Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.mft
File: 4jRLpjQJYdpe60riOemgYmd5Pi4.mft (raw, json)
Hash identifier: WY+X1U+rStNdCUkXsBIyMlmwAX//1UC6SboIou1AT4k=
Subject key identifier: 95:5F:C3:19:AB:09:E6:B8:6D:CE:8C:C8:95:3E:1F:93:B2:BC:47:7A
Authority key identifier: E2:34:4B:A6:34:09:61:DA:5E:EB:4A:E2:39:E9:A0:62:67:79:3E:2E
Certificate issuer: /CN=e2344ba6340961da5eeb4ae239e9a06267793e2e
Certificate serial: 0196A01ADDFFA64EC4140AA0DCD05828217A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jRLpjQJYdpe60riOemgYmd5Pi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.mft
Manifest number: 0B78
Signing time: Mon 05 May 2025 11:00:37 +0000
Manifest this update: Mon 05 May 2025 11:00:37 +0000
Manifest next update: Tue 06 May 2025 11:00:37 +0000
Files and hashes: 1: 4jRLpjQJYdpe60riOemgYmd5Pi4.crl (hash: x5j9V7qHUvW09qA0+tcxvY3tXa22ZckCZOZAzQwHmBo=)
2: WpIYL0DvGR69MNqQHSOeKTTXrTw.roa (hash: SM3OGEHCPKRu3sADiQcW/ukfL9VQE5Fwf5KPU4G5dDQ=)
3: kxBC-y0IllTJVS30L0NxSPbYl5k.roa (hash: URvxTuHHPgKr+L+8uNywgEsk29rIbLnVfs2KTbEBNVw=)
4: pOMTJTMzSvxdTwpBEEiCIJOdgS4.roa (hash: N66sR+vsnvfn2vQyEXUghMnGW+xEPargkQo2ZBulpiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jRLpjQJYdpe60riOemgYmd5Pi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:1a:dd:ff:a6:4e:c4:14:0a:a0:dc:d0:58:28:21:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2344ba6340961da5eeb4ae239e9a06267793e2e
Validity
Not Before: May 5 11:00:37 2025 GMT
Not After : May 6 11:00:37 2025 GMT
Subject: CN=955fc319ab09e6b86dce8cc8953e1f93b2bc477a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:09:7d:6a:5c:89:08:ed:63:6f:72:ec:b3:de:
c1:1b:4c:96:db:67:8b:d6:c9:cf:f6:ca:b1:8f:eb:
f3:29:5a:3d:ff:7d:c2:2e:6e:f1:1f:3f:fc:06:cf:
a0:61:11:86:bd:8c:22:f2:32:d4:8f:d1:78:cf:78:
19:51:9f:43:59:3f:ec:3a:66:41:71:d2:04:b6:eb:
d4:4c:c6:df:70:00:a4:c8:b9:fa:48:8e:8d:f2:88:
cc:c6:02:33:ae:24:99:75:8d:3a:3d:a9:3b:e1:45:
d4:d1:03:97:c3:b7:4a:df:33:86:d2:2d:f7:60:82:
1e:1e:c8:24:c5:2c:a0:ba:25:9c:1a:af:c2:bb:89:
44:ae:8d:ae:d0:72:b5:9e:83:15:4a:c0:3c:08:a9:
cf:ec:21:5d:0d:aa:4f:2d:dd:1f:0a:bb:03:f4:cc:
f6:b7:6c:9b:17:cf:32:54:7d:ec:96:ee:fd:74:ab:
f6:7b:ce:d3:1e:a7:6c:fb:99:18:a6:54:21:71:da:
83:5f:4b:f8:43:8e:c3:72:23:34:40:4a:56:ab:cc:
d1:a9:46:b5:08:a9:40:15:d8:3c:b9:43:44:d1:4a:
ad:f2:8b:47:a7:d6:f2:4d:36:e6:ff:10:c8:8f:23:
a9:67:38:38:c3:86:d8:be:cb:56:fa:21:c6:64:61:
9a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:5F:C3:19:AB:09:E6:B8:6D:CE:8C:C8:95:3E:1F:93:B2:BC:47:7A
X509v3 Authority Key Identifier:
keyid:E2:34:4B:A6:34:09:61:DA:5E:EB:4A:E2:39:E9:A0:62:67:79:3E:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jRLpjQJYdpe60riOemgYmd5Pi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:31:06:a4:c8:64:20:1b:55:6d:5f:c7:c8:91:75:1c:98:1a:
33:a6:8f:8a:e1:74:a8:39:c4:88:4a:2f:f1:24:52:15:b2:37:
dd:53:0d:5d:ab:a2:1a:32:d5:62:8b:13:a0:d9:cd:52:e4:b4:
9a:5d:de:a2:2b:fd:f8:21:41:ff:7e:68:51:51:ef:f3:2d:78:
52:40:7c:65:f9:b9:c9:af:d0:b1:4c:a6:9a:05:5c:8c:6a:16:
31:73:66:f2:30:c3:49:4e:a4:a9:7d:93:39:e4:fd:94:14:10:
5a:8c:c1:4a:fa:55:ec:cd:a8:36:b8:dc:b6:b4:b4:c7:c8:fb:
48:ea:6f:1c:09:c7:bb:53:5c:b8:e5:4b:d2:2e:b9:da:23:ea:
e6:01:98:33:44:60:40:6f:5e:df:a1:2c:76:49:83:22:8c:7a:
3b:4d:09:69:41:44:d4:53:86:af:8a:5d:f9:ee:61:1e:4f:21:
a4:f0:12:3b:14:38:98:d5:3e:42:ba:50:cd:b2:ce:1a:37:24:
24:91:89:51:86:12:83:2f:02:56:59:e9:b5:25:7e:24:9e:97:
27:61:61:df:af:2c:17:82:22:c1:ab:c4:6d:f7:41:89:98:36:
3f:fd:30:c3:00:31:11:4d:79:ba:54:37:56:60:4d:d8:1c:f3:
34:3a:17:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZagGt3/pk7EFAqg3NBYKCF6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyMzQ0YmE2MzQwOTYxZGE1ZWViNGFlMjM5ZTlhMDYyNjc3
OTNlMmUwHhcNMjUwNTA1MTEwMDM3WhcNMjUwNTA2MTEwMDM3WjAzMTEwLwYDVQQD
Eyg5NTVmYzMxOWFiMDllNmI4NmRjZThjYzg5NTNlMWY5M2IyYmM0NzdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQl9alyJCO1jb3Lss97BG0yW22eL
1snP9sqxj+vzKVo9/33CLm7xHz/8Bs+gYRGGvYwi8jLUj9F4z3gZUZ9DWT/sOmZB
cdIEtuvUTMbfcACkyLn6SI6N8ojMxgIzriSZdY06Pak74UXU0QOXw7dK3zOG0i33
YIIeHsgkxSyguiWcGq/Cu4lEro2u0HK1noMVSsA8CKnP7CFdDapPLd0fCrsD9Mz2
t2ybF88yVH3slu79dKv2e87THqds+5kYplQhcdqDX0v4Q47DciM0QEpWq8zRqUa1
CKlAFdg8uUNE0Uqt8otHp9byTTbm/xDIjyOpZzg4w4bYvstW+iHGZGGaHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJVfwxmrCea4bc6MyJU+H5OyvEd6MB8GA1UdIwQY
MBaAFOI0S6Y0CWHaXutK4jnpoGJneT4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGpSTHBqUUpZZHBlNjByaU9lbWdZbWQ1UGk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80NGVjNDMtNTkzNS00YWIyLWIxM2Qt
MDJlYjlhNDEyNjM3LzEvNGpSTHBqUUpZZHBlNjByaU9lbWdZbWQ1UGk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC80NGVjNDMtNTkzNS00YWIyLWIxM2QtMDJlYjlhNDEyNjM3
LzEvNGpSTHBqUUpZZHBlNjByaU9lbWdZbWQ1UGk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADTEGpMhk
IBtVbV/HyJF1HJgaM6aPiuF0qDnEiEov8SRSFbI33VMNXauiGjLVYosToNnNUuS0
ml3eoiv9+CFB/35oUVHv8y14UkB8Zfm5ya/QsUymmgVcjGoWMXNm8jDDSU6kqX2T
OeT9lBQQWozBSvpV7M2oNrjctrS0x8j7SOpvHAnHu1NcuOVL0i652iPq5gGYM0Rg
QG9e36EsdkmDIox6O00JaUFE1FOGr4pd+e5hHk8hpPASOxQ4mNU+QrpQzbLOGjck
JJGJUYYSgy8CVlnptSV+JJ6XJ2Fh368sF4IiwavEbfdBiZg2P/0wwwAxEU15ulQ3
VmBN2BzzNDoXsg==
-----END CERTIFICATE-----
Generated at Mon May 5 20:16:59 2025 by rpki-client