Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft
File: ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft (raw, json)
Hash identifier: OsTM0F1RAeTgBCPTemDX4oSSF9CepvIRgTGKokkjNsg=
Subject key identifier: 24:A0:5D:7C:69:82:A5:CB:07:B9:71:CE:BE:1D:BC:E2:EC:32:9F:A4
Authority key identifier: 8A:1E:3F:8D:2F:94:2D:8F:C1:16:EF:8E:57:59:BC:37:67:FB:0B:06
Certificate issuer: /CN=8a1e3f8d2f942d8fc116ef8e5759bc3767fb0b06
Certificate serial: 01967FB443E841886A43CD048B6B2A76DFAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ih4_jS-ULY_BFu-OV1m8N2f7CwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft
Manifest number: 0E41
Signing time: Tue 29 Apr 2025 04:00:42 +0000
Manifest this update: Tue 29 Apr 2025 04:00:42 +0000
Manifest next update: Wed 30 Apr 2025 04:00:42 +0000
Files and hashes: 1: ih4_jS-ULY_BFu-OV1m8N2f7CwY.crl (hash: S9sO+aZlSBrAtzbSq7/Ae4/i+sI9ehR8CmE4QTuUJdU=)
2: iwkNh3UdWwUz0vScU_NmxlT_kd8.roa (hash: qTLgYZEDj5/iSNL5ILw19yNSQMcWNUWUNm12d5bZdjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ih4_jS-ULY_BFu-OV1m8N2f7CwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b4:43:e8:41:88:6a:43:cd:04:8b:6b:2a:76:df:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a1e3f8d2f942d8fc116ef8e5759bc3767fb0b06
Validity
Not Before: Apr 29 04:00:42 2025 GMT
Not After : Apr 30 04:00:42 2025 GMT
Subject: CN=24a05d7c6982a5cb07b971cebe1dbce2ec329fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e8:00:5c:e5:46:00:22:af:f9:2b:9c:71:ab:
22:e2:2b:0b:37:3c:af:16:b5:ee:37:9d:f7:33:60:
e5:7c:fa:38:97:ee:b5:12:07:03:d6:bc:7f:45:d3:
34:8f:0e:28:60:57:fb:af:8f:c1:a8:02:3e:52:ad:
aa:ad:dd:e8:37:06:36:df:5b:89:ff:e6:dd:a7:56:
31:a9:98:19:10:5d:03:c6:20:c4:11:28:14:7e:05:
50:a7:49:12:7e:66:45:57:05:5a:3e:18:97:87:cc:
3c:57:06:cd:3c:69:1e:42:b3:a6:d4:75:ef:5a:42:
f4:73:87:e1:18:78:73:4f:53:6e:55:58:8a:b5:11:
16:99:01:eb:b5:ca:5e:2c:57:9d:9e:be:cf:c8:09:
a4:f7:0e:12:5e:4d:d9:4d:f7:3e:c3:c6:85:0e:79:
3d:79:a0:2a:4e:cb:9c:0c:0d:aa:11:aa:67:70:0a:
0f:55:87:6b:96:7c:b3:12:74:d7:d3:b5:09:c9:7c:
58:fb:11:44:11:9d:b8:58:a3:54:2f:1d:29:0d:b5:
84:01:38:58:2c:2a:e8:3c:58:c5:a6:db:9a:8a:4d:
d5:96:03:d1:33:e4:b2:d2:ff:c0:72:2c:90:53:50:
fc:4b:17:03:fe:db:f0:b1:ff:7e:7f:f6:ba:82:da:
94:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A0:5D:7C:69:82:A5:CB:07:B9:71:CE:BE:1D:BC:E2:EC:32:9F:A4
X509v3 Authority Key Identifier:
keyid:8A:1E:3F:8D:2F:94:2D:8F:C1:16:EF:8E:57:59:BC:37:67:FB:0B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ih4_jS-ULY_BFu-OV1m8N2f7CwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:fb:b4:62:62:99:2d:a0:bd:c8:41:1a:5b:d8:84:8a:ba:ff:
5e:3d:59:61:16:9f:f1:d1:7b:22:3d:11:64:cf:4b:f8:3c:4b:
85:ea:98:f9:c7:d4:28:dd:a9:76:bc:94:65:19:9b:26:80:a7:
ff:16:34:6b:2a:0f:7a:3a:12:25:a6:38:fc:64:4b:fd:ab:b5:
e0:20:d6:0b:b8:50:48:d6:9c:c8:38:26:1f:4c:0b:58:57:af:
f4:5a:52:d3:1b:7a:11:84:46:ef:39:99:ac:82:d0:50:14:0f:
81:0f:85:37:42:44:9f:91:71:1e:f5:af:36:29:56:b6:92:53:
bc:45:6a:5b:71:47:37:f9:5d:b7:81:a9:11:90:c0:be:4e:f8:
d0:8c:ba:bd:9e:41:5a:da:f3:71:22:66:c0:73:14:07:cd:69:
90:dc:e9:7c:fe:bb:2d:f6:f0:be:7d:c1:17:90:7b:17:50:b3:
4f:8c:68:25:34:ef:bf:d8:e7:b8:8b:21:8d:1f:d0:ff:fb:9a:
de:bd:5d:76:b2:34:e8:0f:52:f6:05:7f:ce:fc:b3:b5:6a:54:
29:3d:8e:8a:55:fe:42:62:1e:d3:d2:52:01:32:4e:0d:c5:1d:
ee:b5:91:74:d2:b0:97:93:62:f1:90:11:0c:ab:02:d3:c3:75:
e8:49:90:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ/tEPoQYhqQ80Ei2sqdt+uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMWUzZjhkMmY5NDJkOGZjMTE2ZWY4ZTU3NTliYzM3Njdm
YjBiMDYwHhcNMjUwNDI5MDQwMDQyWhcNMjUwNDMwMDQwMDQyWjAzMTEwLwYDVQQD
EygyNGEwNWQ3YzY5ODJhNWNiMDdiOTcxY2ViZTFkYmNlMmVjMzI5ZmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4egAXOVGACKv+Succasi4isLNzyv
FrXuN533M2DlfPo4l+61EgcD1rx/RdM0jw4oYFf7r4/BqAI+Uq2qrd3oNwY231uJ
/+bdp1YxqZgZEF0DxiDEESgUfgVQp0kSfmZFVwVaPhiXh8w8VwbNPGkeQrOm1HXv
WkL0c4fhGHhzT1NuVViKtREWmQHrtcpeLFednr7PyAmk9w4SXk3ZTfc+w8aFDnk9
eaAqTsucDA2qEapncAoPVYdrlnyzEnTX07UJyXxY+xFEEZ24WKNULx0pDbWEAThY
LCroPFjFptuaik3VlgPRM+Sy0v/AciyQU1D8SxcD/tvwsf9+f/a6gtqUcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCSgXXxpgqXLB7lxzr4dvOLsMp+kMB8GA1UdIwQY
MBaAFIoeP40vlC2PwRbvjldZvDdn+wsGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWg0X2pTLVVMWV9CRnUtT1YxbThOMmY3Q3dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8xYTJmMDMtMWQ3Yi00ZTA0LTk1MWQt
MjVjMTFiNzk2OTgyLzEvaWg0X2pTLVVMWV9CRnUtT1YxbThOMmY3Q3dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8xYTJmMDMtMWQ3Yi00ZTA0LTk1MWQtMjVjMTFiNzk2OTgy
LzEvaWg0X2pTLVVMWV9CRnUtT1YxbThOMmY3Q3dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi/u0YmKZ
LaC9yEEaW9iEirr/Xj1ZYRaf8dF7Ij0RZM9L+DxLheqY+cfUKN2pdryUZRmbJoCn
/xY0ayoPejoSJaY4/GRL/au14CDWC7hQSNacyDgmH0wLWFev9FpS0xt6EYRG7zmZ
rILQUBQPgQ+FN0JEn5FxHvWvNilWtpJTvEVqW3FHN/ldt4GpEZDAvk740Iy6vZ5B
WtrzcSJmwHMUB81pkNzpfP67Lfbwvn3BF5B7F1CzT4xoJTTvv9jnuIshjR/Q//ua
3r1ddrI06A9S9gV/zvyztWpUKT2OilX+QmIe09JSATJODcUd7rWRdNKwl5Ni8ZAR
DKsC08N16EmQ+A==
-----END CERTIFICATE-----
Generated at Tue Apr 29 08:37:24 2025 by rpki-client