Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/fa5903-6bf8-4d2e-bfba-6b2b72c25ed1/1/4V293KWBZpetEkXADKt2ryHsLjs.mft
File: 4V293KWBZpetEkXADKt2ryHsLjs.mft (raw, json)
Hash identifier: cbhS56ZBgnuvMBmBTwJgKkUAaEfvsixPqIQ/RNZcPqw=
Subject key identifier: 94:56:2C:98:6A:C8:38:21:8C:F8:75:F4:36:CC:DB:E8:08:FF:FA:7F
Authority key identifier: E1:5D:BD:DC:A5:81:66:97:AD:12:45:C0:0C:AB:76:AF:21:EC:2E:3B
Certificate issuer: /CN=e15dbddca5816697ad1245c00cab76af21ec2e3b
Certificate serial: 019651C8A55881CA89D517A6E7E30CCF4F48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4V293KWBZpetEkXADKt2ryHsLjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/fa5903-6bf8-4d2e-bfba-6b2b72c25ed1/1/4V293KWBZpetEkXADKt2ryHsLjs.mft
Manifest number: 14F8
Signing time: Sun 20 Apr 2025 06:00:25 +0000
Manifest this update: Sun 20 Apr 2025 06:00:25 +0000
Manifest next update: Mon 21 Apr 2025 06:00:25 +0000
Files and hashes: 1: 4V293KWBZpetEkXADKt2ryHsLjs.crl (hash: fcKc+nOPnUMKUQY3+cdNSUmsAvZb03Amg/VxIEfL9YU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/fa5903-6bf8-4d2e-bfba-6b2b72c25ed1/1/4V293KWBZpetEkXADKt2ryHsLjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/fa5903-6bf8-4d2e-bfba-6b2b72c25ed1/1/4V293KWBZpetEkXADKt2ryHsLjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/4V293KWBZpetEkXADKt2ryHsLjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 06:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:c8:a5:58:81:ca:89:d5:17:a6:e7:e3:0c:cf:4f:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15dbddca5816697ad1245c00cab76af21ec2e3b
Validity
Not Before: Apr 20 06:00:25 2025 GMT
Not After : Apr 21 06:00:25 2025 GMT
Subject: CN=94562c986ac838218cf875f436ccdbe808fffa7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9a:eb:65:51:76:48:ed:20:80:24:e4:a5:bd:
fb:2b:36:7e:61:96:84:21:24:4e:d1:ed:5d:19:d4:
6c:b8:76:d2:cd:e7:78:20:82:b7:3f:c6:7c:35:b6:
f7:a8:7d:c2:e6:54:03:5f:0b:c7:64:19:d7:a8:d0:
26:81:51:f4:74:1e:e3:8e:59:1d:53:9f:17:70:40:
3f:e0:71:c2:19:77:ad:7a:51:72:13:ac:fc:83:ba:
09:44:70:0a:e1:73:e1:9f:dd:57:f3:71:c2:62:a9:
7e:ac:63:ac:91:47:bd:82:4a:ec:43:05:38:3a:82:
ee:03:ec:86:e8:72:4d:e5:b6:6d:e9:f4:44:cb:21:
42:aa:46:05:80:06:1a:a2:9f:1a:f6:19:ff:72:ca:
02:65:55:28:aa:61:b4:1c:95:41:77:9b:e0:e1:38:
4e:fa:9c:f3:00:65:20:4f:06:5c:7e:18:d1:19:fa:
12:4d:a7:e8:bc:5f:ba:2f:fd:0d:06:78:0a:98:59:
5d:1b:c0:c1:ee:3e:a9:3a:09:68:7d:26:ac:84:f2:
3a:cf:34:37:00:b8:3c:b5:90:51:ab:16:bb:14:89:
2d:99:26:3d:22:a3:f7:21:f0:03:5e:4c:49:37:ca:
fa:6a:d0:b0:c6:b3:51:ad:9b:ec:5e:65:ed:1a:36:
38:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:56:2C:98:6A:C8:38:21:8C:F8:75:F4:36:CC:DB:E8:08:FF:FA:7F
X509v3 Authority Key Identifier:
keyid:E1:5D:BD:DC:A5:81:66:97:AD:12:45:C0:0C:AB:76:AF:21:EC:2E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4V293KWBZpetEkXADKt2ryHsLjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/fa5903-6bf8-4d2e-bfba-6b2b72c25ed1/1/4V293KWBZpetEkXADKt2ryHsLjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/fa5903-6bf8-4d2e-bfba-6b2b72c25ed1/1/4V293KWBZpetEkXADKt2ryHsLjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:1f:b1:0f:76:74:db:a0:9a:c9:c3:4b:1d:d6:52:3f:eb:89:
66:b1:e4:29:47:2e:e6:ec:cb:4b:62:1d:3b:a8:47:df:f7:4e:
d4:f6:c8:4a:86:35:40:bc:5a:70:64:1c:c6:d0:65:69:7c:f8:
d8:82:67:d9:32:35:35:df:61:85:15:ac:0e:a6:54:26:56:64:
f6:9f:de:03:28:b0:23:fe:91:39:71:51:2e:39:36:12:54:c1:
ce:06:fc:d5:81:c5:75:f8:83:56:00:1f:8e:d8:15:38:c9:2f:
7b:a6:23:67:4c:36:3a:a8:16:a3:0e:ec:34:5d:5a:94:a9:15:
86:53:f7:cd:cc:e0:23:c8:4d:7a:6b:97:23:fb:6b:de:59:e8:
2a:be:a8:54:2c:b3:d7:07:84:87:63:93:3b:34:61:71:fd:c9:
1e:0a:cc:c2:a3:c9:63:d7:d8:4d:90:0b:81:50:21:09:3e:45:
20:dc:4b:55:48:09:48:b6:91:e6:08:16:37:44:03:c9:b5:13:
60:74:95:4d:fb:ab:9b:43:f1:55:db:c0:a0:f9:40:b1:47:e9:
17:de:e1:8e:0e:2a:33:fe:fb:6d:a8:40:32:4a:65:00:7a:b9:
a8:95:92:d5:d5:78:b2:a1:20:eb:a4:7b:f5:35:ef:e2:45:09:
70:37:e4:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZRyKVYgcqJ1Rem5+MMz09IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNWRiZGRjYTU4MTY2OTdhZDEyNDVjMDBjYWI3NmFmMjFl
YzJlM2IwHhcNMjUwNDIwMDYwMDI1WhcNMjUwNDIxMDYwMDI1WjAzMTEwLwYDVQQD
Eyg5NDU2MmM5ODZhYzgzODIxOGNmODc1ZjQzNmNjZGJlODA4ZmZmYTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3prrZVF2SO0ggCTkpb37KzZ+YZaE
ISRO0e1dGdRsuHbSzed4IIK3P8Z8Nbb3qH3C5lQDXwvHZBnXqNAmgVH0dB7jjlkd
U58XcEA/4HHCGXetelFyE6z8g7oJRHAK4XPhn91X83HCYql+rGOskUe9gkrsQwU4
OoLuA+yG6HJN5bZt6fREyyFCqkYFgAYaop8a9hn/csoCZVUoqmG0HJVBd5vg4ThO
+pzzAGUgTwZcfhjRGfoSTafovF+6L/0NBngKmFldG8DB7j6pOglofSashPI6zzQ3
ALg8tZBRqxa7FIktmSY9IqP3IfADXkxJN8r6atCwxrNRrZvsXmXtGjY4OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJRWLJhqyDghjPh19DbM2+gI//p/MB8GA1UdIwQY
MBaAFOFdvdylgWaXrRJFwAyrdq8h7C47MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFYyOTNLV0JacGV0RWtYQURLdDJyeUhzTGpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9mYTU5MDMtNmJmOC00ZDJlLWJmYmEt
NmIyYjcyYzI1ZWQxLzEvNFYyOTNLV0JacGV0RWtYQURLdDJyeUhzTGpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9mYTU5MDMtNmJmOC00ZDJlLWJmYmEtNmIyYjcyYzI1ZWQx
LzEvNFYyOTNLV0JacGV0RWtYQURLdDJyeUhzTGpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZB+xD3Z0
26CaycNLHdZSP+uJZrHkKUcu5uzLS2IdO6hH3/dO1PbISoY1QLxacGQcxtBlaXz4
2IJn2TI1Nd9hhRWsDqZUJlZk9p/eAyiwI/6ROXFRLjk2ElTBzgb81YHFdfiDVgAf
jtgVOMkve6YjZ0w2OqgWow7sNF1alKkVhlP3zczgI8hNemuXI/tr3lnoKr6oVCyz
1weEh2OTOzRhcf3JHgrMwqPJY9fYTZALgVAhCT5FINxLVUgJSLaR5ggWN0QDybUT
YHSVTfurm0PxVdvAoPlAsUfpF97hjg4qM/77bahAMkplAHq5qJWS1dV4sqEg66R7
9TXv4kUJcDfkwQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 12:11:36 2025 by rpki-client