Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.mft
File: 4rRpKpKR8sZ7VswV2k0xASAjAXc.mft (raw, json)
Hash identifier: hLKiz4Bchjf0A4on5TrFKWUSXUCUKLppqEtiK1JlZSI=
Subject key identifier: 7D:F7:FB:D1:A9:DD:C6:EA:C9:A9:7B:16:E9:E5:53:96:F4:3E:B2:5D
Authority key identifier: E2:B4:69:2A:92:91:F2:C6:7B:56:CC:15:DA:4D:31:01:20:23:01:77
Certificate issuer: /CN=e2b4692a9291f2c67b56cc15da4d310120230177
Certificate serial: 019643D72F2B099D9038223CE179F6416276
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rRpKpKR8sZ7VswV2k0xASAjAXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.mft
Manifest number: 0158
Signing time: Thu 17 Apr 2025 13:01:37 +0000
Manifest this update: Thu 17 Apr 2025 13:01:37 +0000
Manifest next update: Fri 18 Apr 2025 13:01:37 +0000
Files and hashes: 1: 4NCyaBU3y3IsV-tIz8ykBHkjQrA.roa (hash: 6MR/wTh/d3g4brX5BBFxl1tdarfWH7geP5gRFSxNByI=)
2: 4rRpKpKR8sZ7VswV2k0xASAjAXc.crl (hash: EzStZPkIZ0FnW5SKeL+am1iHCl3tn/QlgR12D/furdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4rRpKpKR8sZ7VswV2k0xASAjAXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 13:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:d7:2f:2b:09:9d:90:38:22:3c:e1:79:f6:41:62:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b4692a9291f2c67b56cc15da4d310120230177
Validity
Not Before: Apr 17 13:01:37 2025 GMT
Not After : Apr 18 13:01:37 2025 GMT
Subject: CN=7df7fbd1a9ddc6eac9a97b16e9e55396f43eb25d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:20:67:43:84:a6:9a:8a:20:38:63:92:0e:b1:
d4:a4:52:60:76:7b:5e:87:e3:75:00:29:fc:d2:32:
cf:0a:3b:bc:5e:9f:ca:3d:8a:4e:db:22:e7:aa:a2:
ff:0c:7f:4f:92:48:af:31:bc:54:2c:c1:b8:17:ab:
d9:40:6d:c8:e7:61:d7:64:b0:4a:3f:bb:fe:db:6b:
21:25:1b:72:4c:8d:7e:a8:46:2e:08:ca:b6:fd:e9:
19:1c:40:8c:5e:ce:d3:02:89:48:68:19:c7:cb:4d:
1f:7c:01:d9:30:c2:16:db:12:42:09:b4:72:d7:f0:
cb:d0:69:55:38:4f:50:c7:bd:28:eb:34:f8:45:4f:
d8:a3:fc:2d:cf:5b:e8:b6:63:4d:8e:26:da:db:39:
75:20:78:a5:79:15:dc:1e:0f:d4:4c:ce:0d:10:2e:
3a:ca:a5:c5:1a:c9:96:20:9e:4e:c5:c4:84:24:e9:
d9:c9:c3:01:3c:74:e9:81:96:e2:b5:0f:72:e6:9b:
f4:e9:71:59:61:fe:42:09:e1:98:70:a9:55:15:b1:
be:87:98:71:48:66:ed:74:8d:61:00:f9:da:ad:dc:
52:be:e3:55:29:6f:ee:b6:d1:8b:f0:5a:04:50:bd:
c4:7f:90:62:cc:56:36:0b:c6:ef:b1:c7:3c:d8:a2:
8e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F7:FB:D1:A9:DD:C6:EA:C9:A9:7B:16:E9:E5:53:96:F4:3E:B2:5D
X509v3 Authority Key Identifier:
keyid:E2:B4:69:2A:92:91:F2:C6:7B:56:CC:15:DA:4D:31:01:20:23:01:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rRpKpKR8sZ7VswV2k0xASAjAXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:9c:c8:8d:c5:73:fb:7e:61:7a:a6:04:40:83:25:fe:b5:6e:
ac:11:7d:0c:9a:7c:0f:7e:c0:5e:37:8e:4e:26:10:5f:27:47:
71:74:ba:b5:5e:d4:00:ac:79:24:36:f2:eb:b5:22:d3:30:33:
27:b8:36:f8:6d:51:87:d2:76:6f:68:c1:5f:8d:01:cc:0f:b8:
aa:3c:a2:47:98:5d:10:ff:83:ba:3e:09:27:7a:38:07:08:9b:
04:e1:34:9a:4a:94:19:b7:bb:ce:1e:46:f3:8d:2d:dd:81:13:
30:63:7e:d5:5a:50:95:23:6d:79:42:35:7e:5c:1e:48:c2:ce:
e5:98:1e:9b:32:28:ef:d5:a7:29:dd:de:75:19:3f:49:a9:cd:
0f:b2:55:e5:91:a8:1b:e3:36:ec:b7:a4:67:ce:8e:d6:ea:44:
e2:3b:ec:7a:f0:6e:b7:39:af:e1:93:e6:1b:f7:b6:20:a6:f0:
d1:fe:de:70:36:0c:1e:12:12:55:24:ce:c6:3c:b7:02:47:35:
18:c8:da:08:dc:40:10:50:0f:1a:ce:b6:b0:09:c0:ef:5e:10:
f0:ce:31:a8:f3:5c:27:68:cb:8d:c1:6c:3e:45:1b:05:69:fa:
90:38:c3:b8:8d:a2:56:60:b2:05:56:66:21:72:af:7f:d9:e7:
8b:7b:e7:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZD1y8rCZ2QOCI84Xn2QWJ2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYjQ2OTJhOTI5MWYyYzY3YjU2Y2MxNWRhNGQzMTAxMjAy
MzAxNzcwHhcNMjUwNDE3MTMwMTM3WhcNMjUwNDE4MTMwMTM3WjAzMTEwLwYDVQQD
Eyg3ZGY3ZmJkMWE5ZGRjNmVhYzlhOTdiMTZlOWU1NTM5NmY0M2ViMjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCBnQ4SmmoogOGOSDrHUpFJgdnte
h+N1ACn80jLPCju8Xp/KPYpO2yLnqqL/DH9PkkivMbxULMG4F6vZQG3I52HXZLBK
P7v+22shJRtyTI1+qEYuCMq2/ekZHECMXs7TAolIaBnHy00ffAHZMMIW2xJCCbRy
1/DL0GlVOE9Qx70o6zT4RU/Yo/wtz1votmNNjiba2zl1IHileRXcHg/UTM4NEC46
yqXFGsmWIJ5OxcSEJOnZycMBPHTpgZbitQ9y5pv06XFZYf5CCeGYcKlVFbG+h5hx
SGbtdI1hAPnardxSvuNVKW/uttGL8FoEUL3Ef5BizFY2C8bvscc82KKO9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH33+9Gp3cbqyal7FunlU5b0PrJdMB8GA1UdIwQY
MBaAFOK0aSqSkfLGe1bMFdpNMQEgIwF3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHJScEtwS1I4c1o3VnN3VjJrMHhBU0FqQVhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82NTlkMjctYmJiNS00OWY0LThmZDEt
YzI2NGI3NWI2Yjc4LzEvNHJScEtwS1I4c1o3VnN3VjJrMHhBU0FqQVhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82NTlkMjctYmJiNS00OWY0LThmZDEtYzI2NGI3NWI2Yjc4
LzEvNHJScEtwS1I4c1o3VnN3VjJrMHhBU0FqQVhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAspzIjcVz
+35heqYEQIMl/rVurBF9DJp8D37AXjeOTiYQXydHcXS6tV7UAKx5JDby67Ui0zAz
J7g2+G1Rh9J2b2jBX40BzA+4qjyiR5hdEP+Duj4JJ3o4BwibBOE0mkqUGbe7zh5G
840t3YETMGN+1VpQlSNteUI1flweSMLO5ZgemzIo79WnKd3edRk/SanND7JV5ZGo
G+M27LekZ86O1upE4jvsevButzmv4ZPmG/e2IKbw0f7ecDYMHhISVSTOxjy3Akc1
GMjaCNxAEFAPGs62sAnA714Q8M4xqPNcJ2jLjcFsPkUbBWn6kDjDuI2iVmCyBVZm
IXKvf9nni3vn1w==
-----END CERTIFICATE-----
Generated at Thu Apr 17 22:20:47 2025 by rpki-client