Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft
File: S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft (raw, json)
Hash identifier: ag2XlPp9QM0NrGAo8V8RFpUzIwBroOdpShdiCGoEA10=
Subject key identifier: A0:D3:1A:7A:86:24:B1:3A:FD:81:1F:24:0A:29:C5:1C:16:3B:AE:5B
Authority key identifier: 4B:89:D8:7F:8E:41:B5:08:2D:38:91:60:15:E0:59:E5:6D:D0:11:4E
Certificate issuer: /CN=4b89d87f8e41b5082d38916015e059e56dd0114e
Certificate serial: 0196C6F195B8BCBFD75C278E5AFB7E6A96A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4nYf45BtQgtOJFgFeBZ5W3QEU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft
Manifest number: 0DA9
Signing time: Tue 13 May 2025 00:00:43 +0000
Manifest this update: Tue 13 May 2025 00:00:43 +0000
Manifest next update: Wed 14 May 2025 00:00:43 +0000
Files and hashes: 1: S4nYf45BtQgtOJFgFeBZ5W3QEU4.crl (hash: S1G0X6d+cGCZbK+JgSx+5FrNmenEljClAUjdEK2CEwY=)
2: crOsrOXIXenqmjjK7E42FO9nzAY.roa (hash: FavBc7FYhPnbTZq/1FuhdovJ2d7YJv+63Ene4V7HX3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/S4nYf45BtQgtOJFgFeBZ5W3QEU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:f1:95:b8:bc:bf:d7:5c:27:8e:5a:fb:7e:6a:96:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b89d87f8e41b5082d38916015e059e56dd0114e
Validity
Not Before: May 13 00:00:43 2025 GMT
Not After : May 14 00:00:43 2025 GMT
Subject: CN=a0d31a7a8624b13afd811f240a29c51c163bae5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:16:26:ff:4f:90:df:16:01:9d:b9:de:c9:cd:
bb:c2:ad:c9:a2:42:b6:d8:a5:9a:4a:38:1c:47:af:
51:8f:8f:53:da:12:8c:11:ed:51:e3:49:bd:31:7b:
3a:ae:71:44:89:99:23:5b:a9:15:37:a9:38:f4:68:
35:be:33:57:2e:10:0c:72:89:a0:5e:7d:d0:3d:ab:
b3:2b:70:28:ee:0b:44:45:1a:e4:27:e9:f5:20:92:
1f:cc:4b:cf:7e:1a:06:8c:74:5e:8b:08:dc:f4:85:
16:7e:9e:e9:f7:dd:af:93:8b:56:ac:a2:bc:9d:28:
e2:57:9c:23:cf:42:a6:05:6f:3e:cd:bb:2a:ce:ce:
0d:93:d8:55:27:94:a2:74:d8:d5:fd:ea:96:62:35:
1e:08:24:23:16:7f:8f:a8:58:a6:fc:ad:67:e6:62:
96:91:8d:89:83:b6:e2:a9:1e:f7:16:c9:d0:60:5e:
d1:37:03:c7:65:da:45:42:6a:7d:fa:51:c4:6b:d9:
37:b7:08:e3:c1:97:a0:6b:9a:f7:f6:a9:0c:70:c5:
c8:b2:43:9b:a1:cf:91:b1:ef:a5:3c:3c:0b:1f:27:
3f:88:c1:88:8a:7e:3e:95:7f:b2:fa:ac:3c:b8:f7:
fb:e5:b9:aa:34:ed:6d:94:2a:5c:52:88:bd:72:e2:
45:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:D3:1A:7A:86:24:B1:3A:FD:81:1F:24:0A:29:C5:1C:16:3B:AE:5B
X509v3 Authority Key Identifier:
keyid:4B:89:D8:7F:8E:41:B5:08:2D:38:91:60:15:E0:59:E5:6D:D0:11:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4nYf45BtQgtOJFgFeBZ5W3QEU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:ec:ea:73:a6:09:a0:4e:c1:f2:13:32:cc:18:94:99:5e:a7:
d7:68:b4:98:77:43:ec:6e:3d:59:f4:ce:4c:9d:b9:c4:ab:eb:
e2:e8:f6:9a:ff:5e:4e:32:cc:05:e1:3f:71:7c:e5:b7:5a:98:
b2:3e:b3:36:41:2a:db:ca:f6:e3:4b:67:31:14:8c:2d:bf:8f:
46:14:ff:6c:7e:a1:7a:94:07:7d:80:47:0b:43:70:dd:61:a9:
e2:86:31:36:23:e9:a0:84:16:55:d1:eb:cf:3f:37:dd:b2:9d:
5d:03:a5:e0:f5:a4:c6:bd:78:a9:fd:cb:31:6f:3d:2a:57:b3:
d7:28:51:c8:64:0f:7d:93:54:e8:65:9d:36:44:94:f3:55:c5:
9e:80:e4:0f:e0:a8:10:8e:76:76:9c:0c:ae:24:ff:fa:f6:b7:
90:9b:8b:6e:c1:ca:90:b7:cf:da:bb:5b:09:2d:d7:f3:0f:c8:
a3:1f:e6:43:ff:2b:74:07:23:e9:08:69:ba:1c:93:ea:30:18:
33:53:b6:9e:1a:f0:61:28:19:17:05:45:d2:25:2b:96:8f:ca:
41:b5:43:72:bf:22:3e:dc:c5:4e:77:d3:aa:72:0d:14:c3:76:
cb:41:62:15:b9:4e:66:70:9a:0c:cd:26:dc:17:2a:2b:b1:11:
9f:f6:69:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbG8ZW4vL/XXCeOWvt+apagMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiODlkODdmOGU0MWI1MDgyZDM4OTE2MDE1ZTA1OWU1NmRk
MDExNGUwHhcNMjUwNTEzMDAwMDQzWhcNMjUwNTE0MDAwMDQzWjAzMTEwLwYDVQQD
EyhhMGQzMWE3YTg2MjRiMTNhZmQ4MTFmMjQwYTI5YzUxYzE2M2JhZTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphYm/0+Q3xYBnbneyc27wq3JokK2
2KWaSjgcR69Rj49T2hKMEe1R40m9MXs6rnFEiZkjW6kVN6k49Gg1vjNXLhAMcomg
Xn3QPauzK3Ao7gtERRrkJ+n1IJIfzEvPfhoGjHReiwjc9IUWfp7p992vk4tWrKK8
nSjiV5wjz0KmBW8+zbsqzs4Nk9hVJ5SidNjV/eqWYjUeCCQjFn+PqFim/K1n5mKW
kY2Jg7biqR73FsnQYF7RNwPHZdpFQmp9+lHEa9k3twjjwZega5r39qkMcMXIskOb
oc+Rse+lPDwLHyc/iMGIin4+lX+y+qw8uPf75bmqNO1tlCpcUoi9cuJFRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKDTGnqGJLE6/YEfJAopxRwWO65bMB8GA1UdIwQY
MBaAFEuJ2H+OQbUILTiRYBXgWeVt0BFOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzRuWWY0NUJ0UWd0T0pGZ0ZlQlo1VzNRRVU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi80YmE5NzMtMGU5Zi00MzUyLTk4Mzgt
NjQyZGM5MTI3NjgwLzEvUzRuWWY0NUJ0UWd0T0pGZ0ZlQlo1VzNRRVU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi80YmE5NzMtMGU5Zi00MzUyLTk4MzgtNjQyZGM5MTI3Njgw
LzEvUzRuWWY0NUJ0UWd0T0pGZ0ZlQlo1VzNRRVU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj+zqc6YJ
oE7B8hMyzBiUmV6n12i0mHdD7G49WfTOTJ25xKvr4uj2mv9eTjLMBeE/cXzlt1qY
sj6zNkEq28r240tnMRSMLb+PRhT/bH6hepQHfYBHC0Nw3WGp4oYxNiPpoIQWVdHr
zz833bKdXQOl4PWkxr14qf3LMW89Klez1yhRyGQPfZNU6GWdNkSU81XFnoDkD+Co
EI52dpwMriT/+va3kJuLbsHKkLfP2rtbCS3X8w/Iox/mQ/8rdAcj6QhpuhyT6jAY
M1O2nhrwYSgZFwVF0iUrlo/KQbVDcr8iPtzFTnfTqnINFMN2y0FiFblOZnCaDM0m
3BcqK7ERn/Zpgg==
-----END CERTIFICATE-----
Generated at Tue May 13 07:04:15 2025 by rpki-client