Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft
File: 4crcikIcHyLx4pBMz9u87F2-GxE.mft (raw, json)
Hash identifier: mJig/1SU1rTXUmt9iE7plUwGRRiA4gPbDnnLznv7h7I=
Subject key identifier: AA:AC:C4:46:5D:03:D9:50:D2:7A:86:46:C6:46:51:36:38:8D:D5:5C
Authority key identifier: E1:CA:DC:8A:42:1C:1F:22:F1:E2:90:4C:CF:DB:BC:EC:5D:BE:1B:11
Certificate issuer: /CN=e1cadc8a421c1f22f1e2904ccfdbbcec5dbe1b11
Certificate serial: 01969B2B0AE0185AE914B16DCD0523C95D76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft
Manifest number: 1529
Signing time: Sun 04 May 2025 12:00:11 +0000
Manifest this update: Sun 04 May 2025 12:00:11 +0000
Manifest next update: Mon 05 May 2025 12:00:11 +0000
Files and hashes: 1: 4crcikIcHyLx4pBMz9u87F2-GxE.crl (hash: h3Hb1KLP01J4KSFB2P2xiIkQY3x4pkzpFAaU98NRe6c=)
2: PjnPc92Q2V1HGAF2zMcKnf8EY3s.roa (hash: oJHQplo1wgSYzbHd7U3NabjFZf8l2Xl3wzFPd6jcOa8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 12:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9b:2b:0a:e0:18:5a:e9:14:b1:6d:cd:05:23:c9:5d:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1cadc8a421c1f22f1e2904ccfdbbcec5dbe1b11
Validity
Not Before: May 4 12:00:11 2025 GMT
Not After : May 5 12:00:11 2025 GMT
Subject: CN=aaacc4465d03d950d27a8646c6465136388dd55c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:15:8e:b2:aa:d9:73:a5:b0:14:ef:42:3e:0f:
76:b9:4a:51:98:f8:a2:fb:e2:6e:b5:00:a3:0b:4a:
6c:cd:e2:97:4f:80:56:ec:2d:17:bf:62:3e:aa:e9:
79:70:d6:b9:aa:3a:b4:3d:69:a1:a0:96:f4:c8:0d:
eb:3e:fb:86:04:1c:18:64:c8:a8:d7:a9:6d:76:3b:
cf:97:db:30:aa:65:35:56:4b:eb:48:d8:7d:19:4c:
61:19:01:29:34:78:f0:78:8b:d2:4a:ee:fc:41:69:
30:9c:1a:8d:01:d8:76:b0:81:81:3f:db:27:23:96:
05:fe:03:43:9a:b9:9a:55:77:33:3f:6b:0a:ff:8d:
b2:e4:2d:29:58:79:4f:37:2b:f8:a5:23:60:d8:ed:
51:37:48:5f:48:c4:9e:a1:db:95:83:ad:ea:43:2b:
b1:81:4f:c4:b3:7d:6f:9b:2a:bc:ed:2c:b0:fc:d8:
e7:05:87:87:77:d3:c4:00:1b:d0:be:d5:96:58:b4:
06:97:57:13:f8:f1:ab:bd:73:46:68:75:02:8a:e5:
6d:7d:ff:91:3e:67:a8:ea:00:50:c6:43:91:55:7f:
1a:c2:4c:10:a8:54:ac:7c:f4:09:00:d5:a7:59:8b:
55:e6:f9:3c:26:89:b1:c7:f8:c3:6d:da:e2:bd:fe:
a9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:AC:C4:46:5D:03:D9:50:D2:7A:86:46:C6:46:51:36:38:8D:D5:5C
X509v3 Authority Key Identifier:
keyid:E1:CA:DC:8A:42:1C:1F:22:F1:E2:90:4C:CF:DB:BC:EC:5D:BE:1B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:6c:2f:25:e8:e7:fe:81:65:4a:24:c9:74:bf:f6:82:55:13:
1a:c5:92:dc:c6:f1:d1:94:2f:7b:b8:ce:54:37:29:91:38:ca:
04:bc:03:c6:b4:0b:14:f8:e8:9d:a9:45:7a:5c:14:f2:47:8e:
d8:5c:02:7f:c1:bb:38:82:f6:e3:e0:f9:3a:8f:ab:f1:6d:03:
74:5f:59:93:0e:38:f5:15:9a:ff:c3:dc:95:32:6c:e5:34:47:
6f:84:04:4b:45:40:0d:09:36:02:25:8b:3c:cb:68:44:9b:4f:
d2:0b:52:77:ad:95:7e:8d:bc:8d:77:5b:38:d2:cf:ff:5c:4c:
6d:b1:53:a0:95:ff:fa:f2:a5:f8:f1:c2:8a:08:49:c5:af:b0:
4f:29:14:e1:b3:33:29:d6:b1:ef:b2:cb:66:62:b1:96:e6:40:
a6:90:74:c9:09:b6:87:90:08:78:8e:11:ee:3b:d5:2d:ee:e8:
57:da:af:a8:70:11:2e:39:bb:ae:56:04:4e:30:0a:9d:2e:6b:
2d:b9:39:e0:e8:40:6a:a5:c9:1a:1b:b6:11:9e:ae:e8:cb:81:
d9:23:dc:fb:d8:ba:c3:02:f0:80:01:a2:fd:a2:95:a8:71:9c:
7d:fb:7a:9e:08:1b:fa:1b:31:87:a5:a5:8e:65:aa:97:e1:21:
6b:04:2b:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZabKwrgGFrpFLFtzQUjyV12MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxY2FkYzhhNDIxYzFmMjJmMWUyOTA0Y2NmZGJiY2VjNWRi
ZTFiMTEwHhcNMjUwNTA0MTIwMDExWhcNMjUwNTA1MTIwMDExWjAzMTEwLwYDVQQD
EyhhYWFjYzQ0NjVkMDNkOTUwZDI3YTg2NDZjNjQ2NTEzNjM4OGRkNTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBWOsqrZc6WwFO9CPg92uUpRmPii
++JutQCjC0pszeKXT4BW7C0Xv2I+qul5cNa5qjq0PWmhoJb0yA3rPvuGBBwYZMio
16ltdjvPl9swqmU1VkvrSNh9GUxhGQEpNHjweIvSSu78QWkwnBqNAdh2sIGBP9sn
I5YF/gNDmrmaVXczP2sK/42y5C0pWHlPNyv4pSNg2O1RN0hfSMSeoduVg63qQyux
gU/Es31vmyq87Syw/NjnBYeHd9PEABvQvtWWWLQGl1cT+PGrvXNGaHUCiuVtff+R
Pmeo6gBQxkORVX8awkwQqFSsfPQJANWnWYtV5vk8Jomxx/jDbdrivf6pIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKqsxEZdA9lQ0nqGRsZGUTY4jdVcMB8GA1UdIwQY
MBaAFOHK3IpCHB8i8eKQTM/bvOxdvhsRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGNyY2lrSWNIeUx4NHBCTXo5dTg3RjItR3hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xMWFmNDItZDNlZC00M2NkLTgyNzQt
NzQyZGMwYzk3MGMwLzEvNGNyY2lrSWNIeUx4NHBCTXo5dTg3RjItR3hFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8xMWFmNDItZDNlZC00M2NkLTgyNzQtNzQyZGMwYzk3MGMw
LzEvNGNyY2lrSWNIeUx4NHBCTXo5dTg3RjItR3hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiGwvJejn
/oFlSiTJdL/2glUTGsWS3Mbx0ZQve7jOVDcpkTjKBLwDxrQLFPjonalFelwU8keO
2FwCf8G7OIL24+D5Oo+r8W0DdF9Zkw449RWa/8PclTJs5TRHb4QES0VADQk2AiWL
PMtoRJtP0gtSd62Vfo28jXdbONLP/1xMbbFToJX/+vKl+PHCighJxa+wTykU4bMz
Kdax77LLZmKxluZAppB0yQm2h5AIeI4R7jvVLe7oV9qvqHARLjm7rlYETjAKnS5r
Lbk54OhAaqXJGhu2EZ6u6MuB2SPc+9i6wwLwgAGi/aKVqHGcfft6nggb+hsxh6Wl
jmWql+EhawQr/w==
-----END CERTIFICATE-----
Generated at Sun May 4 18:46:46 2025 by rpki-client