Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/de37fa-1bd2-47f5-9e2b-ac4c8f19876d/1/4TcnopRRvk3Zkitg0cWW6Aaplfs.mft
File: 4TcnopRRvk3Zkitg0cWW6Aaplfs.mft (raw, json)
Hash identifier: IrZ6N3PcRcHV4fA+m5qp3WhcWzuW7rFtMrz6QMmds/M=
Subject key identifier: AC:E6:C4:90:C5:68:79:0E:A4:2F:15:FB:AB:AA:2A:B5:80:A2:B9:D3
Authority key identifier: E1:37:27:A2:94:51:BE:4D:D9:92:2B:60:D1:C5:96:E8:06:A9:95:FB
Certificate issuer: /CN=e13727a29451be4dd9922b60d1c596e806a995fb
Certificate serial: 019677FABFBBF4B0C1F2C46A20D294EC3E39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4TcnopRRvk3Zkitg0cWW6Aaplfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/de37fa-1bd2-47f5-9e2b-ac4c8f19876d/1/4TcnopRRvk3Zkitg0cWW6Aaplfs.mft
Manifest number: 150C
Signing time: Sun 27 Apr 2025 16:00:43 +0000
Manifest this update: Sun 27 Apr 2025 16:00:43 +0000
Manifest next update: Mon 28 Apr 2025 16:00:43 +0000
Files and hashes: 1: 4TcnopRRvk3Zkitg0cWW6Aaplfs.crl (hash: pGXfmM+nzzDJt7tFQ/RXsWilxz1zJZAF22sMHTELYpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/de37fa-1bd2-47f5-9e2b-ac4c8f19876d/1/4TcnopRRvk3Zkitg0cWW6Aaplfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/de37fa-1bd2-47f5-9e2b-ac4c8f19876d/1/4TcnopRRvk3Zkitg0cWW6Aaplfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/4TcnopRRvk3Zkitg0cWW6Aaplfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fa:bf:bb:f4:b0:c1:f2:c4:6a:20:d2:94:ec:3e:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e13727a29451be4dd9922b60d1c596e806a995fb
Validity
Not Before: Apr 27 16:00:43 2025 GMT
Not After : Apr 28 16:00:43 2025 GMT
Subject: CN=ace6c490c568790ea42f15fbabaa2ab580a2b9d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bc:d2:98:56:0c:d9:87:19:ee:e7:42:31:3b:
22:14:f3:d1:3f:65:f8:23:3f:a1:58:33:b3:c8:2d:
fe:5e:de:81:4b:cd:17:36:45:86:dd:5e:59:68:bc:
e1:b4:d1:40:70:8a:6e:a7:38:cf:1f:27:51:41:16:
46:a6:56:2c:e3:92:b0:c5:ae:60:85:e2:c5:c7:8b:
41:7b:01:4f:d5:3a:5e:39:15:0f:17:5d:5d:87:10:
46:d8:47:74:d6:b7:c4:bb:dc:0a:10:04:e6:c2:7d:
2a:55:d0:fb:b7:a8:91:7d:7d:77:d1:39:ef:b3:0b:
f3:7d:88:80:c1:2d:56:b3:fe:59:18:23:a0:19:39:
6c:40:b7:13:91:23:e9:09:56:a5:3d:67:43:fa:e7:
46:e9:01:da:e0:b9:a5:40:a4:27:5d:b3:0f:8b:9a:
61:87:50:a0:16:b9:60:de:b9:6b:4e:97:d0:d3:7a:
a8:ad:a2:f4:35:f8:e9:c9:be:4a:26:03:4a:37:fd:
2c:43:0c:66:84:34:35:1d:7b:2b:fe:60:cc:78:5c:
8f:77:0b:b4:71:e8:83:b4:48:73:d5:f7:01:f8:29:
87:13:5a:3e:a5:e1:89:33:a9:7a:f6:34:c9:ab:a5:
43:6f:8b:8a:37:b8:67:cf:a0:f7:f5:5e:75:6d:80:
57:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E6:C4:90:C5:68:79:0E:A4:2F:15:FB:AB:AA:2A:B5:80:A2:B9:D3
X509v3 Authority Key Identifier:
keyid:E1:37:27:A2:94:51:BE:4D:D9:92:2B:60:D1:C5:96:E8:06:A9:95:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TcnopRRvk3Zkitg0cWW6Aaplfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/de37fa-1bd2-47f5-9e2b-ac4c8f19876d/1/4TcnopRRvk3Zkitg0cWW6Aaplfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/de37fa-1bd2-47f5-9e2b-ac4c8f19876d/1/4TcnopRRvk3Zkitg0cWW6Aaplfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:8f:bd:0a:a7:f9:41:dc:a5:d7:da:a5:55:14:fe:94:5b:b2:
55:12:22:98:1e:90:c9:39:d5:ec:8f:c9:d1:79:75:31:81:75:
f3:3a:6e:af:76:97:c0:da:ce:96:75:62:56:02:cc:ad:9a:b4:
0b:0e:f3:5d:fa:fd:19:67:47:3f:92:51:03:b1:c6:a2:7f:3c:
68:40:2a:fc:44:ff:2b:69:2e:4f:05:98:59:ce:d5:a6:96:73:
7f:07:cb:65:4b:3f:0e:6d:30:b3:cd:67:b0:45:e6:79:ae:b1:
ca:c4:54:a7:ec:2f:84:2f:8f:46:1e:63:6e:96:c5:e9:d1:8e:
0b:a1:e3:a7:53:27:89:e3:6a:2d:ad:3d:41:99:2d:d7:56:23:
e1:70:0f:07:ee:6b:81:db:a2:8a:a7:21:8d:30:90:54:7c:f1:
d6:f9:4f:24:d0:33:1e:b6:c1:54:72:1f:c0:a8:b9:0d:17:04:
fa:ea:d5:45:57:00:7a:b6:09:91:ed:f1:30:d9:7c:46:7d:ea:
e4:4f:00:9b:08:51:b4:ee:00:d3:fd:de:fb:e6:d7:a2:15:ec:
b0:29:7e:df:31:8c:3c:cc:73:51:89:c4:81:61:c3:48:e1:eb:
21:f7:73:d1:96:a2:52:bc:67:a8:0b:ec:dd:f2:bd:c5:0e:22:
71:03:8d:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3+r+79LDB8sRqINKU7D45MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMzcyN2EyOTQ1MWJlNGRkOTkyMmI2MGQxYzU5NmU4MDZh
OTk1ZmIwHhcNMjUwNDI3MTYwMDQzWhcNMjUwNDI4MTYwMDQzWjAzMTEwLwYDVQQD
EyhhY2U2YzQ5MGM1Njg3OTBlYTQyZjE1ZmJhYmFhMmFiNTgwYTJiOWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrzSmFYM2YcZ7udCMTsiFPPRP2X4
Iz+hWDOzyC3+Xt6BS80XNkWG3V5ZaLzhtNFAcIpupzjPHydRQRZGplYs45Kwxa5g
heLFx4tBewFP1TpeORUPF11dhxBG2Ed01rfEu9wKEATmwn0qVdD7t6iRfX130Tnv
swvzfYiAwS1Ws/5ZGCOgGTlsQLcTkSPpCValPWdD+udG6QHa4LmlQKQnXbMPi5ph
h1CgFrlg3rlrTpfQ03qoraL0Nfjpyb5KJgNKN/0sQwxmhDQ1HXsr/mDMeFyPdwu0
ceiDtEhz1fcB+CmHE1o+peGJM6l69jTJq6VDb4uKN7hnz6D39V51bYBXHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKzmxJDFaHkOpC8V+6uqKrWAornTMB8GA1UdIwQY
MBaAFOE3J6KUUb5N2ZIrYNHFlugGqZX7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFRjbm9wUlJ2azNaa2l0ZzBjV1c2QWFwbGZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9kZTM3ZmEtMWJkMi00N2Y1LTllMmIt
YWM0YzhmMTk4NzZkLzEvNFRjbm9wUlJ2azNaa2l0ZzBjV1c2QWFwbGZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9kZTM3ZmEtMWJkMi00N2Y1LTllMmItYWM0YzhmMTk4NzZk
LzEvNFRjbm9wUlJ2azNaa2l0ZzBjV1c2QWFwbGZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKI+9Cqf5
Qdyl19qlVRT+lFuyVRIimB6QyTnV7I/J0Xl1MYF18zpur3aXwNrOlnViVgLMrZq0
Cw7zXfr9GWdHP5JRA7HGon88aEAq/ET/K2kuTwWYWc7VppZzfwfLZUs/Dm0ws81n
sEXmea6xysRUp+wvhC+PRh5jbpbF6dGOC6Hjp1MnieNqLa09QZkt11Yj4XAPB+5r
gduiiqchjTCQVHzx1vlPJNAzHrbBVHIfwKi5DRcE+urVRVcAerYJke3xMNl8Rn3q
5E8AmwhRtO4A0/3e++bXohXssCl+3zGMPMxzUYnEgWHDSOHrIfdz0ZaiUrxnqAvs
3fK9xQ4icQONGQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 22:24:03 2025 by rpki-client