Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.mft
File: l4TMfBsz0nl3_M2zSzzClKKkCIw.mft (raw, json)
Hash identifier: oUv5bEN+pBSMaCa7GTIZskLa5+PBIU/2A1lKIuHvoK4=
Subject key identifier: F5:07:79:99:3A:E8:2F:9F:07:72:3E:A4:FB:E5:AC:D6:EC:C8:4C:DA
Authority key identifier: 97:84:CC:7C:1B:33:D2:79:77:FC:CD:B3:4B:3C:C2:94:A2:A4:08:8C
Certificate issuer: /CN=9784cc7c1b33d27977fccdb34b3cc294a2a4088c
Certificate serial: 019676432AC0BE2CAC1D465AF6B6A944A34D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4TMfBsz0nl3_M2zSzzClKKkCIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.mft
Manifest number: 04C2
Signing time: Sun 27 Apr 2025 08:00:35 +0000
Manifest this update: Sun 27 Apr 2025 08:00:35 +0000
Manifest next update: Mon 28 Apr 2025 08:00:35 +0000
Files and hashes: 1: ZjdD3KktHTJ1RlykxrS_PX6Dfls.roa (hash: rQU1YZETtvcj8idrb5JBb64s2ExLklRkDK8ZmIHJSuk=)
2: l4TMfBsz0nl3_M2zSzzClKKkCIw.crl (hash: TzQdcne6OG6u5WJuKjNPT3ySpeJ+o2eEBFX92QqizEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/l4TMfBsz0nl3_M2zSzzClKKkCIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:43:2a:c0:be:2c:ac:1d:46:5a:f6:b6:a9:44:a3:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9784cc7c1b33d27977fccdb34b3cc294a2a4088c
Validity
Not Before: Apr 27 08:00:35 2025 GMT
Not After : Apr 28 08:00:35 2025 GMT
Subject: CN=f50779993ae82f9f07723ea4fbe5acd6ecc84cda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:31:71:8b:e7:9d:03:e2:1c:fa:74:e7:6a:d6:
35:b5:b9:4a:f4:df:6f:19:cb:58:96:8d:99:67:47:
00:4a:e8:bb:f7:0c:d2:44:a4:76:e4:5e:da:8b:3f:
1a:11:ea:84:7c:18:27:78:da:4e:19:7f:ce:0d:ed:
d0:18:c1:46:67:96:1a:42:4f:b0:8e:06:c8:77:f8:
30:fa:7d:b5:22:10:9b:a8:f6:be:ed:63:26:23:44:
7d:66:2a:2b:a4:c9:c2:c4:3e:bf:10:c9:b5:ed:ce:
b4:44:f5:50:57:8e:39:e5:24:e7:58:d5:5c:4c:39:
44:b6:98:f9:d5:76:6d:42:68:9d:81:af:5d:aa:56:
d3:87:56:83:02:a1:ce:a8:6d:50:73:e2:c5:a8:b7:
fb:0a:7a:97:ae:b0:e6:4d:91:4c:ed:01:6c:7d:36:
6b:c7:d4:32:47:35:a4:c6:ad:a4:5c:72:93:ed:ad:
63:2a:96:a1:5b:25:62:56:bf:73:48:77:2b:f1:e3:
21:61:1f:aa:37:ff:28:c6:bc:08:92:e9:fb:c5:9e:
48:13:fd:3f:9e:49:4a:6a:fa:4b:36:c2:10:bf:1e:
be:a1:b6:98:3c:ce:ab:19:7f:da:a5:09:2b:80:73:
01:5d:2b:2d:68:96:98:eb:5b:93:f4:c6:42:6e:53:
f9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:07:79:99:3A:E8:2F:9F:07:72:3E:A4:FB:E5:AC:D6:EC:C8:4C:DA
X509v3 Authority Key Identifier:
keyid:97:84:CC:7C:1B:33:D2:79:77:FC:CD:B3:4B:3C:C2:94:A2:A4:08:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4TMfBsz0nl3_M2zSzzClKKkCIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:3b:ab:a9:10:ba:aa:a5:d6:d6:5c:b5:7d:2d:70:ff:2f:01:
16:5a:a9:bd:9e:98:a0:43:3b:8a:ee:8a:d1:a8:ab:d5:47:91:
c1:6a:a4:cd:c5:a8:48:e1:fc:45:96:6b:c2:8a:2e:68:7c:37:
16:ee:36:b4:c6:13:a0:43:12:74:5b:cc:cf:7f:c5:c9:68:e9:
36:eb:f6:0a:a6:0c:80:06:5f:1e:41:be:ef:fa:3d:f2:dd:89:
a7:af:e1:6c:87:ef:6e:06:ac:fe:55:e4:13:02:02:d1:33:8e:
a6:b3:3f:5c:57:43:ec:e9:fe:27:b2:bb:8d:89:f1:8f:57:bc:
ea:2c:57:c5:50:a2:e8:5e:0f:30:5c:12:51:51:37:8a:41:d9:
9a:4a:76:de:66:f4:47:8e:e5:d4:ee:f1:d3:27:34:43:5a:f7:
6a:05:26:15:9e:5c:e7:75:4d:54:d7:b6:cc:e4:17:ac:aa:ea:
8d:92:ff:26:4e:79:54:46:bf:f2:bd:d0:3a:85:27:67:9c:e8:
51:80:1b:28:40:b7:c7:51:10:0b:bc:ff:b0:55:01:97:b7:f3:
32:c1:d0:3c:a5:7d:05:7e:70:86:02:9f:65:88:ee:5e:7b:45:
db:c0:ab:17:18:bf:4d:fc:90:88:a6:8b:10:55:67:64:69:e9:
dc:ae:f5:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2QyrAviysHUZa9rapRKNNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3ODRjYzdjMWIzM2QyNzk3N2ZjY2RiMzRiM2NjMjk0YTJh
NDA4OGMwHhcNMjUwNDI3MDgwMDM1WhcNMjUwNDI4MDgwMDM1WjAzMTEwLwYDVQQD
EyhmNTA3Nzk5OTNhZTgyZjlmMDc3MjNlYTRmYmU1YWNkNmVjYzg0Y2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDFxi+edA+Ic+nTnatY1tblK9N9v
GctYlo2ZZ0cASui79wzSRKR25F7aiz8aEeqEfBgneNpOGX/ODe3QGMFGZ5YaQk+w
jgbId/gw+n21IhCbqPa+7WMmI0R9ZiorpMnCxD6/EMm17c60RPVQV4455STnWNVc
TDlEtpj51XZtQmidga9dqlbTh1aDAqHOqG1Qc+LFqLf7CnqXrrDmTZFM7QFsfTZr
x9QyRzWkxq2kXHKT7a1jKpahWyViVr9zSHcr8eMhYR+qN/8oxrwIkun7xZ5IE/0/
nklKavpLNsIQvx6+obaYPM6rGX/apQkrgHMBXSstaJaY61uT9MZCblP5qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPUHeZk66C+fB3I+pPvlrNbsyEzaMB8GA1UdIwQY
MBaAFJeEzHwbM9J5d/zNs0s8wpSipAiMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDRUTWZCc3owbmwzX00yelN6ekNsS0trQ0l3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9iODUxZDItNzE3ZC00MzQ0LTg0YmIt
Yzg4NmZiNmIzYmNkLzEvbDRUTWZCc3owbmwzX00yelN6ekNsS0trQ0l3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9iODUxZDItNzE3ZC00MzQ0LTg0YmItYzg4NmZiNmIzYmNk
LzEvbDRUTWZCc3owbmwzX00yelN6ekNsS0trQ0l3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHDurqRC6
qqXW1ly1fS1w/y8BFlqpvZ6YoEM7iu6K0air1UeRwWqkzcWoSOH8RZZrwoouaHw3
Fu42tMYToEMSdFvMz3/FyWjpNuv2CqYMgAZfHkG+7/o98t2Jp6/hbIfvbgas/lXk
EwIC0TOOprM/XFdD7On+J7K7jYnxj1e86ixXxVCi6F4PMFwSUVE3ikHZmkp23mb0
R47l1O7x0yc0Q1r3agUmFZ5c53VNVNe2zOQXrKrqjZL/Jk55VEa/8r3QOoUnZ5zo
UYAbKEC3x1EQC7z/sFUBl7fzMsHQPKV9BX5whgKfZYjuXntF28CrFxi/TfyQiKaL
EFVnZGnp3K71xw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 10:45:13 2025 by rpki-client