Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4d2928-c636-40c0-9c9b-7990e3d1ddaa/1/4r7xjk9w0I3z-zD-5QfltakZb5k.mft
File: 4r7xjk9w0I3z-zD-5QfltakZb5k.mft (raw, json)
Hash identifier: e8gdsrMBvLhtZYySW0qC6gduGZkSg1YBLtn7O9wXFn8=
Subject key identifier: BA:D5:F7:1E:AD:66:B0:F3:A2:96:C3:59:01:F9:20:DE:77:40:45:A0
Authority key identifier: E2:BE:F1:8E:4F:70:D0:8D:F3:FB:30:FE:E5:07:E5:B5:A9:19:6F:99
Certificate issuer: /CN=e2bef18e4f70d08df3fb30fee507e5b5a9196f99
Certificate serial: 01963FF92EAC64A2662893BB9A22967C33E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4r7xjk9w0I3z-zD-5QfltakZb5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4d2928-c636-40c0-9c9b-7990e3d1ddaa/1/4r7xjk9w0I3z-zD-5QfltakZb5k.mft
Manifest number: 0758
Signing time: Wed 16 Apr 2025 19:00:17 +0000
Manifest this update: Wed 16 Apr 2025 19:00:17 +0000
Manifest next update: Thu 17 Apr 2025 19:00:17 +0000
Files and hashes: 1: 4r7xjk9w0I3z-zD-5QfltakZb5k.crl (hash: Scvx/I8MuxECf5Exrv+XHR5KwfnfNUMhW87Zr3JCgA4=)
2: MiW57nOg30xLDqZY9OOUVNFKZQY.roa (hash: 2YBiQuBVr6rbcdD+nTl7ci5JjnWlTA1kLFdMgjGPElQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/4d2928-c636-40c0-9c9b-7990e3d1ddaa/1/4r7xjk9w0I3z-zD-5QfltakZb5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/4d2928-c636-40c0-9c9b-7990e3d1ddaa/1/4r7xjk9w0I3z-zD-5QfltakZb5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/4r7xjk9w0I3z-zD-5QfltakZb5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:f9:2e:ac:64:a2:66:28:93:bb:9a:22:96:7c:33:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2bef18e4f70d08df3fb30fee507e5b5a9196f99
Validity
Not Before: Apr 16 19:00:17 2025 GMT
Not After : Apr 17 19:00:17 2025 GMT
Subject: CN=bad5f71ead66b0f3a296c35901f920de774045a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:e6:6b:79:f3:09:13:48:24:2f:aa:4f:d4:42:
f1:e4:94:5b:95:3b:11:c0:c8:c2:24:78:b5:29:a0:
e9:1a:49:ef:a9:03:67:6a:5c:11:a2:32:0f:bd:42:
02:cb:82:cc:9e:4c:d2:3a:1b:06:08:de:34:58:79:
87:94:2d:3b:a4:fe:50:87:44:17:a6:c8:f6:97:65:
95:be:c9:19:d3:0b:89:e2:de:10:17:79:f1:53:c7:
da:18:00:63:60:43:11:59:ea:a8:a8:2c:34:27:6b:
8a:84:cb:30:78:a2:16:4e:db:bf:b5:4e:77:25:7a:
98:94:98:59:bd:f7:79:59:69:a1:e7:54:93:09:5b:
cb:e7:7e:13:b8:31:12:22:37:ce:d4:a6:01:ee:53:
76:80:fc:9d:92:03:46:f6:90:32:99:e2:a1:82:2a:
e9:2e:f6:ac:4b:6f:9e:96:49:a6:da:1b:84:97:2f:
fe:f5:a9:4f:a5:ac:36:29:42:04:48:82:d7:56:c7:
64:0d:9c:0f:ff:85:1c:e9:7c:be:46:b8:8f:5e:bb:
1c:a4:8c:3d:e3:62:2c:15:31:11:01:b2:69:f9:83:
bb:3e:3f:ea:11:2c:c9:7a:bb:62:2d:b5:c4:a5:bf:
35:d6:7b:bb:7e:45:19:69:af:66:7b:df:a1:82:d8:
b3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D5:F7:1E:AD:66:B0:F3:A2:96:C3:59:01:F9:20:DE:77:40:45:A0
X509v3 Authority Key Identifier:
keyid:E2:BE:F1:8E:4F:70:D0:8D:F3:FB:30:FE:E5:07:E5:B5:A9:19:6F:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4r7xjk9w0I3z-zD-5QfltakZb5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4d2928-c636-40c0-9c9b-7990e3d1ddaa/1/4r7xjk9w0I3z-zD-5QfltakZb5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4d2928-c636-40c0-9c9b-7990e3d1ddaa/1/4r7xjk9w0I3z-zD-5QfltakZb5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ab:5e:17:96:18:bc:4a:23:59:00:05:7e:3a:38:80:f0:2b:
32:cb:71:a7:c1:d5:3f:c5:a0:df:42:f4:cd:20:01:fc:bb:06:
89:1e:eb:99:15:3f:17:b6:06:a7:dd:f6:db:d3:92:26:02:70:
fe:fc:ca:da:9b:27:7b:6b:00:67:3f:7d:35:ad:af:5b:b6:b1:
6d:c6:6f:64:60:12:5c:2e:23:4b:f0:67:81:38:b8:4c:b0:5f:
d9:a6:66:b1:7f:3c:06:37:aa:50:f3:08:c5:dc:c0:db:58:b3:
0e:05:2f:11:fa:be:2f:78:53:1e:c0:4b:f3:5d:32:df:68:c8:
2b:ba:d6:49:b6:4b:35:26:2a:c1:4f:22:44:d4:32:fb:e0:0b:
34:47:d5:90:51:5a:bf:4e:1c:0f:01:7d:6e:b6:7b:f7:4d:70:
90:19:9e:28:b4:88:a1:04:7f:47:dc:b8:c7:75:77:91:2d:8c:
2e:5d:78:9d:21:00:6a:3e:fb:d2:97:63:fa:9a:d8:6a:1c:a3:
e5:52:23:63:78:bd:c9:4b:43:76:15:8c:09:ff:82:c2:51:74:
fc:20:07:7a:5a:02:98:78:e9:a2:c2:52:f7:9a:a3:d3:5e:8c:
98:3a:03:7a:c4:61:01:24:58:d0:0f:ba:c8:10:f8:b4:5d:a8:
33:8d:a4:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY/+S6sZKJmKJO7miKWfDPoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYmVmMThlNGY3MGQwOGRmM2ZiMzBmZWU1MDdlNWI1YTkx
OTZmOTkwHhcNMjUwNDE2MTkwMDE3WhcNMjUwNDE3MTkwMDE3WjAzMTEwLwYDVQQD
EyhiYWQ1ZjcxZWFkNjZiMGYzYTI5NmMzNTkwMWY5MjBkZTc3NDA0NWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6eZrefMJE0gkL6pP1ELx5JRblTsR
wMjCJHi1KaDpGknvqQNnalwRojIPvUICy4LMnkzSOhsGCN40WHmHlC07pP5Qh0QX
psj2l2WVvskZ0wuJ4t4QF3nxU8faGABjYEMRWeqoqCw0J2uKhMsweKIWTtu/tU53
JXqYlJhZvfd5WWmh51STCVvL534TuDESIjfO1KYB7lN2gPydkgNG9pAymeKhgirp
LvasS2+elkmm2huEly/+9alPpaw2KUIESILXVsdkDZwP/4Uc6Xy+RriPXrscpIw9
42IsFTERAbJp+YO7Pj/qESzJertiLbXEpb811nu7fkUZaa9me9+hgtizbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLrV9x6tZrDzopbDWQH5IN53QEWgMB8GA1UdIwQY
MBaAFOK+8Y5PcNCN8/sw/uUH5bWpGW+ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHI3eGprOXcwSTN6LXpELTVRZmx0YWtaYjVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy80ZDI5MjgtYzYzNi00MGMwLTljOWIt
Nzk5MGUzZDFkZGFhLzEvNHI3eGprOXcwSTN6LXpELTVRZmx0YWtaYjVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy80ZDI5MjgtYzYzNi00MGMwLTljOWItNzk5MGUzZDFkZGFh
LzEvNHI3eGprOXcwSTN6LXpELTVRZmx0YWtaYjVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHateF5YY
vEojWQAFfjo4gPArMstxp8HVP8Wg30L0zSAB/LsGiR7rmRU/F7YGp93229OSJgJw
/vzK2psne2sAZz99Na2vW7axbcZvZGASXC4jS/BngTi4TLBf2aZmsX88BjeqUPMI
xdzA21izDgUvEfq+L3hTHsBL810y32jIK7rWSbZLNSYqwU8iRNQy++ALNEfVkFFa
v04cDwF9brZ7901wkBmeKLSIoQR/R9y4x3V3kS2MLl14nSEAaj770pdj+prYahyj
5VIjY3i9yUtDdhWMCf+CwlF0/CAHeloCmHjposJS95qj016MmDoDesRhASRY0A+6
yBD4tF2oM42ksQ==
-----END CERTIFICATE-----
Generated at Thu Apr 17 03:33:41 2025 by rpki-client