Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
File: 4f9iX0oY0E1ZCludc7JVGkNbcXI.mft (raw, json)
Hash identifier: 7HjT3XZB6VInm+56pbDQaEGwFY/eEaQfBb7tLfixMgk=
Subject key identifier: 7F:B2:80:2C:74:38:6B:5B:C4:C8:7E:0A:53:B1:85:E8:75:72:5E:8D
Authority key identifier: E1:FF:62:5F:4A:18:D0:4D:59:0A:5B:9D:73:B2:55:1A:43:5B:71:72
Certificate issuer: /CN=e1ff625f4a18d04d590a5b9d73b2551a435b7172
Certificate serial: 0196767A3549A8EFF6C8EB27D3460E0F27BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
Manifest number: 0ECD
Signing time: Sun 27 Apr 2025 09:00:42 +0000
Manifest this update: Sun 27 Apr 2025 09:00:42 +0000
Manifest next update: Mon 28 Apr 2025 09:00:42 +0000
Files and hashes: 1: 4f9iX0oY0E1ZCludc7JVGkNbcXI.crl (hash: QUt/TNLpxx7sh3GmSgkpTNkLaekUcKscQwSOkNNr2JU=)
2: v-UIauQZjW8hDMdx3w3tSE6IDRc.roa (hash: uCYTkmd7Ahc37aZdyBrq8T1Px2W2MX7+A97XE/19qf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:35:49:a8:ef:f6:c8:eb:27:d3:46:0e:0f:27:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ff625f4a18d04d590a5b9d73b2551a435b7172
Validity
Not Before: Apr 27 09:00:42 2025 GMT
Not After : Apr 28 09:00:42 2025 GMT
Subject: CN=7fb2802c74386b5bc4c87e0a53b185e875725e8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1f:8e:fe:83:da:7b:87:f7:7e:ea:ad:bd:4c:
f3:58:2e:28:6a:fb:49:a1:f4:9c:41:b4:a4:18:d7:
5b:9f:6d:3f:89:a4:b2:be:76:a7:71:d0:f9:26:36:
cb:8a:f4:b5:0b:23:be:35:3f:35:78:44:04:aa:c4:
6f:65:25:2d:17:a1:2b:c6:50:0b:fb:1f:13:00:d3:
6a:2f:e1:19:67:8b:18:79:bf:d6:98:da:2f:a3:4d:
ef:e9:96:54:f4:7d:be:7d:8d:a5:0a:4f:6a:94:1a:
5e:ab:55:ac:4c:6c:25:64:3e:bf:ce:b4:c8:d4:ca:
06:d9:26:94:29:e0:3a:39:98:8f:6a:6b:3c:ea:2f:
d1:ba:95:98:96:c5:86:d0:a7:02:53:36:31:fb:d2:
80:6b:3f:81:d2:32:47:f9:6e:41:c2:cd:e3:b7:f4:
f5:35:61:f4:0e:19:b5:33:6c:36:bc:fe:31:cc:9f:
e7:07:e9:30:4e:d7:4f:ee:be:bf:e2:86:61:7b:7c:
d3:39:e0:13:07:80:73:54:31:ef:84:de:4d:32:e4:
3e:f6:61:66:fc:e8:50:f5:81:d9:79:7a:57:41:50:
dd:65:33:a5:b7:01:25:28:e7:7a:bc:f3:96:92:10:
6e:61:f3:2b:f1:c3:1b:53:47:dd:7f:5a:ec:e4:93:
6c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B2:80:2C:74:38:6B:5B:C4:C8:7E:0A:53:B1:85:E8:75:72:5E:8D
X509v3 Authority Key Identifier:
keyid:E1:FF:62:5F:4A:18:D0:4D:59:0A:5B:9D:73:B2:55:1A:43:5B:71:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:d8:03:88:36:4a:8d:1c:4a:53:bb:ba:c3:b8:09:2e:ea:6f:
79:f3:de:84:2b:a8:ff:37:8b:f1:c1:50:6f:cd:08:e0:07:07:
dc:c2:e8:ff:5b:b5:7f:c4:3c:00:93:39:a7:77:04:77:9c:01:
33:36:6a:f3:4e:b1:4e:58:d7:b4:4f:80:86:11:56:e2:1b:b4:
84:6b:3c:76:80:53:94:9c:48:0d:6e:f6:2f:b6:9e:cd:a6:83:
79:ab:21:e5:55:0f:d2:81:ba:dd:38:09:8e:40:9d:3a:88:48:
ac:bf:35:38:f5:aa:68:4e:d8:62:b0:61:4b:aa:98:85:90:14:
50:3e:61:e6:a4:90:c7:fe:7d:ff:07:05:c8:ab:31:32:df:e6:
ee:86:1d:62:63:40:be:9a:52:cc:00:52:40:6d:69:1e:67:b8:
43:62:cc:e8:3d:1b:5b:ee:a9:81:c5:f5:66:e5:0a:e6:18:ff:
aa:19:0a:65:8a:17:4c:31:83:63:1f:f9:8a:2f:3f:cc:c0:d0:
7e:3c:21:13:02:93:94:e8:10:6d:20:1f:19:b0:dd:50:bb:38:
60:3d:c3:26:00:d5:a2:4e:dc:ec:24:d5:d3:7e:15:6a:99:c8:
a6:ef:6a:cb:b1:79:ab:b7:0c:d3:c5:b1:e9:2a:e8:8b:17:19:
e3:7b:3a:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2ejVJqO/2yOsn00YODye9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxZmY2MjVmNGExOGQwNGQ1OTBhNWI5ZDczYjI1NTFhNDM1
YjcxNzIwHhcNMjUwNDI3MDkwMDQyWhcNMjUwNDI4MDkwMDQyWjAzMTEwLwYDVQQD
Eyg3ZmIyODAyYzc0Mzg2YjViYzRjODdlMGE1M2IxODVlODc1NzI1ZThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxR+O/oPae4f3fuqtvUzzWC4oavtJ
ofScQbSkGNdbn20/iaSyvnancdD5JjbLivS1CyO+NT81eEQEqsRvZSUtF6ErxlAL
+x8TANNqL+EZZ4sYeb/WmNovo03v6ZZU9H2+fY2lCk9qlBpeq1WsTGwlZD6/zrTI
1MoG2SaUKeA6OZiPams86i/RupWYlsWG0KcCUzYx+9KAaz+B0jJH+W5Bws3jt/T1
NWH0Dhm1M2w2vP4xzJ/nB+kwTtdP7r6/4oZhe3zTOeATB4BzVDHvhN5NMuQ+9mFm
/OhQ9YHZeXpXQVDdZTOltwElKOd6vPOWkhBuYfMr8cMbU0fdf1rs5JNsmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH+ygCx0OGtbxMh+ClOxheh1cl6NMB8GA1UdIwQY
MBaAFOH/Yl9KGNBNWQpbnXOyVRpDW3FyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGY5aVgwb1kwRTFaQ2x1ZGM3SlZHa05iY1hJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC84ZjkwYTUtYzg3OC00ZGQ0LWIyZGIt
NGU1ODYxMTg3YzRmLzEvNGY5aVgwb1kwRTFaQ2x1ZGM3SlZHa05iY1hJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC84ZjkwYTUtYzg3OC00ZGQ0LWIyZGItNGU1ODYxMTg3YzRm
LzEvNGY5aVgwb1kwRTFaQ2x1ZGM3SlZHa05iY1hJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgNgDiDZK
jRxKU7u6w7gJLupvefPehCuo/zeL8cFQb80I4AcH3MLo/1u1f8Q8AJM5p3cEd5wB
MzZq806xTljXtE+AhhFW4hu0hGs8doBTlJxIDW72L7aezaaDeash5VUP0oG63TgJ
jkCdOohIrL81OPWqaE7YYrBhS6qYhZAUUD5h5qSQx/59/wcFyKsxMt/m7oYdYmNA
vppSzABSQG1pHme4Q2LM6D0bW+6pgcX1ZuUK5hj/qhkKZYoXTDGDYx/5ii8/zMDQ
fjwhEwKTlOgQbSAfGbDdULs4YD3DJgDVok7c7CTV034VapnIpu9qy7F5q7cM08Wx
6SroixcZ43s6TQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:11:11 2025 by rpki-client