Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
File: 4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft (raw, json)
Hash identifier: VaiYIsaNRMTYNcVi107T2OMEAxjZvtC/gREgL4T7Vho=
Subject key identifier: 95:B5:71:A7:7C:B3:0C:32:B1:2A:51:55:BF:A6:B7:E7:3C:FC:FA:C3
Authority key identifier: E0:1A:A3:EF:F4:75:B0:10:BD:E4:15:4F:3B:D4:74:3A:7C:0B:AE:55
Certificate issuer: /CN=e01aa3eff475b010bde4154f3bd4743a7c0bae55
Certificate serial: 0196ACC3E387BD36F6A46D593194E383DF1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
Manifest number: 0958
Signing time: Wed 07 May 2025 22:00:40 +0000
Manifest this update: Wed 07 May 2025 22:00:40 +0000
Manifest next update: Thu 08 May 2025 22:00:40 +0000
Files and hashes: 1: 4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl (hash: V3WRtFGGCVs33spkbOgwKlzP/8v9SJQKEymABYczaRY=)
2: p_9inuYDdp5y0a2pR7IT5FJWxkA.roa (hash: w2ZioVdUL3h+FykybnCF+ZnIIFFr6zWJMlYabfFURBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 20:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:c3:e3:87:bd:36:f6:a4:6d:59:31:94:e3:83:df:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e01aa3eff475b010bde4154f3bd4743a7c0bae55
Validity
Not Before: May 7 22:00:40 2025 GMT
Not After : May 8 22:00:40 2025 GMT
Subject: CN=95b571a77cb30c32b12a5155bfa6b7e73cfcfac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3e:fa:21:9f:2d:61:d5:65:65:cb:71:4d:e0:
ea:98:33:0c:bc:86:1a:67:6b:49:6a:65:f7:ff:a3:
a5:6e:fa:8c:64:f1:a9:39:f0:62:f4:52:25:98:e6:
24:78:81:48:e6:2e:d0:0a:f4:9f:1a:2d:90:1e:8a:
a8:2b:11:81:e0:5f:80:47:8d:77:c4:2f:ab:41:6b:
8a:cf:01:17:3b:93:2a:53:8f:70:af:c6:12:10:91:
0c:f7:0c:83:b2:73:4c:fe:ff:ed:06:7e:91:c7:00:
27:85:d7:52:8c:53:89:5f:f8:90:ae:2f:4d:0e:d1:
96:77:88:d3:92:a3:2d:13:da:a0:95:ff:87:b1:9b:
08:b3:8d:01:ad:8a:b0:92:db:17:06:bf:49:23:d1:
19:d3:4c:4e:87:bb:73:76:01:16:42:e2:c9:95:7d:
e5:be:b0:c9:40:f8:b8:ae:a0:e8:5e:94:d9:99:ba:
d3:bc:f4:80:e2:2c:b2:eb:24:09:41:7a:51:47:5e:
b1:e7:c7:d6:9a:ba:6d:45:3c:92:a7:3a:1a:14:2a:
6e:ed:ac:48:84:4b:90:09:74:ef:67:07:4a:6e:be:
8d:15:98:f9:f1:b6:f1:21:cb:b8:5a:f0:b0:84:b2:
12:97:e4:df:56:09:43:2a:fe:8b:75:94:a6:fb:42:
8d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B5:71:A7:7C:B3:0C:32:B1:2A:51:55:BF:A6:B7:E7:3C:FC:FA:C3
X509v3 Authority Key Identifier:
keyid:E0:1A:A3:EF:F4:75:B0:10:BD:E4:15:4F:3B:D4:74:3A:7C:0B:AE:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:6c:cd:50:0a:9a:9b:16:60:f8:eb:7f:f8:6e:e9:62:80:38:
96:4d:b7:fc:e4:97:31:7c:c3:0b:0e:94:96:7e:33:47:72:ff:
dc:f0:45:20:df:28:66:12:10:c2:ea:6d:14:f3:0a:f0:aa:4d:
b3:61:82:bb:67:8a:dd:4c:d6:e1:18:43:56:96:6c:e7:e0:fa:
03:82:40:68:dd:52:1c:e5:08:ab:ad:bc:54:d0:a6:38:a0:ce:
94:ce:34:cb:10:4a:8a:4a:3f:b5:26:29:30:9a:df:52:9d:dd:
af:c0:22:8c:5c:bf:9f:ea:f8:9c:86:52:59:b9:04:60:e9:ef:
ad:26:22:08:0f:a1:d1:d8:1d:c7:62:51:4e:a6:df:ae:84:85:
3c:4b:c7:15:d7:e4:53:01:00:6e:d0:91:13:a2:0c:f5:dc:27:
9d:a6:27:b1:ee:7a:03:af:f0:04:a2:c2:f5:37:52:90:6c:66:
b5:e3:7d:cc:4a:3d:11:92:25:d6:5c:98:44:1e:d7:2b:0a:99:
a1:89:2d:ae:70:ad:ec:c2:a5:d7:cf:d9:79:21:9c:b3:3c:3d:
7b:35:47:50:f4:74:f6:db:e6:bd:39:e3:b2:aa:6a:a6:e7:c1:
a2:54:ca:12:10:b3:7f:80:25:28:d5:25:a3:ae:51:04:7d:10:
7b:06:60:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZasw+OHvTb2pG1ZMZTjg98eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwMWFhM2VmZjQ3NWIwMTBiZGU0MTU0ZjNiZDQ3NDNhN2Mw
YmFlNTUwHhcNMjUwNTA3MjIwMDQwWhcNMjUwNTA4MjIwMDQwWjAzMTEwLwYDVQQD
Eyg5NWI1NzFhNzdjYjMwYzMyYjEyYTUxNTViZmE2YjdlNzNjZmNmYWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2z76IZ8tYdVlZctxTeDqmDMMvIYa
Z2tJamX3/6OlbvqMZPGpOfBi9FIlmOYkeIFI5i7QCvSfGi2QHoqoKxGB4F+AR413
xC+rQWuKzwEXO5MqU49wr8YSEJEM9wyDsnNM/v/tBn6RxwAnhddSjFOJX/iQri9N
DtGWd4jTkqMtE9qglf+HsZsIs40BrYqwktsXBr9JI9EZ00xOh7tzdgEWQuLJlX3l
vrDJQPi4rqDoXpTZmbrTvPSA4iyy6yQJQXpRR16x58fWmrptRTySpzoaFCpu7axI
hEuQCXTvZwdKbr6NFZj58bbxIcu4WvCwhLISl+TfVglDKv6LdZSm+0KNeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJW1cad8swwysSpRVb+mt+c8/PrDMB8GA1UdIwQY
MBaAFOAao+/0dbAQveQVTzvUdDp8C65VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEJxajdfUjFzQkM5NUJWUE85UjBPbndMcmxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85Yjg3ZDUtM2I2Yi00MjZlLWIzY2Ut
M2QwY2Q5ODYxOTBmLzEvNEJxajdfUjFzQkM5NUJWUE85UjBPbndMcmxVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS85Yjg3ZDUtM2I2Yi00MjZlLWIzY2UtM2QwY2Q5ODYxOTBm
LzEvNEJxajdfUjFzQkM5NUJWUE85UjBPbndMcmxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbmzNUAqa
mxZg+Ot/+G7pYoA4lk23/OSXMXzDCw6Uln4zR3L/3PBFIN8oZhIQwuptFPMK8KpN
s2GCu2eK3UzW4RhDVpZs5+D6A4JAaN1SHOUIq628VNCmOKDOlM40yxBKiko/tSYp
MJrfUp3dr8AijFy/n+r4nIZSWbkEYOnvrSYiCA+h0dgdx2JRTqbfroSFPEvHFdfk
UwEAbtCRE6IM9dwnnaYnse56A6/wBKLC9TdSkGxmteN9zEo9EZIl1lyYRB7XKwqZ
oYktrnCt7MKl18/ZeSGcszw9ezVHUPR09tvmvTnjsqpqpufBolTKEhCzf4AlKNUl
o65RBH0QewZgFw==
-----END CERTIFICATE-----
Generated at Thu May 8 01:48:37 2025 by rpki-client