Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft
File: 4gThwgEU13MWlN3E8nfE3xv_xPg.mft (raw, json)
Hash identifier: D28tph3mhWjS04oo5m8x9kKlgh+AZqFLJAnz8OUNWLI=
Subject key identifier: F4:D9:3E:0B:4A:9A:9B:AB:FC:4D:B8:FF:A5:13:91:20:EB:F3:31:E7
Authority key identifier: E2:04:E1:C2:01:14:D7:73:16:94:DD:C4:F2:77:C4:DF:1B:FF:C4:F8
Certificate issuer: /CN=e204e1c20114d7731694ddc4f277c4df1bffc4f8
Certificate serial: 019649A26B52AD15C1776DA22614361A07F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gThwgEU13MWlN3E8nfE3xv_xPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft
Manifest number: 14FA
Signing time: Fri 18 Apr 2025 16:01:43 +0000
Manifest this update: Fri 18 Apr 2025 16:01:43 +0000
Manifest next update: Sat 19 Apr 2025 16:01:43 +0000
Files and hashes: 1: 4gThwgEU13MWlN3E8nfE3xv_xPg.crl (hash: 9u9Ywk/OP+d4MZDfCfL+bl/x3L1NLsNRbHXXXTbt0O8=)
2: BDxLMkKnaceqpe6Gqca_PK3aI0Q.roa (hash: g477khgykIY2Mcl6yKjre2phFpHAMbTwNboQthw3CVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4gThwgEU13MWlN3E8nfE3xv_xPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:a2:6b:52:ad:15:c1:77:6d:a2:26:14:36:1a:07:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e204e1c20114d7731694ddc4f277c4df1bffc4f8
Validity
Not Before: Apr 18 16:01:43 2025 GMT
Not After : Apr 19 16:01:43 2025 GMT
Subject: CN=f4d93e0b4a9a9babfc4db8ffa5139120ebf331e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:5d:48:04:87:35:a9:20:11:06:db:e2:71:a9:
6f:69:62:58:84:3b:75:3e:ab:c1:31:05:f8:45:58:
4c:34:0e:c1:7f:a3:c9:e3:1a:23:3f:93:a8:4c:3a:
50:ab:de:fd:a8:83:77:5d:01:eb:36:3b:a4:da:09:
dc:2e:91:68:53:24:35:cc:63:e9:89:be:78:53:9b:
18:f2:47:7a:b6:99:58:ca:60:91:f7:43:80:e4:98:
17:01:5b:87:93:79:a3:34:cd:28:c2:ca:ff:1b:74:
8c:42:4e:32:62:d1:4d:01:98:8e:09:68:f1:fc:67:
b6:73:bd:d7:bc:5d:34:99:17:35:28:c8:49:3a:71:
b4:c5:5f:89:e6:ed:53:33:3c:85:96:00:02:7c:20:
27:c6:65:56:a8:4f:d1:0b:db:b8:43:8e:33:9c:fd:
d5:4a:8d:31:f4:86:1a:4c:fe:21:c0:09:d4:5e:d1:
9c:02:14:d9:ff:08:f9:da:c5:80:05:0f:d6:dc:bb:
94:55:fa:7f:c2:71:a7:89:c3:f7:a1:f1:d4:c2:81:
c4:f7:bb:cc:c5:97:e5:51:5a:d7:90:16:44:5c:0b:
59:dc:78:5e:f7:75:7a:c6:f6:70:2c:53:0b:a8:e5:
36:b7:90:f7:56:66:3d:0e:ce:4a:e8:33:30:79:55:
08:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D9:3E:0B:4A:9A:9B:AB:FC:4D:B8:FF:A5:13:91:20:EB:F3:31:E7
X509v3 Authority Key Identifier:
keyid:E2:04:E1:C2:01:14:D7:73:16:94:DD:C4:F2:77:C4:DF:1B:FF:C4:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gThwgEU13MWlN3E8nfE3xv_xPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ee:c9:f9:2c:eb:19:2f:44:ca:8b:f9:fd:99:da:2a:cd:b4:30:
3f:92:56:c0:6a:59:c2:ef:38:19:4f:22:02:be:0b:70:dc:5b:
bf:a3:71:71:30:1a:01:a0:68:48:18:70:08:04:6e:9f:6a:63:
f1:0a:82:b2:7e:f8:4e:fe:bf:67:41:97:2c:eb:bf:af:fd:00:
13:24:ca:1b:3e:fe:46:09:ec:64:8b:03:07:4e:8e:96:9d:ae:
e3:ec:dc:0d:03:7e:13:ac:ac:25:9b:35:a4:77:82:b4:07:02:
20:11:30:41:b3:63:8d:52:75:a2:21:7b:c6:41:b3:20:63:be:
ca:71:8b:fd:42:97:ec:6d:29:b1:b9:e5:a4:f6:64:1c:e1:0f:
e3:d1:8b:60:fd:f6:a3:9f:b9:54:a2:67:c5:ac:91:59:1a:7e:
8e:09:b0:67:cf:31:88:9f:ff:69:25:c3:20:d7:da:3d:84:63:
c9:b9:2d:7f:3d:fc:4c:b7:95:db:12:d5:63:3e:17:4d:4b:2e:
75:31:bf:33:3e:e4:9a:74:80:0f:aa:cb:4a:94:66:14:fe:9d:
15:bf:e8:16:de:da:96:5e:db:84:f4:f2:d8:c5:57:3e:87:fc:
fc:8a:8c:e1:ae:a8:31:83:0f:ad:60:25:1a:ee:39:1f:35:5f:
04:5e:7d:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZJomtSrRXBd22iJhQ2GgfyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyMDRlMWMyMDExNGQ3NzMxNjk0ZGRjNGYyNzdjNGRmMWJm
ZmM0ZjgwHhcNMjUwNDE4MTYwMTQzWhcNMjUwNDE5MTYwMTQzWjAzMTEwLwYDVQQD
EyhmNGQ5M2UwYjRhOWE5YmFiZmM0ZGI4ZmZhNTEzOTEyMGViZjMzMWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9V1IBIc1qSARBtvicalvaWJYhDt1
PqvBMQX4RVhMNA7Bf6PJ4xojP5OoTDpQq979qIN3XQHrNjuk2gncLpFoUyQ1zGPp
ib54U5sY8kd6tplYymCR90OA5JgXAVuHk3mjNM0owsr/G3SMQk4yYtFNAZiOCWjx
/Ge2c73XvF00mRc1KMhJOnG0xV+J5u1TMzyFlgACfCAnxmVWqE/RC9u4Q44znP3V
So0x9IYaTP4hwAnUXtGcAhTZ/wj52sWABQ/W3LuUVfp/wnGnicP3ofHUwoHE97vM
xZflUVrXkBZEXAtZ3Hhe93V6xvZwLFMLqOU2t5D3VmY9Ds5K6DMweVUIVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPTZPgtKmpur/E24/6UTkSDr8zHnMB8GA1UdIwQY
MBaAFOIE4cIBFNdzFpTdxPJ3xN8b/8T4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGdUaHdnRVUxM01XbE4zRThuZkUzeHZfeFBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9iOWRmNWEtYTQ1NC00ZTI3LTg2YWYt
MTNkMzgwNzE1Y2VmLzEvNGdUaHdnRVUxM01XbE4zRThuZkUzeHZfeFBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9iOWRmNWEtYTQ1NC00ZTI3LTg2YWYtMTNkMzgwNzE1Y2Vm
LzEvNGdUaHdnRVUxM01XbE4zRThuZkUzeHZfeFBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA7sn5LOsZ
L0TKi/n9mdoqzbQwP5JWwGpZwu84GU8iAr4LcNxbv6NxcTAaAaBoSBhwCARun2pj
8QqCsn74Tv6/Z0GXLOu/r/0AEyTKGz7+RgnsZIsDB06Olp2u4+zcDQN+E6ysJZs1
pHeCtAcCIBEwQbNjjVJ1oiF7xkGzIGO+ynGL/UKX7G0psbnlpPZkHOEP49GLYP32
o5+5VKJnxayRWRp+jgmwZ88xiJ//aSXDINfaPYRjybktfz38TLeV2xLVYz4XTUsu
dTG/Mz7kmnSAD6rLSpRmFP6dFb/oFt7all7bhPTy2MVXPof8/IqM4a6oMYMPrWAl
Gu45HzVfBF59dQ==
-----END CERTIFICATE-----
Generated at Fri Apr 18 22:21:18 2025 by rpki-client