Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
File: 4T43FhOUZeaoz59r2LW492M68ig.mft (raw, json)
Hash identifier: 9rJBHPDZeQQp68Je7KRCbKI5rhMMZvu1NikWiWVIoNc=
Subject key identifier: E2:32:F8:E2:B4:BD:B1:F1:CE:12:05:39:41:C0:56:4E:DB:F9:8C:95
Authority key identifier: E1:3E:37:16:13:94:65:E6:A8:CF:9F:6B:D8:B5:B8:F7:63:3A:F2:28
Certificate issuer: /CN=e13e3716139465e6a8cf9f6bd8b5b8f7633af228
Certificate serial: 0196CEAAD474C26817BE5B928B75ECE7D17A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
Manifest number: 153C
Signing time: Wed 14 May 2025 12:00:24 +0000
Manifest this update: Wed 14 May 2025 12:00:24 +0000
Manifest next update: Thu 15 May 2025 12:00:24 +0000
Files and hashes: 1: 4T43FhOUZeaoz59r2LW492M68ig.crl (hash: 4iWCHETaty3qnUUmRP7/lJvwpg9nf4pPL8KqM6BCirE=)
2: VbNrPWQYTWo9s0J6s8AxjamlwvI.roa (hash: /mWvYY88JMhRPBUym5HOiq9hJe5sysSC0ACyBbQ58No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 12:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:aa:d4:74:c2:68:17:be:5b:92:8b:75:ec:e7:d1:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e13e3716139465e6a8cf9f6bd8b5b8f7633af228
Validity
Not Before: May 14 12:00:24 2025 GMT
Not After : May 15 12:00:24 2025 GMT
Subject: CN=e232f8e2b4bdb1f1ce12053941c0564edbf98c95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:af:a4:69:fe:50:e2:19:8e:20:cd:18:0c:d1:
a8:14:ad:cf:f1:98:b2:d0:63:3d:31:ef:7b:da:5a:
b6:09:26:58:00:e0:e7:61:b4:d2:b3:df:47:78:02:
69:03:de:41:12:5e:cc:ee:cb:5c:9d:9d:dd:26:2e:
73:c5:e4:d5:2e:b8:6d:90:af:f4:e5:73:3b:41:cb:
63:67:c9:63:8a:27:54:8c:a8:18:32:b0:56:b4:7c:
0e:40:2f:00:d9:f5:2a:b7:4e:f5:75:fd:e3:de:88:
b4:76:fd:50:d0:84:1a:a9:73:8a:94:25:1d:74:42:
a7:15:19:ba:03:e9:9c:af:38:56:5e:6a:50:57:a1:
b7:48:b8:c9:3c:4e:2c:91:15:15:24:99:bf:be:a4:
f6:a3:ea:09:ab:21:27:aa:52:af:43:95:08:00:24:
d2:a4:12:b0:a4:ed:0d:27:b5:5d:17:18:cc:3a:b7:
ab:bf:ad:b8:d1:5e:81:74:d7:b2:a9:33:e5:f3:57:
97:60:27:22:c8:c6:78:51:fc:e2:c3:de:0b:73:82:
be:53:3c:d6:9c:9d:9a:0b:00:94:aa:b5:61:33:35:
86:7e:2b:7b:0b:3e:27:f1:54:88:99:bc:19:32:53:
91:b9:dc:e1:8a:d6:83:bc:5e:60:72:96:5a:3b:95:
f4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:32:F8:E2:B4:BD:B1:F1:CE:12:05:39:41:C0:56:4E:DB:F9:8C:95
X509v3 Authority Key Identifier:
keyid:E1:3E:37:16:13:94:65:E6:A8:CF:9F:6B:D8:B5:B8:F7:63:3A:F2:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:b1:08:8e:b1:bd:2e:64:fc:91:f1:5a:fa:a8:0e:61:14:03:
17:e4:b5:2b:d9:90:b3:0a:db:ea:5a:9c:f0:d7:ce:ac:cd:42:
7f:31:14:bb:b7:10:5a:b2:de:ac:69:cb:ed:fa:24:15:5b:5f:
dd:26:6a:8c:b5:c2:b8:aa:0e:fd:1e:d4:1f:25:ff:ea:c9:8e:
2e:ea:f0:75:4e:c1:78:7f:f7:5f:32:33:36:b9:b9:57:d0:5d:
21:0d:25:e1:37:1a:ce:44:4d:bb:31:f4:87:2c:3a:65:11:14:
d7:d3:c5:dd:d5:0e:54:c9:de:07:35:87:84:bd:b0:6a:a7:de:
81:f5:90:ec:03:53:1b:5a:7f:95:3e:43:32:e5:4f:a5:db:26:
60:3a:ff:91:9f:c3:eb:d9:52:02:3e:ad:11:33:af:3f:32:f4:
b0:c9:0f:8c:da:73:e9:b8:ad:57:d2:d1:d3:06:e2:89:88:ad:
63:f5:b2:02:f8:07:20:85:6f:39:b5:fb:1d:fa:4f:cd:24:d4:
f5:dc:b1:01:5a:a3:ef:ba:72:4a:c5:56:22:18:cd:36:c7:4e:
c6:99:8d:7e:f0:e9:42:80:68:ca:c9:2d:f8:64:7b:57:33:a0:
6e:6a:65:6f:ca:e0:c0:a0:bc:90:39:05:a9:ef:40:fd:49:82:
e6:84:a5:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbOqtR0wmgXvluSi3Xs59F6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxM2UzNzE2MTM5NDY1ZTZhOGNmOWY2YmQ4YjViOGY3NjMz
YWYyMjgwHhcNMjUwNTE0MTIwMDI0WhcNMjUwNTE1MTIwMDI0WjAzMTEwLwYDVQQD
EyhlMjMyZjhlMmI0YmRiMWYxY2UxMjA1Mzk0MWMwNTY0ZWRiZjk4Yzk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAua+kaf5Q4hmOIM0YDNGoFK3P8Ziy
0GM9Me972lq2CSZYAODnYbTSs99HeAJpA95BEl7M7stcnZ3dJi5zxeTVLrhtkK/0
5XM7QctjZ8ljiidUjKgYMrBWtHwOQC8A2fUqt071df3j3oi0dv1Q0IQaqXOKlCUd
dEKnFRm6A+mcrzhWXmpQV6G3SLjJPE4skRUVJJm/vqT2o+oJqyEnqlKvQ5UIACTS
pBKwpO0NJ7VdFxjMOrerv6240V6BdNeyqTPl81eXYCciyMZ4Ufziw94Lc4K+UzzW
nJ2aCwCUqrVhMzWGfit7Cz4n8VSImbwZMlORudzhitaDvF5gcpZaO5X0dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOIy+OK0vbHxzhIFOUHAVk7b+YyVMB8GA1UdIwQY
MBaAFOE+NxYTlGXmqM+fa9i1uPdjOvIoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFQ0M0ZoT1VaZWFvejU5cjJMVzQ5Mk02OGlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mM2Q0NDYtYWMwNi00OTAyLWE2NDct
ZWYxNTcwYzcyNTk5LzEvNFQ0M0ZoT1VaZWFvejU5cjJMVzQ5Mk02OGlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9mM2Q0NDYtYWMwNi00OTAyLWE2NDctZWYxNTcwYzcyNTk5
LzEvNFQ0M0ZoT1VaZWFvejU5cjJMVzQ5Mk02OGlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmbEIjrG9
LmT8kfFa+qgOYRQDF+S1K9mQswrb6lqc8NfOrM1CfzEUu7cQWrLerGnL7fokFVtf
3SZqjLXCuKoO/R7UHyX/6smOLurwdU7BeH/3XzIzNrm5V9BdIQ0l4TcazkRNuzH0
hyw6ZREU19PF3dUOVMneBzWHhL2waqfegfWQ7ANTG1p/lT5DMuVPpdsmYDr/kZ/D
69lSAj6tETOvPzL0sMkPjNpz6bitV9LR0wbiiYitY/WyAvgHIIVvObX7HfpPzSTU
9dyxAVqj77pySsVWIhjNNsdOxpmNfvDpQoBoyskt+GR7VzOgbmplb8rgwKC8kDkF
qe9A/UmC5oSlkg==
-----END CERTIFICATE-----
Generated at Wed May 14 16:12:24 2025 by rpki-client