Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft
File: 4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft (raw, json)
Hash identifier: pNKYB3RXtT/atmrYO13rLNL6HZaofk5ySh6CEpyg0jA=
Subject key identifier: 8E:57:EC:87:5F:BA:D2:EE:D7:25:FC:6C:62:3A:5E:7C:8F:F5:C3:7D
Authority key identifier: E1:9A:3B:AE:48:C9:55:66:31:4D:60:EF:A8:89:F3:D6:5F:9B:DD:41
Certificate issuer: /CN=e19a3bae48c95566314d60efa889f3d65f9bdd41
Certificate serial: 0196D02BBB153D3D91D430C063B042C0784C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Zo7rkjJVWYxTWDvqInz1l-b3UE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft
Manifest number: 0179
Signing time: Wed 14 May 2025 19:00:48 +0000
Manifest this update: Wed 14 May 2025 19:00:48 +0000
Manifest next update: Thu 15 May 2025 19:00:48 +0000
Files and hashes: 1: 4Zo7rkjJVWYxTWDvqInz1l-b3UE.crl (hash: kKBlhv7gTNrl5b3PlALw9vJTJc/GrAdm00k45fsWnEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Zo7rkjJVWYxTWDvqInz1l-b3UE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 19:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d0:2b:bb:15:3d:3d:91:d4:30:c0:63:b0:42:c0:78:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e19a3bae48c95566314d60efa889f3d65f9bdd41
Validity
Not Before: May 14 19:00:48 2025 GMT
Not After : May 15 19:00:48 2025 GMT
Subject: CN=8e57ec875fbad2eed725fc6c623a5e7c8ff5c37d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:11:83:5e:fe:20:e5:90:eb:1b:28:61:56:83:
e8:28:74:90:f1:3d:98:68:ac:1c:66:44:c1:c1:f1:
59:c2:83:2a:57:01:59:c2:1e:17:66:64:c4:67:89:
8f:0b:da:38:17:e0:c2:79:e2:8e:a0:2b:ac:11:22:
3c:7d:9f:be:7b:33:f1:85:d2:cd:2b:54:3d:d5:93:
86:3a:cc:d6:6b:87:bc:67:28:cd:2a:dc:21:10:04:
31:03:cc:27:36:f6:5d:0d:d5:43:b7:77:cc:9e:d4:
d8:14:ed:da:16:16:ed:20:32:82:a6:30:8b:5f:80:
c4:a9:f3:1c:64:69:0c:f5:31:d9:a8:04:45:27:df:
47:c7:b9:24:43:b7:39:78:c4:80:89:33:d2:9c:db:
79:fc:f1:7c:20:95:ab:d6:66:fc:11:ef:76:19:f0:
53:6b:c6:44:c4:a5:ca:c3:81:39:84:c1:99:06:fa:
b3:57:9d:67:7a:f7:42:f7:4e:c0:3c:bc:f3:44:ba:
cc:58:3a:8b:f3:f0:75:8d:b3:0a:2e:71:76:0c:10:
77:1f:6f:ba:2d:68:54:8f:59:a6:89:cb:30:61:76:
fe:ea:04:4b:22:6e:71:75:ff:65:71:80:8c:29:0f:
a2:4b:b9:35:49:51:49:71:96:4d:96:bb:aa:2b:bc:
4e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:57:EC:87:5F:BA:D2:EE:D7:25:FC:6C:62:3A:5E:7C:8F:F5:C3:7D
X509v3 Authority Key Identifier:
keyid:E1:9A:3B:AE:48:C9:55:66:31:4D:60:EF:A8:89:F3:D6:5F:9B:DD:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Zo7rkjJVWYxTWDvqInz1l-b3UE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:dc:76:c8:d3:3e:70:1e:69:22:7f:9a:81:af:38:45:52:8d:
fd:f8:29:46:02:80:a3:b8:36:e4:7f:9e:5f:f4:be:33:13:dd:
5c:c1:1c:67:77:42:3e:a7:7b:0f:97:26:ec:c6:66:e1:b8:c5:
df:0d:c8:f5:2c:ed:88:62:62:e3:4b:34:46:0a:ba:8d:89:c9:
95:21:ae:d0:4a:74:39:37:55:10:89:dc:84:7e:b6:fe:d6:42:
4d:79:63:78:90:46:6d:e8:9d:b5:60:e0:d6:a3:98:0e:d0:dc:
c2:fc:b6:f0:99:36:01:f8:6f:2d:24:5c:39:51:19:2f:c5:80:
e1:1b:77:71:c9:bf:1a:4e:c5:91:8c:04:39:8c:42:72:60:13:
4e:73:ac:8e:fb:b7:45:66:47:9c:74:1b:57:c6:e0:33:17:1d:
45:7a:09:65:10:d6:ac:b0:16:69:0b:35:f7:8b:ff:f9:83:82:
6d:8b:5c:e1:fe:d6:5c:4f:62:9f:62:b0:79:9d:dd:1f:45:e4:
d9:81:e7:cf:ec:52:c5:cc:6b:b0:dd:a2:c7:06:f6:b0:77:4f:
3d:99:7a:95:03:04:b4:5f:42:e6:cb:73:cf:1a:b1:65:c6:b8:
65:fe:ce:77:2a:3b:1b:cc:88:28:c1:0b:59:77:52:12:af:94:
90:47:be:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbQK7sVPT2R1DDAY7BCwHhMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxOWEzYmFlNDhjOTU1NjYzMTRkNjBlZmE4ODlmM2Q2NWY5
YmRkNDEwHhcNMjUwNTE0MTkwMDQ4WhcNMjUwNTE1MTkwMDQ4WjAzMTEwLwYDVQQD
Eyg4ZTU3ZWM4NzVmYmFkMmVlZDcyNWZjNmM2MjNhNWU3YzhmZjVjMzdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhGDXv4g5ZDrGyhhVoPoKHSQ8T2Y
aKwcZkTBwfFZwoMqVwFZwh4XZmTEZ4mPC9o4F+DCeeKOoCusESI8fZ++ezPxhdLN
K1Q91ZOGOszWa4e8ZyjNKtwhEAQxA8wnNvZdDdVDt3fMntTYFO3aFhbtIDKCpjCL
X4DEqfMcZGkM9THZqARFJ99Hx7kkQ7c5eMSAiTPSnNt5/PF8IJWr1mb8Ee92GfBT
a8ZExKXKw4E5hMGZBvqzV51nevdC907APLzzRLrMWDqL8/B1jbMKLnF2DBB3H2+6
LWhUj1mmicswYXb+6gRLIm5xdf9lcYCMKQ+iS7k1SVFJcZZNlruqK7xOhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI5X7IdfutLu1yX8bGI6XnyP9cN9MB8GA1UdIwQY
MBaAFOGaO65IyVVmMU1g76iJ89Zfm91BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFpvN3JrakpWV1l4VFdEdnFJbnoxbC1iM1VFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy82MzBkMGEtNDViOC00NmM0LThjMDIt
OTE4NGE5MWI4YWUxLzEvNFpvN3JrakpWV1l4VFdEdnFJbnoxbC1iM1VFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy82MzBkMGEtNDViOC00NmM0LThjMDItOTE4NGE5MWI4YWUx
LzEvNFpvN3JrakpWV1l4VFdEdnFJbnoxbC1iM1VFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAndx2yNM+
cB5pIn+aga84RVKN/fgpRgKAo7g25H+eX/S+MxPdXMEcZ3dCPqd7D5cm7MZm4bjF
3w3I9SztiGJi40s0Rgq6jYnJlSGu0Ep0OTdVEInchH62/tZCTXljeJBGbeidtWDg
1qOYDtDcwvy28Jk2AfhvLSRcOVEZL8WA4Rt3ccm/Gk7FkYwEOYxCcmATTnOsjvu3
RWZHnHQbV8bgMxcdRXoJZRDWrLAWaQs194v/+YOCbYtc4f7WXE9in2KweZ3dH0Xk
2YHnz+xSxcxrsN2ixwb2sHdPPZl6lQMEtF9C5stzzxqxZca4Zf7Odyo7G8yIKMEL
WXdSEq+UkEe+dA==
-----END CERTIFICATE-----
Generated at Thu May 15 04:54:11 2025 by rpki-client