Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.mft
File: 4fI_OJG9feF53kEDCi_R-ljkPRc.mft (raw, json)
Hash identifier: /HvAuRM5lb0Fz6YFrN/+Nvu0zojHSiY9oFvDAajhy7M=
Subject key identifier: 98:5F:4F:81:0B:68:22:F3:E2:B3:E4:BE:94:48:41:F2:F1:BB:9A:85
Authority key identifier: E1:F2:3F:38:91:BD:7D:E1:79:DE:41:03:0A:2F:D1:FA:58:E4:3D:17
Certificate issuer: /CN=e1f23f3891bd7de179de41030a2fd1fa58e43d17
Certificate serial: 0196783148280533B2F2CD4E31926CF8F402
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fI_OJG9feF53kEDCi_R-ljkPRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.mft
Manifest number: 032C
Signing time: Sun 27 Apr 2025 17:00:17 +0000
Manifest this update: Sun 27 Apr 2025 17:00:17 +0000
Manifest next update: Mon 28 Apr 2025 17:00:17 +0000
Files and hashes: 1: 4fI_OJG9feF53kEDCi_R-ljkPRc.crl (hash: 83pjGIpZd6NH/zen3pHfovVUmGmgscQuPIBLTvMJD6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fI_OJG9feF53kEDCi_R-ljkPRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:31:48:28:05:33:b2:f2:cd:4e:31:92:6c:f8:f4:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f23f3891bd7de179de41030a2fd1fa58e43d17
Validity
Not Before: Apr 27 17:00:17 2025 GMT
Not After : Apr 28 17:00:17 2025 GMT
Subject: CN=985f4f810b6822f3e2b3e4be944841f2f1bb9a85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e3:a2:b8:06:b2:c6:e5:bb:3a:a2:08:16:c9:
50:d6:7a:b6:0c:13:62:25:b9:4b:b4:8e:78:d4:5b:
e0:2e:12:0f:0c:89:e5:22:a3:c9:13:c8:ff:a9:31:
6d:24:5d:79:06:59:8a:18:b5:a0:60:b6:13:4e:06:
1f:31:a1:79:c8:6a:58:2f:ce:2b:af:62:bf:ab:3d:
5b:fc:18:e9:59:a1:b2:63:ad:bd:2a:1b:67:91:0b:
63:49:7e:b0:b7:1f:c0:94:72:58:4f:20:6b:b3:54:
be:f8:48:34:c1:9c:e4:f2:1c:88:e3:f9:60:3e:0f:
79:ee:1b:8c:c5:30:ee:43:6a:a7:9e:86:60:8d:82:
be:67:ff:93:a7:52:52:f2:c1:10:48:22:8a:12:9f:
22:64:09:9f:1a:4e:80:66:7a:d6:22:11:63:0a:66:
c4:b3:26:7a:ea:44:c8:8a:45:04:b7:cd:03:93:95:
79:a2:98:03:77:08:9e:0f:8f:3f:05:cf:3d:d0:54:
40:8b:56:ad:cd:4f:72:02:9c:37:42:a4:26:1c:a3:
b9:99:52:ef:da:10:a8:bb:fd:bb:ae:f7:71:15:ed:
ae:89:a6:f6:33:a8:3a:5f:2f:7a:d1:a9:e4:39:ab:
43:3a:da:c6:da:1e:7c:c4:40:2d:46:c3:c3:31:e8:
0c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:5F:4F:81:0B:68:22:F3:E2:B3:E4:BE:94:48:41:F2:F1:BB:9A:85
X509v3 Authority Key Identifier:
keyid:E1:F2:3F:38:91:BD:7D:E1:79:DE:41:03:0A:2F:D1:FA:58:E4:3D:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fI_OJG9feF53kEDCi_R-ljkPRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:18:13:57:1f:8e:56:84:d4:e4:7b:0a:3a:2c:09:3a:66:17:
c6:c0:8c:50:42:b7:dc:80:bc:84:59:17:1a:ad:e7:d1:e9:be:
40:27:27:a3:ea:ea:8e:8c:3e:00:0d:45:a4:da:84:04:d8:e3:
38:89:1c:fb:d4:33:45:a3:34:a6:66:f5:3e:f1:c2:d5:fe:19:
37:e0:1c:9b:2b:ff:f9:ca:73:2e:e8:3a:01:da:6f:3b:1f:89:
9f:59:fb:ec:0d:69:61:51:f5:70:45:35:9e:e4:cb:0e:28:e3:
c4:ae:c9:8d:4a:22:e9:c7:94:d8:aa:7f:cf:e6:f8:bd:a4:f4:
a1:17:f6:19:70:91:78:1f:b2:5e:f3:a7:7c:8f:d9:5a:89:f7:
08:1f:32:c2:3f:76:b3:3d:e4:4a:1c:f4:64:0b:d4:87:9d:87:
b8:5e:c6:63:11:69:69:7f:5a:11:63:b2:6d:06:c3:6e:73:a1:
95:82:4b:a2:c4:f1:2c:cc:4a:8b:62:88:4e:2f:80:a7:16:a3:
d4:d3:d8:57:96:4d:e2:a8:1e:56:e6:51:03:98:35:9f:68:6f:
7c:b6:f7:c9:aa:50:74:45:34:9f:b3:7d:7c:88:5a:e7:4c:8b:
85:da:6c:34:e2:da:e2:4d:fe:bf:a4:59:a1:2a:be:13:2c:59:
b7:ce:6a:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ4MUgoBTOy8s1OMZJs+PQCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxZjIzZjM4OTFiZDdkZTE3OWRlNDEwMzBhMmZkMWZhNThl
NDNkMTcwHhcNMjUwNDI3MTcwMDE3WhcNMjUwNDI4MTcwMDE3WjAzMTEwLwYDVQQD
Eyg5ODVmNGY4MTBiNjgyMmYzZTJiM2U0YmU5NDQ4NDFmMmYxYmI5YTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6OOiuAayxuW7OqIIFslQ1nq2DBNi
JblLtI541FvgLhIPDInlIqPJE8j/qTFtJF15BlmKGLWgYLYTTgYfMaF5yGpYL84r
r2K/qz1b/BjpWaGyY629KhtnkQtjSX6wtx/AlHJYTyBrs1S++Eg0wZzk8hyI4/lg
Pg957huMxTDuQ2qnnoZgjYK+Z/+Tp1JS8sEQSCKKEp8iZAmfGk6AZnrWIhFjCmbE
syZ66kTIikUEt80Dk5V5opgDdwieD48/Bc890FRAi1atzU9yApw3QqQmHKO5mVLv
2hCou/27rvdxFe2uiab2M6g6Xy960ankOatDOtrG2h58xEAtRsPDMegM4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJhfT4ELaCLz4rPkvpRIQfLxu5qFMB8GA1UdIwQY
MBaAFOHyPziRvX3hed5BAwov0fpY5D0XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGZJX09KRzlmZUY1M2tFRENpX1ItbGprUFJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9jM2NkNmEtYzZjMS00MDg3LTk2ZjYt
ODYxNzYzYjVmMDY1LzEvNGZJX09KRzlmZUY1M2tFRENpX1ItbGprUFJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9jM2NkNmEtYzZjMS00MDg3LTk2ZjYtODYxNzYzYjVmMDY1
LzEvNGZJX09KRzlmZUY1M2tFRENpX1ItbGprUFJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAghgTVx+O
VoTU5HsKOiwJOmYXxsCMUEK33IC8hFkXGq3n0em+QCcno+rqjow+AA1FpNqEBNjj
OIkc+9QzRaM0pmb1PvHC1f4ZN+Acmyv/+cpzLug6AdpvOx+Jn1n77A1pYVH1cEU1
nuTLDijjxK7JjUoi6ceU2Kp/z+b4vaT0oRf2GXCReB+yXvOnfI/ZWon3CB8ywj92
sz3kShz0ZAvUh52HuF7GYxFpaX9aEWOybQbDbnOhlYJLosTxLMxKi2KITi+Apxaj
1NPYV5ZN4qgeVuZRA5g1n2hvfLb3yapQdEU0n7N9fIha50yLhdpsNOLa4k3+v6RZ
oSq+EyxZt85qEw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 22:30:03 2025 by rpki-client