Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft
File: 4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft (raw, json)
Hash identifier: Lr6Mb8+fbkeEH42mf8wAQNbLiPj7h/6FNrIbePV89Lc=
Subject key identifier: 18:98:0A:CF:4D:ED:2B:E0:ED:3A:3A:F4:C2:BE:BE:D5:AB:63:3F:B3
Authority key identifier: E0:39:64:9F:AA:8F:9D:E3:DA:E9:1B:E7:99:A2:7E:2C:A6:62:87:89
Certificate issuer: /CN=e039649faa8f9de3dae91be799a27e2ca6628789
Certificate serial: 01969E9ACE6D7D7B8CB6E5A8E914F8D0B327
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Dlkn6qPnePa6RvnmaJ-LKZih4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft
Manifest number: 1520
Signing time: Mon 05 May 2025 04:01:07 +0000
Manifest this update: Mon 05 May 2025 04:01:07 +0000
Manifest next update: Tue 06 May 2025 04:01:07 +0000
Files and hashes: 1: 4Dlkn6qPnePa6RvnmaJ-LKZih4k.crl (hash: wkex92k2HbsZ6lkhhBXhsQKwqtWnAkVsnAtIz1wnie4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Dlkn6qPnePa6RvnmaJ-LKZih4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 04:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9a:ce:6d:7d:7b:8c:b6:e5:a8:e9:14:f8:d0:b3:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e039649faa8f9de3dae91be799a27e2ca6628789
Validity
Not Before: May 5 04:01:07 2025 GMT
Not After : May 6 04:01:07 2025 GMT
Subject: CN=18980acf4ded2be0ed3a3af4c2bebed5ab633fb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4a:1b:94:bb:24:93:7c:58:d6:f2:fe:16:cf:
d1:db:cf:95:0a:34:fe:ef:2a:0b:08:8c:30:92:0b:
2f:14:b8:9b:42:1c:48:0a:98:4e:be:74:16:19:14:
f6:e6:bb:cc:83:4b:e0:de:78:ac:8d:e0:97:97:f3:
af:b1:6a:cf:74:0f:52:9f:c8:7a:22:e9:0c:25:59:
4e:86:1e:8b:8e:41:2c:71:8f:71:bf:ab:b9:d4:fc:
e3:17:a1:d3:9f:db:c7:21:09:c6:6e:57:58:b9:bd:
81:d7:66:0c:ed:aa:02:3a:ef:5a:f5:2c:a6:b8:1e:
c6:ce:d9:ac:77:c5:f6:7f:bf:85:d9:b7:83:9c:13:
3d:de:d1:b2:be:b8:49:8e:a2:99:e5:82:9e:1c:85:
0a:30:b3:aa:f2:7c:e1:13:9e:ec:3e:7b:58:0e:3a:
af:91:ed:0b:7c:c2:88:ea:39:4a:a2:8f:24:ba:62:
54:3a:77:a2:93:97:2d:46:f8:40:e8:a2:5f:a2:77:
d5:34:36:d4:b9:13:c8:0f:ca:c4:1f:b0:77:b3:8e:
b5:c1:a6:11:58:4a:d9:14:f4:e5:d4:6f:5a:4f:d0:
f0:07:bc:0d:8c:16:15:b5:b7:10:f4:5c:8d:bc:7c:
66:cf:26:b8:7b:cc:51:e2:7d:a5:50:34:31:3d:92:
82:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:98:0A:CF:4D:ED:2B:E0:ED:3A:3A:F4:C2:BE:BE:D5:AB:63:3F:B3
X509v3 Authority Key Identifier:
keyid:E0:39:64:9F:AA:8F:9D:E3:DA:E9:1B:E7:99:A2:7E:2C:A6:62:87:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Dlkn6qPnePa6RvnmaJ-LKZih4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:d7:09:82:19:61:e8:ef:dc:60:82:28:aa:90:20:03:43:d4:
4c:08:3f:b0:e4:3c:8d:03:b1:ca:62:d9:37:14:7a:73:39:dd:
df:0d:c8:46:2a:9e:d3:90:ab:1c:05:bb:52:98:1d:1d:2f:f8:
89:0b:a9:6a:d3:37:f6:80:02:b6:d1:a9:44:46:47:bb:19:fc:
5d:68:e1:b2:6d:90:5a:92:b0:63:ee:28:c9:33:62:31:ab:49:
6e:6a:39:f2:f3:9f:2d:dd:c7:1e:6d:33:30:c8:21:d2:4b:36:
c4:81:6a:47:5a:ae:5e:56:73:41:67:98:84:4d:28:8e:c0:e3:
df:d0:9e:eb:56:15:c5:2f:e5:4f:4d:98:0c:aa:94:69:9d:18:
36:13:3b:64:2f:79:28:c3:f5:05:dc:c6:73:b6:a1:e3:0f:da:
23:af:b2:37:d5:37:c0:12:00:1d:61:bc:cb:be:46:0d:b2:b5:
3f:d9:34:fe:8c:f5:f7:4f:80:82:fb:03:cf:9e:e4:30:f3:f2:
64:78:7d:2d:7b:63:66:01:fa:8d:f0:47:23:88:61:c2:29:74:
31:92:d6:58:d4:9c:d4:97:44:f2:74:47:28:7d:2c:c1:98:85:
54:f5:1f:87:9a:5d:13:bd:8d:38:35:92:7e:3b:80:e8:69:70:
98:bf:3d:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaems5tfXuMtuWo6RT40LMnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwMzk2NDlmYWE4ZjlkZTNkYWU5MWJlNzk5YTI3ZTJjYTY2
Mjg3ODkwHhcNMjUwNTA1MDQwMTA3WhcNMjUwNTA2MDQwMTA3WjAzMTEwLwYDVQQD
EygxODk4MGFjZjRkZWQyYmUwZWQzYTNhZjRjMmJlYmVkNWFiNjMzZmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEoblLskk3xY1vL+Fs/R28+VCjT+
7yoLCIwwkgsvFLibQhxICphOvnQWGRT25rvMg0vg3nisjeCXl/OvsWrPdA9Sn8h6
IukMJVlOhh6LjkEscY9xv6u51PzjF6HTn9vHIQnGbldYub2B12YM7aoCOu9a9Sym
uB7Gztmsd8X2f7+F2beDnBM93tGyvrhJjqKZ5YKeHIUKMLOq8nzhE57sPntYDjqv
ke0LfMKI6jlKoo8kumJUOneik5ctRvhA6KJfonfVNDbUuRPID8rEH7B3s461waYR
WErZFPTl1G9aT9DwB7wNjBYVtbcQ9FyNvHxmzya4e8xR4n2lUDQxPZKC6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBiYCs9N7Svg7To69MK+vtWrYz+zMB8GA1UdIwQY
MBaAFOA5ZJ+qj53j2ukb55mifiymYoeJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNERsa242cVBuZVBhNlJ2bm1hSi1MS1ppaDRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8yZWZhY2UtZDBhMy00MzM5LTgwNjgt
ZDc2NzhhMDc4N2QxLzEvNERsa242cVBuZVBhNlJ2bm1hSi1MS1ppaDRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8yZWZhY2UtZDBhMy00MzM5LTgwNjgtZDc2NzhhMDc4N2Qx
LzEvNERsa242cVBuZVBhNlJ2bm1hSi1MS1ppaDRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq9cJghlh
6O/cYIIoqpAgA0PUTAg/sOQ8jQOxymLZNxR6cznd3w3IRiqe05CrHAW7UpgdHS/4
iQupatM39oACttGpREZHuxn8XWjhsm2QWpKwY+4oyTNiMatJbmo58vOfLd3HHm0z
MMgh0ks2xIFqR1quXlZzQWeYhE0ojsDj39Ce61YVxS/lT02YDKqUaZ0YNhM7ZC95
KMP1BdzGc7ah4w/aI6+yN9U3wBIAHWG8y75GDbK1P9k0/oz190+AgvsDz57kMPPy
ZHh9LXtjZgH6jfBHI4hhwil0MZLWWNSc1JdE8nRHKH0swZiFVPUfh5pdE72NODWS
fjuA6GlwmL89aA==
-----END CERTIFICATE-----
Generated at Mon May 5 13:03:22 2025 by rpki-client