Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.mft
File: 4aMjVGSEIgy0AgYzgPQBY2kmKs8.mft (raw, json)
Hash identifier: EFBZIx3cbSjM75yLg1Ma9+vtVdsyJdj15o1BWzmoC88=
Subject key identifier: 6D:32:21:A8:6C:C9:76:A2:C9:97:35:5E:94:8E:46:A2:69:F7:63:8E
Authority key identifier: E1:A3:23:54:64:84:22:0C:B4:02:06:33:80:F4:01:63:69:26:2A:CF
Certificate issuer: /CN=e1a323546484220cb402063380f4016369262acf
Certificate serial: 0196846CF94227A5ABB20100F34DFD08C334
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4aMjVGSEIgy0AgYzgPQBY2kmKs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.mft
Manifest number: 085A
Signing time: Wed 30 Apr 2025 02:00:56 +0000
Manifest this update: Wed 30 Apr 2025 02:00:56 +0000
Manifest next update: Thu 01 May 2025 02:00:56 +0000
Files and hashes: 1: 4aMjVGSEIgy0AgYzgPQBY2kmKs8.crl (hash: lXbZjmv0uzScSZdpIS2wAA7MQKfqs05+3ga+Br7agaA=)
2: oLxnPDOjx34zqrjQ27ju_ZuWYV4.roa (hash: aFW6lgXJpeg0bmQI7iZHPliZcmK0ToNkD5OYtI2CIQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4aMjVGSEIgy0AgYzgPQBY2kmKs8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:6c:f9:42:27:a5:ab:b2:01:00:f3:4d:fd:08:c3:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1a323546484220cb402063380f4016369262acf
Validity
Not Before: Apr 30 02:00:56 2025 GMT
Not After : May 1 02:00:56 2025 GMT
Subject: CN=6d3221a86cc976a2c997355e948e46a269f7638e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b2:10:25:22:1e:49:ec:ce:7a:32:29:79:07:
9a:2a:bc:69:b9:7a:7d:cb:0a:8b:20:18:9c:af:e1:
b1:6d:cc:da:4c:dd:a7:d8:53:28:4d:57:83:98:34:
10:37:cb:ab:36:e7:a9:63:4d:7d:89:b9:b2:37:b0:
5c:62:db:4b:ee:7a:82:a3:e5:07:fb:94:0c:ab:83:
02:68:2f:94:d8:6d:e6:7b:f3:30:04:3a:51:7a:74:
54:f9:81:d3:62:f3:29:24:90:f1:2d:81:3d:c8:7a:
83:03:26:73:4e:82:be:cd:ea:ab:c7:9e:1f:1a:1a:
26:e0:3d:44:61:c5:95:23:5a:c3:11:88:31:2d:87:
45:3d:c6:15:99:82:9a:b5:05:c6:c3:28:27:c1:2e:
c5:9e:e4:30:30:e1:22:a6:d8:dd:27:32:d0:c6:fd:
1c:66:93:58:0e:36:88:b8:e4:9e:f3:f0:65:a4:81:
1f:34:16:86:13:de:7a:af:75:d7:24:a1:0b:41:6a:
86:c9:3d:71:69:5d:d4:a5:0f:d4:2e:37:f4:8c:7d:
df:95:ff:d1:af:8e:1b:06:69:19:c0:7d:cf:36:69:
fd:8c:af:96:c9:27:75:5a:42:93:cd:3f:7e:5f:35:
a3:af:64:ac:5b:22:5c:36:a6:b0:a6:4e:01:65:f7:
db:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:32:21:A8:6C:C9:76:A2:C9:97:35:5E:94:8E:46:A2:69:F7:63:8E
X509v3 Authority Key Identifier:
keyid:E1:A3:23:54:64:84:22:0C:B4:02:06:33:80:F4:01:63:69:26:2A:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4aMjVGSEIgy0AgYzgPQBY2kmKs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:da:56:61:d4:c9:9d:4e:cd:1d:b1:3e:bb:98:dd:ca:f7:3b:
9e:a1:61:e2:24:58:7c:75:d8:64:bd:91:54:49:3b:78:e2:34:
29:fd:a9:74:90:2b:25:bb:c5:49:1f:78:aa:83:f4:43:19:66:
f4:6d:81:bd:fd:73:61:5f:51:2f:d0:19:ed:c7:fa:b6:08:2c:
f6:d7:74:ea:1c:66:2e:ca:60:04:5a:a8:dc:de:e8:27:8c:61:
5c:48:64:cd:4e:68:57:0f:d9:11:da:5b:af:5a:77:45:5b:6e:
cd:87:0d:2e:7b:4a:c6:e1:19:63:d6:4c:96:91:5c:b1:62:50:
f5:1d:55:28:b4:92:b4:88:6c:10:1b:71:15:ce:41:fb:a3:41:
94:f9:92:42:97:38:6c:82:cf:ab:e1:ca:d9:00:a5:c4:59:9c:
2b:86:52:2c:14:99:6e:f1:a0:f2:99:01:d1:28:df:a8:b9:95:
10:2b:80:24:6b:ff:ac:40:d3:88:cd:23:d5:29:61:5d:93:a2:
e5:bc:1c:09:6e:78:b4:ac:66:b5:4a:eb:9d:7d:80:e8:e4:61:
96:04:7b:5c:d1:d5:1b:54:32:a5:46:60:a4:93:48:7d:15:1f:
f0:8d:e3:4a:90:8b:b0:85:e0:3e:06:85:2c:d2:ca:29:e9:b3:
56:16:a0:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaEbPlCJ6WrsgEA8039CMM0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxYTMyMzU0NjQ4NDIyMGNiNDAyMDYzMzgwZjQwMTYzNjky
NjJhY2YwHhcNMjUwNDMwMDIwMDU2WhcNMjUwNTAxMDIwMDU2WjAzMTEwLwYDVQQD
Eyg2ZDMyMjFhODZjYzk3NmEyYzk5NzM1NWU5NDhlNDZhMjY5Zjc2MzhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLIQJSIeSezOejIpeQeaKrxpuXp9
ywqLIBicr+GxbczaTN2n2FMoTVeDmDQQN8urNuepY019ibmyN7BcYttL7nqCo+UH
+5QMq4MCaC+U2G3me/MwBDpRenRU+YHTYvMpJJDxLYE9yHqDAyZzToK+zeqrx54f
Ghom4D1EYcWVI1rDEYgxLYdFPcYVmYKatQXGwygnwS7FnuQwMOEiptjdJzLQxv0c
ZpNYDjaIuOSe8/BlpIEfNBaGE956r3XXJKELQWqGyT1xaV3UpQ/ULjf0jH3flf/R
r44bBmkZwH3PNmn9jK+WySd1WkKTzT9+XzWjr2SsWyJcNqawpk4BZffbBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG0yIahsyXaiyZc1XpSORqJp92OOMB8GA1UdIwQY
MBaAFOGjI1RkhCIMtAIGM4D0AWNpJirPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGFNalZHU0VJZ3kwQWdZemdQUUJZMmttS3M4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9kMjFkYTQtZjY1Yi00NTMxLTk3NmEt
OGVjMDYwNGU2OTI5LzEvNGFNalZHU0VJZ3kwQWdZemdQUUJZMmttS3M4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9kMjFkYTQtZjY1Yi00NTMxLTk3NmEtOGVjMDYwNGU2OTI5
LzEvNGFNalZHU0VJZ3kwQWdZemdQUUJZMmttS3M4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUNpWYdTJ
nU7NHbE+u5jdyvc7nqFh4iRYfHXYZL2RVEk7eOI0Kf2pdJArJbvFSR94qoP0Qxlm
9G2Bvf1zYV9RL9AZ7cf6tggs9td06hxmLspgBFqo3N7oJ4xhXEhkzU5oVw/ZEdpb
r1p3RVtuzYcNLntKxuEZY9ZMlpFcsWJQ9R1VKLSStIhsEBtxFc5B+6NBlPmSQpc4
bILPq+HK2QClxFmcK4ZSLBSZbvGg8pkB0SjfqLmVECuAJGv/rEDTiM0j1SlhXZOi
5bwcCW54tKxmtUrrnX2A6ORhlgR7XNHVG1QypUZgpJNIfRUf8I3jSpCLsIXgPgaF
LNLKKemzVhagQQ==
-----END CERTIFICATE-----
Generated at Wed Apr 30 08:04:38 2025 by rpki-client