Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
File: 4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft (raw, json)
Hash identifier: 6mL4BG8BjIMWMfHY1YmJufGdpBi+e7TKMOkpukqyvNM=
Subject key identifier: 60:13:98:70:F0:A9:A4:9D:FC:06:C7:4C:E8:74:45:01:17:27:FE:58
Authority key identifier: E2:24:E4:50:EA:FE:D4:C2:59:B6:DC:0A:34:E3:06:F1:AD:28:4B:C4
Certificate issuer: /CN=e224e450eafed4c259b6dc0a34e306f1ad284bc4
Certificate serial: 0196AC8CB69D2CEE69572C0D97A2E35B304B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
Manifest number: 152F
Signing time: Wed 07 May 2025 21:00:24 +0000
Manifest this update: Wed 07 May 2025 21:00:24 +0000
Manifest next update: Thu 08 May 2025 21:00:24 +0000
Files and hashes: 1: 4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl (hash: Rw2UjH+B1DkbpG2uBI/HvqXkcjwvSq/zeJ/8Huppxcw=)
2: SifsSXB3IxM773oq0Xz9LePnp8I.roa (hash: zgIEbQQ5tBYSjxuoWIlb12GUFr1oCylWnPsgULnZLUs=)
3: pe-h0g6N0Y23HKrAKsDD9huS1mE.roa (hash: ylxKfNsAYg9jbE4bG9j7buLcVQFIUsPKCa1+TwgGN2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 20:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:8c:b6:9d:2c:ee:69:57:2c:0d:97:a2:e3:5b:30:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e224e450eafed4c259b6dc0a34e306f1ad284bc4
Validity
Not Before: May 7 21:00:24 2025 GMT
Not After : May 8 21:00:24 2025 GMT
Subject: CN=60139870f0a9a49dfc06c74ce87445011727fe58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b5:1f:84:8e:95:47:ae:34:d7:92:14:d9:c4:
76:74:72:7a:c3:f7:d7:ca:e7:35:59:93:69:83:36:
4f:bd:9f:4f:65:48:1b:cd:68:9b:5c:f4:d4:c3:c7:
2c:59:14:27:5b:85:f6:db:34:7f:d8:6e:bc:7b:3c:
75:c5:11:c7:aa:eb:a3:6b:07:fd:7b:a8:68:33:2e:
eb:a7:cd:36:40:4e:94:a6:13:b9:2d:d2:ea:c2:30:
6e:f0:2b:d1:b3:f0:60:af:34:c3:f8:c0:14:c4:9c:
d6:31:8d:c5:7b:a3:94:e1:a1:2f:8e:fc:15:b8:a0:
b3:81:9f:7d:a7:fd:f6:b7:6b:4f:16:f5:e0:07:64:
2b:ec:e9:68:a2:d6:30:a3:89:e3:aa:0c:3f:2e:99:
cb:bf:56:c8:f5:6b:26:24:c4:2f:54:c9:04:bf:d3:
c3:1a:2b:65:ce:97:d1:f3:4f:e0:a7:ff:37:b8:89:
00:d0:ce:4c:bf:4b:64:bf:2d:8d:41:77:e1:b0:22:
a6:38:3f:e9:cb:66:02:ec:58:ac:c5:f9:45:5c:d4:
1c:71:31:4e:3f:ff:b9:74:02:a1:8c:66:a8:60:55:
f9:d2:1b:49:2d:e7:b8:ce:b8:d2:f2:2d:b1:b2:ad:
15:eb:7e:f8:93:41:58:3c:97:8b:3e:46:ee:d6:10:
7a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:13:98:70:F0:A9:A4:9D:FC:06:C7:4C:E8:74:45:01:17:27:FE:58
X509v3 Authority Key Identifier:
keyid:E2:24:E4:50:EA:FE:D4:C2:59:B6:DC:0A:34:E3:06:F1:AD:28:4B:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:53:96:6c:22:a4:d5:89:fe:99:2d:6d:74:5b:d0:f6:cd:11:
a5:26:cd:cc:67:29:a5:58:2a:c9:7c:d7:89:70:a4:ff:a8:b9:
32:1f:15:27:79:a3:57:89:61:9a:4f:36:f6:0a:2e:f6:c3:1e:
72:36:ce:60:e2:52:09:47:ed:c8:ad:ea:d1:ff:84:bb:07:1e:
40:bb:5c:c7:91:28:a7:d8:e3:f2:6d:26:9b:af:1b:09:b2:7a:
e6:40:14:11:1e:47:f1:28:cd:64:7b:6a:b8:20:e1:25:1b:04:
18:e8:45:ac:cf:f6:3a:9e:54:b7:0f:05:c1:3e:62:fb:26:a0:
dc:0f:26:77:11:20:99:56:be:8d:45:ec:23:f2:66:67:eb:06:
7c:11:58:aa:e2:14:d6:7d:11:0b:a5:ed:20:fb:a6:18:c4:ae:
28:af:a9:81:31:ec:da:d1:c8:b3:8c:2f:e3:9d:7c:0e:b1:8e:
6a:e1:5d:4d:51:dc:e1:ef:aa:da:91:47:4f:c9:8d:5f:86:a4:
70:2c:8c:34:c8:ce:d9:a1:6e:cd:14:d9:15:d5:bf:f9:9b:f5:
68:f3:ec:0b:2d:de:2f:b4:a1:23:66:dd:66:46:cc:81:38:44:
b7:ea:58:09:47:cd:b2:de:7c:cf:5f:81:36:d4:8a:00:9e:df:
e2:9b:b7:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZasjLadLO5pVywNl6LjWzBLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyMjRlNDUwZWFmZWQ0YzI1OWI2ZGMwYTM0ZTMwNmYxYWQy
ODRiYzQwHhcNMjUwNTA3MjEwMDI0WhcNMjUwNTA4MjEwMDI0WjAzMTEwLwYDVQQD
Eyg2MDEzOTg3MGYwYTlhNDlkZmMwNmM3NGNlODc0NDUwMTE3MjdmZTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbUfhI6VR64015IU2cR2dHJ6w/fX
yuc1WZNpgzZPvZ9PZUgbzWibXPTUw8csWRQnW4X22zR/2G68ezx1xRHHquujawf9
e6hoMy7rp802QE6UphO5LdLqwjBu8CvRs/BgrzTD+MAUxJzWMY3Fe6OU4aEvjvwV
uKCzgZ99p/32t2tPFvXgB2Qr7OlootYwo4njqgw/LpnLv1bI9WsmJMQvVMkEv9PD
GitlzpfR80/gp/83uIkA0M5Mv0tkvy2NQXfhsCKmOD/py2YC7FisxflFXNQccTFO
P/+5dAKhjGaoYFX50htJLee4zrjS8i2xsq0V6374k0FYPJeLPkbu1hB6lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGATmHDwqaSd/AbHTOh0RQEXJ/5YMB8GA1UdIwQY
MBaAFOIk5FDq/tTCWbbcCjTjBvGtKEvEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGlUa1VPci0xTUpadHR3S05PTUc4YTBvUzhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9iOTE3OGItYzdiYS00ZDRlLWFmOWUt
NmFjZDIxZDRiYWY4LzEvNGlUa1VPci0xTUpadHR3S05PTUc4YTBvUzhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9iOTE3OGItYzdiYS00ZDRlLWFmOWUtNmFjZDIxZDRiYWY4
LzEvNGlUa1VPci0xTUpadHR3S05PTUc4YTBvUzhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF1OWbCKk
1Yn+mS1tdFvQ9s0RpSbNzGcppVgqyXzXiXCk/6i5Mh8VJ3mjV4lhmk829gou9sMe
cjbOYOJSCUftyK3q0f+EuwceQLtcx5Eop9jj8m0mm68bCbJ65kAUER5H8SjNZHtq
uCDhJRsEGOhFrM/2Op5Utw8FwT5i+yag3A8mdxEgmVa+jUXsI/JmZ+sGfBFYquIU
1n0RC6XtIPumGMSuKK+pgTHs2tHIs4wv4518DrGOauFdTVHc4e+q2pFHT8mNX4ak
cCyMNMjO2aFuzRTZFdW/+Zv1aPPsCy3eL7ShI2bdZkbMgThEt+pYCUfNst58z1+B
NtSKAJ7f4pu3Jw==
-----END CERTIFICATE-----
Generated at Thu May 8 01:10:48 2025 by rpki-client