Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.mft
File: 4-oU0TQ7mSUGvubD2Q4ZppeYsBg.mft (raw, json)
Hash identifier: hQd/tWtIOveFVj/41KOua8eY5WXwRryvMUifbgUXPZs=
Subject key identifier: DD:2A:7B:4B:00:4A:58:01:4A:9F:94:B0:35:AB:EA:E5:B2:96:10:47
Authority key identifier: E3:EA:14:D1:34:3B:99:25:06:BE:E6:C3:D9:0E:19:A6:97:98:B0:18
Certificate issuer: /CN=e3ea14d1343b992506bee6c3d90e19a69798b018
Certificate serial: 01968435E1913D3C627B5A7A3F64F5240C7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.mft
Manifest number: 0E55
Signing time: Wed 30 Apr 2025 01:00:45 +0000
Manifest this update: Wed 30 Apr 2025 01:00:45 +0000
Manifest next update: Thu 01 May 2025 01:00:45 +0000
Files and hashes: 1: 4-oU0TQ7mSUGvubD2Q4ZppeYsBg.crl (hash: qbf/ZEoecNdiuBaCCDRsHiaaDju6vWPHvzym3oiAp6A=)
2: GLpHbmgk_HKZm99_6XW1zFhPnQ0.roa (hash: L9ftFB4BS92bIq/ClzkGPs+4wSqKQ5UFQA3ipP2ayPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:35:e1:91:3d:3c:62:7b:5a:7a:3f:64:f5:24:0c:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3ea14d1343b992506bee6c3d90e19a69798b018
Validity
Not Before: Apr 30 01:00:45 2025 GMT
Not After : May 1 01:00:45 2025 GMT
Subject: CN=dd2a7b4b004a58014a9f94b035abeae5b2961047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7b:09:18:4f:45:15:a7:a7:b9:d4:a6:c9:21:
4e:cd:79:af:11:79:5b:76:6b:92:80:48:ea:df:5c:
56:df:da:84:38:e1:a9:0d:0c:77:43:2a:eb:05:4e:
bb:1f:24:c0:2f:8e:a3:eb:12:89:3f:d4:e8:16:a5:
48:f6:90:99:b3:ac:12:73:4d:76:95:fe:6c:8e:77:
5b:9c:bd:d4:a4:d6:1f:b2:45:b4:8b:c0:eb:8f:4c:
a5:c6:62:4f:25:35:cb:e8:ec:2f:d5:59:f7:77:d4:
5b:08:f5:24:df:4e:a5:e9:32:a1:45:56:e9:2b:b4:
e1:64:dc:e4:32:8e:1a:e7:af:56:34:78:55:fa:70:
00:45:21:6e:21:57:3e:bc:a6:78:6f:60:1d:34:08:
ce:c4:ad:6f:7d:f2:e0:34:10:d2:20:38:0c:59:48:
aa:92:1b:d5:7a:c7:04:44:5e:5a:5f:90:3b:bd:e1:
87:16:98:7d:a8:71:49:00:02:40:7e:00:87:fd:b6:
3a:27:e8:81:a6:12:6b:9e:59:c5:92:d9:8e:90:f4:
8b:1b:c9:37:c2:eb:14:ab:b4:f8:9c:ea:ec:69:23:
ee:00:cf:ce:27:f1:02:d5:91:e5:2b:29:7e:4e:bf:
68:85:45:57:b4:1b:9d:cc:f5:18:5d:25:85:68:a9:
f4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:2A:7B:4B:00:4A:58:01:4A:9F:94:B0:35:AB:EA:E5:B2:96:10:47
X509v3 Authority Key Identifier:
keyid:E3:EA:14:D1:34:3B:99:25:06:BE:E6:C3:D9:0E:19:A6:97:98:B0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:56:5e:00:6b:dd:94:71:d5:5d:b1:ec:73:ee:2c:e8:ae:f2:
d6:fb:3e:36:d3:90:12:47:7b:f6:60:ce:f3:9d:62:5d:f1:43:
f3:f7:55:bf:bf:07:e7:8f:36:93:66:ba:d6:31:14:4b:ba:54:
b6:6a:8f:10:33:11:72:21:8c:bf:df:96:92:07:a2:00:66:60:
b2:c8:e8:8f:c0:86:a9:31:4b:4a:ab:cf:e3:b2:b0:cf:06:fb:
bd:cb:b4:5a:48:bc:5e:22:3d:97:5a:d3:30:d2:68:72:72:4b:
26:f1:03:04:38:e9:d9:f2:0a:40:2f:51:d5:9c:66:74:dc:dd:
42:b1:fe:2b:5b:f5:e2:66:a6:94:23:e0:24:fb:93:69:1d:54:
7e:6c:c6:61:5f:1e:07:98:43:f8:94:f7:95:6a:be:18:0b:d0:
2f:8a:e3:d5:e9:4e:f3:9a:5c:65:20:0a:f3:6f:f6:d1:20:82:
6f:55:a9:44:2b:f5:ab:58:53:21:75:43:1e:f9:a7:53:36:d5:
ec:d8:07:e2:38:f9:c5:62:ec:1c:f5:ab:0f:49:da:81:90:85:
75:ff:6c:10:a1:0b:4b:28:fb:9b:48:15:34:4e:67:50:28:27:
64:07:17:a2:99:92:f8:48:00:2c:b1:bb:c6:8e:97:b2:31:2b:
2e:6f:bc:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaENeGRPTxie1p6P2T1JAx9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZWExNGQxMzQzYjk5MjUwNmJlZTZjM2Q5MGUxOWE2OTc5
OGIwMTgwHhcNMjUwNDMwMDEwMDQ1WhcNMjUwNTAxMDEwMDQ1WjAzMTEwLwYDVQQD
EyhkZDJhN2I0YjAwNGE1ODAxNGE5Zjk0YjAzNWFiZWFlNWIyOTYxMDQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3sJGE9FFaenudSmySFOzXmvEXlb
dmuSgEjq31xW39qEOOGpDQx3QyrrBU67HyTAL46j6xKJP9ToFqVI9pCZs6wSc012
lf5sjndbnL3UpNYfskW0i8Drj0ylxmJPJTXL6Owv1Vn3d9RbCPUk306l6TKhRVbp
K7ThZNzkMo4a569WNHhV+nAARSFuIVc+vKZ4b2AdNAjOxK1vffLgNBDSIDgMWUiq
khvVescERF5aX5A7veGHFph9qHFJAAJAfgCH/bY6J+iBphJrnlnFktmOkPSLG8k3
wusUq7T4nOrsaSPuAM/OJ/EC1ZHlKyl+Tr9ohUVXtBudzPUYXSWFaKn0EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN0qe0sASlgBSp+UsDWr6uWylhBHMB8GA1UdIwQY
MBaAFOPqFNE0O5klBr7mw9kOGaaXmLAYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNC1vVTBUUTdtU1VHdnViRDJRNFpwcGVZc0JnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85NzE1NTgtZWQ2Ni00YjgzLThmYTQt
ZDRhNGYzNDcxN2YwLzEvNC1vVTBUUTdtU1VHdnViRDJRNFpwcGVZc0JnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni85NzE1NTgtZWQ2Ni00YjgzLThmYTQtZDRhNGYzNDcxN2Yw
LzEvNC1vVTBUUTdtU1VHdnViRDJRNFpwcGVZc0JnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAplZeAGvd
lHHVXbHsc+4s6K7y1vs+NtOQEkd79mDO851iXfFD8/dVv78H5482k2a61jEUS7pU
tmqPEDMRciGMv9+WkgeiAGZgssjoj8CGqTFLSqvP47Kwzwb7vcu0Wki8XiI9l1rT
MNJocnJLJvEDBDjp2fIKQC9R1ZxmdNzdQrH+K1v14mamlCPgJPuTaR1UfmzGYV8e
B5hD+JT3lWq+GAvQL4rj1elO85pcZSAK82/20SCCb1WpRCv1q1hTIXVDHvmnUzbV
7NgH4jj5xWLsHPWrD0nagZCFdf9sEKELSyj7m0gVNE5nUCgnZAcXopmS+EgALLG7
xo6XsjErLm+8hA==
-----END CERTIFICATE-----
Generated at Wed Apr 30 05:50:45 2025 by rpki-client