Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.mft
File: _s4nFs6tjACFRiJL5LVocIaD_0s.mft (raw, json)
Hash identifier: 2Qcd+Ws70RIZpR7+fA26AyDppDVrdsjkYUxcGbJbsFk=
Subject key identifier: AD:14:92:AE:F5:AF:B8:81:71:F2:B9:F0:AE:C6:E0:14:B9:D7:5C:A0
Authority key identifier: FE:CE:27:16:CE:AD:8C:00:85:46:22:4B:E4:B5:68:70:86:83:FF:4B
Certificate issuer: /CN=fece2716cead8c008546224be4b568708683ff4b
Certificate serial: 0196A50A408E50B420ADBFD3C3119E1AE576
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_s4nFs6tjACFRiJL5LVocIaD_0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.mft
Manifest number: 1484
Signing time: Tue 06 May 2025 10:00:34 +0000
Manifest this update: Tue 06 May 2025 10:00:34 +0000
Manifest next update: Wed 07 May 2025 10:00:34 +0000
Files and hashes: 1: _s4nFs6tjACFRiJL5LVocIaD_0s.crl (hash: E+z2bpRAgYEWJmgbgKD7MZy+CFuMNGVK/i0J5z4z8IE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/_s4nFs6tjACFRiJL5LVocIaD_0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 10:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:0a:40:8e:50:b4:20:ad:bf:d3:c3:11:9e:1a:e5:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fece2716cead8c008546224be4b568708683ff4b
Validity
Not Before: May 6 10:00:34 2025 GMT
Not After : May 7 10:00:34 2025 GMT
Subject: CN=ad1492aef5afb88171f2b9f0aec6e014b9d75ca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f5:dd:b2:a7:4f:d8:79:45:b2:c9:3b:9d:1f:
fa:12:6e:d0:2f:ff:ce:f4:64:01:e4:ca:69:7d:d2:
33:61:1b:86:f0:83:57:13:49:1d:c2:90:62:b2:9f:
f8:16:09:2e:4f:52:13:16:45:1c:54:57:0d:7d:f6:
7a:c6:20:eb:a6:2d:b7:de:cd:d5:7e:13:56:39:bf:
ae:c3:d3:b1:2d:5f:2a:5e:7e:2f:b1:ff:49:5e:16:
f6:63:66:04:ca:02:7a:b7:a0:c2:8e:3f:7d:cb:aa:
1d:a2:85:25:c5:c9:d9:a3:bd:84:24:34:a5:6b:27:
55:a1:f8:28:a6:46:95:7b:6a:56:a9:f7:16:00:6b:
06:8b:93:3e:69:db:17:64:62:61:36:db:2c:2b:1d:
fa:5d:85:85:a3:ff:33:e5:0b:fc:65:0e:ab:52:a1:
23:c2:ef:71:4e:ad:e8:b1:9a:70:17:2a:a5:5c:f4:
6f:1c:24:68:0a:88:52:ba:8d:a5:ae:52:e0:93:8c:
1b:e1:39:27:6a:84:75:dc:6c:c1:db:34:8c:44:b7:
f5:08:29:e6:40:2c:de:2d:fe:f7:74:59:e4:b9:a1:
cd:ef:3c:34:c6:2b:4f:ab:8d:19:7d:54:e2:bc:c4:
d9:66:11:5b:ff:8c:6b:bc:fb:22:d5:11:a1:47:ec:
d6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:14:92:AE:F5:AF:B8:81:71:F2:B9:F0:AE:C6:E0:14:B9:D7:5C:A0
X509v3 Authority Key Identifier:
keyid:FE:CE:27:16:CE:AD:8C:00:85:46:22:4B:E4:B5:68:70:86:83:FF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_s4nFs6tjACFRiJL5LVocIaD_0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:ad:8b:14:76:b8:01:e9:fe:68:df:b9:9e:5f:4d:4e:ed:e7:
0e:81:13:12:cf:a6:a1:f6:87:f6:0b:76:5b:a3:8d:53:79:d0:
55:30:16:6e:9c:ca:95:b7:8a:0b:c8:34:c1:56:28:e4:f4:67:
d9:e8:30:09:27:67:1c:fb:10:a4:16:80:8c:6e:c4:0b:56:a2:
98:b8:69:73:9d:14:a3:8c:e6:58:64:13:9b:da:82:22:ae:d8:
b5:85:b6:89:64:2a:21:03:93:10:2c:ca:0b:66:d5:ed:c5:2d:
c7:42:5d:f0:84:a9:a6:fb:f7:4e:9c:dd:ad:f7:60:65:11:b9:
68:24:fb:fe:c6:09:77:5e:ed:10:1c:7a:c7:d5:7d:a1:03:86:
32:96:b6:02:b5:f2:89:e5:85:ea:d6:5c:cd:ac:45:a0:b9:e9:
0d:fd:41:21:b7:88:a6:3d:ee:57:68:92:ab:ed:28:ed:5e:f9:
99:98:0a:0a:2d:32:50:f2:d8:21:8d:d8:7a:88:97:4f:9f:1e:
df:db:d8:b3:e7:61:15:f0:8e:e4:7b:12:af:76:63:62:88:11:
8e:75:8f:4b:29:10:1b:39:57:3e:88:9f:f7:95:db:62:8e:bf:
3d:e3:49:ef:e3:96:57:26:bb:25:05:8d:c0:7b:28:bf:26:19:
9f:5b:0a:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZalCkCOULQgrb/TwxGeGuV2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlY2UyNzE2Y2VhZDhjMDA4NTQ2MjI0YmU0YjU2ODcwODY4
M2ZmNGIwHhcNMjUwNTA2MTAwMDM0WhcNMjUwNTA3MTAwMDM0WjAzMTEwLwYDVQQD
EyhhZDE0OTJhZWY1YWZiODgxNzFmMmI5ZjBhZWM2ZTAxNGI5ZDc1Y2EwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvXdsqdP2HlFssk7nR/6Em7QL//O
9GQB5MppfdIzYRuG8INXE0kdwpBisp/4FgkuT1ITFkUcVFcNffZ6xiDrpi233s3V
fhNWOb+uw9OxLV8qXn4vsf9JXhb2Y2YEygJ6t6DCjj99y6odooUlxcnZo72EJDSl
aydVofgopkaVe2pWqfcWAGsGi5M+adsXZGJhNtssKx36XYWFo/8z5Qv8ZQ6rUqEj
wu9xTq3osZpwFyqlXPRvHCRoCohSuo2lrlLgk4wb4TknaoR13GzB2zSMRLf1CCnm
QCzeLf73dFnkuaHN7zw0xitPq40ZfVTivMTZZhFb/4xrvPsi1RGhR+zWTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK0Ukq71r7iBcfK58K7G4BS511ygMB8GA1UdIwQY
MBaAFP7OJxbOrYwAhUYiS+S1aHCGg/9LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3M0bkZzNnRqQUNGUmlKTDVMVm9jSWFEXzBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy83NDMxYTItZDBkOC00MmRmLWJjYzgt
MTdkNjMzZDhmMzlmLzEvX3M0bkZzNnRqQUNGUmlKTDVMVm9jSWFEXzBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy83NDMxYTItZDBkOC00MmRmLWJjYzgtMTdkNjMzZDhmMzlm
LzEvX3M0bkZzNnRqQUNGUmlKTDVMVm9jSWFEXzBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAja2LFHa4
Aen+aN+5nl9NTu3nDoETEs+mofaH9gt2W6ONU3nQVTAWbpzKlbeKC8g0wVYo5PRn
2egwCSdnHPsQpBaAjG7EC1aimLhpc50Uo4zmWGQTm9qCIq7YtYW2iWQqIQOTECzK
C2bV7cUtx0Jd8ISppvv3TpzdrfdgZRG5aCT7/sYJd17tEBx6x9V9oQOGMpa2ArXy
ieWF6tZczaxFoLnpDf1BIbeIpj3uV2iSq+0o7V75mZgKCi0yUPLYIY3YeoiXT58e
39vYs+dhFfCO5HsSr3ZjYogRjnWPSykQGzlXPoif95XbYo6/PeNJ7+OWVya7JQWN
wHsovyYZn1sKBg==
-----END CERTIFICATE-----
Generated at Tue May 6 19:22:39 2025 by rpki-client