Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft
File: 4pIlILZ7Gr98QDr6IjVTQyYnIog.mft (raw, json)
Hash identifier: YaCtoj43IkD7RZGe/G3ZbRzaCkdh3XiZb08BzNVx5t4=
Subject key identifier: 51:D2:A4:7C:A2:38:50:00:75:4E:1D:69:DC:9A:F6:7A:C6:28:99:AA
Authority key identifier: E2:92:25:20:B6:7B:1A:BF:7C:40:3A:FA:22:35:53:43:26:27:22:88
Certificate issuer: /CN=e2922520b67b1abf7c403afa2235534326272288
Certificate serial: 019510FDC65A14DD83E8E8684CD6211D820C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pIlILZ7Gr98QDr6IjVTQyYnIog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft
Manifest number: 1271
Signing time: Sun 16 Feb 2025 23:00:21 +0000
Manifest this update: Sun 16 Feb 2025 23:00:21 +0000
Manifest next update: Mon 17 Feb 2025 23:00:21 +0000
Files and hashes: 1: 4pIlILZ7Gr98QDr6IjVTQyYnIog.crl (hash: PM0BqC5Ip3YXpAliHJnGcToMWxxiMvCPEPKDrliBRZw=)
2: sraNB3Tq9hs6fPR3orHTINDfXdM.roa (hash: 5fJUa4xuxE1H1Nc9qB8vUJm4+A17xrBmdzBKBxK5rEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft
rsync://rpki.ripe.net/repository/DEFAULT/4pIlILZ7Gr98QDr6IjVTQyYnIog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:c6:5a:14:dd:83:e8:e8:68:4c:d6:21:1d:82:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2922520b67b1abf7c403afa2235534326272288
Validity
Not Before: Feb 16 23:00:21 2025 GMT
Not After : Feb 17 23:00:21 2025 GMT
Subject: CN=51d2a47ca2385000754e1d69dc9af67ac62899aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:52:d6:d1:9d:4e:7a:82:92:da:79:d7:58:2f:
50:44:83:f7:34:b9:50:e0:ab:0b:3c:80:a2:13:8c:
ba:29:e6:a2:2a:4c:39:a6:73:25:e5:a6:ab:51:36:
b4:14:58:16:d6:e9:5f:dd:68:9f:f4:b5:64:f3:58:
8b:c4:05:36:61:ea:cf:5c:9f:71:76:d7:5f:fe:64:
63:80:07:fd:7f:ea:62:37:df:fa:78:fe:fd:82:8f:
e8:bd:3a:c2:54:a2:e1:0e:21:09:54:e9:33:78:84:
68:14:91:30:e6:62:66:0a:f0:27:99:66:d5:63:93:
da:97:5e:13:70:b3:61:c4:67:7d:5d:69:05:98:7b:
6e:b7:15:c2:4f:39:df:fc:c2:d3:c3:8b:67:25:05:
59:90:90:aa:65:1a:ed:c3:37:dd:6f:01:b5:ea:c0:
00:b4:24:fc:4d:27:b9:7b:71:7c:6b:16:b0:c8:12:
82:f5:ac:26:21:62:e6:fb:5d:95:76:54:42:77:22:
b8:3f:ca:e5:05:41:21:f0:47:b0:65:fe:32:05:72:
64:a8:8e:7b:cf:27:72:1f:4d:03:5a:f1:53:e3:2c:
e6:48:c4:d0:ac:c0:2b:bb:16:d2:cc:a0:fc:92:2a:
a4:2c:d3:fd:cd:af:05:80:66:91:ac:87:7f:90:38:
d2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D2:A4:7C:A2:38:50:00:75:4E:1D:69:DC:9A:F6:7A:C6:28:99:AA
X509v3 Authority Key Identifier:
keyid:E2:92:25:20:B6:7B:1A:BF:7C:40:3A:FA:22:35:53:43:26:27:22:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pIlILZ7Gr98QDr6IjVTQyYnIog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:c7:01:6f:4c:e3:33:14:d5:c3:de:4f:78:38:d2:b3:81:24:
f2:f8:db:ae:c2:c9:d9:ee:15:6a:97:6d:bc:65:c1:de:cb:51:
9d:c1:1f:44:35:1d:49:ce:f8:1c:c5:43:7b:4c:15:c6:47:7f:
7e:7b:d7:97:d3:fb:fc:7c:7c:65:80:d5:a7:8e:b9:3d:52:e8:
99:18:2e:e0:a4:01:33:ea:76:1a:52:2c:b7:1c:d3:cf:0a:21:
e1:51:18:52:2c:cb:d6:c4:df:12:c1:47:57:83:91:bf:f5:72:
a4:26:d9:73:17:4f:31:86:40:c3:19:79:f7:69:d3:f3:d7:7c:
0c:82:56:38:fa:f7:0f:02:c8:fb:80:a8:bb:2d:87:90:20:20:
a9:12:e2:63:43:9a:f4:02:00:36:ff:66:5e:e9:3d:7c:a7:9c:
4c:b4:4d:2d:6c:a1:56:73:ef:e4:27:b7:8f:33:d6:d6:80:2c:
d7:69:f4:b8:aa:00:7f:1b:f2:81:37:8b:af:de:2e:de:ab:53:
75:cf:c8:83:cc:27:f6:0f:69:6d:45:1a:01:82:5b:df:cf:25:
7d:95:ea:37:bd:ee:57:26:20:68:ee:6d:52:b7:b9:1a:7b:c7:
80:f8:9b:9d:23:43:44:45:92:a5:63:37:22:f2:8e:8e:d8:44:
71:67:26:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQ/cZaFN2D6OhoTNYhHYIMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyOTIyNTIwYjY3YjFhYmY3YzQwM2FmYTIyMzU1MzQzMjYy
NzIyODgwHhcNMjUwMjE2MjMwMDIxWhcNMjUwMjE3MjMwMDIxWjAzMTEwLwYDVQQD
Eyg1MWQyYTQ3Y2EyMzg1MDAwNzU0ZTFkNjlkYzlhZjY3YWM2Mjg5OWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VLW0Z1OeoKS2nnXWC9QRIP3NLlQ
4KsLPICiE4y6KeaiKkw5pnMl5aarUTa0FFgW1ulf3Wif9LVk81iLxAU2YerPXJ9x
dtdf/mRjgAf9f+piN9/6eP79go/ovTrCVKLhDiEJVOkzeIRoFJEw5mJmCvAnmWbV
Y5Pal14TcLNhxGd9XWkFmHtutxXCTznf/MLTw4tnJQVZkJCqZRrtwzfdbwG16sAA
tCT8TSe5e3F8axawyBKC9awmIWLm+12VdlRCdyK4P8rlBUEh8EewZf4yBXJkqI57
zydyH00DWvFT4yzmSMTQrMAruxbSzKD8kiqkLNP9za8FgGaRrId/kDjSuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFHSpHyiOFAAdU4dadya9nrGKJmqMB8GA1UdIwQY
MBaAFOKSJSC2exq/fEA6+iI1U0MmJyKIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHBJbElMWjdHcjk4UURyNklqVlRReVluSW9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jYTEzY2EtZjY0MC00OTZjLTkyMmEt
NTAwYWJkOTNiOWQ0LzEvNHBJbElMWjdHcjk4UURyNklqVlRReVluSW9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9jYTEzY2EtZjY0MC00OTZjLTkyMmEtNTAwYWJkOTNiOWQ0
LzEvNHBJbElMWjdHcjk4UURyNklqVlRReVluSW9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADccBb0zj
MxTVw95PeDjSs4Ek8vjbrsLJ2e4VapdtvGXB3stRncEfRDUdSc74HMVDe0wVxkd/
fnvXl9P7/Hx8ZYDVp465PVLomRgu4KQBM+p2GlIstxzTzwoh4VEYUizL1sTfEsFH
V4ORv/VypCbZcxdPMYZAwxl592nT89d8DIJWOPr3DwLI+4Couy2HkCAgqRLiY0Oa
9AIANv9mXuk9fKecTLRNLWyhVnPv5Ce3jzPW1oAs12n0uKoAfxvygTeLr94u3qtT
dc/Ig8wn9g9pbUUaAYJb388lfZXqN73uVyYgaO5tUre5GnvHgPibnSNDREWSpWM3
IvKOjthEcWcmxw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:07 2025 by rpki-client