Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.mft
File: 4xYxgkfSEYQfliCpoRMAEN20hvI.mft (raw, json)
Hash identifier: buK0Fcc2yEXsSS2BF9Tu4SDVS/7Fmf1ezEnmewixiEQ=
Subject key identifier: EA:4C:98:65:7A:2B:6D:3A:1B:04:6F:B9:BC:4C:B3:59:64:78:AC:21
Authority key identifier: E3:16:31:82:47:D2:11:84:1F:96:20:A9:A1:13:00:10:DD:B4:86:F2
Certificate issuer: /CN=e316318247d211841f9620a9a1130010ddb486f2
Certificate serial: 0196C34B718E4A94B3B079C528DECAE949FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.mft
Manifest number: 0D57
Signing time: Mon 12 May 2025 07:00:23 +0000
Manifest this update: Mon 12 May 2025 07:00:23 +0000
Manifest next update: Tue 13 May 2025 07:00:23 +0000
Files and hashes: 1: 4xYxgkfSEYQfliCpoRMAEN20hvI.crl (hash: NCdKkZfRI+gqKH0CTVoszRaOZfdnRqkFeJQUYIzCwjQ=)
2: OPoJJXIKKrWhudAq1xiuARrS1H4.roa (hash: sQTnuyk1NVfltmH/ouY0am8WUGDv6HXMop3KtZ2xXJo=)
3: Y0KH9jUtOdTdVzzVwvfGtDjZxIU.roa (hash: ECg0/VJoY6yBxbdarx1o6Xry+PkavLOkwZaMHO8CBps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4b:71:8e:4a:94:b3:b0:79:c5:28:de:ca:e9:49:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e316318247d211841f9620a9a1130010ddb486f2
Validity
Not Before: May 12 07:00:23 2025 GMT
Not After : May 13 07:00:23 2025 GMT
Subject: CN=ea4c98657a2b6d3a1b046fb9bc4cb3596478ac21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bb:db:2c:f6:35:06:1b:fa:df:f0:44:33:e6:
6a:2b:f2:3e:4e:b6:6b:46:2e:99:f6:3c:b7:a1:44:
fa:77:ce:9d:18:83:ff:89:eb:c2:89:3e:2e:4f:9d:
bd:b1:3d:04:8a:58:25:57:51:2a:ba:4e:7e:9f:bf:
a1:d7:0a:48:80:ad:61:de:84:c6:de:89:7f:61:c9:
06:af:12:63:7a:97:56:36:81:00:5f:2a:72:bf:84:
b1:98:ec:a4:89:59:0b:c4:f1:25:e9:84:0f:bf:04:
03:df:89:78:ea:d5:9a:7d:d4:26:2b:24:61:f6:e1:
ce:b8:3f:b2:89:3d:f5:97:dd:8f:13:0a:22:42:af:
0d:7d:7a:2a:f5:b3:9a:a8:57:eb:f0:f3:b6:38:f4:
cd:47:a0:2b:3f:17:58:91:14:f3:99:1f:24:99:b6:
80:5c:a9:9f:f5:ef:ed:15:0e:30:45:45:70:84:b5:
b6:1b:e0:21:8e:54:a8:71:85:0e:ce:d0:40:32:74:
61:5f:09:b3:b0:7e:4d:7d:46:b5:6a:5a:87:b7:19:
ba:fc:52:59:49:c7:e7:ab:c6:13:f6:21:34:a6:4b:
aa:23:dc:3a:79:b3:d0:5c:52:98:80:7a:4c:60:d5:
64:03:a8:a4:02:ed:f5:40:fe:a3:cd:59:be:4b:92:
be:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:4C:98:65:7A:2B:6D:3A:1B:04:6F:B9:BC:4C:B3:59:64:78:AC:21
X509v3 Authority Key Identifier:
keyid:E3:16:31:82:47:D2:11:84:1F:96:20:A9:A1:13:00:10:DD:B4:86:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:41:a1:53:6c:ef:e5:13:40:3a:f3:a2:d5:a4:46:6a:c1:42:
bb:b7:76:69:ff:cd:47:74:96:7e:d8:31:bd:fd:99:0c:5b:b5:
a3:4e:66:73:3c:02:3b:1d:52:28:de:e4:43:89:70:a6:69:bc:
7a:a9:e5:95:2b:c9:2b:16:62:45:af:12:1b:4b:0c:a3:5d:7f:
33:07:a5:67:fb:b0:e6:5a:9d:56:5d:ca:32:28:4b:31:8b:d8:
81:7b:1d:af:78:e4:6f:7e:b6:26:b7:cc:c1:c8:d6:ed:70:49:
a1:e9:3a:ac:69:a0:28:b8:cb:80:11:c0:65:df:92:04:48:ca:
39:99:65:75:aa:3f:b4:06:e1:d5:54:f8:f6:9f:e5:61:8d:8c:
5e:eb:84:5e:98:af:7c:b8:47:ab:cb:c5:5c:da:aa:c8:34:af:
d0:41:50:97:3e:4a:51:fb:60:63:dc:47:b4:86:89:82:78:84:
aa:b2:0f:84:ba:f7:1e:27:65:b5:5a:ec:70:2d:b8:0f:51:be:
57:d0:ac:32:3d:05:ea:0d:51:0f:68:85:9e:e4:95:d0:f1:05:
db:4c:ae:a3:b4:00:ad:27:18:bc:55:0c:a9:49:51:ef:49:01:
23:17:be:e1:3a:f7:4c:47:5b:4a:9f:ea:ed:ae:be:cd:fa:e8:
42:4d:75:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbDS3GOSpSzsHnFKN7K6Un8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMTYzMTgyNDdkMjExODQxZjk2MjBhOWExMTMwMDEwZGRi
NDg2ZjIwHhcNMjUwNTEyMDcwMDIzWhcNMjUwNTEzMDcwMDIzWjAzMTEwLwYDVQQD
EyhlYTRjOTg2NTdhMmI2ZDNhMWIwNDZmYjliYzRjYjM1OTY0NzhhYzIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLvbLPY1Bhv63/BEM+ZqK/I+TrZr
Ri6Z9jy3oUT6d86dGIP/ievCiT4uT529sT0EilglV1Equk5+n7+h1wpIgK1h3oTG
3ol/YckGrxJjepdWNoEAXypyv4SxmOykiVkLxPEl6YQPvwQD34l46tWafdQmKyRh
9uHOuD+yiT31l92PEwoiQq8NfXoq9bOaqFfr8PO2OPTNR6ArPxdYkRTzmR8kmbaA
XKmf9e/tFQ4wRUVwhLW2G+AhjlSocYUOztBAMnRhXwmzsH5NfUa1alqHtxm6/FJZ
Scfnq8YT9iE0pkuqI9w6ebPQXFKYgHpMYNVkA6ikAu31QP6jzVm+S5K+awIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOpMmGV6K206GwRvubxMs1lkeKwhMB8GA1UdIwQY
MBaAFOMWMYJH0hGEH5YgqaETABDdtIbyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHhZeGdrZlNFWVFmbGlDcG9STUFFTjIwaHZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9lZTQyYmItMWU0OS00YzIxLWE0ZDYt
ZWMyODdlMWQzN2U1LzEvNHhZeGdrZlNFWVFmbGlDcG9STUFFTjIwaHZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9lZTQyYmItMWU0OS00YzIxLWE0ZDYtZWMyODdlMWQzN2U1
LzEvNHhZeGdrZlNFWVFmbGlDcG9STUFFTjIwaHZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR0GhU2zv
5RNAOvOi1aRGasFCu7d2af/NR3SWftgxvf2ZDFu1o05mczwCOx1SKN7kQ4lwpmm8
eqnllSvJKxZiRa8SG0sMo11/MwelZ/uw5lqdVl3KMihLMYvYgXsdr3jkb362JrfM
wcjW7XBJoek6rGmgKLjLgBHAZd+SBEjKOZlldao/tAbh1VT49p/lYY2MXuuEXpiv
fLhHq8vFXNqqyDSv0EFQlz5KUftgY9xHtIaJgniEqrIPhLr3HidltVrscC24D1G+
V9CsMj0F6g1RD2iFnuSV0PEF20yuo7QArScYvFUMqUlR70kBIxe+4Tr3TEdbSp/q
7a6+zfroQk11Vw==
-----END CERTIFICATE-----
Generated at Mon May 12 11:18:17 2025 by rpki-client