Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.mft
File: 4g-H2rlrUPdu6kmxgeqU0mogUyc.mft (raw, json)
Hash identifier: 4D9a4jCuUZf2HsyRNowsyFXuoVcoXrK1SH4bEtLn2Js=
Subject key identifier: F8:3C:C3:65:38:46:D5:35:E0:15:BF:9B:59:6E:BA:27:58:D7:B5:AD
Authority key identifier: E2:0F:87:DA:B9:6B:50:F7:6E:EA:49:B1:81:EA:94:D2:6A:20:53:27
Certificate issuer: /CN=e20f87dab96b50f76eea49b181ea94d26a205327
Certificate serial: 0196963C2C423D1DEF6F247CAA591D05F63D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4g-H2rlrUPdu6kmxgeqU0mogUyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.mft
Manifest number: 1522
Signing time: Sat 03 May 2025 13:00:47 +0000
Manifest this update: Sat 03 May 2025 13:00:47 +0000
Manifest next update: Sun 04 May 2025 13:00:47 +0000
Files and hashes: 1: 4g-H2rlrUPdu6kmxgeqU0mogUyc.crl (hash: pJpvKL8DjB1+cfPD9dsFBBn9/8zLARr4xDXoaiUKZlU=)
2: 8e6EuYvdvJ1TbEt2w_l--VFTSVE.roa (hash: lEOGzvYRz251FXAafldpzBiZsWV7u1gV99thpvyYuY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4g-H2rlrUPdu6kmxgeqU0mogUyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:96:3c:2c:42:3d:1d:ef:6f:24:7c:aa:59:1d:05:f6:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e20f87dab96b50f76eea49b181ea94d26a205327
Validity
Not Before: May 3 13:00:47 2025 GMT
Not After : May 4 13:00:47 2025 GMT
Subject: CN=f83cc3653846d535e015bf9b596eba2758d7b5ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:69:2f:2b:8a:29:00:b9:4d:06:6f:69:ab:43:
2d:d4:df:c4:18:a3:14:7a:3f:88:ec:2b:7a:40:dd:
f0:b9:20:b0:a7:7c:57:71:6a:70:ec:b8:1b:94:1f:
0f:03:17:5a:15:1e:1b:c4:3c:1a:55:e5:8f:23:0a:
38:b9:2f:58:97:fb:cf:ae:75:e2:d3:94:22:87:c7:
79:eb:79:bd:3d:5a:84:81:73:62:2e:51:b1:99:e2:
20:3a:06:6c:5f:30:cd:07:79:50:33:d0:a2:ee:2b:
93:2d:45:38:8b:b5:ba:b9:e1:6d:a8:32:39:2c:6f:
70:78:f2:c7:36:da:68:46:29:08:b7:60:2b:5d:67:
bc:d6:62:a0:67:42:6e:87:3a:eb:61:bb:a7:6e:73:
15:08:ac:79:2a:5d:b3:b2:84:87:87:24:d9:57:dc:
7f:31:ce:9e:20:dc:26:05:7d:99:4f:7a:ea:f2:52:
6d:41:da:8b:ca:6d:3b:90:ab:bb:d9:4d:e5:64:4c:
38:1c:77:b4:1c:b9:a2:1d:84:22:6c:e7:19:b9:c3:
6b:da:35:42:41:9e:93:d0:4e:36:75:4f:c3:d1:e2:
a1:3d:7d:d9:24:e6:10:b9:d7:a1:54:a6:9b:d1:d0:
9b:53:2f:47:14:59:a5:43:5f:28:0f:a4:90:9c:ac:
74:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:3C:C3:65:38:46:D5:35:E0:15:BF:9B:59:6E:BA:27:58:D7:B5:AD
X509v3 Authority Key Identifier:
keyid:E2:0F:87:DA:B9:6B:50:F7:6E:EA:49:B1:81:EA:94:D2:6A:20:53:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4g-H2rlrUPdu6kmxgeqU0mogUyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:a1:ec:23:6b:6f:14:fc:b3:3b:64:93:66:e9:5b:69:1d:86:
52:0a:80:42:c4:51:d7:d2:ab:2d:2c:08:e7:16:59:f1:9f:2c:
91:0d:f7:ec:25:3a:4d:b9:b2:c4:3f:80:e1:06:17:22:3b:22:
bc:79:68:06:1f:d2:ff:df:73:b1:ec:8f:0b:18:d5:2c:9b:42:
d1:c0:47:dd:f1:a8:99:aa:d7:29:ab:84:15:7b:7c:2a:38:57:
51:e6:e4:42:f7:14:7f:8a:bb:43:8f:f0:d1:7b:e8:8a:1c:b6:
83:a5:8a:83:ef:eb:62:4d:99:23:8b:e2:11:f6:b1:cd:4e:3b:
89:6a:02:f2:b6:19:01:5f:51:18:22:61:3d:26:99:2f:6b:b4:
b1:2e:68:fc:00:19:38:f1:f5:35:fa:d6:25:5a:46:3b:dd:6a:
f1:2f:04:40:3c:d8:6a:2d:09:10:ca:ab:6b:d0:27:a0:43:01:
3e:c1:73:dd:1d:af:0f:fc:37:80:ff:64:74:c3:e2:f4:b5:ac:
02:29:83:5b:b9:32:a1:d2:83:d6:37:64:b9:ec:56:55:e1:9f:
a1:dd:ce:82:e0:e2:20:e4:7d:70:98:5c:ce:6e:7f:a4:67:97:
13:f9:76:21:63:a1:a2:ba:b5:59:49:4f:6d:1f:94:79:94:f8:
44:37:2d:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaWPCxCPR3vbyR8qlkdBfY9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyMGY4N2RhYjk2YjUwZjc2ZWVhNDliMTgxZWE5NGQyNmEy
MDUzMjcwHhcNMjUwNTAzMTMwMDQ3WhcNMjUwNTA0MTMwMDQ3WjAzMTEwLwYDVQQD
EyhmODNjYzM2NTM4NDZkNTM1ZTAxNWJmOWI1OTZlYmEyNzU4ZDdiNWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWkvK4opALlNBm9pq0Mt1N/EGKMU
ej+I7Ct6QN3wuSCwp3xXcWpw7LgblB8PAxdaFR4bxDwaVeWPIwo4uS9Yl/vPrnXi
05Qih8d563m9PVqEgXNiLlGxmeIgOgZsXzDNB3lQM9Ci7iuTLUU4i7W6ueFtqDI5
LG9wePLHNtpoRikIt2ArXWe81mKgZ0JuhzrrYbunbnMVCKx5Kl2zsoSHhyTZV9x/
Mc6eINwmBX2ZT3rq8lJtQdqLym07kKu72U3lZEw4HHe0HLmiHYQibOcZucNr2jVC
QZ6T0E42dU/D0eKhPX3ZJOYQudehVKab0dCbUy9HFFmlQ18oD6SQnKx0JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPg8w2U4RtU14BW/m1luuidY17WtMB8GA1UdIwQY
MBaAFOIPh9q5a1D3bupJsYHqlNJqIFMnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGctSDJybHJVUGR1NmtteGdlcVUwbW9nVXljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8zZmJhMDUtZGFlZC00M2I3LWI4NzAt
ZmEwMmMxMjY1ZDVlLzEvNGctSDJybHJVUGR1NmtteGdlcVUwbW9nVXljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC8zZmJhMDUtZGFlZC00M2I3LWI4NzAtZmEwMmMxMjY1ZDVl
LzEvNGctSDJybHJVUGR1NmtteGdlcVUwbW9nVXljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMKHsI2tv
FPyzO2STZulbaR2GUgqAQsRR19KrLSwI5xZZ8Z8skQ337CU6TbmyxD+A4QYXIjsi
vHloBh/S/99zseyPCxjVLJtC0cBH3fGomarXKauEFXt8KjhXUebkQvcUf4q7Q4/w
0Xvoihy2g6WKg+/rYk2ZI4viEfaxzU47iWoC8rYZAV9RGCJhPSaZL2u0sS5o/AAZ
OPH1NfrWJVpGO91q8S8EQDzYai0JEMqra9AnoEMBPsFz3R2vD/w3gP9kdMPi9LWs
AimDW7kyodKD1jdkuexWVeGfod3OguDiIOR9cJhczm5/pGeXE/l2IWOhorq1WUlP
bR+UeZT4RDctJg==
-----END CERTIFICATE-----
Generated at Sat May 3 23:29:41 2025 by rpki-client