Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
File: 4br5DtE9F1RSz15aFjKnlL8fTJo.mft (raw, json)
Hash identifier: kAvokr/dIhB5bd7wlzQAd78f3bXj+EMBQiA3F9h9/80=
Subject key identifier: 68:68:C6:DB:B5:EA:47:10:C7:2D:52:46:BB:97:24:6B:1C:19:AE:80
Authority key identifier: E1:BA:F9:0E:D1:3D:17:54:52:CF:5E:5A:16:32:A7:94:BF:1F:4C:9A
Certificate issuer: /CN=e1baf90ed13d175452cf5e5a1632a794bf1f4c9a
Certificate serial: 01969E9A90C0F22FA4060B331CFC52DFDDCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
Manifest number: 1525
Signing time: Mon 05 May 2025 04:00:51 +0000
Manifest this update: Mon 05 May 2025 04:00:51 +0000
Manifest next update: Tue 06 May 2025 04:00:51 +0000
Files and hashes: 1: 4br5DtE9F1RSz15aFjKnlL8fTJo.crl (hash: lkr0iR+GW/xbKl2VehGP+i5UZAL42peIJvYrjAFeTgU=)
2: Tli-MNBliT4GZ0SuL6-kYDFipSs.roa (hash: tAZBpKtmJpVB7wLzYFodx1oVBHeaFLGJGQEpb9KD5qs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9a:90:c0:f2:2f:a4:06:0b:33:1c:fc:52:df:dd:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1baf90ed13d175452cf5e5a1632a794bf1f4c9a
Validity
Not Before: May 5 04:00:51 2025 GMT
Not After : May 6 04:00:51 2025 GMT
Subject: CN=6868c6dbb5ea4710c72d5246bb97246b1c19ae80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6c:a1:11:ae:99:c4:0f:a7:a1:c4:24:9e:f5:
e5:9a:78:fd:1f:24:37:79:37:6c:03:c3:17:f0:67:
8f:4f:06:8e:b7:a7:c7:c2:04:e3:6a:9c:31:f7:21:
04:36:72:7f:40:49:1a:ac:b8:59:ce:8c:6b:0e:87:
6a:48:b2:4d:c2:18:cb:d6:60:52:fa:70:d0:3a:2e:
a2:7b:20:a7:43:a8:19:38:8e:26:5c:6e:d4:26:e6:
55:c5:16:18:76:35:a6:9b:7e:42:c5:ed:9d:72:bc:
f9:53:93:74:60:c4:20:69:3c:07:1a:fa:a8:3c:6c:
bc:39:74:03:1c:e1:ca:23:e3:00:7b:e0:3e:06:f9:
ab:9f:7f:d2:77:90:1f:19:19:f3:af:3d:ba:12:79:
ba:0d:72:e2:87:f0:8d:a6:d1:cb:44:2a:59:ed:cf:
2a:17:1a:ac:bc:07:c0:d9:a0:35:cb:f3:14:fa:c3:
ec:46:bf:88:2a:3a:b2:9a:99:b8:6e:f1:2f:71:90:
4a:4f:4c:4d:84:c7:5d:05:f1:24:d9:4a:d0:8d:e9:
58:6d:d3:8f:b4:93:1a:b3:a6:37:92:d6:ac:e6:ec:
fe:92:d4:8a:2e:5b:a0:13:9e:a1:c2:4f:58:33:9e:
8a:44:81:76:3d:6e:32:39:c1:d9:30:08:68:d3:a8:
b0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:68:C6:DB:B5:EA:47:10:C7:2D:52:46:BB:97:24:6B:1C:19:AE:80
X509v3 Authority Key Identifier:
keyid:E1:BA:F9:0E:D1:3D:17:54:52:CF:5E:5A:16:32:A7:94:BF:1F:4C:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:2c:62:62:1d:72:e1:f9:d0:4a:39:1e:82:5b:74:72:e7:d4:
b7:6b:01:6f:2b:ac:fa:78:c7:ce:d1:36:94:22:38:b5:b3:23:
a7:48:b5:8c:d0:73:e8:dc:70:f2:ba:f9:e9:34:76:9f:e8:b6:
c0:52:1e:73:44:e5:f1:cd:67:77:84:fb:7e:e0:e5:0b:2e:0f:
f4:99:5d:86:4d:8b:9a:77:f2:6d:0e:d9:6b:ef:7e:6f:c2:d8:
af:f7:e1:4f:d5:0a:b1:9d:da:6a:29:4a:9b:94:84:d5:db:31:
c7:c5:67:f9:9e:33:a0:b4:25:16:53:df:c4:2c:23:65:c1:9b:
92:bb:aa:58:a1:32:f2:d4:ac:a2:41:98:41:dc:9b:8c:8d:19:
b9:04:10:c5:7d:40:54:3d:73:6b:8c:69:bb:40:d4:d5:62:c9:
1a:f8:4c:3f:e6:f5:fa:ec:27:15:af:89:a0:98:76:3a:d7:35:
79:31:12:bd:9e:32:67:e4:72:0f:f3:43:c0:ab:fb:0d:62:94:
cf:45:b4:2f:e9:e8:5f:1a:a8:40:72:f1:79:07:12:44:a2:f6:
8d:98:88:8f:51:db:5c:40:b3:88:35:5b:50:90:c8:cb:df:bc:
bc:19:ca:99:de:07:48:6e:bc:75:7c:14:7b:0b:d9:ac:d8:50:
30:f8:9c:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaempDA8i+kBgszHPxS393PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxYmFmOTBlZDEzZDE3NTQ1MmNmNWU1YTE2MzJhNzk0YmYx
ZjRjOWEwHhcNMjUwNTA1MDQwMDUxWhcNMjUwNTA2MDQwMDUxWjAzMTEwLwYDVQQD
Eyg2ODY4YzZkYmI1ZWE0NzEwYzcyZDUyNDZiYjk3MjQ2YjFjMTlhZTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2yhEa6ZxA+nocQknvXlmnj9HyQ3
eTdsA8MX8GePTwaOt6fHwgTjapwx9yEENnJ/QEkarLhZzoxrDodqSLJNwhjL1mBS
+nDQOi6ieyCnQ6gZOI4mXG7UJuZVxRYYdjWmm35Cxe2dcrz5U5N0YMQgaTwHGvqo
PGy8OXQDHOHKI+MAe+A+Bvmrn3/Sd5AfGRnzrz26Enm6DXLih/CNptHLRCpZ7c8q
FxqsvAfA2aA1y/MU+sPsRr+IKjqympm4bvEvcZBKT0xNhMddBfEk2UrQjelYbdOP
tJMas6Y3ktas5uz+ktSKLlugE56hwk9YM56KRIF2PW4yOcHZMAho06iw5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGhoxtu16kcQxy1SRruXJGscGa6AMB8GA1UdIwQY
MBaAFOG6+Q7RPRdUUs9eWhYyp5S/H0yaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGJyNUR0RTlGMVJTejE1YUZqS25sTDhmVEpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9lNmVmY2YtZTVkOS00OWYwLWIxMWYt
ZDUyZmRjOWU4Mjg3LzEvNGJyNUR0RTlGMVJTejE1YUZqS25sTDhmVEpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9lNmVmY2YtZTVkOS00OWYwLWIxMWYtZDUyZmRjOWU4Mjg3
LzEvNGJyNUR0RTlGMVJTejE1YUZqS25sTDhmVEpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFixiYh1y
4fnQSjkeglt0cufUt2sBbyus+njHztE2lCI4tbMjp0i1jNBz6Nxw8rr56TR2n+i2
wFIec0Tl8c1nd4T7fuDlCy4P9Jldhk2LmnfybQ7Za+9+b8LYr/fhT9UKsZ3aailK
m5SE1dsxx8Vn+Z4zoLQlFlPfxCwjZcGbkruqWKEy8tSsokGYQdybjI0ZuQQQxX1A
VD1za4xpu0DU1WLJGvhMP+b1+uwnFa+JoJh2Otc1eTESvZ4yZ+RyD/NDwKv7DWKU
z0W0L+noXxqoQHLxeQcSRKL2jZiIj1HbXECziDVbUJDIy9+8vBnKmd4HSG68dXwU
ewvZrNhQMPickg==
-----END CERTIFICATE-----
Generated at Mon May 5 11:23:01 2025 by rpki-client