Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.mft
File: 4kCgJeDmGkTZPkqAHjiIsm570kE.mft (raw, json)
Hash identifier: +oNNCmM1t5rSZxY1lyJRIOKuya4LySsfN+Yxli6mu8M=
Subject key identifier: F1:44:5F:38:49:32:13:36:A5:05:2D:E0:D3:D0:52:64:8F:FB:DC:26
Authority key identifier: E2:40:A0:25:E0:E6:1A:44:D9:3E:4A:80:1E:38:88:B2:6E:7B:D2:41
Certificate issuer: /CN=e240a025e0e61a44d93e4a801e3888b26e7bd241
Certificate serial: 019684DAD8250DAD4269ED21CF614DD4B98B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kCgJeDmGkTZPkqAHjiIsm570kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.mft
Manifest number: 1519
Signing time: Wed 30 Apr 2025 04:00:56 +0000
Manifest this update: Wed 30 Apr 2025 04:00:56 +0000
Manifest next update: Thu 01 May 2025 04:00:56 +0000
Files and hashes: 1: 4kCgJeDmGkTZPkqAHjiIsm570kE.crl (hash: VDhgIkN5DQDjuZb8vOvf63Sit+4zRveWUH5W2Bm+aoU=)
2: K7SH4zYCXr-cp1q6N2Mp-Gdj1PU.roa (hash: fOTEXpl4gYkXzMjvkhlooQdp3U8U0Z9lMps20TcryK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kCgJeDmGkTZPkqAHjiIsm570kE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:da:d8:25:0d:ad:42:69:ed:21:cf:61:4d:d4:b9:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e240a025e0e61a44d93e4a801e3888b26e7bd241
Validity
Not Before: Apr 30 04:00:56 2025 GMT
Not After : May 1 04:00:56 2025 GMT
Subject: CN=f1445f3849321336a5052de0d3d052648ffbdc26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:42:9a:76:21:da:8e:38:37:7b:ed:b9:5b:25:
b2:b3:b9:27:10:87:a1:ec:b7:7a:cc:88:61:25:90:
b5:97:b3:b5:7d:6a:40:37:c7:31:2c:89:6a:00:8f:
bb:44:e8:d6:87:35:36:70:26:52:c5:76:63:35:12:
c2:7c:f0:f5:b4:15:76:19:3f:94:ce:7b:fc:bf:ac:
7f:e1:1d:26:ca:87:43:41:d8:7a:64:6a:b3:e9:0c:
2c:e9:f3:b6:c6:f5:71:60:c2:8c:37:ed:24:6c:82:
51:62:48:ed:2f:57:dc:64:15:3d:64:45:91:a7:08:
14:90:0d:46:b6:39:d5:4d:95:e7:c9:3f:50:28:bd:
d6:c4:ab:57:4c:3e:f3:df:f1:3f:81:89:ef:15:17:
25:42:17:6e:af:4c:8e:ff:0e:84:ad:55:7a:4f:b9:
85:d9:7b:68:8b:b9:4f:f8:f5:30:bf:b0:68:87:9e:
eb:19:db:c0:ba:c7:51:a3:7b:53:93:62:02:93:41:
ec:01:48:66:bb:b8:57:41:2f:20:52:cd:05:c8:22:
f5:4a:0f:08:4c:d7:99:7f:92:2e:81:93:2c:1f:88:
01:6a:b4:40:0d:60:f5:9f:ac:16:d4:fd:f2:9b:cf:
2c:84:90:49:ec:56:35:25:cf:ad:50:94:b0:8b:5c:
40:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:44:5F:38:49:32:13:36:A5:05:2D:E0:D3:D0:52:64:8F:FB:DC:26
X509v3 Authority Key Identifier:
keyid:E2:40:A0:25:E0:E6:1A:44:D9:3E:4A:80:1E:38:88:B2:6E:7B:D2:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kCgJeDmGkTZPkqAHjiIsm570kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:00:da:1a:ab:b4:d8:30:c5:e4:ac:d4:75:11:b5:6d:a1:15:
cb:de:06:6b:3b:e3:da:04:1a:45:7a:bc:a1:cc:b4:9d:98:81:
72:75:45:74:f9:4c:da:91:09:a9:ca:c5:b2:1f:a2:fc:6c:a3:
98:39:23:cf:1b:ad:c3:77:c9:ab:e6:b9:ae:03:87:ec:05:aa:
3d:43:e0:41:36:fe:31:ff:32:52:4b:67:4c:03:10:71:c5:40:
4e:c2:db:a0:70:9f:3b:2b:16:16:4a:49:b3:5e:83:d1:ad:0c:
56:dd:d8:c4:36:42:75:60:81:28:2a:99:c9:5d:a3:89:de:b9:
bc:fd:54:1a:9b:20:7b:89:f2:63:1a:bb:4c:80:94:7a:e7:94:
ba:aa:09:d5:3d:69:d8:c4:4e:0f:b0:22:b7:a4:13:12:bf:7b:
fc:c1:b4:6e:31:cc:cd:2c:b8:23:d5:7b:12:bc:7f:cc:1e:1e:
0d:ea:70:d4:07:8b:a5:d3:09:c9:fd:71:32:65:cd:c6:9d:f0:
f9:28:51:36:d8:a5:16:ff:d5:79:70:40:94:b0:83:8a:4c:c6:
d8:1d:29:ec:25:a4:11:ec:c7:3e:d6:c2:61:58:6f:32:19:58:
0f:06:dd:f4:ed:50:5f:2f:d2:ca:1a:a9:da:60:42:b1:f0:46:
58:e6:16:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaE2tglDa1Cae0hz2FN1LmLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyNDBhMDI1ZTBlNjFhNDRkOTNlNGE4MDFlMzg4OGIyNmU3
YmQyNDEwHhcNMjUwNDMwMDQwMDU2WhcNMjUwNTAxMDQwMDU2WjAzMTEwLwYDVQQD
EyhmMTQ0NWYzODQ5MzIxMzM2YTUwNTJkZTBkM2QwNTI2NDhmZmJkYzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUKadiHajjg3e+25WyWys7knEIeh
7Ld6zIhhJZC1l7O1fWpAN8cxLIlqAI+7ROjWhzU2cCZSxXZjNRLCfPD1tBV2GT+U
znv8v6x/4R0myodDQdh6ZGqz6Qws6fO2xvVxYMKMN+0kbIJRYkjtL1fcZBU9ZEWR
pwgUkA1GtjnVTZXnyT9QKL3WxKtXTD7z3/E/gYnvFRclQhdur0yO/w6ErVV6T7mF
2Xtoi7lP+PUwv7Boh57rGdvAusdRo3tTk2ICk0HsAUhmu7hXQS8gUs0FyCL1Sg8I
TNeZf5IugZMsH4gBarRADWD1n6wW1P3ym88shJBJ7FY1Jc+tUJSwi1xAJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPFEXzhJMhM2pQUt4NPQUmSP+9wmMB8GA1UdIwQY
MBaAFOJAoCXg5hpE2T5KgB44iLJue9JBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGtDZ0plRG1Ha1RaUGtxQUhqaUlzbTU3MGtFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS82ZWM5NDMtNzBlMi00MzM1LTg0ZmUt
Yzc5ZDRlZWI1YWQ2LzEvNGtDZ0plRG1Ha1RaUGtxQUhqaUlzbTU3MGtFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS82ZWM5NDMtNzBlMi00MzM1LTg0ZmUtYzc5ZDRlZWI1YWQ2
LzEvNGtDZ0plRG1Ha1RaUGtxQUhqaUlzbTU3MGtFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABwDaGqu0
2DDF5KzUdRG1baEVy94Gazvj2gQaRXq8ocy0nZiBcnVFdPlM2pEJqcrFsh+i/Gyj
mDkjzxutw3fJq+a5rgOH7AWqPUPgQTb+Mf8yUktnTAMQccVATsLboHCfOysWFkpJ
s16D0a0MVt3YxDZCdWCBKCqZyV2jid65vP1UGpsge4nyYxq7TICUeueUuqoJ1T1p
2MROD7Ait6QTEr97/MG0bjHMzSy4I9V7Erx/zB4eDepw1AeLpdMJyf1xMmXNxp3w
+ShRNtilFv/VeXBAlLCDikzG2B0p7CWkEezHPtbCYVhvMhlYDwbd9O1QXy/Syhqp
2mBCsfBGWOYWoQ==
-----END CERTIFICATE-----
Generated at Wed Apr 30 05:42:16 2025 by rpki-client