Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.mft
File: 4Zd4WdBx9xUIN7KstDU_8z79gxw.mft (raw, json)
Hash identifier: s2a/uI9uSOAhWkroQhaWNT+StB2IDiZ3ga7U2fV6zIk=
Subject key identifier: CB:10:C8:2B:E5:7E:A9:19:F9:F6:4D:AE:58:F4:6A:54:15:1B:A4:92
Authority key identifier: E1:97:78:59:D0:71:F7:15:08:37:B2:AC:B4:35:3F:F3:3E:FD:83:1C
Certificate issuer: /CN=e1977859d071f7150837b2acb4353ff33efd831c
Certificate serial: 01967B69CF3C888BC2AAAA2C951FA97BA65C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Zd4WdBx9xUIN7KstDU_8z79gxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.mft
Manifest number: 12E2
Signing time: Mon 28 Apr 2025 08:00:54 +0000
Manifest this update: Mon 28 Apr 2025 08:00:54 +0000
Manifest next update: Tue 29 Apr 2025 08:00:54 +0000
Files and hashes: 1: 4Zd4WdBx9xUIN7KstDU_8z79gxw.crl (hash: p09Vcz5k3lRCgFgqAZ/mxtET4upIaewNHjanyJz4nCQ=)
2: yF44GfEIvZjG1b-fqxz7IcsVaik.roa (hash: Nr6aX1S4xhUfVJHe+PzjETZYUXFy6RKCIH4m44as1jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Zd4WdBx9xUIN7KstDU_8z79gxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:69:cf:3c:88:8b:c2:aa:aa:2c:95:1f:a9:7b:a6:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1977859d071f7150837b2acb4353ff33efd831c
Validity
Not Before: Apr 28 08:00:54 2025 GMT
Not After : Apr 29 08:00:54 2025 GMT
Subject: CN=cb10c82be57ea919f9f64dae58f46a54151ba492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e4:a5:83:77:de:39:92:85:1c:37:a0:65:12:
79:b3:62:6b:e1:43:78:59:13:65:a2:76:2b:24:f2:
51:dc:04:c6:af:1e:1b:2b:1e:8d:6e:db:80:b4:24:
c7:d4:26:a8:a8:ad:55:07:5f:cd:95:9a:1e:68:91:
54:5c:19:06:6a:4d:bb:12:f0:57:45:ac:3f:2f:7c:
7a:a6:b2:c5:f1:cb:ce:50:31:d8:c8:d8:3b:af:04:
73:ab:7a:2f:51:b6:fb:b4:87:76:ee:b7:27:86:b3:
20:60:94:27:12:0e:53:54:66:8c:9e:0a:eb:c6:21:
61:3d:00:87:2e:a1:22:3a:30:ef:3c:23:37:e8:86:
7b:58:fd:f8:c0:8c:1e:80:2f:cb:38:86:d8:49:52:
91:94:a8:6c:11:96:e9:95:79:27:a5:32:d9:9f:6a:
5f:2d:82:f1:02:c8:58:cd:a1:49:46:c3:31:ee:9a:
d1:10:0e:8a:c8:bc:52:9e:45:99:79:42:b7:83:d8:
ea:c4:6f:d2:9d:c4:64:85:13:99:d7:44:dd:f6:e4:
83:ce:cd:e8:dc:49:ce:c3:6d:da:b0:0f:de:e0:03:
94:14:72:dc:09:27:cb:8c:15:fc:7f:a4:d0:c3:7a:
ff:b0:47:b1:cf:ae:44:cb:7b:7e:42:af:e3:9a:6a:
82:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:10:C8:2B:E5:7E:A9:19:F9:F6:4D:AE:58:F4:6A:54:15:1B:A4:92
X509v3 Authority Key Identifier:
keyid:E1:97:78:59:D0:71:F7:15:08:37:B2:AC:B4:35:3F:F3:3E:FD:83:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Zd4WdBx9xUIN7KstDU_8z79gxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:6b:97:02:1a:cd:fa:79:b5:6f:b5:8c:fe:5b:ee:cd:21:84:
35:88:f7:a4:20:f2:d7:e4:e9:1b:30:7f:0f:6b:0c:94:07:47:
81:e2:59:a7:b7:ea:f5:af:b3:77:08:02:88:af:40:eb:8a:c5:
84:36:8a:94:f4:fc:d9:61:ce:41:4b:76:2b:da:30:12:1a:df:
2c:dd:b1:90:75:bb:ca:db:d7:3d:6a:ba:4e:49:5c:ef:8d:de:
ad:6f:ce:d9:fd:08:7d:20:e4:48:f4:9a:f9:ed:21:f8:7e:8e:
02:15:fa:52:91:99:20:17:8b:9b:e5:a0:59:cd:aa:59:7d:93:
3b:1d:0f:1a:cc:c0:8f:11:9f:0f:6d:73:f8:88:8d:83:94:87:
02:fa:ca:6c:b8:91:e1:4a:8a:bc:c9:bd:ef:09:04:66:25:57:
cd:b2:b4:3c:3f:dc:13:f1:0b:0a:a3:bf:d1:31:2d:17:94:a7:
0f:b3:6c:8c:8d:0c:5b:01:bf:01:3d:5b:e8:39:38:51:74:99:
e3:90:35:40:77:17:7c:ae:3d:3d:f0:ff:1a:2f:67:51:d7:37:
8c:ed:5c:97:56:67:b5:e7:b1:f3:ff:59:39:8d:eb:cf:b0:1b:
c9:95:d7:f8:e3:b5:ba:ee:1c:90:a1:fa:7e:d1:41:97:74:36:
66:82:66:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ7ac88iIvCqqoslR+pe6ZcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxOTc3ODU5ZDA3MWY3MTUwODM3YjJhY2I0MzUzZmYzM2Vm
ZDgzMWMwHhcNMjUwNDI4MDgwMDU0WhcNMjUwNDI5MDgwMDU0WjAzMTEwLwYDVQQD
EyhjYjEwYzgyYmU1N2VhOTE5ZjlmNjRkYWU1OGY0NmE1NDE1MWJhNDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOSlg3feOZKFHDegZRJ5s2Jr4UN4
WRNlonYrJPJR3ATGrx4bKx6NbtuAtCTH1CaoqK1VB1/NlZoeaJFUXBkGak27EvBX
Raw/L3x6prLF8cvOUDHYyNg7rwRzq3ovUbb7tId27rcnhrMgYJQnEg5TVGaMngrr
xiFhPQCHLqEiOjDvPCM36IZ7WP34wIwegC/LOIbYSVKRlKhsEZbplXknpTLZn2pf
LYLxAshYzaFJRsMx7prREA6KyLxSnkWZeUK3g9jqxG/SncRkhROZ10Td9uSDzs3o
3EnOw23asA/e4AOUFHLcCSfLjBX8f6TQw3r/sEexz65Ey3t+Qq/jmmqC5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMsQyCvlfqkZ+fZNrlj0alQVG6SSMB8GA1UdIwQY
MBaAFOGXeFnQcfcVCDeyrLQ1P/M+/YMcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFpkNFdkQng5eFVJTjdLc3REVV84ejc5Z3h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85ZDdjZDctZWU2My00ODg2LThmZTEt
YjVjZTZiNmZkNGQxLzEvNFpkNFdkQng5eFVJTjdLc3REVV84ejc5Z3h3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni85ZDdjZDctZWU2My00ODg2LThmZTEtYjVjZTZiNmZkNGQx
LzEvNFpkNFdkQng5eFVJTjdLc3REVV84ejc5Z3h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHGuXAhrN
+nm1b7WM/lvuzSGENYj3pCDy1+TpGzB/D2sMlAdHgeJZp7fq9a+zdwgCiK9A64rF
hDaKlPT82WHOQUt2K9owEhrfLN2xkHW7ytvXPWq6Tklc743erW/O2f0IfSDkSPSa
+e0h+H6OAhX6UpGZIBeLm+WgWc2qWX2TOx0PGszAjxGfD21z+IiNg5SHAvrKbLiR
4UqKvMm97wkEZiVXzbK0PD/cE/ELCqO/0TEtF5SnD7NsjI0MWwG/AT1b6Dk4UXSZ
45A1QHcXfK49PfD/Gi9nUdc3jO1cl1Znteex8/9ZOY3rz7AbyZXX+OO1uu4ckKH6
ftFBl3Q2ZoJmZw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 10:51:24 2025 by rpki-client