Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
File: 4KE7ki7n67muzeGacNDiW3d1DQI.mft (raw, json)
Hash identifier: QSY7tHR3nQ8ip4Ab7H+0dKQItpeCWQkDlpogTxyxva0=
Subject key identifier: CB:14:8B:22:82:B8:49:BB:98:F4:42:CA:96:73:15:0D:19:A2:83:D2
Authority key identifier: E0:A1:3B:92:2E:E7:EB:B9:AE:CD:E1:9A:70:D0:E2:5B:77:75:0D:02
Certificate issuer: /CN=e0a13b922ee7ebb9aecde19a70d0e25b77750d02
Certificate serial: 0196B74738ABCEBC2D1E538CC82798679065
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KE7ki7n67muzeGacNDiW3d1DQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
Manifest number: 0B24
Signing time: Fri 09 May 2025 23:00:20 +0000
Manifest this update: Fri 09 May 2025 23:00:20 +0000
Manifest next update: Sat 10 May 2025 23:00:20 +0000
Files and hashes: 1: 4KE7ki7n67muzeGacNDiW3d1DQI.crl (hash: B8N+g3QnqorkcTEzqU3aXpMLbp4XzSNLqQCWCADkhcA=)
2: Y8AXUYDP-qGUFi9hzn6P0gBawaM.roa (hash: PbgeAgI/Sj2ZS05Cb4sm9ySYZjOm8LnX+ij5E01wZBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4KE7ki7n67muzeGacNDiW3d1DQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 23:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:47:38:ab:ce:bc:2d:1e:53:8c:c8:27:98:67:90:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0a13b922ee7ebb9aecde19a70d0e25b77750d02
Validity
Not Before: May 9 23:00:20 2025 GMT
Not After : May 10 23:00:20 2025 GMT
Subject: CN=cb148b2282b849bb98f442ca9673150d19a283d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:67:19:c7:3b:ab:17:58:a9:fc:63:96:d9:8a:
9f:2f:e3:e6:31:4f:58:3c:24:d2:09:e5:85:6d:f6:
7e:02:71:d8:64:b2:f3:d7:e7:64:45:6e:8a:96:89:
76:0d:f0:43:3b:9c:9a:9c:3a:d7:7a:f6:1d:db:e8:
4d:9f:d6:95:cd:95:d5:63:2e:9e:9e:7b:0d:52:e4:
2a:e9:d1:d9:8e:d6:2c:f2:9b:d3:b3:1a:bb:2a:1e:
07:96:2b:d0:f7:88:36:23:c0:e8:f0:66:45:b4:f5:
fc:db:c0:2e:5e:aa:2c:82:18:21:e2:87:a2:93:b9:
09:90:89:18:1c:59:c3:b9:86:fb:0b:ef:6d:ea:68:
d4:51:72:ab:16:30:db:db:cc:34:ba:a9:65:bd:42:
d4:5d:56:6c:26:94:eb:a1:0f:78:aa:f2:0a:2c:73:
ae:42:e7:af:1a:b9:72:56:20:ce:84:0e:23:f1:c0:
ef:1c:e2:3a:ad:7a:e5:9b:13:4e:28:0d:fa:08:46:
1b:99:16:c1:52:d9:bb:a9:5d:61:dd:93:fc:7e:da:
be:f9:5a:bf:45:ee:44:ca:9e:58:87:6d:f5:90:64:
47:ce:72:de:c2:6b:89:67:05:05:70:74:b6:42:c7:
7a:f0:2a:a2:5b:50:93:2c:82:62:13:55:db:46:36:
96:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:14:8B:22:82:B8:49:BB:98:F4:42:CA:96:73:15:0D:19:A2:83:D2
X509v3 Authority Key Identifier:
keyid:E0:A1:3B:92:2E:E7:EB:B9:AE:CD:E1:9A:70:D0:E2:5B:77:75:0D:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KE7ki7n67muzeGacNDiW3d1DQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:58:7a:0d:f4:f5:c9:e0:13:3c:3e:5e:cd:02:cf:ae:00:3e:
fa:c9:e0:3f:61:54:79:56:fb:b9:6b:83:ba:44:8c:31:98:71:
4b:25:75:be:4b:f1:be:b2:46:d3:ac:4f:96:33:14:89:58:b1:
ab:21:13:15:c6:c7:a0:94:b7:2c:15:dd:5c:8e:a1:11:09:f8:
2a:f0:fa:7d:31:8a:33:f1:cc:5b:e3:3c:b7:5c:52:be:51:a5:
fc:fd:9a:5e:0f:8a:93:9e:6c:15:cd:a7:0e:fc:f0:e7:26:1c:
a5:f9:2a:0b:5e:de:75:47:98:a5:cc:a4:78:58:36:11:10:6c:
68:fb:b3:a7:8c:e0:72:2b:22:74:a1:42:c0:2b:37:04:cf:4d:
54:06:90:47:74:e5:99:38:22:66:ba:72:19:0e:4c:42:ae:e3:
2b:de:84:8d:2c:3a:c2:63:31:55:e2:fb:58:84:60:bd:7c:79:
e1:53:c9:28:86:5a:52:c9:ff:97:d1:a9:fb:83:13:f1:39:68:
4e:54:01:22:ab:cb:35:df:18:99:44:3a:9e:e0:4b:45:0f:34:
2f:87:fa:f5:ee:b2:a0:c4:a9:14:c6:4a:9d:31:06:31:94:29:
c2:07:1a:3e:c5:59:2f:dd:55:49:0e:df:8d:6c:1f:4e:dd:f7:
c3:2e:d1:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa3RzirzrwtHlOMyCeYZ5BlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwYTEzYjkyMmVlN2ViYjlhZWNkZTE5YTcwZDBlMjViNzc3
NTBkMDIwHhcNMjUwNTA5MjMwMDIwWhcNMjUwNTEwMjMwMDIwWjAzMTEwLwYDVQQD
EyhjYjE0OGIyMjgyYjg0OWJiOThmNDQyY2E5NjczMTUwZDE5YTI4M2QyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWcZxzurF1ip/GOW2YqfL+PmMU9Y
PCTSCeWFbfZ+AnHYZLLz1+dkRW6Klol2DfBDO5yanDrXevYd2+hNn9aVzZXVYy6e
nnsNUuQq6dHZjtYs8pvTsxq7Kh4HlivQ94g2I8Do8GZFtPX828AuXqosghgh4oei
k7kJkIkYHFnDuYb7C+9t6mjUUXKrFjDb28w0uqllvULUXVZsJpTroQ94qvIKLHOu
QuevGrlyViDOhA4j8cDvHOI6rXrlmxNOKA36CEYbmRbBUtm7qV1h3ZP8ftq++Vq/
Re5Eyp5Yh231kGRHznLewmuJZwUFcHS2Qsd68CqiW1CTLIJiE1XbRjaWqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMsUiyKCuEm7mPRCypZzFQ0ZooPSMB8GA1UdIwQY
MBaAFOChO5Iu5+u5rs3hmnDQ4lt3dQ0CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEtFN2tpN242N211emVHYWNORGlXM2QxRFFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9mNzdjNWItMTliMi00YmMxLThmYWEt
MTBiMDIxMWQ5NmZjLzEvNEtFN2tpN242N211emVHYWNORGlXM2QxRFFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9mNzdjNWItMTliMi00YmMxLThmYWEtMTBiMDIxMWQ5NmZj
LzEvNEtFN2tpN242N211emVHYWNORGlXM2QxRFFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQFh6DfT1
yeATPD5ezQLPrgA++sngP2FUeVb7uWuDukSMMZhxSyV1vkvxvrJG06xPljMUiVix
qyETFcbHoJS3LBXdXI6hEQn4KvD6fTGKM/HMW+M8t1xSvlGl/P2aXg+Kk55sFc2n
Dvzw5yYcpfkqC17edUeYpcykeFg2ERBsaPuzp4zgcisidKFCwCs3BM9NVAaQR3Tl
mTgiZrpyGQ5MQq7jK96EjSw6wmMxVeL7WIRgvXx54VPJKIZaUsn/l9Gp+4MT8Tlo
TlQBIqvLNd8YmUQ6nuBLRQ80L4f69e6yoMSpFMZKnTEGMZQpwgcaPsVZL91VSQ7f
jWwfTt33wy7R0Q==
-----END CERTIFICATE-----
Generated at Sat May 10 08:47:53 2025 by rpki-client