Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.mft
File: 4trBUISDJfD3JYcGT4q6N8X_N5A.mft (raw, json)
Hash identifier: vwMSG0lFguNFSqJhNkM22+G779IPTQGEH1nGvK6I7yE=
Subject key identifier: C8:E1:08:34:A0:70:4E:D9:9F:77:FC:6C:45:F1:62:29:82:EF:CC:5D
Authority key identifier: E2:DA:C1:50:84:83:25:F0:F7:25:87:06:4F:8A:BA:37:C5:FF:37:90
Certificate issuer: /CN=e2dac150848325f0f72587064f8aba37c5ff3790
Certificate serial: 019644441E95BE8490017C44F0D79FB1876D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4trBUISDJfD3JYcGT4q6N8X_N5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.mft
Manifest number: 10DC
Signing time: Thu 17 Apr 2025 15:00:37 +0000
Manifest this update: Thu 17 Apr 2025 15:00:37 +0000
Manifest next update: Fri 18 Apr 2025 15:00:37 +0000
Files and hashes: 1: 1tSvH4RNSu7UD2qtT1EWm04Zry4.roa (hash: q0ebmJQY13NuleI4G7DugHjqGoG1SUVW7Ik+sEsmL8w=)
2: 4trBUISDJfD3JYcGT4q6N8X_N5A.crl (hash: IhlJ/dGNO0mnRlvNqA4O6EXuW2D/WfXzB9m2Qx1Dioc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/4trBUISDJfD3JYcGT4q6N8X_N5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 15:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:44:1e:95:be:84:90:01:7c:44:f0:d7:9f:b1:87:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2dac150848325f0f72587064f8aba37c5ff3790
Validity
Not Before: Apr 17 15:00:37 2025 GMT
Not After : Apr 18 15:00:37 2025 GMT
Subject: CN=c8e10834a0704ed99f77fc6c45f1622982efcc5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a6:10:c6:2a:aa:6b:d5:f0:30:70:9d:31:d8:
21:35:12:4f:b8:84:b6:5e:e5:f7:a2:05:c5:e9:ae:
00:63:4e:51:14:44:c1:cf:fb:26:32:a2:23:bb:f9:
5d:c3:1b:31:13:54:89:3c:45:7a:48:39:96:e7:5b:
27:69:2c:7b:46:25:62:13:24:5c:29:5b:21:be:04:
f1:80:7c:8b:07:92:ac:1a:8b:0b:9f:d7:b4:a9:0a:
cd:1c:3a:71:d1:69:d0:a8:d0:07:5b:5a:37:86:f1:
e9:f0:4f:0c:ca:f4:4a:aa:56:f1:9d:2d:4a:17:1a:
6d:c2:fc:bb:34:2c:65:95:f3:32:3f:c4:fd:57:bd:
c8:93:87:f4:a4:93:fd:b0:14:93:dc:fd:f1:33:2d:
96:21:b5:5b:8c:7f:9d:12:29:43:22:61:60:94:81:
eb:4c:52:75:04:40:84:49:99:2e:45:1d:13:3a:60:
02:87:aa:c0:d4:75:32:44:97:75:d6:c8:fc:98:65:
a4:6d:67:15:df:1e:27:e4:55:51:83:d7:58:fd:8d:
57:05:3c:da:70:97:9f:52:b3:38:15:b3:de:7f:5a:
14:85:4f:70:a7:39:3e:bf:21:70:e9:ad:e7:ac:f1:
63:e6:a1:cf:8c:7c:d5:8f:35:1a:34:35:c5:60:67:
86:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E1:08:34:A0:70:4E:D9:9F:77:FC:6C:45:F1:62:29:82:EF:CC:5D
X509v3 Authority Key Identifier:
keyid:E2:DA:C1:50:84:83:25:F0:F7:25:87:06:4F:8A:BA:37:C5:FF:37:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4trBUISDJfD3JYcGT4q6N8X_N5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:a0:92:d7:9b:86:f7:af:ed:b4:eb:60:32:74:98:05:69:d3:
1d:c7:11:03:36:1d:e2:87:b1:3b:94:6d:4a:67:90:93:ae:02:
fa:b0:55:e9:b6:4b:c1:a3:b3:da:d8:01:73:34:a9:2f:63:df:
9b:a2:2a:54:3d:c6:5e:0f:84:74:93:70:46:ec:cd:bd:f8:b4:
82:97:13:81:95:e0:00:c3:9e:4e:48:a1:5c:65:8e:9e:25:f1:
8c:6d:52:6f:6e:86:c8:c0:c7:9e:b5:f5:b3:f6:77:df:e8:bd:
6a:5e:ba:ac:7d:bf:0d:66:ed:67:37:66:f2:4e:06:f4:2e:6f:
10:4c:f1:0d:f9:89:8e:55:21:25:9a:f1:b9:ba:a5:f7:b7:6d:
b0:98:6d:a1:54:d1:f9:ce:77:97:92:2c:ba:bb:81:b8:c0:47:
c6:c5:0e:e2:6f:c7:dd:b2:58:41:ff:fb:4a:d0:0d:c3:c5:fd:
0f:9f:c2:e8:8b:6c:8b:ea:c7:70:55:69:b6:84:ef:2b:67:a0:
94:02:7f:8d:cc:1a:ab:12:76:5a:44:c0:32:a4:6a:b5:8a:69:
d2:8b:a2:c7:07:44:1f:33:50:1f:bf:da:10:1d:2c:c2:1f:7e:
38:b9:09:26:87:ed:b1:a2:fb:af:67:93:c2:6e:5c:25:9b:02:
82:5e:c1:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZERB6VvoSQAXxE8NefsYdtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZGFjMTUwODQ4MzI1ZjBmNzI1ODcwNjRmOGFiYTM3YzVm
ZjM3OTAwHhcNMjUwNDE3MTUwMDM3WhcNMjUwNDE4MTUwMDM3WjAzMTEwLwYDVQQD
EyhjOGUxMDgzNGEwNzA0ZWQ5OWY3N2ZjNmM0NWYxNjIyOTgyZWZjYzVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16YQxiqqa9XwMHCdMdghNRJPuIS2
XuX3ogXF6a4AY05RFETBz/smMqIju/ldwxsxE1SJPEV6SDmW51snaSx7RiViEyRc
KVshvgTxgHyLB5KsGosLn9e0qQrNHDpx0WnQqNAHW1o3hvHp8E8MyvRKqlbxnS1K
Fxptwvy7NCxllfMyP8T9V73Ik4f0pJP9sBST3P3xMy2WIbVbjH+dEilDImFglIHr
TFJ1BECESZkuRR0TOmACh6rA1HUyRJd11sj8mGWkbWcV3x4n5FVRg9dY/Y1XBTza
cJefUrM4FbPef1oUhU9wpzk+vyFw6a3nrPFj5qHPjHzVjzUaNDXFYGeGdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMjhCDSgcE7Zn3f8bEXxYimC78xdMB8GA1UdIwQY
MBaAFOLawVCEgyXw9yWHBk+KujfF/zeQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHRyQlVJU0RKZkQzSlljR1Q0cTZOOFhfTjVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9mMDk3NTktNmNlYi00NzU0LWJiZTUt
M2I5ZTNjNTNiYWIwLzEvNHRyQlVJU0RKZkQzSlljR1Q0cTZOOFhfTjVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9mMDk3NTktNmNlYi00NzU0LWJiZTUtM2I5ZTNjNTNiYWIw
LzEvNHRyQlVJU0RKZkQzSlljR1Q0cTZOOFhfTjVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQaCS15uG
96/ttOtgMnSYBWnTHccRAzYd4oexO5RtSmeQk64C+rBV6bZLwaOz2tgBczSpL2Pf
m6IqVD3GXg+EdJNwRuzNvfi0gpcTgZXgAMOeTkihXGWOniXxjG1Sb26GyMDHnrX1
s/Z33+i9al66rH2/DWbtZzdm8k4G9C5vEEzxDfmJjlUhJZrxubql97dtsJhtoVTR
+c53l5IsuruBuMBHxsUO4m/H3bJYQf/7StANw8X9D5/C6Itsi+rHcFVptoTvK2eg
lAJ/jcwaqxJ2WkTAMqRqtYpp0ouixwdEHzNQH7/aEB0swh9+OLkJJoftsaL7r2eT
wm5cJZsCgl7BUQ==
-----END CERTIFICATE-----
Generated at Thu Apr 17 22:30:46 2025 by rpki-client