Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft
File: 4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft (raw, json)
Hash identifier: lkIYC0LG3i2+c+ApyrcSReV1XZRMVJbeBqKZ0syVopA=
Subject key identifier: 23:2A:4F:D7:E2:13:45:31:8F:58:8C:C4:81:1A:2F:18:E0:ED:94:68
Authority key identifier: E2:9E:D9:A9:D1:B6:B5:38:3E:BF:94:6D:5F:C5:49:80:61:25:63:EA
Certificate issuer: /CN=e29ed9a9d1b6b5383ebf946d5fc54980612563ea
Certificate serial: 019642FA5275B7B84F114E0A870B5FD57390
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4p7ZqdG2tTg-v5RtX8VJgGElY-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft
Manifest number: 14F4
Signing time: Thu 17 Apr 2025 09:00:23 +0000
Manifest this update: Thu 17 Apr 2025 09:00:23 +0000
Manifest next update: Fri 18 Apr 2025 09:00:23 +0000
Files and hashes: 1: 4p7ZqdG2tTg-v5RtX8VJgGElY-o.crl (hash: 9LBQ3/Ej6bhTg7RzRTg3u5vLqjqd/aS5yd269ofqSpk=)
2: BfpSqqWPnz2zm8axpIU080CSsRs.roa (hash: i9cs+yG6O1Ft1obwZZ0jOFlWDCTv2KU1uV2QUmB00UQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4p7ZqdG2tTg-v5RtX8VJgGElY-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:42:fa:52:75:b7:b8:4f:11:4e:0a:87:0b:5f:d5:73:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e29ed9a9d1b6b5383ebf946d5fc54980612563ea
Validity
Not Before: Apr 17 09:00:23 2025 GMT
Not After : Apr 18 09:00:23 2025 GMT
Subject: CN=232a4fd7e21345318f588cc4811a2f18e0ed9468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:65:ac:8c:be:b2:9a:85:65:00:81:09:58:bc:
b9:1f:9d:d6:2c:49:5b:41:56:cc:ca:61:b2:45:63:
88:65:bb:80:17:be:ce:63:fe:cf:a1:02:64:3d:1f:
2e:bd:f6:f9:1b:0b:fb:fa:47:a4:0f:91:87:a1:21:
c1:e0:df:e3:f7:db:c9:7e:59:f6:30:d5:0a:e7:9d:
79:13:09:5a:ae:b1:da:88:6b:4c:e1:02:22:44:b3:
41:e1:5f:ab:5c:0b:86:55:9c:8b:14:34:50:4b:91:
22:0d:58:54:ca:4a:9a:de:84:83:7e:84:0c:9d:96:
0a:4c:ee:34:7a:2f:6d:0d:51:1e:ba:2f:74:3e:26:
33:f1:87:72:19:b3:cc:5a:07:83:c5:b2:9c:10:fe:
c6:5b:93:64:5a:26:b5:8e:85:f8:48:96:f8:40:d4:
bb:32:21:f9:46:cc:6c:22:22:4e:de:4a:3e:f5:ae:
15:35:8a:6f:0f:55:4a:4d:1e:1e:e1:56:14:a1:25:
2d:e7:91:0e:40:a3:98:77:88:94:b0:aa:7a:8a:46:
de:5c:be:3a:df:3a:d5:32:0f:2c:9e:e9:fe:9b:46:
20:16:37:2a:d6:02:d8:2c:f0:a1:f4:8c:82:c1:81:
27:a5:14:f0:bf:96:13:b2:aa:d5:00:58:45:b6:c0:
29:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:2A:4F:D7:E2:13:45:31:8F:58:8C:C4:81:1A:2F:18:E0:ED:94:68
X509v3 Authority Key Identifier:
keyid:E2:9E:D9:A9:D1:B6:B5:38:3E:BF:94:6D:5F:C5:49:80:61:25:63:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4p7ZqdG2tTg-v5RtX8VJgGElY-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:54:46:30:90:30:bb:6d:70:c3:78:b1:bd:03:af:cb:f5:93:
cb:8f:61:98:7d:22:ba:45:60:d1:93:1b:50:a2:72:fc:7f:f9:
16:b2:32:c0:d5:60:4e:79:c6:23:e7:78:4c:69:c6:af:d6:64:
04:7f:09:bc:da:b0:37:6e:21:13:d0:a5:61:da:65:41:ea:fc:
5e:56:cf:24:c3:24:16:36:e6:90:4c:08:a2:86:bb:75:4f:0e:
36:07:3c:e0:6b:2e:73:ed:54:89:8b:3c:34:1d:a0:3f:67:fa:
2e:6c:7e:8c:22:1b:1d:eb:fd:d2:f8:ab:fd:97:ba:cc:50:b9:
16:d4:eb:38:ce:42:b9:34:c9:19:02:0b:40:28:86:fa:26:72:
36:22:0a:5c:53:cf:48:10:22:2d:d9:f7:45:73:e6:6b:4f:48:
1a:f2:4e:37:9c:66:21:a5:a1:9d:9a:f3:7a:e6:d1:cb:78:55:
13:f0:68:a3:3d:38:32:b6:e1:ae:97:60:53:d8:0c:0b:2f:0d:
80:98:ed:0a:fa:0c:eb:6d:38:81:92:e1:60:2d:36:ff:1f:7b:
45:70:f9:89:2f:1b:4a:4a:98:7e:c3:d7:0d:26:83:b5:31:c3:
98:6d:47:46:e7:b2:f2:6a:3d:9b:22:45:c1:96:a0:3c:de:b0:
d1:75:4c:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZC+lJ1t7hPEU4Khwtf1XOQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyOWVkOWE5ZDFiNmI1MzgzZWJmOTQ2ZDVmYzU0OTgwNjEy
NTYzZWEwHhcNMjUwNDE3MDkwMDIzWhcNMjUwNDE4MDkwMDIzWjAzMTEwLwYDVQQD
EygyMzJhNGZkN2UyMTM0NTMxOGY1ODhjYzQ4MTFhMmYxOGUwZWQ5NDY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4WWsjL6ymoVlAIEJWLy5H53WLElb
QVbMymGyRWOIZbuAF77OY/7PoQJkPR8uvfb5Gwv7+kekD5GHoSHB4N/j99vJfln2
MNUK5515EwlarrHaiGtM4QIiRLNB4V+rXAuGVZyLFDRQS5EiDVhUykqa3oSDfoQM
nZYKTO40ei9tDVEeui90PiYz8YdyGbPMWgeDxbKcEP7GW5NkWia1joX4SJb4QNS7
MiH5RsxsIiJO3ko+9a4VNYpvD1VKTR4e4VYUoSUt55EOQKOYd4iUsKp6ikbeXL46
3zrVMg8snun+m0YgFjcq1gLYLPCh9IyCwYEnpRTwv5YTsqrVAFhFtsApSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCMqT9fiE0Uxj1iMxIEaLxjg7ZRoMB8GA1UdIwQY
MBaAFOKe2anRtrU4Pr+UbV/FSYBhJWPqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHA3WnFkRzJ0VGctdjVSdFg4VkpnR0VsWS1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8zOGVjNWItMzM2ZC00YTFjLWE4NGEt
ZjZjNjg1OWIzMGYwLzEvNHA3WnFkRzJ0VGctdjVSdFg4VkpnR0VsWS1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8zOGVjNWItMzM2ZC00YTFjLWE4NGEtZjZjNjg1OWIzMGYw
LzEvNHA3WnFkRzJ0VGctdjVSdFg4VkpnR0VsWS1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXVRGMJAw
u21ww3ixvQOvy/WTy49hmH0iukVg0ZMbUKJy/H/5FrIywNVgTnnGI+d4TGnGr9Zk
BH8JvNqwN24hE9ClYdplQer8XlbPJMMkFjbmkEwIooa7dU8ONgc84Gsuc+1UiYs8
NB2gP2f6Lmx+jCIbHev90vir/Ze6zFC5FtTrOM5CuTTJGQILQCiG+iZyNiIKXFPP
SBAiLdn3RXPma09IGvJON5xmIaWhnZrzeubRy3hVE/Booz04MrbhrpdgU9gMCy8N
gJjtCvoM6204gZLhYC02/x97RXD5iS8bSkqYfsPXDSaDtTHDmG1HRuey8mo9myJF
wZagPN6w0XVMNA==
-----END CERTIFICATE-----
Generated at Thu Apr 17 13:30:32 2025 by rpki-client