Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft
File: 4pIlILZ7Gr98QDr6IjVTQyYnIog.mft (raw, json)
Hash identifier: ny4vQk6zJ3kgFTl/JeM/vftaEJ9+skhFyJ+5smAmQlk=
Subject key identifier: DA:8D:7D:8B:72:F5:F1:43:0E:19:0A:F9:71:1D:D4:0D:DC:42:AA:B3
Authority key identifier: E2:92:25:20:B6:7B:1A:BF:7C:40:3A:FA:22:35:53:43:26:27:22:88
Certificate issuer: /CN=e2922520b67b1abf7c403afa2235534326272288
Certificate serial: 019685B5EA7534228B053C910E27ABCB5FA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pIlILZ7Gr98QDr6IjVTQyYnIog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft
Manifest number: 1332
Signing time: Wed 30 Apr 2025 08:00:13 +0000
Manifest this update: Wed 30 Apr 2025 08:00:13 +0000
Manifest next update: Thu 01 May 2025 08:00:13 +0000
Files and hashes: 1: 4pIlILZ7Gr98QDr6IjVTQyYnIog.crl (hash: NzzyI/U6KFIhYtDAVF/6gI+B5uEg2VqLWRepdEYL+c0=)
2: sraNB3Tq9hs6fPR3orHTINDfXdM.roa (hash: 5fJUa4xuxE1H1Nc9qB8vUJm4+A17xrBmdzBKBxK5rEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft
rsync://rpki.ripe.net/repository/DEFAULT/4pIlILZ7Gr98QDr6IjVTQyYnIog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:b5:ea:75:34:22:8b:05:3c:91:0e:27:ab:cb:5f:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2922520b67b1abf7c403afa2235534326272288
Validity
Not Before: Apr 30 08:00:13 2025 GMT
Not After : May 1 08:00:13 2025 GMT
Subject: CN=da8d7d8b72f5f1430e190af9711dd40ddc42aab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:39:e4:4b:c6:f1:4a:64:84:19:f3:4f:10:e7:
10:d0:75:2f:27:f9:c7:df:62:43:70:49:c4:6b:88:
a8:fe:13:0f:98:a8:8b:73:a5:13:d0:2f:8f:d3:d4:
2d:ab:32:5d:79:55:04:c2:86:90:72:56:32:1f:4e:
a6:2a:f5:cf:86:12:38:a5:ce:88:54:39:f7:63:0c:
63:9e:9e:3d:7c:a8:08:b4:10:9a:97:90:1e:a2:74:
63:5a:c5:24:70:1f:e6:df:a0:14:d0:a4:2b:d6:00:
0d:e2:f0:14:6a:f6:1d:c5:75:cb:72:32:7f:60:e4:
db:67:77:de:d8:11:61:62:cb:84:9a:90:e4:61:cd:
98:44:d9:f4:8e:bc:6a:c0:03:ce:b3:d1:e8:f2:ed:
d3:b8:ee:56:ac:7c:9f:18:cf:16:69:8d:dc:ae:01:
aa:ba:05:ce:e6:48:d4:e7:0b:02:42:be:24:2d:32:
82:05:30:bc:56:f8:4e:1e:69:62:a0:59:18:40:96:
4f:4c:a5:27:c6:05:3d:50:40:09:84:c9:83:d3:ad:
92:02:fb:96:37:41:4d:d4:84:a5:62:05:fa:d6:cb:
9d:72:de:23:06:7d:52:aa:e3:c8:84:a5:d8:65:27:
06:6d:4d:2b:2a:92:dc:42:c5:70:c0:49:af:f9:34:
16:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:8D:7D:8B:72:F5:F1:43:0E:19:0A:F9:71:1D:D4:0D:DC:42:AA:B3
X509v3 Authority Key Identifier:
keyid:E2:92:25:20:B6:7B:1A:BF:7C:40:3A:FA:22:35:53:43:26:27:22:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pIlILZ7Gr98QDr6IjVTQyYnIog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:6c:14:f5:e9:8f:2e:8e:f8:61:69:97:6a:89:b3:4c:29:5e:
a1:9d:ff:c2:16:93:91:04:3f:4a:14:7d:0c:25:e8:9f:3d:52:
1c:62:e8:b5:8c:64:b6:93:98:05:2f:d3:75:7f:40:ac:df:d6:
90:a6:03:94:ce:bd:6e:35:45:4f:ed:9b:00:96:e8:57:51:81:
84:06:ce:c1:8c:d8:8c:b9:7b:d8:22:74:25:c2:72:63:de:ff:
88:14:47:ea:46:54:d8:be:b8:b4:da:50:d4:fa:9c:19:dd:c3:
42:4c:70:12:66:8c:46:0f:93:9d:3e:fb:19:2d:d0:1d:3f:06:
b2:92:51:1c:5a:28:cd:9a:45:a8:99:e3:ac:1a:b4:cb:15:1e:
7d:16:aa:38:96:71:b3:ca:03:0d:e6:36:d6:02:d9:c1:05:04:
7a:ee:e2:44:d2:73:3b:62:62:9f:f0:68:18:ca:63:94:da:f8:
3b:94:3d:7d:f0:91:68:cb:8a:9b:d0:f3:80:0a:10:6a:10:71:
79:7d:78:4f:a4:5f:6b:e1:13:1f:a5:1e:cd:b0:73:a5:4f:13:
37:19:bb:6a:91:c1:49:a4:bb:c4:8e:17:5a:4f:ea:68:76:f1:
07:d2:a8:00:8d:39:29:8d:55:fc:04:e1:3f:e2:1b:4a:0d:9b:
4b:00:e3:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaFtep1NCKLBTyRDiery1+lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyOTIyNTIwYjY3YjFhYmY3YzQwM2FmYTIyMzU1MzQzMjYy
NzIyODgwHhcNMjUwNDMwMDgwMDEzWhcNMjUwNTAxMDgwMDEzWjAzMTEwLwYDVQQD
EyhkYThkN2Q4YjcyZjVmMTQzMGUxOTBhZjk3MTFkZDQwZGRjNDJhYWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTnkS8bxSmSEGfNPEOcQ0HUvJ/nH
32JDcEnEa4io/hMPmKiLc6UT0C+P09QtqzJdeVUEwoaQclYyH06mKvXPhhI4pc6I
VDn3Ywxjnp49fKgItBCal5AeonRjWsUkcB/m36AU0KQr1gAN4vAUavYdxXXLcjJ/
YOTbZ3fe2BFhYsuEmpDkYc2YRNn0jrxqwAPOs9Ho8u3TuO5WrHyfGM8WaY3crgGq
ugXO5kjU5wsCQr4kLTKCBTC8VvhOHmlioFkYQJZPTKUnxgU9UEAJhMmD062SAvuW
N0FN1ISlYgX61sudct4jBn1SquPIhKXYZScGbU0rKpLcQsVwwEmv+TQWuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNqNfYty9fFDDhkK+XEd1A3cQqqzMB8GA1UdIwQY
MBaAFOKSJSC2exq/fEA6+iI1U0MmJyKIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHBJbElMWjdHcjk4UURyNklqVlRReVluSW9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jYTEzY2EtZjY0MC00OTZjLTkyMmEt
NTAwYWJkOTNiOWQ0LzEvNHBJbElMWjdHcjk4UURyNklqVlRReVluSW9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9jYTEzY2EtZjY0MC00OTZjLTkyMmEtNTAwYWJkOTNiOWQ0
LzEvNHBJbElMWjdHcjk4UURyNklqVlRReVluSW9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK2wU9emP
Lo74YWmXaomzTCleoZ3/whaTkQQ/ShR9DCXonz1SHGLotYxktpOYBS/TdX9ArN/W
kKYDlM69bjVFT+2bAJboV1GBhAbOwYzYjLl72CJ0JcJyY97/iBRH6kZU2L64tNpQ
1PqcGd3DQkxwEmaMRg+TnT77GS3QHT8GspJRHFoozZpFqJnjrBq0yxUefRaqOJZx
s8oDDeY21gLZwQUEeu7iRNJzO2Jin/BoGMpjlNr4O5Q9ffCRaMuKm9DzgAoQahBx
eX14T6Rfa+ETH6UezbBzpU8TNxm7apHBSaS7xI4XWk/qaHbxB9KoAI05KY1V/ATh
P+IbSg2bSwDjYg==
-----END CERTIFICATE-----
Generated at Wed Apr 30 10:47:36 2025 by rpki-client