Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft
File: r4jIvS2oviecF3KhEQqjiPDvEQI.mft (raw, json)
Hash identifier: ZZk0PT5zT8euYYCb2LfNT/PgFIomIZ7CtmgdIOPWhII=
Subject key identifier: 4C:85:FD:F3:B0:A6:C4:1D:42:68:5F:68:99:21:57:31:02:C6:DB:D4
Authority key identifier: AF:88:C8:BD:2D:A8:BE:27:9C:17:72:A1:11:0A:A3:88:F0:EF:11:02
Certificate issuer: /CN=af88c8bd2da8be279c1772a1110aa388f0ef1102
Certificate serial: 01958C294F58FB3FCBD7EAD3612D1CEE6F1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft
Manifest number: 1496
Signing time: Wed 12 Mar 2025 21:01:12 +0000
Manifest this update: Wed 12 Mar 2025 21:01:12 +0000
Manifest next update: Thu 13 Mar 2025 21:01:12 +0000
Files and hashes: 1: V6I7xtb-s540gCh7ELkbFAWWNm8.roa (hash: 4XfEuv+JUU8dRovsqOYBux0Sp8hqu4SxoGQivq4ciLk=)
2: r4jIvS2oviecF3KhEQqjiPDvEQI.crl (hash: UfwGsbX4o4MkQ04gGhcsUtUXPcL6gh9zCFgzYHvfx70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:29:4f:58:fb:3f:cb:d7:ea:d3:61:2d:1c:ee:6f:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af88c8bd2da8be279c1772a1110aa388f0ef1102
Validity
Not Before: Mar 12 21:01:12 2025 GMT
Not After : Mar 13 21:01:12 2025 GMT
Subject: CN=4c85fdf3b0a6c41d42685f689921573102c6dbd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:43:40:d6:12:69:84:be:7f:3d:f9:a6:5d:37:
85:cb:40:55:c5:d5:1a:02:98:ff:e4:f6:d2:77:88:
98:3b:e9:a8:1b:e1:97:b1:1b:c8:23:9c:5a:b2:f8:
1a:3d:59:c5:6d:5c:20:37:b9:db:26:62:67:9e:42:
d0:d4:ad:30:c9:6c:f6:8e:01:35:af:00:e5:9e:3f:
2e:e6:03:10:96:b7:75:e1:25:2e:d6:bf:79:c2:cf:
e4:0c:c5:9e:3d:2f:07:37:25:46:c3:bf:30:8e:75:
3e:25:18:8c:5b:ed:25:6f:55:81:e5:44:6a:15:a8:
8a:37:06:4c:01:01:d6:00:74:65:ea:ac:70:bf:69:
8d:17:98:2e:a6:f6:be:f3:29:c4:bc:0c:11:5e:aa:
48:d2:8e:11:82:65:ca:0b:9e:ee:9f:5d:80:46:71:
92:7f:02:fc:0c:bb:e0:6b:0a:cd:c3:ee:48:cd:94:
30:e6:e5:86:98:5c:d4:04:97:30:b4:2d:03:ba:55:
b2:b1:ec:6a:db:26:ad:09:02:e2:76:75:03:fe:3c:
f2:90:3f:84:b5:03:52:0d:b9:55:e0:8f:68:b2:ac:
23:85:ef:83:9e:f5:26:3b:fd:32:44:42:0a:a8:7c:
81:68:2b:ff:86:f2:b1:dd:b8:c2:03:dd:7b:f2:04:
e2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:85:FD:F3:B0:A6:C4:1D:42:68:5F:68:99:21:57:31:02:C6:DB:D4
X509v3 Authority Key Identifier:
keyid:AF:88:C8:BD:2D:A8:BE:27:9C:17:72:A1:11:0A:A3:88:F0:EF:11:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:e7:50:65:34:bd:1b:5f:d3:bb:b3:69:07:68:6c:2d:64:ce:
f8:ac:67:0d:93:9f:ad:76:30:de:f0:a7:1d:6a:e1:e2:08:db:
b3:0f:00:09:39:e4:9d:04:c6:be:31:6d:5f:80:5e:f6:5a:ee:
5d:33:d0:56:c0:35:ce:5b:57:6e:47:a2:00:91:6d:f1:4a:3e:
7b:e7:bb:c4:1d:91:c2:60:a7:ff:6c:03:b6:93:67:23:aa:2b:
cd:78:a8:a2:87:73:a4:c0:00:0c:09:e5:d6:89:3c:71:47:5f:
64:54:e5:ea:d1:58:9e:53:8c:e0:20:30:8e:8f:26:e4:16:29:
16:bb:e8:98:86:d0:f4:e9:14:a9:c8:58:c0:2a:c6:0b:6a:61:
a4:c3:a1:54:ab:7a:1c:26:0b:b5:d3:e2:8e:2d:57:6a:4b:8f:
cc:e7:dc:5a:1f:0c:ca:bb:0a:a7:4f:ed:3f:b2:9e:ce:d0:30:
61:ff:32:bc:66:55:98:5b:e7:03:a5:6f:e9:3c:96:12:8f:c8:
d4:be:44:8e:95:e5:9d:89:b0:36:a7:70:b6:e5:26:24:6c:6b:
d1:a9:9d:f0:3a:9d:14:74:a5:a5:7f:9c:29:d8:8e:72:44:3e:
ee:1d:59:4c:27:c3:c4:1a:58:62:31:06:c6:06:94:62:59:6d:
75:f4:13:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWMKU9Y+z/L1+rTYS0c7m8aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmODhjOGJkMmRhOGJlMjc5YzE3NzJhMTExMGFhMzg4ZjBl
ZjExMDIwHhcNMjUwMzEyMjEwMTEyWhcNMjUwMzEzMjEwMTEyWjAzMTEwLwYDVQQD
Eyg0Yzg1ZmRmM2IwYTZjNDFkNDI2ODVmNjg5OTIxNTczMTAyYzZkYmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ENA1hJphL5/PfmmXTeFy0BVxdUa
Apj/5PbSd4iYO+moG+GXsRvII5xasvgaPVnFbVwgN7nbJmJnnkLQ1K0wyWz2jgE1
rwDlnj8u5gMQlrd14SUu1r95ws/kDMWePS8HNyVGw78wjnU+JRiMW+0lb1WB5URq
FaiKNwZMAQHWAHRl6qxwv2mNF5gupva+8ynEvAwRXqpI0o4RgmXKC57un12ARnGS
fwL8DLvgawrNw+5IzZQw5uWGmFzUBJcwtC0DulWysexq2yatCQLidnUD/jzykD+E
tQNSDblV4I9osqwjhe+DnvUmO/0yREIKqHyBaCv/hvKx3bjCA9178gTitwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEyF/fOwpsQdQmhfaJkhVzECxtvUMB8GA1UdIwQY
MBaAFK+IyL0tqL4nnBdyoREKo4jw7xECMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjRqSXZTMm92aWVjRjNLaEVRcWppUER2RVFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9mMmYxZDMtZjRjMS00OWRmLTlkNDEt
YmM3NmNhZjA3ODYwLzEvcjRqSXZTMm92aWVjRjNLaEVRcWppUER2RVFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9mMmYxZDMtZjRjMS00OWRmLTlkNDEtYmM3NmNhZjA3ODYw
LzEvcjRqSXZTMm92aWVjRjNLaEVRcWppUER2RVFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAredQZTS9
G1/Tu7NpB2hsLWTO+KxnDZOfrXYw3vCnHWrh4gjbsw8ACTnknQTGvjFtX4Be9lru
XTPQVsA1zltXbkeiAJFt8Uo+e+e7xB2RwmCn/2wDtpNnI6orzXiooodzpMAADAnl
1ok8cUdfZFTl6tFYnlOM4CAwjo8m5BYpFrvomIbQ9OkUqchYwCrGC2phpMOhVKt6
HCYLtdPiji1XakuPzOfcWh8MyrsKp0/tP7KeztAwYf8yvGZVmFvnA6Vv6TyWEo/I
1L5EjpXlnYmwNqdwtuUmJGxr0amd8DqdFHSlpX+cKdiOckQ+7h1ZTCfDxBpYYjEG
xgaUYlltdfQTzg==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:16:07 2025 by rpki-client