Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.mft
File: 4uevc8B6V4KvJINOvdt0qciXxP8.mft (raw, json)
Hash identifier: BqccbCHghXzlsdRQwPD0Je+GQqmFZB8Dx/A2D+Va0Kc=
Subject key identifier: 97:76:05:9E:1F:2E:E8:FB:D8:3C:D0:0C:E5:55:F0:8A:CA:91:0E:03
Authority key identifier: E2:E7:AF:73:C0:7A:57:82:AF:24:83:4E:BD:DB:74:A9:C8:97:C4:FF
Certificate issuer: /CN=e2e7af73c07a5782af24834ebddb74a9c897c4ff
Certificate serial: 0196805938DF08E81DE8E0B7E6B023418B67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uevc8B6V4KvJINOvdt0qciXxP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.mft
Manifest number: 016F
Signing time: Tue 29 Apr 2025 07:00:52 +0000
Manifest this update: Tue 29 Apr 2025 07:00:52 +0000
Manifest next update: Wed 30 Apr 2025 07:00:52 +0000
Files and hashes: 1: 4uevc8B6V4KvJINOvdt0qciXxP8.crl (hash: TsXyCuKzFDqpc4YyTYl+ctBtMN9ZDOzJ+v3U13EwucY=)
2: k33f_PMIoHn5FXjWs9o_hAagQPU.roa (hash: CQN6YPAgrfc6UnCswx4tiN7JfnanWIcuyP1dM7rzekg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4uevc8B6V4KvJINOvdt0qciXxP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:59:38:df:08:e8:1d:e8:e0:b7:e6:b0:23:41:8b:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e7af73c07a5782af24834ebddb74a9c897c4ff
Validity
Not Before: Apr 29 07:00:52 2025 GMT
Not After : Apr 30 07:00:52 2025 GMT
Subject: CN=9776059e1f2ee8fbd83cd00ce555f08aca910e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:88:36:ba:2f:03:54:cb:b1:d2:2c:1a:9e:b6:
d6:74:de:cb:08:69:8d:ff:aa:1f:fd:c9:ee:95:b5:
8c:1a:3a:0a:96:c5:52:cf:8b:bc:4d:1c:d7:6a:f0:
11:af:50:a0:89:6d:cd:3d:da:53:f0:82:3c:cc:3c:
27:9c:52:b6:e3:85:ca:3b:98:94:19:02:3e:b2:dd:
84:0d:9d:d1:4f:56:81:0c:eb:78:df:d0:7d:06:a0:
6d:6f:42:d7:e3:9d:6e:69:75:d6:05:e5:f8:c9:a0:
8c:2d:d1:c5:9c:a3:3e:3c:43:a5:1d:95:4d:3d:6d:
a3:72:4b:5b:23:04:71:97:b2:37:3e:5c:92:b5:79:
fa:35:12:fe:c9:7b:09:f0:a9:66:40:d3:61:d3:be:
aa:5c:c6:e0:8a:fb:9c:7a:43:15:69:9f:be:f1:01:
23:e7:23:9d:e0:74:e6:e8:94:40:c8:65:8b:01:8d:
ef:0f:70:ed:c6:50:fd:22:d2:52:82:bd:31:91:da:
fb:19:da:da:70:fb:f3:0a:a8:c3:ab:fc:54:ed:90:
08:0a:6e:72:69:9e:f9:46:03:90:80:59:b5:1b:03:
71:d2:71:f3:51:a3:1c:8c:3c:d6:7d:56:90:75:a8:
b4:34:21:3f:8c:5f:0d:fe:c7:b4:6d:d2:89:d3:c1:
f4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:76:05:9E:1F:2E:E8:FB:D8:3C:D0:0C:E5:55:F0:8A:CA:91:0E:03
X509v3 Authority Key Identifier:
keyid:E2:E7:AF:73:C0:7A:57:82:AF:24:83:4E:BD:DB:74:A9:C8:97:C4:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uevc8B6V4KvJINOvdt0qciXxP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:f9:05:86:c0:99:e4:1c:cc:b7:bd:89:54:af:18:81:d4:8d:
79:5d:b5:d4:29:4a:65:ac:65:7a:4c:91:8a:6e:32:bb:0b:42:
a9:c8:03:7c:f9:29:c3:89:ac:76:8c:8a:d6:74:d6:6f:10:a2:
3d:13:c0:f5:75:6b:83:8a:39:44:46:46:7a:28:ab:8f:1f:09:
69:2e:02:d3:e7:3a:e5:d8:bc:57:8b:b8:72:d4:bc:a8:0b:a1:
f8:c6:8b:c4:4b:a7:b9:17:af:8d:c4:31:07:75:7e:67:ae:4d:
86:4b:9f:60:b4:4c:17:98:df:cd:e4:14:0a:a2:2b:fc:41:44:
c4:d4:2b:e5:63:73:1d:4f:cb:f6:f4:43:86:43:eb:e0:6c:0d:
5e:9d:28:18:4e:cc:a5:da:55:9a:52:1b:c5:1c:6d:0d:65:9e:
ed:bf:a5:b7:6f:30:56:e3:a4:76:c0:3b:92:e1:8c:06:f2:60:
5f:ba:9e:22:44:18:01:78:72:87:33:14:7a:48:28:c1:32:a2:
a9:f5:a4:83:89:a6:76:cf:91:16:94:8d:59:ec:47:d3:17:5d:
13:f5:75:61:62:cf:bf:12:b6:be:70:43:72:c2:ac:49:34:c0:
a2:e1:ed:8d:5b:f6:e1:b5:87:f1:1d:45:a8:df:6c:99:e2:2e:
d0:8f:0b:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaAWTjfCOgd6OC35rAjQYtnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZTdhZjczYzA3YTU3ODJhZjI0ODM0ZWJkZGI3NGE5Yzg5
N2M0ZmYwHhcNMjUwNDI5MDcwMDUyWhcNMjUwNDMwMDcwMDUyWjAzMTEwLwYDVQQD
Eyg5Nzc2MDU5ZTFmMmVlOGZiZDgzY2QwMGNlNTU1ZjA4YWNhOTEwZTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIg2ui8DVMux0iwanrbWdN7LCGmN
/6of/cnulbWMGjoKlsVSz4u8TRzXavARr1CgiW3NPdpT8II8zDwnnFK244XKO5iU
GQI+st2EDZ3RT1aBDOt439B9BqBtb0LX451uaXXWBeX4yaCMLdHFnKM+PEOlHZVN
PW2jcktbIwRxl7I3PlyStXn6NRL+yXsJ8KlmQNNh076qXMbgivucekMVaZ++8QEj
5yOd4HTm6JRAyGWLAY3vD3DtxlD9ItJSgr0xkdr7GdracPvzCqjDq/xU7ZAICm5y
aZ75RgOQgFm1GwNx0nHzUaMcjDzWfVaQdai0NCE/jF8N/se0bdKJ08H05QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJd2BZ4fLuj72DzQDOVV8IrKkQ4DMB8GA1UdIwQY
MBaAFOLnr3PAeleCrySDTr3bdKnIl8T/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHVldmM4QjZWNEt2SklOT3ZkdDBxY2lYeFA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS82NTM5OGEtMGZhYS00YjY0LWJkMDkt
MDk4ODZjMGM0NmEwLzEvNHVldmM4QjZWNEt2SklOT3ZkdDBxY2lYeFA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS82NTM5OGEtMGZhYS00YjY0LWJkMDktMDk4ODZjMGM0NmEw
LzEvNHVldmM4QjZWNEt2SklOT3ZkdDBxY2lYeFA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATPkFhsCZ
5BzMt72JVK8YgdSNeV211ClKZaxlekyRim4yuwtCqcgDfPkpw4msdoyK1nTWbxCi
PRPA9XVrg4o5REZGeiirjx8JaS4C0+c65di8V4u4ctS8qAuh+MaLxEunuRevjcQx
B3V+Z65NhkufYLRMF5jfzeQUCqIr/EFExNQr5WNzHU/L9vRDhkPr4GwNXp0oGE7M
pdpVmlIbxRxtDWWe7b+lt28wVuOkdsA7kuGMBvJgX7qeIkQYAXhyhzMUekgowTKi
qfWkg4mmds+RFpSNWexH0xddE/V1YWLPvxK2vnBDcsKsSTTAouHtjVv24bWH8R1F
qN9smeIu0I8L7A==
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:38:03 2025 by rpki-client