Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.mft
File: 4U8mT6SkyQ3LSpnMzsUMVQj0RJg.mft (raw, json)
Hash identifier: CCIYcodrsDg2BmyhAzCy5iYah28NJB4xVZUsFnsbKBY=
Subject key identifier: BF:1A:3D:77:2F:08:48:B8:E5:BD:DA:79:A9:F3:C0:B6:70:83:59:A3
Authority key identifier: E1:4F:26:4F:A4:A4:C9:0D:CB:4A:99:CC:CE:C5:0C:55:08:F4:44:98
Certificate issuer: /CN=e14f264fa4a4c90dcb4a99cccec50c5508f44498
Certificate serial: 0196C4274F56F74A085E18C99B5B2AB8E57D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.mft
Manifest number: 1539
Signing time: Mon 12 May 2025 11:00:32 +0000
Manifest this update: Mon 12 May 2025 11:00:32 +0000
Manifest next update: Tue 13 May 2025 11:00:32 +0000
Files and hashes: 1: 4U8mT6SkyQ3LSpnMzsUMVQj0RJg.crl (hash: /jiguUlDX5g7NFncIr9AgkV4gTVVxqLI9mBwEZSfOrQ=)
2: Bc91mt-aFwpn9DwtZ394zqgnwAk.roa (hash: 4bDq/638WIm11nNJQQb6YF/e7JLWlty4w4akKWg+wAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 11:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:27:4f:56:f7:4a:08:5e:18:c9:9b:5b:2a:b8:e5:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14f264fa4a4c90dcb4a99cccec50c5508f44498
Validity
Not Before: May 12 11:00:32 2025 GMT
Not After : May 13 11:00:32 2025 GMT
Subject: CN=bf1a3d772f0848b8e5bdda79a9f3c0b6708359a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5b:05:bc:93:ff:20:99:80:55:aa:46:ec:39:
20:d0:92:e8:6f:b9:86:67:7d:ed:05:3b:96:df:6d:
39:c4:d9:56:f3:c4:da:0d:ca:96:63:fa:ab:0c:94:
b1:d3:2d:5d:f7:93:4f:d9:61:cf:43:67:b5:8e:bc:
9a:78:3b:d4:70:d2:cf:31:89:33:b9:bc:90:1e:d9:
04:e3:82:c2:ce:c1:71:d1:d1:b0:92:2b:3c:43:b2:
c9:cb:52:4d:cf:bc:c0:e7:12:6c:cc:50:b1:4d:92:
e4:64:ba:54:ff:3f:fc:6c:1c:27:3a:b0:e0:22:39:
df:a1:c6:d6:61:9e:49:f4:cb:1e:62:29:f3:72:9d:
20:91:6a:08:bc:c4:96:ca:3c:ce:4e:ec:00:19:13:
f4:4f:9b:71:48:a8:ce:d4:76:8d:9b:86:88:5a:ed:
3f:db:93:b7:1e:6b:ee:b7:b6:8f:52:ef:f8:c8:ea:
b2:71:4e:8e:91:48:cb:c6:39:88:a7:40:dc:0b:2d:
82:6f:f7:a3:00:52:18:30:b6:fb:de:9b:b3:80:41:
1f:6d:9d:de:a6:eb:bb:af:9b:35:55:e2:54:85:c2:
f3:68:4d:7f:d4:50:e3:55:8d:df:ef:8e:d5:35:85:
d3:ec:ec:0f:73:c5:ca:cb:4d:2c:d9:9d:29:97:79:
b3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:1A:3D:77:2F:08:48:B8:E5:BD:DA:79:A9:F3:C0:B6:70:83:59:A3
X509v3 Authority Key Identifier:
keyid:E1:4F:26:4F:A4:A4:C9:0D:CB:4A:99:CC:CE:C5:0C:55:08:F4:44:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:64:cc:ae:f0:a0:8f:8f:b5:6a:ca:aa:fa:8f:6b:6a:e2:7c:
c3:d2:cd:36:32:bf:af:5c:a5:6a:1e:4d:67:40:ee:31:c3:0c:
5a:b6:31:c1:83:d6:22:00:cf:cb:ad:22:49:cc:20:69:3b:81:
50:60:19:94:a5:d8:4b:48:dc:85:f6:03:bf:f3:45:37:88:aa:
73:f2:38:44:05:40:d1:d6:55:f5:18:53:f9:bd:7d:96:37:9a:
6c:27:ff:ef:f3:f4:35:b4:1f:53:d1:d8:45:ba:27:1e:bf:61:
20:34:9e:2d:72:e4:87:ab:5f:3b:f0:0a:43:a2:2b:2e:f9:13:
e6:15:19:b4:07:59:e4:cf:f4:db:dc:35:5f:1e:7c:80:6e:36:
ad:1b:c4:6c:ff:05:93:ea:9b:d1:78:72:8f:03:b9:32:bb:1f:
d7:4b:ee:72:e0:d7:4a:9c:b7:96:ba:60:9a:ac:f3:f5:b2:4f:
8c:ae:a6:8f:77:19:a7:2b:37:bc:83:f4:e3:11:31:ab:56:72:
4e:1f:88:29:68:67:9a:1a:c7:2d:d2:fe:e3:80:4f:63:37:d5:
61:c9:ea:de:8f:df:7d:b1:1f:aa:ca:46:57:82:e3:f9:48:04:
7f:a5:61:74:85:51:98:02:88:79:99:ef:ab:21:be:ad:ea:39:
54:b9:ef:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbEJ09W90oIXhjJm1squOV9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNGYyNjRmYTRhNGM5MGRjYjRhOTljY2NlYzUwYzU1MDhm
NDQ0OTgwHhcNMjUwNTEyMTEwMDMyWhcNMjUwNTEzMTEwMDMyWjAzMTEwLwYDVQQD
EyhiZjFhM2Q3NzJmMDg0OGI4ZTViZGRhNzlhOWYzYzBiNjcwODM1OWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1sFvJP/IJmAVapG7Dkg0JLob7mG
Z33tBTuW3205xNlW88TaDcqWY/qrDJSx0y1d95NP2WHPQ2e1jryaeDvUcNLPMYkz
ubyQHtkE44LCzsFx0dGwkis8Q7LJy1JNz7zA5xJszFCxTZLkZLpU/z/8bBwnOrDg
IjnfocbWYZ5J9MseYinzcp0gkWoIvMSWyjzOTuwAGRP0T5txSKjO1HaNm4aIWu0/
25O3Hmvut7aPUu/4yOqycU6OkUjLxjmIp0DcCy2Cb/ejAFIYMLb73puzgEEfbZ3e
puu7r5s1VeJUhcLzaE1/1FDjVY3f747VNYXT7OwPc8XKy00s2Z0pl3mztwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL8aPXcvCEi45b3aeanzwLZwg1mjMB8GA1UdIwQY
MBaAFOFPJk+kpMkNy0qZzM7FDFUI9ESYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFU4bVQ2U2t5UTNMU3BuTXpzVU1WUWowUkpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy80MTU5YzMtODE0ZC00MDAxLTg1Mjct
MTM5MDQzNzQ5YzQ4LzEvNFU4bVQ2U2t5UTNMU3BuTXpzVU1WUWowUkpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy80MTU5YzMtODE0ZC00MDAxLTg1MjctMTM5MDQzNzQ5YzQ4
LzEvNFU4bVQ2U2t5UTNMU3BuTXpzVU1WUWowUkpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADmTMrvCg
j4+1asqq+o9rauJ8w9LNNjK/r1ylah5NZ0DuMcMMWrYxwYPWIgDPy60iScwgaTuB
UGAZlKXYS0jchfYDv/NFN4iqc/I4RAVA0dZV9RhT+b19ljeabCf/7/P0NbQfU9HY
RbonHr9hIDSeLXLkh6tfO/AKQ6IrLvkT5hUZtAdZ5M/029w1Xx58gG42rRvEbP8F
k+qb0XhyjwO5Mrsf10vucuDXSpy3lrpgmqzz9bJPjK6mj3cZpys3vIP04xExq1Zy
Th+IKWhnmhrHLdL+44BPYzfVYcnq3o/ffbEfqspGV4Lj+UgEf6VhdIVRmAKIeZnv
qyG+reo5VLnvXw==
-----END CERTIFICATE-----
Generated at Mon May 12 19:04:52 2025 by rpki-client