Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
File: 4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft (raw, json)
Hash identifier: rEFh14XmPufnOHGnx96daCJV0Ocqtu8afP50YD++o9Q=
Subject key identifier: 90:46:98:01:5F:16:55:20:38:5E:43:5A:68:31:F6:82:29:D2:62:90
Authority key identifier: E1:A9:FE:3C:8A:69:D5:09:35:A1:F7:49:66:6E:08:DC:75:45:94:DD
Certificate issuer: /CN=e1a9fe3c8a69d50935a1f749666e08dc754594dd
Certificate serial: 0196748B8051D82999EE34A5CBDA8B154ADA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
Manifest number: 0FD1
Signing time: Sun 27 Apr 2025 00:00:21 +0000
Manifest this update: Sun 27 Apr 2025 00:00:21 +0000
Manifest next update: Mon 28 Apr 2025 00:00:21 +0000
Files and hashes: 1: 3BfIScw6HImdI4whE_vk-buQO8s.roa (hash: G0gYam1RQRQrZL9flb7DmAGTR2cR1ZnF922oRZ/xNlg=)
2: 4an-PIpp1Qk1ofdJZm4I3HVFlN0.crl (hash: sVeqFXCWHvxm6O4hnd+iDU/AZ4YssymleB6CE5YyrF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8b:80:51:d8:29:99:ee:34:a5:cb:da:8b:15:4a:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1a9fe3c8a69d50935a1f749666e08dc754594dd
Validity
Not Before: Apr 27 00:00:21 2025 GMT
Not After : Apr 28 00:00:21 2025 GMT
Subject: CN=904698015f165520385e435a6831f68229d26290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c5:29:06:a9:24:38:63:65:7e:00:76:1c:82:
4d:50:3f:43:06:4a:55:c6:18:69:9a:14:79:c5:4e:
14:24:56:11:e7:68:aa:7c:23:0e:ca:2f:19:0e:4e:
e6:93:18:b7:b7:8e:7a:6e:7b:7d:c3:a3:5c:31:b7:
b4:7e:d0:65:bb:90:2b:44:7c:f4:40:2a:23:f4:1c:
c5:37:d2:6c:39:45:8d:9c:1d:7a:f0:46:2d:c7:28:
3f:b7:1d:35:ef:6c:99:af:cb:94:53:5f:68:43:35:
97:50:8c:49:9b:4e:e0:b8:1b:31:84:fb:2a:d9:e7:
c6:fb:8c:29:8b:e3:a0:0e:d3:73:0b:cf:e6:3b:60:
23:c5:4f:19:60:d1:ec:1e:0c:9b:3c:1f:99:fb:80:
a6:7c:12:20:bb:74:8c:3a:47:45:cc:63:10:d1:b9:
f4:7d:45:78:3b:ad:69:25:59:b7:a5:3b:36:f6:39:
32:82:bd:91:62:3f:b8:7b:bc:33:cd:25:19:79:c3:
33:71:f0:d0:ee:63:14:8e:87:cf:a7:9b:a6:e0:82:
2c:8f:ea:6b:28:6e:97:78:7a:17:24:47:99:75:3f:
e5:98:6f:b2:0b:62:e7:c6:e7:b2:cc:ca:26:90:1c:
9c:0b:c1:ce:f7:ac:3f:21:cc:52:67:78:1b:d4:cb:
a5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:46:98:01:5F:16:55:20:38:5E:43:5A:68:31:F6:82:29:D2:62:90
X509v3 Authority Key Identifier:
keyid:E1:A9:FE:3C:8A:69:D5:09:35:A1:F7:49:66:6E:08:DC:75:45:94:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:5c:a3:5f:78:68:73:42:6b:c5:ab:f5:76:56:9b:88:fc:f8:
5b:f2:07:c9:46:56:91:c9:63:6e:ca:f4:16:43:50:3c:88:bb:
5c:11:22:eb:ef:29:de:de:db:4d:f7:44:8a:cc:54:b2:4c:ab:
a9:28:7f:0f:6d:d2:58:26:4c:98:86:fb:c8:26:e7:ec:94:71:
b7:b0:d5:32:bf:7e:31:a6:eb:b4:0c:cc:81:b7:ac:72:ce:52:
79:6a:17:09:99:ef:dd:1a:3f:2b:e7:40:3f:9a:a6:81:b9:ff:
7c:0b:0a:e3:78:4c:ec:be:43:67:e4:e8:20:39:8e:4b:92:56:
45:8e:34:1c:c2:17:02:9b:75:1f:bb:33:4f:ff:93:9e:51:66:
27:e7:40:ea:fb:e7:1a:87:cd:58:dd:d8:69:3c:39:dd:67:da:
d9:b6:b5:e2:89:b9:58:cf:e0:a6:69:42:68:87:11:8e:86:98:
9b:2b:ac:1d:7b:1b:c9:03:be:db:2e:f6:52:07:eb:82:fe:1a:
82:fb:fd:b4:23:3f:81:a4:b3:78:c6:de:cc:81:b7:38:dd:28:
12:17:d0:cb:04:c4:33:37:18:53:d6:79:46:59:f3:d3:7d:0a:
76:99:68:e9:cf:dc:50:ab:5c:92:c4:f6:05:ec:58:e4:6c:4d:
fd:fd:c6:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0i4BR2CmZ7jSly9qLFUraMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxYTlmZTNjOGE2OWQ1MDkzNWExZjc0OTY2NmUwOGRjNzU0
NTk0ZGQwHhcNMjUwNDI3MDAwMDIxWhcNMjUwNDI4MDAwMDIxWjAzMTEwLwYDVQQD
Eyg5MDQ2OTgwMTVmMTY1NTIwMzg1ZTQzNWE2ODMxZjY4MjI5ZDI2MjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMUpBqkkOGNlfgB2HIJNUD9DBkpV
xhhpmhR5xU4UJFYR52iqfCMOyi8ZDk7mkxi3t456bnt9w6NcMbe0ftBlu5ArRHz0
QCoj9BzFN9JsOUWNnB168EYtxyg/tx0172yZr8uUU19oQzWXUIxJm07guBsxhPsq
2efG+4wpi+OgDtNzC8/mO2AjxU8ZYNHsHgybPB+Z+4CmfBIgu3SMOkdFzGMQ0bn0
fUV4O61pJVm3pTs29jkygr2RYj+4e7wzzSUZecMzcfDQ7mMUjofPp5um4IIsj+pr
KG6XeHoXJEeZdT/lmG+yC2LnxueyzMomkBycC8HO96w/IcxSZ3gb1MulGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJBGmAFfFlUgOF5DWmgx9oIp0mKQMB8GA1UdIwQY
MBaAFOGp/jyKadUJNaH3SWZuCNx1RZTdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGFuLVBJcHAxUWsxb2ZkSlptNEkzSFZGbE4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8wZTZmNGEtZmQ1Ny00MTFiLWE5NGIt
NmI2ZmRiNTRiYTMxLzEvNGFuLVBJcHAxUWsxb2ZkSlptNEkzSFZGbE4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8wZTZmNGEtZmQ1Ny00MTFiLWE5NGItNmI2ZmRiNTRiYTMx
LzEvNGFuLVBJcHAxUWsxb2ZkSlptNEkzSFZGbE4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2VyjX3ho
c0Jrxav1dlabiPz4W/IHyUZWkcljbsr0FkNQPIi7XBEi6+8p3t7bTfdEisxUskyr
qSh/D23SWCZMmIb7yCbn7JRxt7DVMr9+MabrtAzMgbescs5SeWoXCZnv3Ro/K+dA
P5qmgbn/fAsK43hM7L5DZ+ToIDmOS5JWRY40HMIXApt1H7szT/+TnlFmJ+dA6vvn
GofNWN3YaTw53Wfa2ba14om5WM/gpmlCaIcRjoaYmyusHXsbyQO+2y72Ugfrgv4a
gvv9tCM/gaSzeMbezIG3ON0oEhfQywTEMzcYU9Z5Rlnz030Kdplo6c/cUKtcksT2
BexY5GxN/f3GRw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:34:14 2025 by rpki-client