Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
File: 4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft (raw, json)
Hash identifier: fpauzYRWhqwzjwRScEArvxdWnuPGQzD3aWppGJgGhsY=
Subject key identifier: DD:64:45:25:06:F7:96:40:5B:51:5B:16:F8:7E:92:E3:C8:06:EC:3C
Authority key identifier: E2:84:E3:D2:F1:A2:1C:82:BB:B3:D6:6F:76:F0:BD:93:33:51:3C:9A
Certificate issuer: /CN=e284e3d2f1a21c82bbb3d66f76f0bd9333513c9a
Certificate serial: 0196CC85AAD40A2600B214D3D271BDCDF344
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
Manifest number: 103A
Signing time: Wed 14 May 2025 02:00:34 +0000
Manifest this update: Wed 14 May 2025 02:00:34 +0000
Manifest next update: Thu 15 May 2025 02:00:34 +0000
Files and hashes: 1: 4oTj0vGiHIK7s9ZvdvC9kzNRPJo.crl (hash: J9fbFbEq3UVKT6UWDg+fxuBRbg9/vd1Oyi4BlSCMrK8=)
2: q2EHI1QqAri510M2ZcKkjLI2cEU.roa (hash: 404e8//wzDitUa6OCGaYRBgvvc05hb46lBTtLtVyVk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 22:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:85:aa:d4:0a:26:00:b2:14:d3:d2:71:bd:cd:f3:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e284e3d2f1a21c82bbb3d66f76f0bd9333513c9a
Validity
Not Before: May 14 02:00:34 2025 GMT
Not After : May 15 02:00:34 2025 GMT
Subject: CN=dd64452506f796405b515b16f87e92e3c806ec3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b8:47:35:b0:0b:be:af:0e:3d:c9:25:39:53:
b9:8c:30:55:95:27:66:e0:7f:c8:4c:a3:39:8d:2f:
3f:d2:a9:9c:9a:36:12:a6:2e:f2:3d:10:f3:85:21:
24:a3:86:8e:ec:2c:c2:82:61:ef:53:e6:26:b1:bb:
24:f1:44:22:2f:66:d1:3e:20:f4:5d:a0:3b:36:be:
7d:de:f3:da:ec:51:f3:27:aa:74:fa:21:66:77:e5:
04:86:ea:1b:2e:68:e9:63:ca:18:ce:96:84:29:2b:
10:d2:d8:28:bb:ce:67:23:1c:d9:cd:9f:b6:ec:b7:
4c:03:40:a6:46:ba:78:97:46:ef:52:1b:6f:97:36:
2d:9e:47:8b:e9:b3:f9:cb:e0:3f:c9:b4:c9:83:36:
66:44:13:57:36:e0:28:c7:d8:8e:0d:37:d8:b8:fa:
7b:cb:6f:7a:fc:3f:55:2c:1c:02:3d:5a:7c:cf:5f:
3b:fd:ca:3d:59:97:ac:9d:8a:1e:21:40:bd:22:44:
4e:1a:30:cf:53:42:cb:f3:91:f7:82:2a:dc:c5:c0:
9d:6d:a8:e9:70:9c:77:66:e7:04:b6:39:28:38:fb:
55:8e:ae:39:ee:22:31:cd:14:cb:48:9b:1a:04:32:
22:96:0c:91:37:ea:66:2a:7e:f2:e0:8a:3b:a0:0f:
a3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:64:45:25:06:F7:96:40:5B:51:5B:16:F8:7E:92:E3:C8:06:EC:3C
X509v3 Authority Key Identifier:
keyid:E2:84:E3:D2:F1:A2:1C:82:BB:B3:D6:6F:76:F0:BD:93:33:51:3C:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:9a:f0:f4:89:93:8c:9f:6b:36:bd:1f:6a:75:e6:79:ef:95:
bd:8e:d8:46:65:49:bc:19:71:77:32:89:5c:e9:d6:ce:9a:6a:
60:c8:c2:ea:4a:33:cd:fc:24:59:cf:d3:a5:c1:50:a1:53:62:
dc:64:6e:b2:b7:d5:c4:b3:9d:70:40:3e:d8:e8:5a:3e:4b:55:
00:ec:4f:9b:60:1a:83:42:7a:29:41:3b:08:df:3e:db:cb:d2:
5f:71:ce:1d:16:cb:25:7b:a1:91:82:a0:d7:4b:95:be:39:6b:
83:35:eb:44:64:d4:d0:d8:90:1f:dc:6e:85:6d:56:52:28:69:
b7:ad:43:e4:7a:db:08:a8:2f:15:fe:9d:8a:49:a7:93:16:6e:
5d:52:fa:08:c3:dc:53:7d:4a:31:2e:87:13:8e:c5:e8:cb:61:
1c:5a:b3:61:e3:c0:7a:61:77:6f:10:d4:58:92:50:6f:6a:08:
78:95:c1:d5:15:82:11:b2:e6:06:e2:fa:d1:aa:dd:2f:75:75:
19:a7:d6:85:18:6f:25:cc:0f:0a:7a:10:f1:3f:46:80:5b:e2:
8d:0a:a6:d1:5b:9c:93:9a:9e:f8:91:12:39:f4:03:c8:34:ce:
c4:3b:07:f4:dd:c8:ca:33:03:90:c5:cc:0b:94:56:a3:f7:d0:
25:55:ae:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbMharUCiYAshTT0nG9zfNEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyODRlM2QyZjFhMjFjODJiYmIzZDY2Zjc2ZjBiZDkzMzM1
MTNjOWEwHhcNMjUwNTE0MDIwMDM0WhcNMjUwNTE1MDIwMDM0WjAzMTEwLwYDVQQD
EyhkZDY0NDUyNTA2Zjc5NjQwNWI1MTViMTZmODdlOTJlM2M4MDZlYzNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7hHNbALvq8OPcklOVO5jDBVlSdm
4H/ITKM5jS8/0qmcmjYSpi7yPRDzhSEko4aO7CzCgmHvU+Ymsbsk8UQiL2bRPiD0
XaA7Nr593vPa7FHzJ6p0+iFmd+UEhuobLmjpY8oYzpaEKSsQ0tgou85nIxzZzZ+2
7LdMA0CmRrp4l0bvUhtvlzYtnkeL6bP5y+A/ybTJgzZmRBNXNuAox9iODTfYuPp7
y296/D9VLBwCPVp8z187/co9WZesnYoeIUC9IkROGjDPU0LL85H3gircxcCdbajp
cJx3ZucEtjkoOPtVjq457iIxzRTLSJsaBDIilgyRN+pmKn7y4Io7oA+jPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN1kRSUG95ZAW1FbFvh+kuPIBuw8MB8GA1UdIwQY
MBaAFOKE49LxohyCu7PWb3bwvZMzUTyaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNG9UajB2R2lISUs3czladmR2Qzlrek5SUEpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy83YzliYjctMjY4YS00MzYyLWJkMDgt
OTAxYTM3M2RmMDgwLzEvNG9UajB2R2lISUs3czladmR2Qzlrek5SUEpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy83YzliYjctMjY4YS00MzYyLWJkMDgtOTAxYTM3M2RmMDgw
LzEvNG9UajB2R2lISUs3czladmR2Qzlrek5SUEpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ5rw9ImT
jJ9rNr0fanXmee+VvY7YRmVJvBlxdzKJXOnWzppqYMjC6kozzfwkWc/TpcFQoVNi
3GRusrfVxLOdcEA+2OhaPktVAOxPm2Aag0J6KUE7CN8+28vSX3HOHRbLJXuhkYKg
10uVvjlrgzXrRGTU0NiQH9xuhW1WUihpt61D5HrbCKgvFf6dikmnkxZuXVL6CMPc
U31KMS6HE47F6MthHFqzYePAemF3bxDUWJJQb2oIeJXB1RWCEbLmBuL60ardL3V1
GafWhRhvJcwPCnoQ8T9GgFvijQqm0Vuck5qe+JESOfQDyDTOxDsH9N3IyjMDkMXM
C5RWo/fQJVWuSQ==
-----END CERTIFICATE-----
Generated at Wed May 14 05:56:13 2025 by rpki-client