Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft
File: 4z2f_axY52ErCVFE_sBrolhapqg.mft (raw, json)
Hash identifier: RRSYhQ5sBF3KWiZa5TrZ06zVec6S2B3utLmU2VIwzYM=
Subject key identifier: 69:15:25:DE:6F:26:FB:CC:36:EE:00:F9:87:B5:E9:C9:AB:1A:68:2C
Authority key identifier: E3:3D:9F:FD:AC:58:E7:61:2B:09:51:44:FE:C0:6B:A2:58:5A:A6:A8
Certificate issuer: /CN=e33d9ffdac58e7612b095144fec06ba2585aa6a8
Certificate serial: 0196A12D6C36D88B15ABDB9217799E2049FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4z2f_axY52ErCVFE_sBrolhapqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft
Manifest number: 127C
Signing time: Mon 05 May 2025 16:00:30 +0000
Manifest this update: Mon 05 May 2025 16:00:30 +0000
Manifest next update: Tue 06 May 2025 16:00:30 +0000
Files and hashes: 1: 4z2f_axY52ErCVFE_sBrolhapqg.crl (hash: h8NSbz0acjmoBrrRTek5aF5Kav4S76Bs/hixoq/ps6M=)
2: kDBI9l_YMVWuxKarh0cfBt-co8E.roa (hash: Cmec62sAgGLnTuvkkeIcYM85TIkQ74UMRSA2arV5eDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4z2f_axY52ErCVFE_sBrolhapqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:2d:6c:36:d8:8b:15:ab:db:92:17:79:9e:20:49:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e33d9ffdac58e7612b095144fec06ba2585aa6a8
Validity
Not Before: May 5 16:00:30 2025 GMT
Not After : May 6 16:00:30 2025 GMT
Subject: CN=691525de6f26fbcc36ee00f987b5e9c9ab1a682c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4b:b4:d7:df:2a:9e:4f:b5:82:bc:12:0d:8e:
b5:ff:0b:98:b4:e8:7b:ea:9e:79:18:3b:cf:13:2f:
c6:e9:a5:1c:88:43:32:59:b1:b1:6d:b9:0d:70:86:
10:57:61:3f:a7:b4:c0:89:fe:79:a7:17:6f:d5:6f:
0f:26:88:d3:82:7c:8e:c6:af:1f:2f:e5:92:e7:ba:
da:d8:c1:08:45:15:22:99:c6:ad:83:20:5d:c1:6f:
af:b1:c5:6b:9d:c2:2a:fe:78:2a:da:e7:3f:ba:cd:
de:40:32:5e:a2:0d:77:7d:28:22:8f:45:02:0a:a5:
7d:b6:bc:7d:b6:9f:71:06:4e:32:6e:ac:aa:51:d7:
69:f7:97:dc:1a:c6:7f:61:2a:bf:53:cc:bf:59:dc:
05:59:c0:5b:14:b0:34:f0:32:67:f1:e2:8f:64:67:
41:06:d8:40:2f:dc:88:fb:49:05:b5:b3:a7:62:00:
a6:b2:eb:83:46:3d:77:4a:a9:ef:3f:db:47:25:b3:
c7:c2:85:66:b1:86:a7:51:13:45:19:a6:e8:74:cd:
a0:92:df:e3:39:df:8f:72:ab:bb:c2:01:ae:cc:89:
8d:48:0d:93:75:d9:41:83:79:17:bc:07:70:59:f9:
f8:2f:fb:b8:40:2f:d4:92:b5:ca:66:f9:79:b0:b3:
e2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:15:25:DE:6F:26:FB:CC:36:EE:00:F9:87:B5:E9:C9:AB:1A:68:2C
X509v3 Authority Key Identifier:
keyid:E3:3D:9F:FD:AC:58:E7:61:2B:09:51:44:FE:C0:6B:A2:58:5A:A6:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4z2f_axY52ErCVFE_sBrolhapqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:81:53:09:0c:a6:92:dd:b1:bd:cc:44:f9:bc:24:26:2a:4c:
12:d0:5f:bc:c8:f7:99:6f:ad:e8:a2:01:c7:7e:56:e5:39:31:
2e:c7:7c:c3:9b:76:a8:73:31:1a:ba:bb:08:dc:d6:4d:00:6b:
07:86:5a:91:81:81:00:d8:f3:14:10:84:9d:f4:ce:05:33:07:
2c:3d:93:fe:19:d2:02:c9:67:06:9b:b8:88:84:16:ad:a2:66:
5c:9f:3a:81:13:36:84:b1:9c:4a:dc:3b:dc:3c:79:5c:ea:66:
31:29:3c:ac:4f:d7:ea:f6:cc:63:ff:b5:e9:56:29:c6:7e:7d:
c2:4f:92:d3:24:da:2a:3f:11:68:7a:c8:7d:87:cb:ca:83:f0:
23:f2:82:ac:94:66:43:f9:70:35:23:13:b2:71:22:11:af:5a:
0b:0a:02:78:ed:0a:13:cc:c5:f4:7d:e9:d1:e5:67:5a:cf:aa:
10:dd:87:4a:1f:a3:28:d9:fc:70:a5:e7:1b:22:21:98:aa:0c:
5f:0f:3e:0c:81:bd:df:cb:a2:27:2f:4b:c7:8d:09:ec:56:26:
fd:16:47:26:51:66:4b:b0:5a:ef:fa:22:c4:95:77:55:63:6a:
17:86:cf:f9:d0:36:2b:1b:a3:7f:8b:b6:10:8a:70:01:d3:09:
9f:89:06:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZahLWw22IsVq9uSF3meIEn9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzM2Q5ZmZkYWM1OGU3NjEyYjA5NTE0NGZlYzA2YmEyNTg1
YWE2YTgwHhcNMjUwNTA1MTYwMDMwWhcNMjUwNTA2MTYwMDMwWjAzMTEwLwYDVQQD
Eyg2OTE1MjVkZTZmMjZmYmNjMzZlZTAwZjk4N2I1ZTljOWFiMWE2ODJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUu0198qnk+1grwSDY61/wuYtOh7
6p55GDvPEy/G6aUciEMyWbGxbbkNcIYQV2E/p7TAif55pxdv1W8PJojTgnyOxq8f
L+WS57ra2MEIRRUimcatgyBdwW+vscVrncIq/ngq2uc/us3eQDJeog13fSgij0UC
CqV9trx9tp9xBk4ybqyqUddp95fcGsZ/YSq/U8y/WdwFWcBbFLA08DJn8eKPZGdB
BthAL9yI+0kFtbOnYgCmsuuDRj13SqnvP9tHJbPHwoVmsYanURNFGabodM2gkt/j
Od+Pcqu7wgGuzImNSA2TddlBg3kXvAdwWfn4L/u4QC/UkrXKZvl5sLPi7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGkVJd5vJvvMNu4A+Ye16cmrGmgsMB8GA1UdIwQY
MBaAFOM9n/2sWOdhKwlRRP7Aa6JYWqaoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHoyZl9heFk1MkVyQ1ZGRV9zQnJvbGhhcHFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9hMzQyMDAtNGI5Yi00MzM0LWExNTkt
OWNiMjk2MzAxZTY0LzEvNHoyZl9heFk1MkVyQ1ZGRV9zQnJvbGhhcHFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9hMzQyMDAtNGI5Yi00MzM0LWExNTktOWNiMjk2MzAxZTY0
LzEvNHoyZl9heFk1MkVyQ1ZGRV9zQnJvbGhhcHFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1IFTCQym
kt2xvcxE+bwkJipMEtBfvMj3mW+t6KIBx35W5TkxLsd8w5t2qHMxGrq7CNzWTQBr
B4ZakYGBANjzFBCEnfTOBTMHLD2T/hnSAslnBpu4iIQWraJmXJ86gRM2hLGcStw7
3Dx5XOpmMSk8rE/X6vbMY/+16VYpxn59wk+S0yTaKj8RaHrIfYfLyoPwI/KCrJRm
Q/lwNSMTsnEiEa9aCwoCeO0KE8zF9H3p0eVnWs+qEN2HSh+jKNn8cKXnGyIhmKoM
Xw8+DIG938uiJy9Lx40J7FYm/RZHJlFmS7Ba7/oixJV3VWNqF4bP+dA2Kxujf4u2
EIpwAdMJn4kGiw==
-----END CERTIFICATE-----
Generated at Mon May 5 19:07:48 2025 by rpki-client