Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft
File: 4Sz8faj6dKFt04wXwgoBksuy0_4.mft (raw, json)
Hash identifier: otYTRTdVY05dYnroCjDNoVi5NsIpVgsVrsFHAJP2OKI=
Subject key identifier: B7:7A:E0:D0:A2:2C:65:15:20:E9:7E:14:A4:CC:88:1A:F8:DF:A4:3E
Authority key identifier: E1:2C:FC:7D:A8:FA:74:A1:6D:D3:8C:17:C2:0A:01:92:CB:B2:D3:FE
Certificate issuer: /CN=e12cfc7da8fa74a16dd38c17c20a0192cbb2d3fe
Certificate serial: 0196CD9876637B7245D56E38F6A95A957C92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Sz8faj6dKFt04wXwgoBksuy0_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft
Manifest number: 0C0C
Signing time: Wed 14 May 2025 07:00:43 +0000
Manifest this update: Wed 14 May 2025 07:00:43 +0000
Manifest next update: Thu 15 May 2025 07:00:43 +0000
Files and hashes: 1: 4Sz8faj6dKFt04wXwgoBksuy0_4.crl (hash: vEojlufpREUZl+jnkDtMHFkULLEnFZspGky2rVeL8oo=)
2: CzgWRo2OrtBEMKgJ83rtq5Y3g98.roa (hash: 2xTrIXSTjNXzltKj7q0eYjRCvrpmaN3vPbRoQNYjpK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Sz8faj6dKFt04wXwgoBksuy0_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cd:98:76:63:7b:72:45:d5:6e:38:f6:a9:5a:95:7c:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e12cfc7da8fa74a16dd38c17c20a0192cbb2d3fe
Validity
Not Before: May 14 07:00:43 2025 GMT
Not After : May 15 07:00:43 2025 GMT
Subject: CN=b77ae0d0a22c651520e97e14a4cc881af8dfa43e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3a:7c:13:b4:0e:21:b8:a1:ea:fc:0d:58:24:
d8:8d:60:02:59:44:ee:78:e1:13:fe:62:98:4b:74:
05:dc:e4:c7:05:d6:db:7d:6f:53:a3:eb:07:e2:3b:
cd:a7:c6:40:3b:41:a4:45:73:64:33:23:0f:3e:3e:
02:ef:01:db:82:27:56:68:ec:64:da:3d:40:c3:f8:
22:43:e3:a1:65:20:a7:86:30:5b:5c:2f:4f:61:84:
ea:eb:3e:94:87:02:5a:b3:1e:e9:09:d3:e1:29:c2:
d7:d5:ac:b0:bc:ce:fb:0f:5b:88:0a:de:64:bd:8b:
e8:f1:fd:85:c1:cd:1d:98:09:b8:d0:29:c0:7d:b2:
b5:68:d7:aa:cf:2c:79:8f:92:46:72:5d:18:38:6e:
3d:1d:33:57:8d:04:00:8a:9b:3d:ba:f0:46:50:e1:
d2:6a:a8:c7:08:4d:a5:d7:8a:17:56:d5:1f:cf:c0:
4e:73:db:ac:e0:94:d8:94:f2:da:92:71:ec:ed:43:
45:9c:ba:fd:ce:00:f0:6d:7e:a9:84:0b:ef:36:b0:
09:22:2f:ac:fb:07:09:4a:aa:37:38:5a:60:60:95:
db:70:1b:28:ad:e0:98:ac:fe:99:15:4b:fa:02:94:
07:6d:10:be:ad:98:00:63:08:60:d9:39:f2:8c:c7:
c0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:7A:E0:D0:A2:2C:65:15:20:E9:7E:14:A4:CC:88:1A:F8:DF:A4:3E
X509v3 Authority Key Identifier:
keyid:E1:2C:FC:7D:A8:FA:74:A1:6D:D3:8C:17:C2:0A:01:92:CB:B2:D3:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Sz8faj6dKFt04wXwgoBksuy0_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:72:15:41:aa:bb:f8:a7:8f:f8:10:9f:14:9e:65:59:40:71:
d3:8b:e3:08:20:63:90:f8:a0:4d:7f:ab:30:19:8f:04:c0:07:
f5:e5:90:6e:85:e7:99:d2:66:f6:90:14:e2:b6:8e:7b:d7:3d:
2f:47:7e:8a:79:d7:77:c7:7e:21:73:58:02:4f:d3:dc:e1:f4:
2f:db:d3:f1:10:97:79:f1:bb:b5:2b:1f:aa:70:b6:32:43:2c:
33:5f:55:40:57:4f:bb:78:cd:d9:e6:eb:20:d5:6a:d4:bb:f6:
61:b4:2d:d1:fc:95:9c:82:84:25:d1:2d:a5:a5:5b:1c:e6:68:
d1:5b:0f:c6:65:62:19:eb:5e:62:6d:99:94:36:0c:7b:5b:41:
b1:eb:ad:57:da:f4:a4:d5:1d:80:64:f0:71:55:cc:99:8f:dc:
70:73:7c:82:8d:11:bc:5a:b6:95:b0:a4:05:32:5b:b8:6e:63:
1d:47:26:be:df:54:4f:ba:89:22:c2:c1:89:ee:fe:b2:e8:7e:
5c:db:cd:bb:e6:85:a6:9f:49:cd:40:53:e9:24:a9:8f:2b:36:
45:8a:b3:00:fa:71:65:34:e6:d6:c2:3a:23:7a:53:00:18:0b:
cf:3b:4d:c4:fa:fa:70:85:b2:71:ea:c3:12:b7:83:1c:97:31:
f2:0e:52:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbNmHZje3JF1W449qlalXySMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMmNmYzdkYThmYTc0YTE2ZGQzOGMxN2MyMGEwMTkyY2Ji
MmQzZmUwHhcNMjUwNTE0MDcwMDQzWhcNMjUwNTE1MDcwMDQzWjAzMTEwLwYDVQQD
EyhiNzdhZTBkMGEyMmM2NTE1MjBlOTdlMTRhNGNjODgxYWY4ZGZhNDNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzp8E7QOIbih6vwNWCTYjWACWUTu
eOET/mKYS3QF3OTHBdbbfW9To+sH4jvNp8ZAO0GkRXNkMyMPPj4C7wHbgidWaOxk
2j1Aw/giQ+OhZSCnhjBbXC9PYYTq6z6UhwJasx7pCdPhKcLX1aywvM77D1uICt5k
vYvo8f2Fwc0dmAm40CnAfbK1aNeqzyx5j5JGcl0YOG49HTNXjQQAips9uvBGUOHS
aqjHCE2l14oXVtUfz8BOc9us4JTYlPLaknHs7UNFnLr9zgDwbX6phAvvNrAJIi+s
+wcJSqo3OFpgYJXbcBsoreCYrP6ZFUv6ApQHbRC+rZgAYwhg2TnyjMfAIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLd64NCiLGUVIOl+FKTMiBr436Q+MB8GA1UdIwQY
MBaAFOEs/H2o+nShbdOMF8IKAZLLstP+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFN6OGZhajZkS0Z0MDR3WHdnb0Jrc3V5MF80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9hNmFlZmYtOWI5YS00YzE4LTk0NzQt
MjI3MmI0ZGJhYTYyLzEvNFN6OGZhajZkS0Z0MDR3WHdnb0Jrc3V5MF80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC9hNmFlZmYtOWI5YS00YzE4LTk0NzQtMjI3MmI0ZGJhYTYy
LzEvNFN6OGZhajZkS0Z0MDR3WHdnb0Jrc3V5MF80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuHIVQaq7
+KeP+BCfFJ5lWUBx04vjCCBjkPigTX+rMBmPBMAH9eWQboXnmdJm9pAU4raOe9c9
L0d+innXd8d+IXNYAk/T3OH0L9vT8RCXefG7tSsfqnC2MkMsM19VQFdPu3jN2ebr
INVq1Lv2YbQt0fyVnIKEJdEtpaVbHOZo0VsPxmViGeteYm2ZlDYMe1tBseutV9r0
pNUdgGTwcVXMmY/ccHN8go0RvFq2lbCkBTJbuG5jHUcmvt9UT7qJIsLBie7+suh+
XNvNu+aFpp9JzUBT6SSpjys2RYqzAPpxZTTm1sI6I3pTABgLzztNxPr6cIWycerD
EreDHJcx8g5S5w==
-----END CERTIFICATE-----
Generated at Wed May 14 12:36:09 2025 by rpki-client