Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.mft
File: 4sVVsgW63NgpS9MyW5wvvViNIZA.mft (raw, json)
Hash identifier: t3zAM2B8Y2YWS9sg1E6HE8SNXKTVL0CSiiuCBuSyjhw=
Subject key identifier: 4D:6A:34:E6:58:CD:2C:AF:F3:41:D1:96:CA:4A:E6:AA:94:72:6B:AE
Authority key identifier: E2:C5:55:B2:05:BA:DC:D8:29:4B:D3:32:5B:9C:2F:BD:58:8D:21:90
Certificate issuer: /CN=e2c555b205badcd8294bd3325b9c2fbd588d2190
Certificate serial: 019651C8D3ED87088CA51A31EB2DF09FFD31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sVVsgW63NgpS9MyW5wvvViNIZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.mft
Manifest number: 148B
Signing time: Sun 20 Apr 2025 06:00:37 +0000
Manifest this update: Sun 20 Apr 2025 06:00:37 +0000
Manifest next update: Mon 21 Apr 2025 06:00:37 +0000
Files and hashes: 1: 4sVVsgW63NgpS9MyW5wvvViNIZA.crl (hash: LCky3iR4e7UOfGctUCEcHftmWhW8L0I6+F4r7qW8cec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sVVsgW63NgpS9MyW5wvvViNIZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:c8:d3:ed:87:08:8c:a5:1a:31:eb:2d:f0:9f:fd:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c555b205badcd8294bd3325b9c2fbd588d2190
Validity
Not Before: Apr 20 06:00:37 2025 GMT
Not After : Apr 21 06:00:37 2025 GMT
Subject: CN=4d6a34e658cd2caff341d196ca4ae6aa94726bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:10:c4:5b:16:0e:9a:87:14:6b:aa:19:88:92:
1b:7f:17:93:41:23:c8:6c:5c:b3:cb:4b:b0:f0:95:
76:76:e8:6b:81:9d:34:d0:8d:18:63:f5:fe:2c:e9:
89:28:2e:5d:e4:ee:04:ad:a6:60:63:97:a5:e9:c0:
86:7d:28:82:3d:7c:eb:a6:1f:4d:3a:f8:3a:dc:9c:
c0:71:7d:d3:1f:ab:52:30:13:0a:81:26:c1:a0:ba:
09:13:72:75:4d:94:08:0a:5b:98:4e:ee:7d:f6:9a:
82:0b:5e:af:38:33:24:25:54:70:67:b0:3f:aa:41:
77:db:76:bc:7f:c5:79:7c:b7:ba:44:46:17:ae:5b:
34:eb:76:10:dd:99:69:32:5e:93:aa:79:62:58:0c:
fc:d5:a1:9f:81:99:6b:7a:98:f9:df:56:d8:f8:4e:
35:4f:46:dc:a8:e4:7f:90:85:dd:ac:a5:fe:dd:bb:
dd:dd:63:a0:bc:8e:45:f9:1d:aa:11:4f:05:86:e6:
a1:39:d3:07:82:0c:81:34:98:9e:f8:b6:19:39:71:
cb:a9:44:5f:7d:de:b6:9b:7c:37:fb:6b:95:1c:77:
56:a5:4c:ca:da:55:cd:05:41:fe:99:a8:60:21:e1:
c2:c7:89:82:6f:93:0c:d6:88:b5:e4:b6:48:bf:2f:
a4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:6A:34:E6:58:CD:2C:AF:F3:41:D1:96:CA:4A:E6:AA:94:72:6B:AE
X509v3 Authority Key Identifier:
keyid:E2:C5:55:B2:05:BA:DC:D8:29:4B:D3:32:5B:9C:2F:BD:58:8D:21:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sVVsgW63NgpS9MyW5wvvViNIZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:4e:4d:85:af:4d:cc:6f:7e:ef:2f:2c:6d:9f:d3:a3:da:6c:
76:b6:61:23:7c:2e:17:40:f6:61:57:19:8e:f5:0b:a1:6f:54:
ea:7e:10:53:5e:68:1b:ad:d7:2a:65:fc:0c:b9:0e:c3:ec:6d:
69:83:fe:68:56:fc:e3:46:5d:04:c7:2e:97:d5:01:4c:7c:80:
0b:92:46:b0:14:41:2c:e5:04:15:53:48:16:c3:c4:d7:99:e1:
15:99:9b:5e:61:24:b9:85:01:99:d9:e5:3a:58:ec:6d:d4:94:
ff:13:3e:15:db:c9:29:8e:94:e9:ea:46:ae:7e:bd:37:c1:41:
27:96:be:b7:7b:a4:ff:af:56:d7:2a:4f:64:76:51:68:bf:fc:
ad:45:5d:c0:36:73:f6:8d:1e:01:7b:da:e1:85:70:c7:4b:64:
37:9f:37:2a:1b:62:07:65:d4:0f:1c:9f:ae:c7:33:f2:eb:0b:
6d:2b:db:80:df:41:56:b0:d0:5d:ad:2e:c1:a1:05:25:1f:2c:
df:54:9b:ad:f4:6e:05:04:a1:69:5d:14:78:6f:8d:9e:a7:87:
3c:ee:44:3f:bf:ae:4f:5e:a7:f5:05:89:04:67:3f:02:b6:04:
b1:c6:f3:92:29:ca:ae:42:07:63:09:32:c1:5a:e8:81:2b:13:
93:cd:93:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZRyNPthwiMpRox6y3wn/0xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYzU1NWIyMDViYWRjZDgyOTRiZDMzMjViOWMyZmJkNTg4
ZDIxOTAwHhcNMjUwNDIwMDYwMDM3WhcNMjUwNDIxMDYwMDM3WjAzMTEwLwYDVQQD
Eyg0ZDZhMzRlNjU4Y2QyY2FmZjM0MWQxOTZjYTRhZTZhYTk0NzI2YmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRDEWxYOmocUa6oZiJIbfxeTQSPI
bFyzy0uw8JV2duhrgZ000I0YY/X+LOmJKC5d5O4EraZgY5el6cCGfSiCPXzrph9N
Ovg63JzAcX3TH6tSMBMKgSbBoLoJE3J1TZQICluYTu599pqCC16vODMkJVRwZ7A/
qkF323a8f8V5fLe6REYXrls063YQ3ZlpMl6TqnliWAz81aGfgZlrepj531bY+E41
T0bcqOR/kIXdrKX+3bvd3WOgvI5F+R2qEU8FhuahOdMHggyBNJie+LYZOXHLqURf
fd62m3w3+2uVHHdWpUzK2lXNBUH+mahgIeHCx4mCb5MM1oi15LZIvy+kRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE1qNOZYzSyv80HRlspK5qqUcmuuMB8GA1UdIwQY
MBaAFOLFVbIFutzYKUvTMlucL71YjSGQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHNWVnNnVzYzTmdwUzlNeVc1d3Z2VmlOSVpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8xNWM5ZjAtMGVjNC00MTI5LTk4NGYt
NDQ4NzFlNjg1MmY3LzEvNHNWVnNnVzYzTmdwUzlNeVc1d3Z2VmlOSVpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8xNWM5ZjAtMGVjNC00MTI5LTk4NGYtNDQ4NzFlNjg1MmY3
LzEvNHNWVnNnVzYzTmdwUzlNeVc1d3Z2VmlOSVpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYE5Nha9N
zG9+7y8sbZ/To9psdrZhI3wuF0D2YVcZjvULoW9U6n4QU15oG63XKmX8DLkOw+xt
aYP+aFb840ZdBMcul9UBTHyAC5JGsBRBLOUEFVNIFsPE15nhFZmbXmEkuYUBmdnl
OljsbdSU/xM+FdvJKY6U6epGrn69N8FBJ5a+t3uk/69W1ypPZHZRaL/8rUVdwDZz
9o0eAXva4YVwx0tkN583KhtiB2XUDxyfrscz8usLbSvbgN9BVrDQXa0uwaEFJR8s
31SbrfRuBQShaV0UeG+NnqeHPO5EP7+uT16n9QWJBGc/ArYEscbzkinKrkIHYwky
wVrogSsTk82T0g==
-----END CERTIFICATE-----
Generated at Sun Apr 20 12:55:47 2025 by rpki-client