Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
File: 4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft (raw, json)
Hash identifier: 5iocDsAVy6YoWMzCxVxqWLsFcTR7wNe59BkTN1F9Q4c=
Subject key identifier: F8:E1:0C:A8:34:D7:8F:94:98:C6:BC:92:C6:42:00:97:84:B4:34:FF
Authority key identifier: E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46
Certificate issuer: /CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46
Certificate serial: 019673E6932696D7E7528415F80B762EC08F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
Manifest number: 151C
Signing time: Sat 26 Apr 2025 21:00:12 +0000
Manifest this update: Sat 26 Apr 2025 21:00:12 +0000
Manifest next update: Sun 27 Apr 2025 21:00:12 +0000
Files and hashes: 1: 4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl (hash: 6aZgMcZ7FCzg3gUtnAKfuj3oABdHbURqvHlOhAl9+oM=)
2: 9le1peACXBsZiHPrKGecXIwJa-c.roa (hash: abfbtZOYUj++vuicVi05zrp5kGNnF9HGnL5WTr/9qlE=)
3: AP7i3LahdsovYM70eVMlu0H0VyQ.roa (hash: gGYT6xMXK+q6XWFTZbqb5glJj73Q26Rxlysft5i280U=)
4: De0WCETpJfbN-_KAZM7Z5RJy8Ss.roa (hash: Kcw5neScj8y714DABjN4V/ktwunea0zBp9yHTOn8VeE=)
5: WCta5h-gHZZ_q49m5T2AptEQh0A.roa (hash: UEF6WvkAssJSXqYGaMl3u6THXq5hVmf7y+Pa60Tl3Bc=)
6: WIgYr5JYPXYMftdONSWv5Do5-Gk.roa (hash: Z2h27NPSq0u/AueWae1+/QX3Wc6gNsL5Ji2s5jEoznc=)
7: fLAxf74rd6UX3gfivf6snrbKhmg.roa (hash: 2y9JcTYhuslVBan0BBae3TsVIsvndLj/5tEYAdt92BQ=)
8: oSdrWOCaJ0gBbDhOrwzjpvj5kgk.roa (hash: fLc644uvb/7KJE5lOwMGlDoVjD+MslKnwZyZQoL0QcU=)
9: obrA-ZoCgk0zS8hgJpmT67NaB2Y.roa (hash: z5uErOAwohXeLePMQPhb50zJXMj4qbujXHMXCoCiW5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:e6:93:26:96:d7:e7:52:84:15:f8:0b:76:2e:c0:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46
Validity
Not Before: Apr 26 21:00:12 2025 GMT
Not After : Apr 27 21:00:12 2025 GMT
Subject: CN=f8e10ca834d78f9498c6bc92c642009784b434ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6c:b4:9a:8e:0e:7a:c1:d8:32:d8:01:b4:14:
aa:20:db:04:7d:43:c5:2f:76:60:04:4a:6a:24:c3:
fb:a3:e4:7d:40:70:be:83:99:73:95:43:bd:9c:2c:
8b:9b:46:a5:b1:ad:29:30:d1:e7:80:52:a7:c9:93:
da:6d:f1:69:5e:95:9e:16:03:e6:42:33:eb:5b:5f:
1e:ce:38:6b:6c:93:e8:21:f7:4b:d1:16:96:85:d1:
8c:6d:d0:16:16:22:4c:1d:9b:78:09:24:e8:c3:c4:
cd:15:96:59:01:e4:8e:e1:c3:73:83:5f:4a:57:c1:
35:90:ae:5f:fc:e2:3d:cb:61:c8:a5:20:c8:25:10:
55:e4:92:97:99:b5:cb:92:84:97:ac:ee:f6:6c:d4:
28:a8:f1:c8:e2:f0:9a:b2:a2:b0:6d:b8:c5:8a:b0:
46:71:be:9c:7a:5a:04:f8:1c:b8:b5:95:a2:c6:c0:
bc:b2:6d:f3:bf:2d:81:4b:f5:b9:a8:f9:69:97:da:
8f:b2:27:50:9a:0c:8b:29:f9:88:b6:d9:34:53:99:
73:55:79:bf:41:83:17:3a:b3:ed:11:30:ac:45:12:
34:07:c7:cc:79:91:63:ec:7d:8b:99:79:06:b2:63:
49:75:0c:2c:13:47:b3:c3:7a:74:a8:c9:8e:85:53:
94:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E1:0C:A8:34:D7:8F:94:98:C6:BC:92:C6:42:00:97:84:B4:34:FF
X509v3 Authority Key Identifier:
keyid:E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:ae:4d:7c:f8:b2:83:52:53:f6:1d:39:87:9b:87:8c:46:a9:
be:f3:3b:5a:30:09:89:6e:47:e7:e4:5f:f8:44:87:a2:93:97:
b6:4a:00:d9:15:94:63:28:cc:91:50:c0:74:51:1c:80:86:35:
39:d2:ea:98:e7:c6:c6:cd:aa:b1:d7:0e:70:ff:a6:12:41:fb:
00:78:f3:75:f4:bc:d3:c6:6f:58:5c:e9:f3:e2:9b:2a:55:e6:
65:cc:d1:87:66:37:0d:f0:cb:b1:54:b4:b1:ed:cd:8b:4c:a7:
bb:8f:be:99:5a:05:b5:87:95:a1:22:12:8b:2e:ba:88:e7:ad:
8a:75:87:5d:91:61:6c:40:00:01:c6:18:db:9e:59:fd:b2:c4:
11:ce:3e:fc:c1:cd:8b:25:67:46:6b:cd:c3:17:73:a6:6b:ab:
71:f3:81:fe:08:5d:da:f3:fc:1c:fe:03:e5:7b:e8:23:7b:3f:
c4:64:cf:16:cf:1a:4f:7a:d3:39:9d:3c:71:cf:f7:a7:b5:b0:
20:f9:96:bd:db:51:27:b2:dd:8c:bf:83:87:fe:f0:62:0d:94:
5a:b8:da:d4:de:70:78:84:8c:0e:18:82:8e:e5:91:d7:87:b5:
68:c4:79:2f:7b:ae:ca:c7:7b:2a:b0:d3:92:27:d0:49:f4:71:
5b:85:66:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZz5pMmltfnUoQV+At2LsCPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMzhlYzI0MmE0M2U5YzlkNGNlYjI1ZGM5MGU1NDUzMzcz
ZDNmNDYwHhcNMjUwNDI2MjEwMDEyWhcNMjUwNDI3MjEwMDEyWjAzMTEwLwYDVQQD
EyhmOGUxMGNhODM0ZDc4Zjk0OThjNmJjOTJjNjQyMDA5Nzg0YjQzNGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2y0mo4OesHYMtgBtBSqINsEfUPF
L3ZgBEpqJMP7o+R9QHC+g5lzlUO9nCyLm0alsa0pMNHngFKnyZPabfFpXpWeFgPm
QjPrW18ezjhrbJPoIfdL0RaWhdGMbdAWFiJMHZt4CSTow8TNFZZZAeSO4cNzg19K
V8E1kK5f/OI9y2HIpSDIJRBV5JKXmbXLkoSXrO72bNQoqPHI4vCasqKwbbjFirBG
cb6celoE+By4tZWixsC8sm3zvy2BS/W5qPlpl9qPsidQmgyLKfmIttk0U5lzVXm/
QYMXOrPtETCsRRI0B8fMeZFj7H2LmXkGsmNJdQwsE0ezw3p0qMmOhVOUywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPjhDKg014+UmMa8ksZCAJeEtDT/MB8GA1UdIwQY
MBaAFOE47CQqQ+nJ1M6yXckOVFM3PT9GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8wYjdmZDMtOTBmMC00NWQxLThhNTgt
Njc4NWNkNDU2ODcxLzEvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8wYjdmZDMtOTBmMC00NWQxLThhNTgtNjc4NWNkNDU2ODcx
LzEvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU65NfPiy
g1JT9h05h5uHjEapvvM7WjAJiW5H5+Rf+ESHopOXtkoA2RWUYyjMkVDAdFEcgIY1
OdLqmOfGxs2qsdcOcP+mEkH7AHjzdfS808ZvWFzp8+KbKlXmZczRh2Y3DfDLsVS0
se3Ni0ynu4++mVoFtYeVoSISiy66iOetinWHXZFhbEAAAcYY255Z/bLEEc4+/MHN
iyVnRmvNwxdzpmurcfOB/ghd2vP8HP4D5XvoI3s/xGTPFs8aT3rTOZ08cc/3p7Ww
IPmWvdtRJ7LdjL+Dh/7wYg2UWrja1N5weISMDhiCjuWR14e1aMR5L3uuysd7KrDT
kifQSfRxW4VmYg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 04:21:53 2025 by rpki-client