Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft
File: 4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft (raw, json)
Hash identifier: qTwXQ2xuXSBdpTv99+48ZPm7BxziT4yf/wDKjJggdsg=
Subject key identifier: E9:D7:64:26:23:8F:F6:0B:86:8B:53:6E:2D:93:7D:1D:A4:59:E3:26
Authority key identifier: E1:B1:5B:C5:B9:02:19:9E:B8:6D:60:78:C4:82:ED:ED:D3:DD:DE:B4
Certificate issuer: /CN=e1b15bc5b902199eb86d6078c482ededd3dddeb4
Certificate serial: 019681A2A449E175202A4CDADDDCCBF5F8F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bFbxbkCGZ64bWB4xILt7dPd3rQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft
Manifest number: 1511
Signing time: Tue 29 Apr 2025 13:00:41 +0000
Manifest this update: Tue 29 Apr 2025 13:00:41 +0000
Manifest next update: Wed 30 Apr 2025 13:00:41 +0000
Files and hashes: 1: 4bFbxbkCGZ64bWB4xILt7dPd3rQ.crl (hash: QUIhTwO9iwnX9UEnzcBA4+y4Cpz0peu1GVaEyMCE8Fk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4bFbxbkCGZ64bWB4xILt7dPd3rQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:a2:a4:49:e1:75:20:2a:4c:da:dd:dc:cb:f5:f8:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1b15bc5b902199eb86d6078c482ededd3dddeb4
Validity
Not Before: Apr 29 13:00:41 2025 GMT
Not After : Apr 30 13:00:41 2025 GMT
Subject: CN=e9d76426238ff60b868b536e2d937d1da459e326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5e:ff:b7:2a:47:41:2b:19:54:69:d5:54:4e:
ab:2c:2d:89:47:a5:e2:de:ed:68:ba:24:5a:ea:8d:
ff:08:79:c1:e6:1f:58:f9:69:ff:f7:0b:2f:da:61:
df:c7:87:cf:7a:1b:21:0a:7f:35:40:06:fd:bf:26:
da:69:6c:ac:a2:11:cd:8a:fb:c8:08:b9:f5:7b:9e:
ef:da:c1:3d:97:cc:6d:a6:8c:de:d5:06:53:2c:71:
20:1f:69:c1:41:b5:f4:c6:2e:2e:a2:40:1a:04:5b:
6c:61:f0:73:41:91:6f:3b:83:96:4e:35:6c:f4:18:
82:4e:c5:dd:1e:a4:4c:79:8c:2f:a1:9b:5c:3b:98:
88:a3:2b:01:7f:45:97:01:d9:5b:7b:45:f3:61:52:
ca:78:2c:f9:37:17:ed:aa:6c:80:db:fc:3c:23:cd:
92:80:54:2d:d4:7c:37:34:07:c1:4d:90:d3:3a:62:
0a:52:56:af:44:dd:89:a9:65:44:dd:7f:2f:0f:34:
0a:60:a4:d8:69:30:d7:ca:50:6a:6c:7b:63:4a:cb:
16:c8:59:21:aa:4b:07:62:97:70:0b:ed:d8:a0:0f:
3b:b0:a5:a7:8a:29:43:cd:f8:a2:08:c5:0e:ef:9f:
ff:13:06:3b:aa:cd:2a:82:58:44:4c:98:88:2b:10:
de:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:D7:64:26:23:8F:F6:0B:86:8B:53:6E:2D:93:7D:1D:A4:59:E3:26
X509v3 Authority Key Identifier:
keyid:E1:B1:5B:C5:B9:02:19:9E:B8:6D:60:78:C4:82:ED:ED:D3:DD:DE:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bFbxbkCGZ64bWB4xILt7dPd3rQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:a5:39:2e:15:d7:de:e7:08:e6:f3:bc:0f:c0:c9:cc:44:aa:
14:b6:37:de:0d:ad:99:82:3b:24:1a:85:f2:a5:cd:d3:d5:7f:
c3:51:49:79:f6:b4:94:ea:eb:ae:40:7a:c9:d8:15:b0:d4:ec:
05:04:3b:64:25:2f:d6:46:d5:b4:e9:ef:57:21:d7:32:60:a6:
2c:95:4b:65:70:2b:e4:81:78:de:41:74:56:5b:b1:e6:fd:00:
3d:39:3b:56:80:02:f3:d0:62:0d:2c:db:ec:ed:ed:bd:ef:33:
12:71:ec:35:5c:b4:b5:31:44:e2:97:e9:c2:03:5e:1a:d4:d4:
89:68:77:1d:c5:4b:bf:94:c6:df:4a:f1:59:73:f3:39:9c:13:
c0:e6:e3:47:cf:52:a8:65:d5:a9:8f:4e:aa:d4:91:f0:2f:ed:
6a:69:49:73:54:5e:ba:a9:a6:79:bd:a6:fb:d7:79:e2:4d:c7:
a9:bd:d8:86:b1:4c:b5:24:b8:0e:3e:e6:97:c2:a5:1a:36:46:
43:c8:38:53:21:0b:cb:fa:b1:11:6d:ec:79:51:23:d4:f4:f4:
0a:00:a5:d7:36:af:4c:08:7f:05:f9:34:cb:ff:68:38:01:d6:
b9:13:d8:e1:ff:47:cb:28:48:05:a0:1a:67:6b:98:b7:45:6e:
49:bb:2b:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaBoqRJ4XUgKkza3dzL9fj2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxYjE1YmM1YjkwMjE5OWViODZkNjA3OGM0ODJlZGVkZDNk
ZGRlYjQwHhcNMjUwNDI5MTMwMDQxWhcNMjUwNDMwMTMwMDQxWjAzMTEwLwYDVQQD
EyhlOWQ3NjQyNjIzOGZmNjBiODY4YjUzNmUyZDkzN2QxZGE0NTllMzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu17/typHQSsZVGnVVE6rLC2JR6Xi
3u1ouiRa6o3/CHnB5h9Y+Wn/9wsv2mHfx4fPehshCn81QAb9vybaaWysohHNivvI
CLn1e57v2sE9l8xtpoze1QZTLHEgH2nBQbX0xi4uokAaBFtsYfBzQZFvO4OWTjVs
9BiCTsXdHqRMeYwvoZtcO5iIoysBf0WXAdlbe0XzYVLKeCz5NxftqmyA2/w8I82S
gFQt1Hw3NAfBTZDTOmIKUlavRN2JqWVE3X8vDzQKYKTYaTDXylBqbHtjSssWyFkh
qksHYpdwC+3YoA87sKWniilDzfiiCMUO75//EwY7qs0qglhETJiIKxDebwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOnXZCYjj/YLhotTbi2TfR2kWeMmMB8GA1UdIwQY
MBaAFOGxW8W5AhmeuG1geMSC7e3T3d60MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGJGYnhia0NHWjY0YldCNHhJTHQ3ZFBkM3JRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9mNmQ2NTUtNzNlYS00MjJhLWE5NjMt
NDFhOTgwMDFjZjJiLzEvNGJGYnhia0NHWjY0YldCNHhJTHQ3ZFBkM3JRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9mNmQ2NTUtNzNlYS00MjJhLWE5NjMtNDFhOTgwMDFjZjJi
LzEvNGJGYnhia0NHWjY0YldCNHhJTHQ3ZFBkM3JRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG6U5LhXX
3ucI5vO8D8DJzESqFLY33g2tmYI7JBqF8qXN09V/w1FJefa0lOrrrkB6ydgVsNTs
BQQ7ZCUv1kbVtOnvVyHXMmCmLJVLZXAr5IF43kF0Vlux5v0APTk7VoAC89BiDSzb
7O3tve8zEnHsNVy0tTFE4pfpwgNeGtTUiWh3HcVLv5TG30rxWXPzOZwTwObjR89S
qGXVqY9OqtSR8C/tamlJc1Reuqmmeb2m+9d54k3Hqb3YhrFMtSS4Dj7ml8KlGjZG
Q8g4UyELy/qxEW3seVEj1PT0CgCl1zavTAh/Bfk0y/9oOAHWuRPY4f9HyyhIBaAa
Z2uYt0VuSbsrxA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 16:36:52 2025 by rpki-client