Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
File: tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft (raw, json)
Hash identifier: bRfCTNCAz3zL5xYTzmPUfBGOEbDjlckwUlJq6otqOI8=
Subject key identifier: 87:40:1E:86:15:5E:8C:D0:5F:9F:34:0A:7F:45:74:FE:10:2A:3C:FC
Authority key identifier: B5:1E:3F:6B:EB:CD:05:29:1D:C5:26:5E:08:B1:CD:6C:40:1B:9C:FD
Certificate issuer: /CN=b51e3f6bebcd05291dc5265e08b1cd6c401b9cfd
Certificate serial: 01967FEB1559715A7D65E2C633126F663082
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
Manifest number: 1518
Signing time: Tue 29 Apr 2025 05:00:34 +0000
Manifest this update: Tue 29 Apr 2025 05:00:34 +0000
Manifest next update: Wed 30 Apr 2025 05:00:34 +0000
Files and hashes: 1: XhX8A-oz684Iwe53pFqloQYS-kU.roa (hash: Mq5uGJtvZYMl6nllrQZDhX8D38boD4gAAjpBeZPZFnU=)
2: tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl (hash: 8qZLEIY+G0+MnysZ7OmXhYifZUPlQybBG8E7ji3LBCk=)
3: xq7eF4vg8c3V2xQvveah7LJZv-A.roa (hash: atQkAxpvj5iGJRjdwa/1uBWThI8y8UsCB5Ad2gGNyxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:eb:15:59:71:5a:7d:65:e2:c6:33:12:6f:66:30:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b51e3f6bebcd05291dc5265e08b1cd6c401b9cfd
Validity
Not Before: Apr 29 05:00:34 2025 GMT
Not After : Apr 30 05:00:34 2025 GMT
Subject: CN=87401e86155e8cd05f9f340a7f4574fe102a3cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:fd:20:e7:38:fa:7e:ab:37:6c:bf:6b:fb:8e:
6b:9f:c4:a6:94:b3:ad:c0:b4:35:41:8d:3b:06:17:
d3:5f:e4:15:be:f1:86:9f:7f:2b:59:45:9e:fb:b2:
24:f7:32:79:e2:ab:62:dc:d7:ff:78:ef:c6:18:be:
47:a5:91:2a:c3:6c:a9:be:62:9e:82:a8:90:e7:ea:
e6:41:a0:53:d8:59:7d:91:1f:77:6b:4d:25:e9:27:
74:c0:c2:52:c4:08:c6:ff:65:a8:de:4d:ad:5a:c2:
50:33:97:0d:c8:31:32:01:76:52:bc:d3:3b:8f:9c:
61:63:db:c1:4a:ad:42:08:14:57:65:c0:63:19:7a:
1f:8e:71:27:d0:2c:bb:cd:6e:ec:e6:62:c6:47:0b:
ec:4f:40:c3:71:4d:0b:09:b1:e9:ca:58:35:89:72:
d4:c3:7f:ae:bb:fc:1e:8b:06:f9:2f:d8:d7:bc:cc:
44:15:24:7f:4d:f0:be:7d:10:96:21:a1:4e:57:81:
c8:3e:05:f2:d7:b0:60:1d:86:b4:52:c0:97:c7:98:
2e:3f:19:3d:21:78:98:96:83:b4:5f:ac:90:02:23:
54:09:da:76:b7:4d:c1:3f:b7:fc:51:b6:34:90:39:
83:e8:91:0a:17:1a:d8:93:c9:2e:14:f0:ea:82:78:
c6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:40:1E:86:15:5E:8C:D0:5F:9F:34:0A:7F:45:74:FE:10:2A:3C:FC
X509v3 Authority Key Identifier:
keyid:B5:1E:3F:6B:EB:CD:05:29:1D:C5:26:5E:08:B1:CD:6C:40:1B:9C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:96:85:54:f1:1e:84:65:2c:0d:92:cd:44:4f:8c:c5:3d:43:
30:57:89:c3:68:0b:4f:09:6d:80:6d:b4:76:9b:bc:da:ab:73:
03:ee:18:96:8f:af:bd:c2:53:4d:88:51:35:4c:40:99:8c:ef:
6d:c0:16:bf:91:f5:a3:80:e3:54:cd:9e:60:a2:f0:af:a2:ab:
eb:bc:8c:35:3d:e1:e1:fb:bd:e1:a6:e4:25:3a:84:b6:a1:2f:
7e:61:50:12:6a:9f:10:4d:20:a4:4c:3a:f2:69:6c:0e:21:66:
ef:ce:8b:e0:22:c6:9f:b7:9e:c5:ab:1d:69:f4:9b:f8:48:ad:
4b:1b:5d:75:c7:b5:8e:f7:c5:7d:31:2b:53:3f:3f:af:47:7f:
4a:5d:5f:42:18:bc:c5:a7:b8:a4:f0:86:5c:2c:a8:f8:1e:8d:
32:f5:09:e5:ca:d0:18:5a:51:06:56:9c:c8:ff:b5:a4:14:86:
4a:78:1f:3e:6b:e6:30:0f:2a:4a:03:bf:e2:69:04:98:38:dd:
6b:83:92:c1:17:17:cb:7c:de:24:9e:ab:bc:1e:19:8d:ce:8f:
42:a3:44:22:0c:06:b9:31:f5:0c:59:9c:31:59:92:1d:f7:4c:
0a:44:2f:b2:55:44:6a:d4:1a:d0:7e:ce:16:07:66:e0:e4:2e:
3e:47:22:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ/6xVZcVp9ZeLGMxJvZjCCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MWUzZjZiZWJjZDA1MjkxZGM1MjY1ZTA4YjFjZDZjNDAx
YjljZmQwHhcNMjUwNDI5MDUwMDM0WhcNMjUwNDMwMDUwMDM0WjAzMTEwLwYDVQQD
Eyg4NzQwMWU4NjE1NWU4Y2QwNWY5ZjM0MGE3ZjQ1NzRmZTEwMmEzY2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/0g5zj6fqs3bL9r+45rn8SmlLOt
wLQ1QY07BhfTX+QVvvGGn38rWUWe+7Ik9zJ54qti3Nf/eO/GGL5HpZEqw2ypvmKe
gqiQ5+rmQaBT2Fl9kR93a00l6Sd0wMJSxAjG/2Wo3k2tWsJQM5cNyDEyAXZSvNM7
j5xhY9vBSq1CCBRXZcBjGXofjnEn0Cy7zW7s5mLGRwvsT0DDcU0LCbHpylg1iXLU
w3+uu/weiwb5L9jXvMxEFSR/TfC+fRCWIaFOV4HIPgXy17BgHYa0UsCXx5guPxk9
IXiYloO0X6yQAiNUCdp2t03BP7f8UbY0kDmD6JEKFxrYk8kuFPDqgnjGfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIdAHoYVXozQX580Cn9FdP4QKjz8MB8GA1UdIwQY
MBaAFLUeP2vrzQUpHcUmXgixzWxAG5z9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFI0X2Etdk5CU2tkeFNaZUNMSE5iRUFiblAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8wMmZkZmQtN2FjOC00MzIxLWI5MzAt
OGZhNTUxZTZhZTc1LzEvdFI0X2Etdk5CU2tkeFNaZUNMSE5iRUFiblAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8wMmZkZmQtN2FjOC00MzIxLWI5MzAtOGZhNTUxZTZhZTc1
LzEvdFI0X2Etdk5CU2tkeFNaZUNMSE5iRUFiblAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiZaFVPEe
hGUsDZLNRE+MxT1DMFeJw2gLTwltgG20dpu82qtzA+4Ylo+vvcJTTYhRNUxAmYzv
bcAWv5H1o4DjVM2eYKLwr6Kr67yMNT3h4fu94abkJTqEtqEvfmFQEmqfEE0gpEw6
8mlsDiFm786L4CLGn7eexasdafSb+EitSxtddce1jvfFfTErUz8/r0d/Sl1fQhi8
xae4pPCGXCyo+B6NMvUJ5crQGFpRBlacyP+1pBSGSngfPmvmMA8qSgO/4mkEmDjd
a4OSwRcXy3zeJJ6rvB4Zjc6PQqNEIgwGuTH1DFmcMVmSHfdMCkQvslVEatQa0H7O
Fgdm4OQuPkciaQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 12:48:41 2025 by rpki-client