Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/96499b-4d9d-4272-8324-6bc2baf9922b/1/T4dGzo6jgv8gOyinnvhBzrczyXs.mft
File: T4dGzo6jgv8gOyinnvhBzrczyXs.mft (raw, json)
Hash identifier: slAcmFYbMwP58jiF4CmUdZWyJHvJeY0JDDfXjl0Y1Xs=
Subject key identifier: 44:7C:71:A5:DF:3F:3C:5B:B1:87:DC:D3:CE:6B:70:76:11:86:2C:B5
Authority key identifier: 4F:87:46:CE:8E:A3:82:FF:20:3B:28:A7:9E:F8:41:CE:B7:33:C9:7B
Certificate issuer: /CN=4f8746ce8ea382ff203b28a79ef841ceb733c97b
Certificate serial: 01964D1022263B4120E6A802EAC59ED1F8D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4dGzo6jgv8gOyinnvhBzrczyXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/96499b-4d9d-4272-8324-6bc2baf9922b/1/T4dGzo6jgv8gOyinnvhBzrczyXs.mft
Manifest number: 4B
Signing time: Sat 19 Apr 2025 08:00:24 +0000
Manifest this update: Sat 19 Apr 2025 08:00:24 +0000
Manifest next update: Sun 20 Apr 2025 08:00:24 +0000
Files and hashes: 1: T4dGzo6jgv8gOyinnvhBzrczyXs.crl (hash: BxiW0TeDZA7aQ9jZSAtwIjCc6tnLPPzw+4Q0pWwrz/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/96499b-4d9d-4272-8324-6bc2baf9922b/1/T4dGzo6jgv8gOyinnvhBzrczyXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/96499b-4d9d-4272-8324-6bc2baf9922b/1/T4dGzo6jgv8gOyinnvhBzrczyXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4dGzo6jgv8gOyinnvhBzrczyXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:10:22:26:3b:41:20:e6:a8:02:ea:c5:9e:d1:f8:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8746ce8ea382ff203b28a79ef841ceb733c97b
Validity
Not Before: Apr 19 08:00:24 2025 GMT
Not After : Apr 20 08:00:24 2025 GMT
Subject: CN=447c71a5df3f3c5bb187dcd3ce6b707611862cb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ae:f8:09:a6:25:62:95:c6:a9:35:a4:93:cb:
4f:12:fc:db:c0:7a:2e:de:ef:29:f7:3c:12:e0:90:
c5:37:e6:71:e4:ee:0a:5d:ae:52:b0:c6:ae:f0:47:
58:34:4c:2d:eb:25:e3:64:39:55:3b:88:f3:d7:22:
9d:a2:de:8f:49:80:0f:4f:df:01:58:69:ac:4d:12:
44:33:6b:97:72:83:77:b7:60:7d:ab:5c:19:ff:39:
4a:d1:5f:7c:95:63:2f:7d:06:95:ea:ff:07:23:d5:
14:0f:d3:ca:44:24:27:95:3c:3a:b7:f9:e6:5f:cf:
14:b6:f3:38:1e:d6:f4:29:90:58:ac:bb:c3:26:6a:
42:e9:19:7d:27:b9:00:d9:0c:f2:be:b2:d1:aa:3b:
f3:df:70:19:a1:8d:d2:66:ed:66:69:45:1d:bf:e9:
7a:82:08:15:70:f2:b9:ef:63:8e:c0:0b:c9:d8:a5:
b0:91:b9:ec:1a:15:72:69:fa:e0:bf:8d:04:60:ac:
f4:3d:25:78:a6:b8:d3:66:20:b0:25:98:4e:4f:67:
7c:75:77:84:12:a5:ce:11:72:47:24:61:46:f7:f8:
e2:bb:d8:98:97:08:3f:03:a2:da:3d:cc:e4:ec:a1:
37:f6:7a:e5:21:a7:3b:bd:53:d6:3b:c0:32:0a:78:
35:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:7C:71:A5:DF:3F:3C:5B:B1:87:DC:D3:CE:6B:70:76:11:86:2C:B5
X509v3 Authority Key Identifier:
keyid:4F:87:46:CE:8E:A3:82:FF:20:3B:28:A7:9E:F8:41:CE:B7:33:C9:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4dGzo6jgv8gOyinnvhBzrczyXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/96499b-4d9d-4272-8324-6bc2baf9922b/1/T4dGzo6jgv8gOyinnvhBzrczyXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/96499b-4d9d-4272-8324-6bc2baf9922b/1/T4dGzo6jgv8gOyinnvhBzrczyXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:d3:74:3b:81:5c:b5:0f:ae:0b:3a:12:ad:6b:69:b5:9c:f6:
59:cb:de:40:88:92:1a:72:f1:0f:f2:f0:58:9c:c8:3b:40:d9:
68:75:d6:e8:b7:74:4d:48:13:45:95:8d:e8:72:b4:50:3f:63:
ba:b9:2d:20:ce:01:1f:1c:36:ac:71:26:c5:f7:35:ee:eb:06:
fd:d1:03:1e:d8:a9:a2:e1:87:91:4e:c3:3e:0e:a9:25:80:da:
9d:85:59:8b:8d:7f:d9:8a:c9:4c:11:8d:8c:dd:68:23:e2:04:
55:67:d4:90:49:f5:d1:be:34:35:da:b9:04:d6:dd:12:c6:9a:
ec:8d:51:01:35:93:be:50:00:b8:b9:15:76:38:55:e6:91:e3:
6c:db:23:58:fe:15:93:7e:b8:55:a2:fe:90:9d:48:ec:2b:bc:
f7:98:b9:98:df:bb:26:b4:90:1a:ee:f3:bb:8c:d1:bd:7e:89:
8e:72:a7:b5:17:59:10:72:2e:c7:52:71:20:d5:ae:7d:1b:f2:
7d:b6:f7:2c:b4:5f:13:af:50:ea:a2:35:18:78:d7:30:b4:ec:
18:86:a7:4c:bf:81:5b:f0:7f:5e:2b:e6:e8:2d:b3:8e:bd:0f:
6f:c5:5c:3c:7e:74:88:71:0d:67:2d:aa:38:03:d7:03:36:60:
ad:35:64:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZNECImO0Eg5qgC6sWe0fjQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmODc0NmNlOGVhMzgyZmYyMDNiMjhhNzllZjg0MWNlYjcz
M2M5N2IwHhcNMjUwNDE5MDgwMDI0WhcNMjUwNDIwMDgwMDI0WjAzMTEwLwYDVQQD
Eyg0NDdjNzFhNWRmM2YzYzViYjE4N2RjZDNjZTZiNzA3NjExODYyY2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApa74CaYlYpXGqTWkk8tPEvzbwHou
3u8p9zwS4JDFN+Zx5O4KXa5SsMau8EdYNEwt6yXjZDlVO4jz1yKdot6PSYAPT98B
WGmsTRJEM2uXcoN3t2B9q1wZ/zlK0V98lWMvfQaV6v8HI9UUD9PKRCQnlTw6t/nm
X88UtvM4Htb0KZBYrLvDJmpC6Rl9J7kA2QzyvrLRqjvz33AZoY3SZu1maUUdv+l6
gggVcPK572OOwAvJ2KWwkbnsGhVyafrgv40EYKz0PSV4prjTZiCwJZhOT2d8dXeE
EqXOEXJHJGFG9/jiu9iYlwg/A6LaPczk7KE39nrlIac7vVPWO8AyCng12QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFER8caXfPzxbsYfc085rcHYRhiy1MB8GA1UdIwQY
MBaAFE+HRs6Oo4L/IDsop574Qc63M8l7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDRkR3pvNmpndjhnT3lpbm52aEJ6cmN6eVhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS85NjQ5OWItNGQ5ZC00MjcyLTgzMjQt
NmJjMmJhZjk5MjJiLzEvVDRkR3pvNmpndjhnT3lpbm52aEJ6cmN6eVhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS85NjQ5OWItNGQ5ZC00MjcyLTgzMjQtNmJjMmJhZjk5MjJi
LzEvVDRkR3pvNmpndjhnT3lpbm52aEJ6cmN6eVhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV9N0O4Fc
tQ+uCzoSrWtptZz2WcveQIiSGnLxD/LwWJzIO0DZaHXW6Ld0TUgTRZWN6HK0UD9j
urktIM4BHxw2rHEmxfc17usG/dEDHtipouGHkU7DPg6pJYDanYVZi41/2YrJTBGN
jN1oI+IEVWfUkEn10b40Ndq5BNbdEsaa7I1RATWTvlAAuLkVdjhV5pHjbNsjWP4V
k364VaL+kJ1I7Cu895i5mN+7JrSQGu7zu4zRvX6JjnKntRdZEHIux1JxINWufRvy
fbb3LLRfE69Q6qI1GHjXMLTsGIanTL+BW/B/Xivm6C2zjr0Pb8VcPH50iHENZy2q
OAPXAzZgrTVkRg==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:47:06 2025 by rpki-client