Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.mft
File: 4K-xYKlzOKshEUhArdxhgKW6QrE.mft (raw, json)
Hash identifier: cZqBfcPvwxLFqIJwfWimPx2ZnugaTvp+9h8N8V3oXDE=
Subject key identifier: 28:05:6B:FB:55:D5:64:49:3D:F4:57:F7:AD:8D:C7:40:8C:3D:0B:4F
Authority key identifier: E0:AF:B1:60:A9:73:38:AB:21:11:48:40:AD:DC:61:80:A5:BA:42:B1
Certificate issuer: /CN=e0afb160a97338ab21114840addc6180a5ba42b1
Certificate serial: 01968A6F0C374C7F80864FA678F007405E63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4K-xYKlzOKshEUhArdxhgKW6QrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.mft
Manifest number: 11EE
Signing time: Thu 01 May 2025 06:00:55 +0000
Manifest this update: Thu 01 May 2025 06:00:55 +0000
Manifest next update: Fri 02 May 2025 06:00:55 +0000
Files and hashes: 1: 4K-xYKlzOKshEUhArdxhgKW6QrE.crl (hash: x+pqICsAODUUel/S3+lXHC1u9ANb4t/6tV4Ur64XqqM=)
2: Gwy6_uUvgZKl_FsgbK0SBR2765s.roa (hash: e+42Dv5ZMct1RmCP3DiJKtyiBUgVYfDjN9qagjZj7ck=)
3: RoGLSCET83zk1v-3GNDAGUmNCf4.roa (hash: TK8/4ls6e1537IxcrmPC8DEH8k32Or5yu+pxFNpz4Eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4K-xYKlzOKshEUhArdxhgKW6QrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 06:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:6f:0c:37:4c:7f:80:86:4f:a6:78:f0:07:40:5e:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0afb160a97338ab21114840addc6180a5ba42b1
Validity
Not Before: May 1 06:00:55 2025 GMT
Not After : May 2 06:00:55 2025 GMT
Subject: CN=28056bfb55d564493df457f7ad8dc7408c3d0b4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:19:fc:60:91:ab:a6:10:63:24:e3:ab:cc:55:
c6:40:bb:23:9a:47:20:b1:a5:a9:f0:fa:37:d5:c2:
46:ce:df:66:25:7a:1b:24:8e:d8:69:70:bc:17:c7:
94:12:55:fe:eb:f2:43:b9:cf:00:58:3e:76:71:8a:
40:47:c2:d0:64:28:45:b2:40:0b:8e:13:50:b1:0d:
38:ae:0e:b2:07:95:93:7c:ac:d8:1a:a6:11:99:34:
e5:e5:45:f7:0d:18:ed:d7:39:e1:5f:72:2f:da:40:
58:06:58:bc:da:fd:21:7e:33:1d:52:d5:2e:e2:9e:
16:54:61:1b:f8:4b:4f:12:b8:2e:28:8d:a3:47:8d:
c8:4c:75:1e:e4:f0:18:6d:10:dc:f8:b6:d3:95:3b:
37:17:97:84:4a:2c:e0:36:c7:bd:46:55:81:22:48:
b4:b3:27:b9:14:7f:2d:01:33:84:ff:a5:b1:46:fc:
7f:6b:ac:43:b8:35:34:69:61:bf:27:2c:85:73:98:
7f:18:da:9a:52:5e:f1:da:9e:9e:2f:3e:7c:3d:a6:
c0:19:31:d8:e2:1b:0e:af:fd:d8:fa:90:3c:be:7f:
e5:b5:60:d7:15:db:97:a4:d9:21:b4:4c:f5:18:78:
f6:7b:73:8a:70:3c:32:68:41:1d:b4:02:d5:3d:03:
ba:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:05:6B:FB:55:D5:64:49:3D:F4:57:F7:AD:8D:C7:40:8C:3D:0B:4F
X509v3 Authority Key Identifier:
keyid:E0:AF:B1:60:A9:73:38:AB:21:11:48:40:AD:DC:61:80:A5:BA:42:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4K-xYKlzOKshEUhArdxhgKW6QrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:a4:08:af:65:6c:90:81:b7:33:48:7b:cb:8e:17:a2:db:c5:
0a:bc:e3:05:86:14:11:e0:fc:4d:b3:0f:94:7c:62:fb:2e:ab:
c0:3c:96:bc:1c:2f:9f:e6:73:46:9f:2a:db:21:cb:22:af:9a:
ca:4e:1b:11:5c:fa:97:49:d6:66:69:65:f3:68:0a:cc:04:1b:
95:0a:19:42:93:11:96:cd:db:a9:b6:9d:da:5e:a9:8b:e8:51:
d0:96:02:6a:91:4b:ca:43:09:7c:65:0a:8e:d2:7c:b5:dd:ab:
12:04:25:91:94:f1:72:e6:ad:b8:b8:37:36:1a:4c:b2:10:d2:
bc:bf:ba:5d:44:4e:01:b8:f1:63:d6:ad:1c:2b:06:f3:7a:67:
fb:8a:54:ed:74:0a:e8:a8:0a:32:bc:f5:a8:94:fc:2d:6a:e9:
bf:80:0c:ec:f8:59:04:48:97:ba:15:bf:86:45:9f:95:e7:7f:
33:bc:9c:b4:1e:81:7c:f6:c0:0c:22:35:84:37:90:b1:42:e4:
35:40:65:9b:83:94:ee:39:00:a9:9d:ec:a1:c1:79:e9:a8:0d:
b0:87:45:34:ea:e6:7d:29:53:89:29:67:a0:c3:3d:38:3b:80:
2d:8e:a3:c2:32:e9:88:0b:dd:4e:95:6e:0f:07:60:ce:5c:75:
14:5d:0d:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaKbww3TH+Ahk+mePAHQF5jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwYWZiMTYwYTk3MzM4YWIyMTExNDg0MGFkZGM2MTgwYTVi
YTQyYjEwHhcNMjUwNTAxMDYwMDU1WhcNMjUwNTAyMDYwMDU1WjAzMTEwLwYDVQQD
EygyODA1NmJmYjU1ZDU2NDQ5M2RmNDU3ZjdhZDhkYzc0MDhjM2QwYjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hn8YJGrphBjJOOrzFXGQLsjmkcg
saWp8Po31cJGzt9mJXobJI7YaXC8F8eUElX+6/JDuc8AWD52cYpAR8LQZChFskAL
jhNQsQ04rg6yB5WTfKzYGqYRmTTl5UX3DRjt1znhX3Iv2kBYBli82v0hfjMdUtUu
4p4WVGEb+EtPErguKI2jR43ITHUe5PAYbRDc+LbTlTs3F5eESizgNse9RlWBIki0
sye5FH8tATOE/6WxRvx/a6xDuDU0aWG/JyyFc5h/GNqaUl7x2p6eLz58PabAGTHY
4hsOr/3Y+pA8vn/ltWDXFduXpNkhtEz1GHj2e3OKcDwyaEEdtALVPQO6JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCgFa/tV1WRJPfRX962Nx0CMPQtPMB8GA1UdIwQY
MBaAFOCvsWCpczirIRFIQK3cYYClukKxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEsteFlLbHpPS3NoRVVoQXJkeGhnS1c2UXJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi80NjYxMTktODczZi00Y2ZkLTkxYTYt
YjFlMzEzZDc5ODkzLzEvNEsteFlLbHpPS3NoRVVoQXJkeGhnS1c2UXJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi80NjYxMTktODczZi00Y2ZkLTkxYTYtYjFlMzEzZDc5ODkz
LzEvNEsteFlLbHpPS3NoRVVoQXJkeGhnS1c2UXJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIqQIr2Vs
kIG3M0h7y44XotvFCrzjBYYUEeD8TbMPlHxi+y6rwDyWvBwvn+ZzRp8q2yHLIq+a
yk4bEVz6l0nWZmll82gKzAQblQoZQpMRls3bqbad2l6pi+hR0JYCapFLykMJfGUK
jtJ8td2rEgQlkZTxcuatuLg3NhpMshDSvL+6XUROAbjxY9atHCsG83pn+4pU7XQK
6KgKMrz1qJT8LWrpv4AM7PhZBEiXuhW/hkWfled/M7yctB6BfPbADCI1hDeQsULk
NUBlm4OU7jkAqZ3socF56agNsIdFNOrmfSlTiSlnoMM9ODuALY6jwjLpiAvdTpVu
Dwdgzlx1FF0NMg==
-----END CERTIFICATE-----
Generated at Thu May 1 09:40:37 2025 by rpki-client