Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.mft
File: 4IEr3duyOb5jncddzS4pbE_PSpc.mft (raw, json)
Hash identifier: tq1kXoe/cpWVe83/GykjoxQgJ6825TzTzi1gDqe8MfA=
Subject key identifier: 5D:54:7E:17:5E:0C:23:D1:69:7E:A4:F9:E1:4F:5D:D2:86:BF:64:41
Authority key identifier: E0:81:2B:DD:DB:B2:39:BE:63:9D:C7:5D:CD:2E:29:6C:4F:CF:4A:97
Certificate issuer: /CN=e0812bdddbb239be639dc75dcd2e296c4fcf4a97
Certificate serial: 0196824716BDBCCFD67C1B395F045098115C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IEr3duyOb5jncddzS4pbE_PSpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.mft
Manifest number: 119B
Signing time: Tue 29 Apr 2025 16:00:18 +0000
Manifest this update: Tue 29 Apr 2025 16:00:18 +0000
Manifest next update: Wed 30 Apr 2025 16:00:18 +0000
Files and hashes: 1: 4IEr3duyOb5jncddzS4pbE_PSpc.crl (hash: JfxiQha8hEWo7+ta9jcqn13hH/zl4dJ0OV77iApPCb8=)
2: el5qFDMV5hMW1NAGRbmjGI68Zeg.roa (hash: u+tO/pc49AyT7XnqsS0vc/mFjJM4zzaHLzr71ZyNaRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4IEr3duyOb5jncddzS4pbE_PSpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 16:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:47:16:bd:bc:cf:d6:7c:1b:39:5f:04:50:98:11:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0812bdddbb239be639dc75dcd2e296c4fcf4a97
Validity
Not Before: Apr 29 16:00:18 2025 GMT
Not After : Apr 30 16:00:18 2025 GMT
Subject: CN=5d547e175e0c23d1697ea4f9e14f5dd286bf6441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:3e:9c:6a:48:d0:ae:2b:d1:69:d0:55:f9:16:
e4:c1:bd:a5:4f:e2:9c:5f:24:88:74:dd:ec:0f:17:
73:c7:d4:5d:b9:75:ad:a9:d1:6b:3f:47:29:95:1f:
36:27:8b:80:b6:14:d7:39:84:d6:f3:cb:7f:2e:95:
dc:4c:88:28:c9:d8:7d:8a:aa:d4:f9:b2:2e:6a:5f:
37:64:33:fd:4b:4b:66:35:ac:a6:4c:7f:ec:7d:cf:
1f:0b:e1:06:b6:19:42:7e:a7:4e:ca:b3:81:56:97:
7e:c0:07:9a:fc:f0:05:29:63:56:70:e6:03:90:9b:
2b:79:33:2c:72:1a:60:33:fe:56:0d:3e:a8:2a:bc:
78:86:fb:e7:c2:32:d5:1a:45:0a:f0:de:b3:1a:7e:
27:a5:36:df:ab:f2:56:73:71:8d:63:a0:2c:b5:01:
2a:f4:6c:4b:0b:f6:49:f0:d3:a8:3f:99:a4:82:a0:
6f:a7:3b:f9:6e:40:87:78:4e:fd:68:4f:27:b8:b4:
aa:25:c3:1f:b3:bf:ae:24:dc:1d:b0:c1:27:da:cc:
00:9c:1f:c3:a3:d1:14:e8:20:8b:30:13:e3:4a:17:
c8:33:db:12:b9:8b:fe:d8:ff:4b:77:9b:c4:38:a8:
43:f2:44:4f:b6:02:4b:01:fd:67:96:5a:0f:ed:0d:
cd:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:54:7E:17:5E:0C:23:D1:69:7E:A4:F9:E1:4F:5D:D2:86:BF:64:41
X509v3 Authority Key Identifier:
keyid:E0:81:2B:DD:DB:B2:39:BE:63:9D:C7:5D:CD:2E:29:6C:4F:CF:4A:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IEr3duyOb5jncddzS4pbE_PSpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:c7:f2:7e:09:16:4f:ce:57:c7:25:21:a8:6c:0c:77:da:31:
89:8d:5d:f6:cd:df:fa:31:7f:ef:76:6b:8a:60:e7:b3:90:62:
85:51:5e:38:25:35:47:7a:68:cd:a1:ee:11:a5:bb:11:a1:3c:
f0:91:6a:66:54:83:67:e4:d0:56:d8:4c:6c:23:49:bb:24:0f:
15:d2:37:3b:76:56:5a:1f:f4:07:e3:57:19:23:e3:45:ec:29:
fa:ad:42:e7:70:9d:9e:0f:40:b6:d3:fb:4b:69:22:d7:07:2e:
5b:57:2b:f0:18:30:ba:2f:88:07:b8:7f:c2:f3:5b:9c:e8:e0:
38:06:13:23:f4:26:c3:f1:ab:c6:e5:cc:f5:36:92:ec:f5:7c:
c5:44:25:c2:81:dd:09:df:6f:d3:a6:29:48:17:8b:71:23:76:
3d:51:d4:93:58:28:06:35:3f:4a:3c:b1:19:75:64:24:de:63:
ed:38:f0:f2:3d:e7:98:4e:b2:77:f6:43:6a:ae:fe:8a:d3:65:
07:44:4c:e2:ef:2a:6a:c7:b3:c0:bf:59:bf:84:1e:e6:da:8c:
89:50:6a:be:b7:05:a2:94:b1:06:c3:65:8d:78:b3:30:c1:26:
88:af:75:04:31:6a:65:86:9b:6d:1f:37:ac:c6:73:29:63:93:
63:e2:8d:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaCRxa9vM/WfBs5XwRQmBFcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwODEyYmRkZGJiMjM5YmU2MzlkYzc1ZGNkMmUyOTZjNGZj
ZjRhOTcwHhcNMjUwNDI5MTYwMDE4WhcNMjUwNDMwMTYwMDE4WjAzMTEwLwYDVQQD
Eyg1ZDU0N2UxNzVlMGMyM2QxNjk3ZWE0ZjllMTRmNWRkMjg2YmY2NDQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7T6cakjQrivRadBV+Rbkwb2lT+Kc
XySIdN3sDxdzx9RduXWtqdFrP0cplR82J4uAthTXOYTW88t/LpXcTIgoydh9iqrU
+bIual83ZDP9S0tmNaymTH/sfc8fC+EGthlCfqdOyrOBVpd+wAea/PAFKWNWcOYD
kJsreTMschpgM/5WDT6oKrx4hvvnwjLVGkUK8N6zGn4npTbfq/JWc3GNY6AstQEq
9GxLC/ZJ8NOoP5mkgqBvpzv5bkCHeE79aE8nuLSqJcMfs7+uJNwdsMEn2swAnB/D
o9EU6CCLMBPjShfIM9sSuYv+2P9Ld5vEOKhD8kRPtgJLAf1nlloP7Q3NfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF1UfhdeDCPRaX6k+eFPXdKGv2RBMB8GA1UdIwQY
MBaAFOCBK93bsjm+Y53HXc0uKWxPz0qXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNElFcjNkdXlPYjVqbmNkZHpTNHBiRV9QU3BjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8xZjY4YTgtNDlkZC00MTJiLWJiYTkt
MGJmNTM5YjNiNzE0LzEvNElFcjNkdXlPYjVqbmNkZHpTNHBiRV9QU3BjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8xZjY4YTgtNDlkZC00MTJiLWJiYTktMGJmNTM5YjNiNzE0
LzEvNElFcjNkdXlPYjVqbmNkZHpTNHBiRV9QU3BjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg8fyfgkW
T85XxyUhqGwMd9oxiY1d9s3f+jF/73ZrimDns5BihVFeOCU1R3pozaHuEaW7EaE8
8JFqZlSDZ+TQVthMbCNJuyQPFdI3O3ZWWh/0B+NXGSPjRewp+q1C53Cdng9AttP7
S2ki1wcuW1cr8Bgwui+IB7h/wvNbnOjgOAYTI/Qmw/GrxuXM9TaS7PV8xUQlwoHd
Cd9v06YpSBeLcSN2PVHUk1goBjU/SjyxGXVkJN5j7Tjw8j3nmE6yd/ZDaq7+itNl
B0RM4u8qasezwL9Zv4Qe5tqMiVBqvrcFopSxBsNljXizMMEmiK91BDFqZYabbR83
rMZzKWOTY+KNgQ==
-----END CERTIFICATE-----
Generated at Wed Apr 30 02:49:02 2025 by rpki-client