Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
File: 4_cHBvbAz72cc6fz2DAjJApC9Q0.mft (raw, json)
Hash identifier: 790TBghFfyxKWrSNBAYk3WLBm/qJ7ZEdtR+q4YhB9ns=
Subject key identifier: 1C:5C:9C:E2:E7:51:50:B7:ED:BE:4C:52:DA:7C:85:5E:9C:47:7D:AE
Authority key identifier: E3:F7:07:06:F6:C0:CF:BD:9C:73:A7:F3:D8:30:23:24:0A:42:F5:0D
Certificate issuer: /CN=e3f70706f6c0cfbd9c73a7f3d83023240a42f50d
Certificate serial: 0196C1CB5F0008932464471BBAB7691C9CFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
Manifest number: 0C44
Signing time: Mon 12 May 2025 00:00:52 +0000
Manifest this update: Mon 12 May 2025 00:00:52 +0000
Manifest next update: Tue 13 May 2025 00:00:52 +0000
Files and hashes: 1: 4_cHBvbAz72cc6fz2DAjJApC9Q0.crl (hash: lEmkn0BWW3Sbrhvtqtgb4Kh9JmsRI9wGqD/UMLihXTc=)
2: JZBToS-O_vrT2aeKBSNggNB5se0.roa (hash: D8kzrex63NBxCoEgyWN4HyqVj2eRzOdT3Da1FU0u+nI=)
3: cKLdHjbMHa9DWXygLYK3fJRjYqw.roa (hash: aXunewdhx0tio/kXThZoUaubUGfQctWD4RTkIiazOVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 00:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:cb:5f:00:08:93:24:64:47:1b:ba:b7:69:1c:9c:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3f70706f6c0cfbd9c73a7f3d83023240a42f50d
Validity
Not Before: May 12 00:00:52 2025 GMT
Not After : May 13 00:00:52 2025 GMT
Subject: CN=1c5c9ce2e75150b7edbe4c52da7c855e9c477dae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:54:a9:cf:ab:67:8d:d8:2a:02:5d:94:25:d7:
0c:1b:e7:85:24:4a:58:a9:7c:26:02:a2:b4:fa:73:
49:40:32:ce:ef:f5:82:1b:27:c5:32:75:e4:08:ec:
32:14:e5:f6:3d:55:dd:b8:c7:e8:36:24:67:d4:8e:
4f:c0:99:0f:67:3f:e9:25:7d:d2:7c:56:e8:87:ef:
67:93:04:e5:53:f0:c8:7f:aa:72:60:5a:f8:cd:74:
46:e4:54:a3:1f:28:08:1f:c2:ac:40:b1:70:9c:17:
55:40:50:62:37:55:a7:b3:61:10:b3:5d:c2:ed:b4:
70:84:16:e9:30:d3:05:41:f6:ac:76:14:82:41:6f:
40:b4:18:5a:5f:d7:79:c8:8c:b5:1b:9c:09:81:b9:
8e:bb:1b:df:48:d0:d3:22:51:42:7e:b8:7e:55:fb:
e7:7c:12:ab:6d:20:1f:42:1a:a3:30:53:cd:c0:83:
70:94:57:83:e4:25:dd:dd:72:7f:85:37:eb:74:00:
0a:fe:17:25:57:dd:93:9d:54:4b:d5:47:8d:95:1c:
71:c2:a5:a0:21:2c:1e:e8:93:b1:98:53:7d:de:f0:
f7:96:85:4d:5d:12:c2:2c:bc:09:f5:6c:fe:97:36:
a5:9d:de:dd:7c:d2:de:58:07:0d:b0:85:78:1e:b0:
8a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:5C:9C:E2:E7:51:50:B7:ED:BE:4C:52:DA:7C:85:5E:9C:47:7D:AE
X509v3 Authority Key Identifier:
keyid:E3:F7:07:06:F6:C0:CF:BD:9C:73:A7:F3:D8:30:23:24:0A:42:F5:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:ba:ea:5e:14:e0:e0:8b:5e:de:d0:ab:e4:af:90:02:ae:4d:
13:39:95:00:ba:92:0a:61:37:6d:c6:09:9f:b9:9a:f8:61:e6:
04:3b:35:69:0b:1e:70:67:e8:25:d3:a5:ae:e8:cf:73:a7:0c:
95:80:1a:c6:b4:f2:c0:5d:6a:d3:83:ed:90:24:5b:dd:bd:0d:
f0:50:3b:8a:cd:15:47:ba:00:fa:f4:5a:fa:9a:d6:80:e4:a4:
8c:f7:31:2d:cc:54:be:17:72:9a:50:e7:87:8c:c4:ae:73:29:
76:1f:97:4d:61:7e:8b:27:af:af:e4:cc:9d:bc:a4:a7:a6:18:
c6:98:f6:f1:97:cc:ba:5a:a5:5d:82:2c:ed:9b:24:76:9b:cf:
e6:c5:db:74:1d:e6:da:76:bc:03:39:2e:c8:10:c7:65:8b:bc:
43:1c:f2:13:ec:c0:68:0a:a7:da:a0:65:72:79:05:f2:ea:da:
be:19:25:0a:f8:5c:f6:a1:a0:63:aa:a4:1f:c5:e9:1a:b8:98:
89:98:cf:d4:3a:c3:1f:f6:da:63:b7:85:64:7b:06:57:d9:bd:
f4:f1:db:4a:ed:b6:94:3c:69:3d:f6:ad:90:bd:ae:0c:80:d8:
12:62:05:7a:d1:24:ad:2b:51:55:14:e0:81:dd:39:e5:77:37:
14:ea:dc:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbBy18ACJMkZEcburdpHJz/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZjcwNzA2ZjZjMGNmYmQ5YzczYTdmM2Q4MzAyMzI0MGE0
MmY1MGQwHhcNMjUwNTEyMDAwMDUyWhcNMjUwNTEzMDAwMDUyWjAzMTEwLwYDVQQD
EygxYzVjOWNlMmU3NTE1MGI3ZWRiZTRjNTJkYTdjODU1ZTljNDc3ZGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA41Spz6tnjdgqAl2UJdcMG+eFJEpY
qXwmAqK0+nNJQDLO7/WCGyfFMnXkCOwyFOX2PVXduMfoNiRn1I5PwJkPZz/pJX3S
fFboh+9nkwTlU/DIf6pyYFr4zXRG5FSjHygIH8KsQLFwnBdVQFBiN1Wns2EQs13C
7bRwhBbpMNMFQfasdhSCQW9AtBhaX9d5yIy1G5wJgbmOuxvfSNDTIlFCfrh+Vfvn
fBKrbSAfQhqjMFPNwINwlFeD5CXd3XJ/hTfrdAAK/hclV92TnVRL1UeNlRxxwqWg
ISwe6JOxmFN93vD3loVNXRLCLLwJ9Wz+lzalnd7dfNLeWAcNsIV4HrCKCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBxcnOLnUVC37b5MUtp8hV6cR32uMB8GA1UdIwQY
MBaAFOP3Bwb2wM+9nHOn89gwIyQKQvUNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNF9jSEJ2YkF6NzJjYzZmejJEQWpKQXBDOVEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8yODZkNDctNjQzNC00MWJkLTlhYTIt
MDlmZjc5MzA4YmJlLzEvNF9jSEJ2YkF6NzJjYzZmejJEQWpKQXBDOVEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC8yODZkNDctNjQzNC00MWJkLTlhYTItMDlmZjc5MzA4YmJl
LzEvNF9jSEJ2YkF6NzJjYzZmejJEQWpKQXBDOVEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR7rqXhTg
4Ite3tCr5K+QAq5NEzmVALqSCmE3bcYJn7ma+GHmBDs1aQsecGfoJdOlrujPc6cM
lYAaxrTywF1q04PtkCRb3b0N8FA7is0VR7oA+vRa+prWgOSkjPcxLcxUvhdymlDn
h4zErnMpdh+XTWF+iyevr+TMnbykp6YYxpj28ZfMulqlXYIs7ZskdpvP5sXbdB3m
2na8AzkuyBDHZYu8QxzyE+zAaAqn2qBlcnkF8uravhklCvhc9qGgY6qkH8XpGriY
iZjP1DrDH/baY7eFZHsGV9m99PHbSu22lDxpPfatkL2uDIDYEmIFetEkrStRVRTg
gd055Xc3FOrcKQ==
-----END CERTIFICATE-----
Generated at Mon May 12 10:37:32 2025 by rpki-client