Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
File: 4pLIx3m27W7ecqjPEUkO9tep6SE.mft (raw, json)
Hash identifier: JNfV/cEIPi2OJmzwyeAMlH2Dd6/wwNT3H4uHFVijaTM=
Subject key identifier: 59:70:FD:38:9D:F7:41:15:93:60:CD:DA:FC:60:BD:D5:E6:FA:B0:63
Authority key identifier: E2:92:C8:C7:79:B6:ED:6E:DE:72:A8:CF:11:49:0E:F6:D7:A9:E9:21
Certificate issuer: /CN=e292c8c779b6ed6ede72a8cf11490ef6d7a9e921
Certificate serial: 0196C45E28BB8F8D8EB4C5E73732A539AF22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
Manifest number: 04CA
Signing time: Mon 12 May 2025 12:00:27 +0000
Manifest this update: Mon 12 May 2025 12:00:27 +0000
Manifest next update: Tue 13 May 2025 12:00:27 +0000
Files and hashes: 1: 4pLIx3m27W7ecqjPEUkO9tep6SE.crl (hash: WQoydmh4chmEEyFu2aXe03BeSnZM5kD04k4B5YE05vY=)
2: YqgYpLiYgO18oqPvT2ni6A3ogHg.roa (hash: vx6vFyA0N2Xc5uOas9M22qh/T0xDxUFlzWuX4ieyj10=)
3: fQ9CAdmGh8PVMwKzMUPdKPUrnwY.roa (hash: pIIB8MOFmW82oxrTaW29LQWRpAreQ8kiX3bpbS9eqjw=)
4: pxY6_rBQcn3iz82XldYnkJz45JM.roa (hash: YOl0UxNW+xdGkU9HEm/QZ7M3QuxM2oQJBlY7pjYmG24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 12:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:5e:28:bb:8f:8d:8e:b4:c5:e7:37:32:a5:39:af:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e292c8c779b6ed6ede72a8cf11490ef6d7a9e921
Validity
Not Before: May 12 12:00:27 2025 GMT
Not After : May 13 12:00:27 2025 GMT
Subject: CN=5970fd389df741159360cddafc60bdd5e6fab063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7d:4f:ae:f3:3d:f0:61:c9:ee:60:fd:51:a9:
ff:34:48:50:ba:bb:bd:69:f4:16:fc:75:07:f3:2d:
dd:06:75:3c:f5:8f:30:23:b8:dc:9b:d2:bf:10:e6:
d9:0f:b3:c3:d9:99:fd:9f:01:34:88:9b:f3:e4:1d:
87:2e:de:4e:0d:ca:57:df:53:1e:92:02:64:b1:2a:
7c:4b:b6:bc:74:50:df:7b:28:b6:25:7e:69:3d:ff:
ec:ef:5e:25:b0:76:13:ed:e4:a8:24:06:af:e6:f3:
40:ac:37:e4:10:f2:e1:b7:8e:bd:13:cc:13:f2:1e:
59:52:a4:18:46:c0:30:6a:36:a6:5d:f6:87:5d:8e:
0f:d7:43:f0:9e:a0:3a:b7:51:d8:02:3e:4b:dc:f4:
67:8b:82:0d:6a:07:12:f7:ac:64:31:9a:cd:45:9a:
6a:27:55:db:98:3c:0d:bb:09:cc:3d:a8:24:a1:cd:
24:47:83:1f:25:f9:2b:fd:06:60:dd:89:5b:73:fa:
87:7c:25:d0:db:0b:4f:0c:02:b6:5f:c0:ef:91:9f:
65:bd:85:1b:e7:63:b9:dd:cf:79:ce:13:18:07:dc:
eb:f5:01:3e:89:32:d9:ef:11:da:2f:93:d6:f4:ea:
30:4c:50:a6:2b:06:f8:a1:07:f4:7b:8d:46:09:2a:
ed:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:70:FD:38:9D:F7:41:15:93:60:CD:DA:FC:60:BD:D5:E6:FA:B0:63
X509v3 Authority Key Identifier:
keyid:E2:92:C8:C7:79:B6:ED:6E:DE:72:A8:CF:11:49:0E:F6:D7:A9:E9:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:e8:cd:e4:15:f9:e3:58:9d:77:00:9b:21:08:b0:25:a9:a6:
21:97:8b:e9:b2:ed:24:d7:e4:03:81:25:33:06:3d:fe:da:04:
de:ff:7e:ae:ff:77:4a:e2:eb:2a:99:e7:00:8b:e7:f7:ed:29:
7d:76:e6:2f:ee:d1:16:7b:bf:7c:89:dc:0d:87:99:18:01:4c:
06:df:d5:ab:c2:2d:af:a5:97:dc:b8:4e:fb:96:d3:a2:8f:92:
0a:57:5f:7c:ce:db:21:c8:e3:da:b3:1f:15:d4:17:be:8a:c4:
3c:ec:a6:15:77:b7:4b:f0:c8:2f:30:77:70:33:a8:eb:81:66:
13:b3:84:0c:fb:77:39:e3:35:34:e7:c6:3b:71:06:2e:51:33:
c7:6d:27:3e:19:7f:7f:be:dd:16:50:a5:bf:3f:ae:be:0a:ad:
4b:67:07:c7:04:ee:b2:fb:52:13:ae:ed:d2:45:b7:ed:d9:6b:
63:27:dc:e0:36:d7:73:a5:59:cc:b1:a2:f7:ff:9a:8f:21:e4:
52:44:6c:38:0e:cd:8c:c6:d2:39:bf:b7:ec:5d:ec:5c:be:01:
1b:ed:c7:43:a1:99:ca:ec:ff:ce:3a:48:c4:74:31:93:ce:c0:
38:ee:f4:6e:59:b3:8b:81:81:f5:fe:bd:3b:16:b3:f8:e5:e9:
27:bf:c5:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbEXii7j42OtMXnNzKlOa8iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyOTJjOGM3NzliNmVkNmVkZTcyYThjZjExNDkwZWY2ZDdh
OWU5MjEwHhcNMjUwNTEyMTIwMDI3WhcNMjUwNTEzMTIwMDI3WjAzMTEwLwYDVQQD
Eyg1OTcwZmQzODlkZjc0MTE1OTM2MGNkZGFmYzYwYmRkNWU2ZmFiMDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwX1PrvM98GHJ7mD9Uan/NEhQuru9
afQW/HUH8y3dBnU89Y8wI7jcm9K/EObZD7PD2Zn9nwE0iJvz5B2HLt5ODcpX31Me
kgJksSp8S7a8dFDfeyi2JX5pPf/s714lsHYT7eSoJAav5vNArDfkEPLht469E8wT
8h5ZUqQYRsAwajamXfaHXY4P10PwnqA6t1HYAj5L3PRni4INagcS96xkMZrNRZpq
J1XbmDwNuwnMPagkoc0kR4MfJfkr/QZg3Ylbc/qHfCXQ2wtPDAK2X8DvkZ9lvYUb
52O53c95zhMYB9zr9QE+iTLZ7xHaL5PW9OowTFCmKwb4oQf0e41GCSrtBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFlw/Tid90EVk2DN2vxgvdXm+rBjMB8GA1UdIwQY
MBaAFOKSyMd5tu1u3nKozxFJDvbXqekhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHBMSXgzbTI3VzdlY3FqUEVVa085dGVwNlNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC80YTJlOTctMjU3MC00NzhiLWI5YmMt
NWViYjYzNzgwMDllLzEvNHBMSXgzbTI3VzdlY3FqUEVVa085dGVwNlNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC80YTJlOTctMjU3MC00NzhiLWI5YmMtNWViYjYzNzgwMDll
LzEvNHBMSXgzbTI3VzdlY3FqUEVVa085dGVwNlNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZujN5BX5
41iddwCbIQiwJammIZeL6bLtJNfkA4ElMwY9/toE3v9+rv93SuLrKpnnAIvn9+0p
fXbmL+7RFnu/fIncDYeZGAFMBt/Vq8Itr6WX3LhO+5bToo+SCldffM7bIcjj2rMf
FdQXvorEPOymFXe3S/DILzB3cDOo64FmE7OEDPt3OeM1NOfGO3EGLlEzx20nPhl/
f77dFlClvz+uvgqtS2cHxwTusvtSE67t0kW37dlrYyfc4DbXc6VZzLGi9/+ajyHk
UkRsOA7NjMbSOb+37F3sXL4BG+3HQ6GZyuz/zjpIxHQxk87AOO70blmzi4GB9f69
Oxaz+OXpJ7/FIA==
-----END CERTIFICATE-----
Generated at Mon May 12 15:51:49 2025 by rpki-client