Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft
File: 4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft (raw, json)
Hash identifier: gXSao0dwHz6KpYww58g7e86a2twUPJ6QWVyAHrcH0ZI=
Subject key identifier: AE:C1:AE:35:F6:F3:CD:FB:FC:D9:7B:F5:BC:99:05:2D:8B:8A:CC:DE
Authority key identifier: E3:34:EC:39:34:48:D8:3B:F1:51:5F:49:67:A4:48:09:8E:55:FB:43
Certificate issuer: /CN=e334ec393448d83bf1515f4967a448098e55fb43
Certificate serial: 01965191BC99F683E0246565E8D1FB1C4EEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zTsOTRI2DvxUV9JZ6RICY5V-0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft
Manifest number: 14FB
Signing time: Sun 20 Apr 2025 05:00:27 +0000
Manifest this update: Sun 20 Apr 2025 05:00:27 +0000
Manifest next update: Mon 21 Apr 2025 05:00:27 +0000
Files and hashes: 1: 3i7bDwmXfkGeboYerA9gz4okFig.roa (hash: fWhHLCsrKiodDbQX5MlZg8yk8IDQZFwIAhXPpQk2VnY=)
2: 4zTsOTRI2DvxUV9JZ6RICY5V-0M.crl (hash: RZw0/sxwjw5UPkTQM2Cm1EfUs5j8mWS/Ny1kPZG1EWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/4zTsOTRI2DvxUV9JZ6RICY5V-0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:91:bc:99:f6:83:e0:24:65:65:e8:d1:fb:1c:4e:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e334ec393448d83bf1515f4967a448098e55fb43
Validity
Not Before: Apr 20 05:00:27 2025 GMT
Not After : Apr 21 05:00:27 2025 GMT
Subject: CN=aec1ae35f6f3cdfbfcd97bf5bc99052d8b8accde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b7:58:a4:2f:49:fb:3c:7e:c2:cf:ad:d4:b2:
a8:6c:ed:6e:b0:2e:50:fd:de:1e:4e:52:ae:8c:b6:
c2:fe:4a:e3:9a:a7:18:9d:af:97:9c:cb:b9:51:61:
e7:87:c1:f2:10:c9:58:2c:c0:02:04:55:75:4d:18:
2c:a5:e3:41:b7:74:06:bc:14:4c:bd:ce:e0:d5:ca:
d4:30:87:cf:73:6a:8a:7b:a5:b8:99:83:43:f4:60:
de:e8:1a:ab:ac:8f:39:ec:59:f8:ac:35:4b:9e:07:
91:85:09:87:29:be:4c:0b:3b:ce:b2:cd:d7:8d:f9:
2d:16:9d:7b:3a:8e:a2:03:c1:37:35:fd:42:20:fd:
5e:c8:6e:fa:2e:6f:51:d5:cf:0c:a7:99:84:f0:0c:
65:fd:e9:27:76:f6:a3:2a:8a:0a:d8:ec:f2:b7:0a:
d9:8b:ad:34:f7:cf:b1:ee:ae:52:b1:f3:d2:67:06:
a4:3c:c8:96:5d:8e:74:07:80:7a:6c:c5:5a:15:b8:
b8:5f:6e:88:7f:23:b0:ab:3c:20:84:5f:9f:88:b8:
90:7f:21:50:9c:2b:6d:b0:7b:48:eb:14:75:12:b3:
52:2e:5a:d4:6d:d3:50:fb:1a:bd:d0:f8:54:76:9b:
7c:8b:6d:3a:b4:3d:ac:45:71:36:d5:42:b2:13:46:
27:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C1:AE:35:F6:F3:CD:FB:FC:D9:7B:F5:BC:99:05:2D:8B:8A:CC:DE
X509v3 Authority Key Identifier:
keyid:E3:34:EC:39:34:48:D8:3B:F1:51:5F:49:67:A4:48:09:8E:55:FB:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zTsOTRI2DvxUV9JZ6RICY5V-0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:cd:5a:03:cf:6c:8a:51:da:21:1b:6b:9a:b9:7b:85:e0:f7:
7e:ea:44:f9:b1:42:9d:54:35:f6:4a:c5:e2:8b:73:53:7a:e0:
f2:c0:53:09:e8:d1:72:19:54:36:e7:c9:95:28:ed:be:4a:07:
ad:55:1e:86:7a:f8:d7:54:5d:a5:1e:ed:5f:ac:34:9d:d6:9f:
78:f5:b1:3f:5f:db:44:6b:d5:48:b0:be:b1:d0:73:6d:8e:ba:
37:93:ed:af:ca:2e:79:26:81:1f:99:ac:0a:1c:ba:e1:f5:e2:
88:e2:2b:6d:d4:1b:29:55:71:7d:64:31:42:1a:6d:09:f2:ea:
25:d7:8d:31:0e:fa:e1:19:27:ae:61:cd:cc:6e:cc:d5:0c:c7:
c7:9a:21:74:14:7c:73:35:6c:39:9c:01:5d:63:27:b7:7c:27:
8a:6f:9b:cf:fc:6b:44:fe:15:04:70:82:0b:62:93:07:93:a1:
d8:9c:78:46:e0:e3:46:6d:43:ce:a6:dc:ed:3d:06:47:e5:c4:
f5:f5:16:79:8a:3c:70:1f:89:3f:54:49:fe:9c:27:66:9d:c6:
b2:b7:8a:6e:25:85:aa:40:ea:c3:51:d2:55:64:0e:ad:74:3f:
d2:d0:b3:d0:ef:95:ec:dc:22:7f:9f:36:35:3f:99:dd:d1:c3:
21:b9:31:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZRkbyZ9oPgJGVl6NH7HE7vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMzRlYzM5MzQ0OGQ4M2JmMTUxNWY0OTY3YTQ0ODA5OGU1
NWZiNDMwHhcNMjUwNDIwMDUwMDI3WhcNMjUwNDIxMDUwMDI3WjAzMTEwLwYDVQQD
EyhhZWMxYWUzNWY2ZjNjZGZiZmNkOTdiZjViYzk5MDUyZDhiOGFjY2RlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLdYpC9J+zx+ws+t1LKobO1usC5Q
/d4eTlKujLbC/krjmqcYna+XnMu5UWHnh8HyEMlYLMACBFV1TRgspeNBt3QGvBRM
vc7g1crUMIfPc2qKe6W4mYND9GDe6BqrrI857Fn4rDVLngeRhQmHKb5MCzvOss3X
jfktFp17Oo6iA8E3Nf1CIP1eyG76Lm9R1c8Mp5mE8Axl/ekndvajKooK2OzytwrZ
i60098+x7q5SsfPSZwakPMiWXY50B4B6bMVaFbi4X26IfyOwqzwghF+fiLiQfyFQ
nCttsHtI6xR1ErNSLlrUbdNQ+xq90PhUdpt8i206tD2sRXE21UKyE0Yn4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK7BrjX28837/Nl79byZBS2LiszeMB8GA1UdIwQY
MBaAFOM07Dk0SNg78VFfSWekSAmOVftDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHpUc09UUkkyRHZ4VVY5Slo2UklDWTVWLTBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8xOWJkOGEtYzZmMS00MmUyLTg0NjAt
Y2RhYjE5YTNmZGViLzEvNHpUc09UUkkyRHZ4VVY5Slo2UklDWTVWLTBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS8xOWJkOGEtYzZmMS00MmUyLTg0NjAtY2RhYjE5YTNmZGVi
LzEvNHpUc09UUkkyRHZ4VVY5Slo2UklDWTVWLTBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPM1aA89s
ilHaIRtrmrl7heD3fupE+bFCnVQ19krF4otzU3rg8sBTCejRchlUNufJlSjtvkoH
rVUehnr411RdpR7tX6w0ndafePWxP1/bRGvVSLC+sdBzbY66N5Ptr8oueSaBH5ms
Chy64fXiiOIrbdQbKVVxfWQxQhptCfLqJdeNMQ764RknrmHNzG7M1QzHx5ohdBR8
czVsOZwBXWMnt3wnim+bz/xrRP4VBHCCC2KTB5Oh2Jx4RuDjRm1Dzqbc7T0GR+XE
9fUWeYo8cB+JP1RJ/pwnZp3GsreKbiWFqkDqw1HSVWQOrXQ/0tCz0O+V7Nwif582
NT+Z3dHDIbkx0Q==
-----END CERTIFICATE-----
Generated at Sun Apr 20 12:13:39 2025 by rpki-client