Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/4VhJEBJK93bjDlrPBV1rrhdhpTY.mft
File: 4VhJEBJK93bjDlrPBV1rrhdhpTY.mft (raw, json)
Hash identifier: XpSMxZE9/oAwaPGxdumjSKswU8QG06jEOFkvR0lSZ6Y=
Subject key identifier: 69:B9:F6:47:9B:02:9C:2A:84:CA:7B:81:94:39:F4:A7:82:D4:B6:E3
Authority key identifier: E1:58:49:10:12:4A:F7:76:E3:0E:5A:CF:05:5D:6B:AE:17:61:A5:36
Certificate issuer: /CN=e1584910124af776e30e5acf055d6bae1761a536
Certificate serial: 019604F7DC10624D0C7E18E6216DB2061E2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VhJEBJK93bjDlrPBV1rrhdhpTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/4VhJEBJK93bjDlrPBV1rrhdhpTY.mft
Manifest number: 09C1
Signing time: Sat 05 Apr 2025 08:01:14 +0000
Manifest this update: Sat 05 Apr 2025 08:01:14 +0000
Manifest next update: Sun 06 Apr 2025 08:01:14 +0000
Files and hashes: 1: 4VhJEBJK93bjDlrPBV1rrhdhpTY.crl (hash: HbScIMmhqj5T76/G9gkM2jTgow7UKg9eoYy2tc80vv0=)
2: FYVKqcf4TLt5l_nECN8Q3YrnHV8.roa (hash: wVS2RJnxIK54lkzq6flASzNiEFd2go/wiBjtoCVLPnw=)
3: pV9NJLxdi4jqw_UmIw3qNFIfWPE.roa (hash: JcjmMNBvioeNG+wkxM3r1KDyWfSA64pDYh6jv6Qb2JI=)
4: zTNz5q56WyGtwKzYlcHUYQPhEqU.roa (hash: KL+PDxc9WFQD8wrSMYnMHzYnKzeF40iSXkJ1EtPgaHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/4VhJEBJK93bjDlrPBV1rrhdhpTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/4VhJEBJK93bjDlrPBV1rrhdhpTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4VhJEBJK93bjDlrPBV1rrhdhpTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:04:f7:dc:10:62:4d:0c:7e:18:e6:21:6d:b2:06:1e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1584910124af776e30e5acf055d6bae1761a536
Validity
Not Before: Apr 5 08:01:14 2025 GMT
Not After : Apr 6 08:01:14 2025 GMT
Subject: CN=69b9f6479b029c2a84ca7b819439f4a782d4b6e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5c:45:98:46:07:bd:67:4a:b4:60:95:e8:b4:
76:dd:fb:58:e1:f1:bf:fa:fd:6f:56:f9:9f:ae:d9:
0e:02:c0:52:b8:a5:dc:66:46:1e:59:d1:d1:6d:fe:
fa:bb:19:21:a8:64:98:20:4e:b3:08:f5:b3:45:e8:
22:50:aa:b0:a8:e8:88:d9:8c:0e:80:00:af:57:38:
ad:df:d9:f5:3e:08:45:44:e7:35:b6:d0:5d:49:f6:
4f:99:9e:a7:53:08:56:af:e1:7a:0b:0e:34:b4:77:
5f:14:28:10:c5:0d:38:65:53:1a:22:4a:d8:ce:07:
ed:c1:cf:6f:8c:2b:9e:e2:22:b8:bd:75:4b:05:5f:
0a:c4:c0:2b:85:f4:aa:81:5f:3d:2a:d5:a3:52:07:
15:c6:ea:c7:4c:b4:b0:8b:a2:8e:6d:82:c2:00:1d:
ee:e7:48:9e:75:13:48:24:7e:d7:23:d3:45:aa:73:
f1:64:31:ed:4c:09:66:69:13:08:ef:31:1c:59:e3:
43:a0:49:d1:ca:2d:43:4d:e2:41:f2:2d:96:18:7e:
7c:9e:f6:26:7f:47:13:a3:0f:60:2f:9a:8e:d3:55:
bc:ed:8d:4a:ec:03:c1:70:51:95:f9:58:3a:b3:9d:
b5:4a:8c:bb:cf:18:5f:0c:4c:56:86:18:6f:4c:7a:
96:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B9:F6:47:9B:02:9C:2A:84:CA:7B:81:94:39:F4:A7:82:D4:B6:E3
X509v3 Authority Key Identifier:
keyid:E1:58:49:10:12:4A:F7:76:E3:0E:5A:CF:05:5D:6B:AE:17:61:A5:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VhJEBJK93bjDlrPBV1rrhdhpTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/4VhJEBJK93bjDlrPBV1rrhdhpTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/4VhJEBJK93bjDlrPBV1rrhdhpTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:51:19:96:8a:40:cb:69:3c:11:d8:ca:ea:aa:50:53:25:1a:
a1:1d:ab:3a:70:28:06:52:7a:12:59:db:94:43:aa:cc:78:f0:
2b:87:9c:3e:2e:97:43:ab:b2:0e:50:7a:d9:c6:fc:a4:71:27:
30:94:7d:61:cc:69:dd:6c:ea:7b:ae:45:32:f1:b4:06:65:b5:
5f:3f:ed:8b:70:01:c7:38:18:82:a4:43:51:09:e6:35:b6:93:
ba:66:66:33:0d:2e:20:d6:98:b8:09:bc:95:db:66:44:da:12:
38:4e:74:d9:73:ed:87:3f:77:1b:a9:90:27:2a:e0:72:d8:a3:
03:cc:49:3f:54:cd:5f:ef:93:08:73:e6:21:95:89:75:c5:f3:
07:62:0c:27:b0:37:30:86:37:cb:e6:59:90:bc:c4:78:37:07:
b1:ba:8e:2d:5f:6b:2e:a7:4a:11:f3:17:43:9f:92:c3:da:3e:
9c:49:87:60:c9:fa:5f:1b:7a:59:1f:64:72:16:4a:25:df:9b:
87:d8:97:4c:97:ce:fe:43:37:31:8e:8c:32:a2:7d:96:73:b7:
c9:db:74:71:ac:e3:11:c0:87:34:13:53:fc:e4:d4:88:90:c4:
24:e6:e4:cb:59:07:05:b1:47:ce:ab:30:e3:06:f9:19:7e:e9:
9c:59:37:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYE99wQYk0MfhjmIW2yBh4tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNTg0OTEwMTI0YWY3NzZlMzBlNWFjZjA1NWQ2YmFlMTc2
MWE1MzYwHhcNMjUwNDA1MDgwMTE0WhcNMjUwNDA2MDgwMTE0WjAzMTEwLwYDVQQD
Eyg2OWI5ZjY0NzliMDI5YzJhODRjYTdiODE5NDM5ZjRhNzgyZDRiNmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FxFmEYHvWdKtGCV6LR23ftY4fG/
+v1vVvmfrtkOAsBSuKXcZkYeWdHRbf76uxkhqGSYIE6zCPWzRegiUKqwqOiI2YwO
gACvVzit39n1PghFROc1ttBdSfZPmZ6nUwhWr+F6Cw40tHdfFCgQxQ04ZVMaIkrY
zgftwc9vjCue4iK4vXVLBV8KxMArhfSqgV89KtWjUgcVxurHTLSwi6KObYLCAB3u
50iedRNIJH7XI9NFqnPxZDHtTAlmaRMI7zEcWeNDoEnRyi1DTeJB8i2WGH58nvYm
f0cTow9gL5qO01W87Y1K7APBcFGV+Vg6s521Soy7zxhfDExWhhhvTHqWWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGm59kebApwqhMp7gZQ59KeC1LbjMB8GA1UdIwQY
MBaAFOFYSRASSvd24w5azwVda64XYaU2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFZoSkVCSks5M2JqRGxyUEJWMXJyaGRocFRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi83MjE1ZTAtOWFiOC00YTEzLWE2MDUt
MzFhYjMyZmY3YzY4LzEvNFZoSkVCSks5M2JqRGxyUEJWMXJyaGRocFRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi83MjE1ZTAtOWFiOC00YTEzLWE2MDUtMzFhYjMyZmY3YzY4
LzEvNFZoSkVCSks5M2JqRGxyUEJWMXJyaGRocFRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmFEZlopA
y2k8EdjK6qpQUyUaoR2rOnAoBlJ6ElnblEOqzHjwK4ecPi6XQ6uyDlB62cb8pHEn
MJR9Ycxp3Wzqe65FMvG0BmW1Xz/ti3ABxzgYgqRDUQnmNbaTumZmMw0uINaYuAm8
ldtmRNoSOE502XPthz93G6mQJyrgctijA8xJP1TNX++TCHPmIZWJdcXzB2IMJ7A3
MIY3y+ZZkLzEeDcHsbqOLV9rLqdKEfMXQ5+Sw9o+nEmHYMn6Xxt6WR9kchZKJd+b
h9iXTJfO/kM3MY6MMqJ9lnO3ydt0cazjEcCHNBNT/OTUiJDEJObky1kHBbFHzqsw
4wb5GX7pnFk3qg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:32:01 2025 by rpki-client