Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/bdbee9-5eee-4561-a523-9435159c93eb/1/4CzXYQ92Hg7SUq57ufMPHisXtec.mft
File: 4CzXYQ92Hg7SUq57ufMPHisXtec.mft (raw, json)
Hash identifier: m+Z4bPLrI3A4u3EuDPwj4bb0/A8OuITAePZ7UWn/vWc=
Subject key identifier: 19:08:F5:DD:13:BC:53:FB:51:BB:C2:B9:8A:FF:25:C2:5F:E6:73:A9
Authority key identifier: E0:2C:D7:61:0F:76:1E:0E:D2:52:AE:7B:B9:F3:0F:1E:2B:17:B5:E7
Certificate issuer: /CN=e02cd7610f761e0ed252ae7bb9f30f1e2b17b5e7
Certificate serial: 01965982FCD7E2C8F4CD400264D2658F68CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4CzXYQ92Hg7SUq57ufMPHisXtec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/bdbee9-5eee-4561-a523-9435159c93eb/1/4CzXYQ92Hg7SUq57ufMPHisXtec.mft
Manifest number: 1191
Signing time: Mon 21 Apr 2025 18:01:18 +0000
Manifest this update: Mon 21 Apr 2025 18:01:18 +0000
Manifest next update: Tue 22 Apr 2025 18:01:18 +0000
Files and hashes: 1: 4CzXYQ92Hg7SUq57ufMPHisXtec.crl (hash: fHbjOwM1EgNDmrpsW/CZEJUQiiNVl42zdfrcq/YoI1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/bdbee9-5eee-4561-a523-9435159c93eb/1/4CzXYQ92Hg7SUq57ufMPHisXtec.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/bdbee9-5eee-4561-a523-9435159c93eb/1/4CzXYQ92Hg7SUq57ufMPHisXtec.mft
rsync://rpki.ripe.net/repository/DEFAULT/4CzXYQ92Hg7SUq57ufMPHisXtec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 18:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:82:fc:d7:e2:c8:f4:cd:40:02:64:d2:65:8f:68:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e02cd7610f761e0ed252ae7bb9f30f1e2b17b5e7
Validity
Not Before: Apr 21 18:01:18 2025 GMT
Not After : Apr 22 18:01:18 2025 GMT
Subject: CN=1908f5dd13bc53fb51bbc2b98aff25c25fe673a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ea:bb:d3:2c:ae:23:9d:2b:2d:9d:a9:ad:20:
31:65:fd:0d:63:b0:75:26:12:f4:68:dd:19:31:01:
cb:89:b4:06:72:0b:49:0c:b4:3c:12:52:8c:59:1c:
44:a7:1d:95:62:e9:73:01:5c:6e:ed:22:68:ba:b9:
af:d8:7e:ec:70:b2:b6:be:fc:f5:88:a6:0c:52:9f:
c6:05:a3:e7:cc:1e:58:da:c4:7d:4e:c8:a2:51:f7:
dc:e3:e8:7f:20:b9:19:d0:9b:f0:03:30:cf:96:bc:
06:94:a3:b4:ad:d2:c0:43:af:4e:cc:52:14:5b:24:
91:d0:3b:15:5a:c6:7c:92:b9:9b:c0:d9:12:68:a3:
5b:f3:c3:1f:f1:2b:4f:b0:52:58:24:1d:96:70:65:
c8:b3:2a:39:c5:49:18:81:fb:82:91:23:fc:1e:1d:
20:44:6f:68:3f:5d:a0:d0:58:5f:6e:5c:b6:d3:3d:
0d:b5:f9:d5:86:46:6b:f5:7d:4b:af:43:11:ba:20:
c9:0e:2a:f7:e8:c3:da:71:b3:49:36:e7:43:60:d0:
6d:6d:e1:d2:a8:a1:a8:4d:5a:17:91:ce:21:2f:61:
6d:bc:25:a7:42:b4:2d:97:42:c3:f2:5e:04:e0:11:
ee:08:81:0b:fe:9c:f7:d2:66:10:1d:eb:b9:c3:62:
b4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:08:F5:DD:13:BC:53:FB:51:BB:C2:B9:8A:FF:25:C2:5F:E6:73:A9
X509v3 Authority Key Identifier:
keyid:E0:2C:D7:61:0F:76:1E:0E:D2:52:AE:7B:B9:F3:0F:1E:2B:17:B5:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4CzXYQ92Hg7SUq57ufMPHisXtec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bdbee9-5eee-4561-a523-9435159c93eb/1/4CzXYQ92Hg7SUq57ufMPHisXtec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bdbee9-5eee-4561-a523-9435159c93eb/1/4CzXYQ92Hg7SUq57ufMPHisXtec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:f9:09:8b:54:4b:70:f0:31:13:c9:8b:71:79:16:cf:6d:0a:
06:61:96:7b:ee:6a:c4:47:a6:4d:f7:21:fb:9b:a8:3c:de:6a:
fe:d1:6e:c7:7c:bf:63:62:29:75:ca:a9:36:94:73:77:a8:14:
63:13:78:6b:74:08:11:31:54:62:0e:9b:c2:b7:5a:6f:f5:72:
03:c5:d4:25:76:a0:82:7d:77:d0:0f:25:e5:9d:68:a7:a3:3f:
21:cc:26:e1:bd:2d:ea:d3:5f:5f:9d:35:43:f7:b9:82:c6:a6:
7f:03:24:1e:50:43:02:63:40:44:49:c8:58:b2:9d:f7:3a:76:
93:90:fa:c2:66:1a:e6:99:c6:71:c8:fc:da:01:5a:71:31:ef:
9b:9b:59:c9:b8:bf:03:15:86:20:99:9d:af:21:26:d4:b8:36:
d1:d4:b0:91:58:2e:a5:3c:62:15:04:4c:b0:f0:39:ff:c5:22:
ee:41:96:84:65:12:dc:ca:4a:4d:0f:e8:bf:d4:95:d8:bc:6c:
0f:8c:e3:c5:e6:88:02:39:39:5f:27:d1:df:9b:94:cf:60:62:
79:1b:5a:ac:8f:fe:dc:26:e7:76:47:da:ff:cf:04:20:05:4d:
5a:44:45:69:06:18:a5:a0:1a:01:ac:84:18:3e:f1:73:6a:32:
55:14:c9:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZZgvzX4sj0zUACZNJlj2jLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwMmNkNzYxMGY3NjFlMGVkMjUyYWU3YmI5ZjMwZjFlMmIx
N2I1ZTcwHhcNMjUwNDIxMTgwMTE4WhcNMjUwNDIyMTgwMTE4WjAzMTEwLwYDVQQD
EygxOTA4ZjVkZDEzYmM1M2ZiNTFiYmMyYjk4YWZmMjVjMjVmZTY3M2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzeq70yyuI50rLZ2prSAxZf0NY7B1
JhL0aN0ZMQHLibQGcgtJDLQ8ElKMWRxEpx2VYulzAVxu7SJourmv2H7scLK2vvz1
iKYMUp/GBaPnzB5Y2sR9TsiiUffc4+h/ILkZ0JvwAzDPlrwGlKO0rdLAQ69OzFIU
WySR0DsVWsZ8krmbwNkSaKNb88Mf8StPsFJYJB2WcGXIsyo5xUkYgfuCkSP8Hh0g
RG9oP12g0Fhfbly20z0NtfnVhkZr9X1Lr0MRuiDJDir36MPacbNJNudDYNBtbeHS
qKGoTVoXkc4hL2FtvCWnQrQtl0LD8l4E4BHuCIEL/pz30mYQHeu5w2K0gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBkI9d0TvFP7UbvCuYr/JcJf5nOpMB8GA1UdIwQY
MBaAFOAs12EPdh4O0lKue7nzDx4rF7XnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEN6WFlROTJIZzdTVXE1N3VmTVBIaXNYdGVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9iZGJlZTktNWVlZS00NTYxLWE1MjMt
OTQzNTE1OWM5M2ViLzEvNEN6WFlROTJIZzdTVXE1N3VmTVBIaXNYdGVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9iZGJlZTktNWVlZS00NTYxLWE1MjMtOTQzNTE1OWM5M2Vi
LzEvNEN6WFlROTJIZzdTVXE1N3VmTVBIaXNYdGVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAffkJi1RL
cPAxE8mLcXkWz20KBmGWe+5qxEemTfch+5uoPN5q/tFux3y/Y2IpdcqpNpRzd6gU
YxN4a3QIETFUYg6bwrdab/VyA8XUJXaggn130A8l5Z1op6M/Icwm4b0t6tNfX501
Q/e5gsamfwMkHlBDAmNAREnIWLKd9zp2k5D6wmYa5pnGccj82gFacTHvm5tZybi/
AxWGIJmdryEm1Lg20dSwkVgupTxiFQRMsPA5/8Ui7kGWhGUS3MpKTQ/ov9SV2Lxs
D4zjxeaIAjk5XyfR35uUz2BieRtarI/+3Cbndkfa/88EIAVNWkRFaQYYpaAaAayE
GD7xc2oyVRTJ5g==
-----END CERTIFICATE-----
Generated at Tue Apr 22 01:07:53 2025 by rpki-client