Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e521bf-f8fd-4e39-b6ea-c9738ce5baef/1/1w4MS0dQEKW0Kt7zM8Ob3BrblhE.mft
File: 1w4MS0dQEKW0Kt7zM8Ob3BrblhE.mft (raw, json)
Hash identifier: koCH3HZyZs/79yRIHPRTehPXmEE1LwPvQBghw5GIjlE=
Subject key identifier: AF:CF:09:D6:2F:5F:B3:34:66:A5:DA:22:7D:CE:18:BF:20:D9:DD:52
Authority key identifier: D7:0E:0C:4B:47:50:10:A5:B4:2A:DE:F3:33:C3:9B:DC:1A:DB:96:11
Certificate issuer: /CN=d70e0c4b475010a5b42adef333c39bdc1adb9611
Certificate serial: 019685119DEC4C6EE97FC96C3119E8DC788C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1w4MS0dQEKW0Kt7zM8Ob3BrblhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e521bf-f8fd-4e39-b6ea-c9738ce5baef/1/1w4MS0dQEKW0Kt7zM8Ob3BrblhE.mft
Manifest number: 0B27
Signing time: Wed 30 Apr 2025 05:00:46 +0000
Manifest this update: Wed 30 Apr 2025 05:00:46 +0000
Manifest next update: Thu 01 May 2025 05:00:46 +0000
Files and hashes: 1: 1w4MS0dQEKW0Kt7zM8Ob3BrblhE.crl (hash: WhB1iBWBnhyFtbNmZhHWUmBxm4tSBuekZ4iW1z5i3gU=)
2: pW4NhKTVrfPynXbLPF5CI2MPfYk.roa (hash: WbDzY2pHEiq4FLUx3TIlRUMJrlB0Z859NRUEutTDHyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/e521bf-f8fd-4e39-b6ea-c9738ce5baef/1/1w4MS0dQEKW0Kt7zM8Ob3BrblhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/e521bf-f8fd-4e39-b6ea-c9738ce5baef/1/1w4MS0dQEKW0Kt7zM8Ob3BrblhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1w4MS0dQEKW0Kt7zM8Ob3BrblhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:11:9d:ec:4c:6e:e9:7f:c9:6c:31:19:e8:dc:78:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d70e0c4b475010a5b42adef333c39bdc1adb9611
Validity
Not Before: Apr 30 05:00:46 2025 GMT
Not After : May 1 05:00:46 2025 GMT
Subject: CN=afcf09d62f5fb33466a5da227dce18bf20d9dd52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b2:da:07:70:75:16:85:10:88:4a:f3:01:5b:
e1:79:70:95:55:25:15:81:9b:8c:bb:89:a2:a3:99:
62:e5:9c:92:13:bc:53:47:16:d3:9f:49:c1:89:47:
8f:06:fb:39:61:91:07:9d:45:e8:23:0d:d2:d4:5d:
dd:81:2b:4d:97:80:05:fe:02:65:dc:1b:ad:a0:12:
7b:14:ee:bf:31:ac:c4:e0:c2:3f:f3:71:18:b9:47:
50:32:10:f9:50:24:50:ea:ef:b2:3b:a0:fd:cf:b3:
88:0b:d1:0c:48:fa:10:e7:88:fc:b4:6a:b8:7b:86:
b2:cf:66:ee:43:c7:c3:69:6a:a4:67:07:9f:38:e2:
9c:f3:53:98:2b:c8:72:1d:bc:83:27:c9:ef:b8:4f:
ec:c3:3a:ec:1a:ca:47:ce:2c:64:3c:9d:56:c8:0e:
93:b0:4c:13:9a:a6:b7:db:97:75:87:fa:a3:77:60:
7b:e2:a4:35:c5:12:84:ee:90:92:b8:84:40:a4:69:
bf:e6:1f:4f:31:13:be:97:66:5d:d7:ff:45:5e:38:
8b:bd:d8:0b:77:2a:8e:2b:e7:90:9c:d9:c5:e8:24:
45:78:0f:5a:a9:9f:5c:0e:f0:f0:b9:d2:bf:a8:a4:
70:47:2a:c3:d9:98:96:b7:fb:94:cb:72:b3:e3:98:
2c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:CF:09:D6:2F:5F:B3:34:66:A5:DA:22:7D:CE:18:BF:20:D9:DD:52
X509v3 Authority Key Identifier:
keyid:D7:0E:0C:4B:47:50:10:A5:B4:2A:DE:F3:33:C3:9B:DC:1A:DB:96:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1w4MS0dQEKW0Kt7zM8Ob3BrblhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e521bf-f8fd-4e39-b6ea-c9738ce5baef/1/1w4MS0dQEKW0Kt7zM8Ob3BrblhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e521bf-f8fd-4e39-b6ea-c9738ce5baef/1/1w4MS0dQEKW0Kt7zM8Ob3BrblhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:0d:13:a7:61:3e:5b:8e:0c:8c:88:b3:17:64:d6:8d:79:51:
ea:94:b9:e1:fd:b9:f8:46:09:3c:24:75:bd:87:84:7a:12:e8:
5d:1d:cb:12:94:39:1c:2a:92:0e:ef:2f:31:47:b0:d9:4d:f2:
72:42:88:af:2d:11:e7:fa:4a:01:d8:d5:3a:8e:6d:d1:af:90:
c0:0c:8b:7f:22:98:25:b1:5e:7d:81:5b:c9:37:9b:5c:f5:d9:
fc:05:b6:2c:34:6b:43:70:94:00:fb:01:61:04:3f:4c:04:4e:
54:bc:27:f1:69:41:3b:51:1b:7f:c6:47:7f:e0:a2:8d:4a:6a:
0b:41:2d:1e:f2:ac:10:6f:89:62:08:1e:1f:aa:7e:fc:4a:8a:
1e:d7:25:b6:b8:d2:a3:5f:24:f7:79:41:9f:20:85:c5:f1:2c:
14:ef:bb:38:b1:15:d8:d3:09:3a:95:8c:dc:26:eb:d2:0a:17:
f6:fe:1b:28:b5:37:1b:fb:6c:11:d5:4d:22:d3:7f:52:fa:46:
2a:78:ed:41:19:20:bd:7b:3f:0e:c3:8f:be:5a:14:d9:7a:6a:
ef:db:1a:99:9e:e8:0f:b5:69:b2:ab:87:b2:69:93:39:70:a7:
3a:e5:06:04:9d:16:3d:90:45:9c:47:b2:2f:68:5b:23:0f:8e:
7c:3e:45:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaFEZ3sTG7pf8lsMRno3HiMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3MGUwYzRiNDc1MDEwYTViNDJhZGVmMzMzYzM5YmRjMWFk
Yjk2MTEwHhcNMjUwNDMwMDUwMDQ2WhcNMjUwNTAxMDUwMDQ2WjAzMTEwLwYDVQQD
EyhhZmNmMDlkNjJmNWZiMzM0NjZhNWRhMjI3ZGNlMThiZjIwZDlkZDUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7LaB3B1FoUQiErzAVvheXCVVSUV
gZuMu4mio5li5ZySE7xTRxbTn0nBiUePBvs5YZEHnUXoIw3S1F3dgStNl4AF/gJl
3ButoBJ7FO6/MazE4MI/83EYuUdQMhD5UCRQ6u+yO6D9z7OIC9EMSPoQ54j8tGq4
e4ayz2buQ8fDaWqkZwefOOKc81OYK8hyHbyDJ8nvuE/swzrsGspHzixkPJ1WyA6T
sEwTmqa325d1h/qjd2B74qQ1xRKE7pCSuIRApGm/5h9PMRO+l2Zd1/9FXjiLvdgL
dyqOK+eQnNnF6CRFeA9aqZ9cDvDwudK/qKRwRyrD2ZiWt/uUy3Kz45gsTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK/PCdYvX7M0ZqXaIn3OGL8g2d1SMB8GA1UdIwQY
MBaAFNcODEtHUBCltCre8zPDm9wa25YRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXc0TVMwZFFFS1cwS3Q3ek04T2IzQnJibGhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9lNTIxYmYtZjhmZC00ZTM5LWI2ZWEt
Yzk3MzhjZTViYWVmLzEvMXc0TVMwZFFFS1cwS3Q3ek04T2IzQnJibGhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9lNTIxYmYtZjhmZC00ZTM5LWI2ZWEtYzk3MzhjZTViYWVm
LzEvMXc0TVMwZFFFS1cwS3Q3ek04T2IzQnJibGhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGw0Tp2E+
W44MjIizF2TWjXlR6pS54f25+EYJPCR1vYeEehLoXR3LEpQ5HCqSDu8vMUew2U3y
ckKIry0R5/pKAdjVOo5t0a+QwAyLfyKYJbFefYFbyTebXPXZ/AW2LDRrQ3CUAPsB
YQQ/TAROVLwn8WlBO1Ebf8ZHf+CijUpqC0EtHvKsEG+JYggeH6p+/EqKHtcltrjS
o18k93lBnyCFxfEsFO+7OLEV2NMJOpWM3Cbr0goX9v4bKLU3G/tsEdVNItN/UvpG
KnjtQRkgvXs/DsOPvloU2Xpq79samZ7oD7VpsquHsmmTOXCnOuUGBJ0WPZBFnEey
L2hbIw+OfD5Fkw==
-----END CERTIFICATE-----
Generated at Wed Apr 30 10:47:27 2025 by rpki-client