Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.mft
File: 4ygMY1Kgv7t50knIh17RhuzOioY.mft (raw, json)
Hash identifier: IZU+s+nuIGH1HSSTiS4tXEGl8X/HO73bkv7/GzX4BVI=
Subject key identifier: AF:28:8E:37:71:04:26:0E:3A:B0:C2:65:40:DE:37:93:EF:18:CA:D4
Authority key identifier: E3:28:0C:63:52:A0:BF:BB:79:D2:49:C8:87:5E:D1:86:EC:CE:8A:86
Certificate issuer: /CN=e3280c6352a0bfbb79d249c8875ed186ecce8a86
Certificate serial: 0196D9D3AFF9E0979B72C63C52B7FD64E455
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ygMY1Kgv7t50knIh17RhuzOioY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.mft
Manifest number: 1549
Signing time: Fri 16 May 2025 16:00:51 +0000
Manifest this update: Fri 16 May 2025 16:00:51 +0000
Manifest next update: Sat 17 May 2025 16:00:51 +0000
Files and hashes: 1: 4ygMY1Kgv7t50knIh17RhuzOioY.crl (hash: mGxieJdn211Zc3PwgSsLHipjujsxoIPWoqZgzSaULcQ=)
2: LKQwgiepoVu5_u8taIAcRutuJ-s.roa (hash: g/2UuKpKO1KSqMbVUrFxetjbdTbJKbXQ9uje0qgEhYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ygMY1Kgv7t50knIh17RhuzOioY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d9:d3:af:f9:e0:97:9b:72:c6:3c:52:b7:fd:64:e4:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3280c6352a0bfbb79d249c8875ed186ecce8a86
Validity
Not Before: May 16 16:00:51 2025 GMT
Not After : May 17 16:00:51 2025 GMT
Subject: CN=af288e377104260e3ab0c26540de3793ef18cad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f7:8f:fc:05:78:e7:c6:9e:7c:67:1e:64:d9:
17:4b:82:86:61:ae:30:ed:72:15:63:96:cb:87:40:
5b:31:1e:0f:af:02:1b:2a:75:c9:54:8b:00:56:d2:
56:6b:15:21:ae:1a:e8:92:2d:ac:bc:95:c3:68:7c:
21:fd:ce:2e:f7:00:09:f2:5e:3e:71:9c:fa:82:72:
ab:15:2b:a2:5a:47:68:e7:bc:6b:3a:17:c0:e9:a5:
5f:16:19:60:7e:ab:99:ef:c4:0d:10:e9:b6:e4:d7:
0b:77:b1:d6:9f:a7:5f:41:d8:dd:af:30:13:e8:e9:
8e:e7:ec:29:2f:ce:fc:69:75:d2:dd:45:33:d6:3b:
5a:62:0f:dc:a4:9e:cc:14:15:85:d0:b2:31:7d:14:
e2:e7:b8:72:ea:71:76:92:45:e3:91:e5:3a:d6:91:
87:19:f5:47:6a:54:b1:83:3e:fd:66:f6:45:90:91:
2a:f1:43:17:0a:42:c3:49:0d:1f:13:1e:a7:a6:14:
dd:b2:0b:34:3c:ec:ad:a2:d5:fa:70:49:24:ba:4a:
d4:e8:24:9d:38:1b:ad:b6:a0:48:2a:5b:3f:b3:c3:
80:68:8f:fe:08:55:c8:c9:d8:fd:c8:16:fc:68:5d:
e6:d1:9d:f2:f5:5e:58:0f:c5:28:8d:d1:72:4f:8e:
ec:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:28:8E:37:71:04:26:0E:3A:B0:C2:65:40:DE:37:93:EF:18:CA:D4
X509v3 Authority Key Identifier:
keyid:E3:28:0C:63:52:A0:BF:BB:79:D2:49:C8:87:5E:D1:86:EC:CE:8A:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ygMY1Kgv7t50knIh17RhuzOioY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:49:55:bd:71:2a:26:59:39:31:13:72:8d:f7:f8:01:39:e2:
a7:65:0f:75:ec:13:c3:c2:4d:a1:cd:ee:ca:d2:42:ef:d0:20:
f0:42:34:0a:0b:f0:27:91:5a:e6:f6:c5:74:18:85:6c:6e:e8:
6e:12:ce:46:2b:e5:b5:00:e8:10:be:a3:fc:6b:4c:ee:9f:c5:
f3:4e:31:25:41:e6:86:7c:1e:60:24:0c:6b:2c:89:a5:7c:8a:
da:47:a9:1f:05:bd:9a:a9:fb:d7:ec:bf:84:e6:fc:3e:dc:90:
d5:73:cf:8d:01:a7:02:ee:74:6f:22:20:72:6a:28:9e:0b:94:
44:32:4b:00:7f:78:7e:50:89:66:7b:13:d4:6b:f5:97:bf:2c:
bc:76:ee:94:a3:f9:06:bb:39:fe:76:54:0e:3e:e9:99:be:8f:
39:e6:5b:20:45:c2:ca:a6:ec:33:bc:0f:75:92:4d:89:4f:19:
e1:90:29:82:71:49:05:f5:4d:4c:5b:2b:bc:cd:38:a5:b9:13:
33:ca:43:0b:81:17:b0:0a:79:57:80:3b:ee:22:4f:4e:17:f7:
2a:bb:90:3b:eb:d7:fc:58:19:ef:ab:5c:b9:45:ab:31:10:a6:
b2:38:79:46:62:d2:7e:8a:42:81:d4:b9:aa:8d:59:fa:85:9b:
a2:45:4c:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbZ06/54JebcsY8Urf9ZORVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMjgwYzYzNTJhMGJmYmI3OWQyNDljODg3NWVkMTg2ZWNj
ZThhODYwHhcNMjUwNTE2MTYwMDUxWhcNMjUwNTE3MTYwMDUxWjAzMTEwLwYDVQQD
EyhhZjI4OGUzNzcxMDQyNjBlM2FiMGMyNjU0MGRlMzc5M2VmMThjYWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPeP/AV458aefGceZNkXS4KGYa4w
7XIVY5bLh0BbMR4PrwIbKnXJVIsAVtJWaxUhrhroki2svJXDaHwh/c4u9wAJ8l4+
cZz6gnKrFSuiWkdo57xrOhfA6aVfFhlgfquZ78QNEOm25NcLd7HWn6dfQdjdrzAT
6OmO5+wpL878aXXS3UUz1jtaYg/cpJ7MFBWF0LIxfRTi57hy6nF2kkXjkeU61pGH
GfVHalSxgz79ZvZFkJEq8UMXCkLDSQ0fEx6nphTdsgs0POytotX6cEkkukrU6CSd
OButtqBIKls/s8OAaI/+CFXIydj9yBb8aF3m0Z3y9V5YD8UojdFyT47shQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK8ojjdxBCYOOrDCZUDeN5PvGMrUMB8GA1UdIwQY
MBaAFOMoDGNSoL+7edJJyIde0YbszoqGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHlnTVkxS2d2N3Q1MGtuSWgxN1JodXpPaW9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC81OWEwMzItYzM4NC00M2RmLThjOWQt
ZWYwYjgyMTg5NDQ0LzEvNHlnTVkxS2d2N3Q1MGtuSWgxN1JodXpPaW9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC81OWEwMzItYzM4NC00M2RmLThjOWQtZWYwYjgyMTg5NDQ0
LzEvNHlnTVkxS2d2N3Q1MGtuSWgxN1JodXpPaW9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB0lVvXEq
Jlk5MRNyjff4ATnip2UPdewTw8JNoc3uytJC79Ag8EI0CgvwJ5Fa5vbFdBiFbG7o
bhLORivltQDoEL6j/GtM7p/F804xJUHmhnweYCQMayyJpXyK2kepHwW9mqn71+y/
hOb8PtyQ1XPPjQGnAu50byIgcmoonguURDJLAH94flCJZnsT1Gv1l78svHbulKP5
Brs5/nZUDj7pmb6POeZbIEXCyqbsM7wPdZJNiU8Z4ZApgnFJBfVNTFsrvM04pbkT
M8pDC4EXsAp5V4A77iJPThf3KruQO+vX/FgZ76tcuUWrMRCmsjh5RmLSfopCgdS5
qo1Z+oWbokVMsA==
-----END CERTIFICATE-----
Generated at Fri May 16 23:57:54 2025 by rpki-client