Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
File: 4oqGzL9We9migv3fdfC39VQiItI.mft (raw, json)
Hash identifier: wruFB2zJzETYRrqkEoPogjou9WexRoJaDlQbLXM+Erg=
Subject key identifier: 67:9A:FD:3C:4D:CA:94:22:BC:30:14:54:65:DB:CB:A3:4F:B1:3D:B3
Authority key identifier: E2:8A:86:CC:BF:56:7B:D9:A2:82:FD:DF:75:F0:B7:F5:54:22:22:D2
Certificate issuer: /CN=e28a86ccbf567bd9a282fddf75f0b7f5542222d2
Certificate serial: 0196108E3677D18D4228C339A770993DF6A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
Manifest number: 0490
Signing time: Mon 07 Apr 2025 14:01:17 +0000
Manifest this update: Mon 07 Apr 2025 14:01:17 +0000
Manifest next update: Tue 08 Apr 2025 14:01:17 +0000
Files and hashes: 1: 4oqGzL9We9migv3fdfC39VQiItI.crl (hash: NbrbYg8fts0URNsHncmYVtB3+2xqWXM0ZCE+R2uYQHw=)
2: YqAFoc5kTd7Z4_KKDQIoEbzTXXs.roa (hash: 5bYNmgtpiY7zEyVHWvNikpnw6RjJjGyTau2g1VZIDwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:8e:36:77:d1:8d:42:28:c3:39:a7:70:99:3d:f6:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e28a86ccbf567bd9a282fddf75f0b7f5542222d2
Validity
Not Before: Apr 7 14:01:17 2025 GMT
Not After : Apr 8 14:01:17 2025 GMT
Subject: CN=679afd3c4dca9422bc30145465dbcba34fb13db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bd:8f:2b:3f:27:73:4f:b2:a6:fa:2a:be:68:
90:66:00:83:d5:18:9e:75:0a:a4:c6:db:b4:11:ac:
14:13:cf:42:18:08:c9:2e:31:65:63:d5:f4:32:ce:
94:f4:52:a8:9d:33:3a:2d:ca:8f:55:e8:0e:35:90:
a5:7e:65:35:90:b9:e5:4c:93:c4:c0:50:ac:a9:71:
5a:de:44:7e:db:2e:2c:ed:9b:59:41:11:f4:f7:f0:
a9:0d:44:8d:99:e0:f2:fb:90:e4:7f:14:f2:5a:82:
a9:3a:87:4e:e1:2e:a0:ee:9f:98:be:a3:f7:48:ec:
02:45:0c:36:82:01:af:95:32:31:46:8f:0c:29:3a:
a1:c9:a9:c6:65:2e:45:5d:42:b3:e7:93:8d:08:6f:
0c:b8:17:2c:b9:e4:64:6b:bb:ec:0d:f8:45:70:3e:
4b:1c:7e:f0:b9:e0:08:cf:11:45:1d:d0:62:96:a9:
92:01:49:1d:7a:2d:f9:a2:8f:ec:1f:97:33:0a:b4:
06:eb:23:bd:d8:58:0a:40:12:c4:62:32:56:38:39:
e2:97:79:75:f5:52:c0:32:1e:80:19:d9:74:cd:17:
09:5a:a8:54:da:ee:4e:cc:db:71:c3:73:31:d0:d3:
7a:6e:1f:c3:2f:92:99:a0:e5:9b:f0:02:24:b1:15:
d0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:9A:FD:3C:4D:CA:94:22:BC:30:14:54:65:DB:CB:A3:4F:B1:3D:B3
X509v3 Authority Key Identifier:
keyid:E2:8A:86:CC:BF:56:7B:D9:A2:82:FD:DF:75:F0:B7:F5:54:22:22:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:09:75:dc:45:1c:26:99:ff:da:92:c5:6c:6f:80:14:f3:f1:
9d:a6:b5:26:52:4b:56:6c:d6:50:9f:cb:0f:ce:65:15:c1:c2:
d4:e1:a1:91:66:dc:d6:6d:c5:07:18:7a:83:aa:7b:32:08:10:
f1:45:fd:61:3c:56:a4:2e:96:5b:90:dd:0b:50:a2:3a:d9:eb:
87:70:5c:18:34:3a:46:ce:ad:77:cd:62:11:f1:01:1c:05:59:
c6:15:43:f9:de:ed:dd:c9:4a:55:a4:06:6e:a7:c8:de:01:61:
76:a5:18:65:82:a9:07:da:90:f2:79:b4:62:ef:ef:9b:0a:07:
22:ca:12:eb:56:d8:e6:6e:f0:7f:95:c9:6b:0c:fe:88:1e:a6:
44:ed:9d:34:a4:c6:17:cc:ef:81:4a:98:21:9c:fc:b2:9b:8a:
18:a0:58:8a:3b:39:b4:19:d2:cf:c5:4d:1c:43:32:97:9a:99:
d8:37:a7:68:74:40:4e:71:2f:62:8f:b9:05:2e:14:f9:03:69:
cb:97:c8:88:7a:79:f1:af:e1:2d:90:07:c1:d6:42:af:8b:d8:
0e:c0:97:e5:e7:8f:37:70:10:6a:c4:a5:fa:c1:a0:ce:61:13:
52:f5:91:32:78:d8:96:c1:ba:4c:52:9a:06:bc:36:0e:0d:68:
19:9f:6a:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYQjjZ30Y1CKMM5p3CZPfamMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyOGE4NmNjYmY1NjdiZDlhMjgyZmRkZjc1ZjBiN2Y1NTQy
MjIyZDIwHhcNMjUwNDA3MTQwMTE3WhcNMjUwNDA4MTQwMTE3WjAzMTEwLwYDVQQD
Eyg2NzlhZmQzYzRkY2E5NDIyYmMzMDE0NTQ2NWRiY2JhMzRmYjEzZGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz72PKz8nc0+ypvoqvmiQZgCD1Rie
dQqkxtu0EawUE89CGAjJLjFlY9X0Ms6U9FKonTM6LcqPVegONZClfmU1kLnlTJPE
wFCsqXFa3kR+2y4s7ZtZQRH09/CpDUSNmeDy+5DkfxTyWoKpOodO4S6g7p+YvqP3
SOwCRQw2ggGvlTIxRo8MKTqhyanGZS5FXUKz55ONCG8MuBcsueRka7vsDfhFcD5L
HH7wueAIzxFFHdBilqmSAUkdei35oo/sH5czCrQG6yO92FgKQBLEYjJWODnil3l1
9VLAMh6AGdl0zRcJWqhU2u5OzNtxw3Mx0NN6bh/DL5KZoOWb8AIksRXQywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGea/TxNypQivDAUVGXby6NPsT2zMB8GA1UdIwQY
MBaAFOKKhsy/VnvZooL933Xwt/VUIiLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNG9xR3pMOVdlOW1pZ3YzZmRmQzM5VlFpSXRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9jODkwMGMtZjNkMi00NTdjLWIzOGIt
NmQ3NjUwY2EzZDA0LzEvNG9xR3pMOVdlOW1pZ3YzZmRmQzM5VlFpSXRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9jODkwMGMtZjNkMi00NTdjLWIzOGItNmQ3NjUwY2EzZDA0
LzEvNG9xR3pMOVdlOW1pZ3YzZmRmQzM5VlFpSXRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUwl13EUc
Jpn/2pLFbG+AFPPxnaa1JlJLVmzWUJ/LD85lFcHC1OGhkWbc1m3FBxh6g6p7MggQ
8UX9YTxWpC6WW5DdC1CiOtnrh3BcGDQ6Rs6td81iEfEBHAVZxhVD+d7t3clKVaQG
bqfI3gFhdqUYZYKpB9qQ8nm0Yu/vmwoHIsoS61bY5m7wf5XJawz+iB6mRO2dNKTG
F8zvgUqYIZz8spuKGKBYijs5tBnSz8VNHEMyl5qZ2DenaHRATnEvYo+5BS4U+QNp
y5fIiHp58a/hLZAHwdZCr4vYDsCX5eePN3AQasSl+sGgzmETUvWRMnjYlsG6TFKa
Brw2Dg1oGZ9q9g==
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:27:17 2025 by rpki-client