:2c:35:7e:15:
16:9d:8c:f2:09:4b:f2:7f:fc:a1:96:76:1b:e1:72:af:ac:84:
c0:90:1b:bf:bf:84:00:d9:95:48:5b:10:f6:63:54:54:94:75:
2c:1a:38:9b:4c:b1:65:f1:11:65:7b:5c:1c:c2:61:a1:cf:69:
b1:dc:55:58:84:02:75:c3:c6:4c:db:c2:24:e4:68:88:f0:ff:
ce:c9:17:47:6b:3a:72:6c:7d:7f:15:12:0d:8d:0e:11:e0:cc:
5b:6f:03:2b:aa:27:dd:ab:1e:ad:59:4c:90:75:30:a3:1d:da:
9b:e4:b1:62:2e:da:70:5b:3f:e0:d1:24:00:b8:34:02:7c:0d:
c3:ee:44:ce:04:ec:bd:46:a7:72:b0:f0:3a:c7:a1:93:50:2e:
32:a5:2e:11:d5:fc:19:a4:53:ad:35:2a:16:40:4d:39:05:c9:
d4:ea:ec:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZRI+qND3/r+KYqvIZyda+nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMTUxZDQ4OWIzNjY5NDE5MmFjYmZjYWE1ZTBiYjQ2ZmM5
ZTViZTAwHhcNMjUwNDIwMDMwMDMwWhcNMjUwNDIxMDMwMDMwWjAzMTEwLwYDVQQD
EyhhOTA1YjM1N2NjZTdjNjcyZDg2YzBlNDUyNjZmYWJlZmRiODA3M2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLzDX6ejRdwWWCgtwtsEPOqjqKZs
JrxgjDizDfpgNJqO8trEdzHeRalg9spEYkgM8fnpALJJMtV0DA3VAEHZYSPY2wbz
peGu2IBfy3jWzaffJoP7nJOUnKthC2jAFTas7U6fUjYFVip5+1m3nCULMivv5FaF
iTD9aLahONhVJ8LvtO+/JCaMFYluySj0fOOGV/xHEqeudP1EHAFxrMYmYGCoyMeA
hAvw74TAZec1whj/N6atIaF9HoumhErvJU5FQCebT6zujN1PpUlPgOiCwEN5Le+z
HRxHH61r+NQN78Ogg9nhLamxlp0Yn4hSzZmzy04SIrlCQwuRGh7R88Z6GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKkFs1fM58Zy2GwORSZvq+/bgHOwMB8GA1UdIwQY
MBaAFOEVHUibNmlBkqy/yqXgu0b8nlvgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFJVZFNKczJhVUdTckxfS3BlQzdSdnllVy1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9lMzRjZDUtMDExYS00MDRhLTlhZDUt
OTNiNTc4ZDE4YzhjLzEvNFJVZFNKczJhVUdTckxfS3BlQzdSdnllVy1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9lMzRjZDUtMDExYS00MDRhLTlhZDUtOTNiNTc4ZDE4Yzhj
LzEvNFJVZFNKczJhVUdTckxfS3BlQzdSdnllVy1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMFpUlu3E
IYIIhjUC+W+b/Sk/M8ZDzATz3U45fDXYz96DahpXUCCJTmKogScFQIp5YQdHAsE3
b9Fjmd/CXUxncTEHYEy1KC+iqkMNWs+due0/u36ibmosNX4VFp2M8glL8n/8oZZ2
G+Fyr6yEwJAbv7+EANmVSFsQ9mNUVJR1LBo4m0yxZfERZXtcHMJhoc9psdxVWIQC
dcPGTNvCJORoiPD/zskXR2s6cmx9fxUSDY0OEeDMW28DK6on3aserVlMkHUwox3a
m+SxYi7acFs/4NEkALg0AnwNw+5EzgTsvUancrDwOsehk1AuMqUuEdX8GaRTrTUq
FkBNOQXJ1OrsiA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:46:43 2025 by rpki-client