Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
File: 4p9JZACcdLuBrtnGcHgBPcho7xc.mft (raw, json)
Hash identifier: oKAhMyeVI8GAYCHwD6fx5qojR7a5b4nGi4p0MOhzkmw=
Subject key identifier: FE:2B:DD:55:FC:95:7D:AF:B7:2B:91:06:B5:43:00:03:CE:EF:D5:0D
Authority key identifier: E2:9F:49:64:00:9C:74:BB:81:AE:D9:C6:70:78:01:3D:C8:68:EF:17
Certificate issuer: /CN=e29f4964009c74bb81aed9c67078013dc868ef17
Certificate serial: 019684DA996158298C3DE562FFB6B9A8EB8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
Manifest number: 1518
Signing time: Wed 30 Apr 2025 04:00:40 +0000
Manifest this update: Wed 30 Apr 2025 04:00:40 +0000
Manifest next update: Thu 01 May 2025 04:00:40 +0000
Files and hashes: 1: 1KTjmYkB3cj_19bwNwOyE5tGxCk.roa (hash: H8xeX/8Uyv31FbjznlcJqitCSYJrp0RSe/v1PmExVLA=)
2: 4p9JZACcdLuBrtnGcHgBPcho7xc.crl (hash: FgvVkzS47vFKeUeeZmrP/VBohzs1Hchdlvre2YDIcpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:da:99:61:58:29:8c:3d:e5:62:ff:b6:b9:a8:eb:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e29f4964009c74bb81aed9c67078013dc868ef17
Validity
Not Before: Apr 30 04:00:40 2025 GMT
Not After : May 1 04:00:40 2025 GMT
Subject: CN=fe2bdd55fc957dafb72b9106b5430003ceefd50d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:76:b4:e6:40:d5:97:19:bf:0c:7a:27:35:1b:
b6:47:fd:e4:23:be:77:70:bf:be:05:98:c3:ab:94:
31:23:42:4c:4f:7d:d3:a6:c8:ad:e5:93:8b:da:1c:
82:fb:a5:a8:39:3c:7f:f0:42:65:ae:3d:11:bb:ff:
e9:f2:aa:26:7b:54:d0:cf:37:9a:05:2b:9d:66:23:
d9:16:35:71:07:99:b9:db:f6:dc:81:ed:22:55:54:
52:f1:96:2f:bc:77:af:e2:a8:69:d1:d4:2b:58:97:
e1:c9:fa:19:e4:28:41:b2:77:21:9c:50:0a:7e:b4:
bf:7c:ba:8a:05:23:c3:34:90:d0:4f:6f:a4:70:27:
4b:b6:3c:6e:0c:6f:c8:7a:4a:8d:f7:d3:3a:42:9b:
7c:5a:33:55:30:7c:c8:9c:93:fd:4f:a7:43:0b:a7:
05:d9:26:9e:c3:b4:c9:fd:1c:17:bc:58:d2:cf:e9:
fd:2e:4c:3a:20:5a:bb:24:bc:ca:db:6d:c2:1d:a4:
df:33:dc:0e:fa:0f:b1:0e:9a:7a:5f:89:26:b7:b1:
93:c7:2b:09:a8:3f:c7:11:80:60:48:93:3f:5e:96:
21:81:bc:44:53:71:13:61:3f:00:97:aa:ee:25:7f:
0b:98:53:a6:e6:de:25:b8:2e:b3:c8:ad:82:72:da:
dc:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:2B:DD:55:FC:95:7D:AF:B7:2B:91:06:B5:43:00:03:CE:EF:D5:0D
X509v3 Authority Key Identifier:
keyid:E2:9F:49:64:00:9C:74:BB:81:AE:D9:C6:70:78:01:3D:C8:68:EF:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:f2:45:4a:3e:f3:44:27:57:a8:8f:93:cd:b8:9d:76:4d:f6:
8a:03:ed:c5:b2:f1:d8:1c:67:7b:1e:ae:d3:6a:59:99:23:d6:
49:e6:54:34:92:58:63:1d:8f:8f:f2:88:bb:93:e8:1a:c9:4d:
1d:38:41:17:a1:4b:2b:50:a6:d9:df:e0:9a:34:ef:18:e1:3d:
b5:b2:c1:f9:d8:b3:2f:3a:9c:6f:42:ac:1c:14:92:41:0d:30:
a8:af:1b:df:0c:be:dd:6c:ee:58:47:b2:96:42:bd:46:15:e6:
ad:4d:ef:03:7f:d7:bb:12:16:d5:65:3b:04:c3:de:86:ee:f0:
54:5b:aa:5a:86:cb:43:f6:b2:a2:bd:4e:5c:32:3c:0f:4b:54:
34:9a:ff:03:43:a2:4b:dd:b2:e7:0b:ab:f9:18:98:fd:97:a4:
ee:d4:17:f5:a0:00:85:80:14:73:91:be:dc:63:33:76:65:f3:
be:0e:ff:0e:ae:55:80:4b:1b:9c:d0:f2:a0:ed:aa:bb:3b:9f:
6f:2a:c8:55:76:2e:b6:d5:12:77:c3:11:1e:2b:90:94:7e:26:
fe:0c:fb:c3:3a:ea:f9:d6:6e:7a:f7:79:9a:e4:41:79:e3:d9:
f0:72:c1:e0:cc:ae:f8:d5:08:d2:f9:8d:d6:f5:81:9c:b6:27:
86:73:e9:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaE2plhWCmMPeVi/7a5qOuMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyOWY0OTY0MDA5Yzc0YmI4MWFlZDljNjcwNzgwMTNkYzg2
OGVmMTcwHhcNMjUwNDMwMDQwMDQwWhcNMjUwNTAxMDQwMDQwWjAzMTEwLwYDVQQD
EyhmZTJiZGQ1NWZjOTU3ZGFmYjcyYjkxMDZiNTQzMDAwM2NlZWZkNTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Ha05kDVlxm/DHonNRu2R/3kI753
cL++BZjDq5QxI0JMT33Tpsit5ZOL2hyC+6WoOTx/8EJlrj0Ru//p8qome1TQzzea
BSudZiPZFjVxB5m52/bcge0iVVRS8ZYvvHev4qhp0dQrWJfhyfoZ5ChBsnchnFAK
frS/fLqKBSPDNJDQT2+kcCdLtjxuDG/IekqN99M6Qpt8WjNVMHzInJP9T6dDC6cF
2Saew7TJ/RwXvFjSz+n9Lkw6IFq7JLzK223CHaTfM9wO+g+xDpp6X4kmt7GTxysJ
qD/HEYBgSJM/XpYhgbxEU3ETYT8Al6ruJX8LmFOm5t4luC6zyK2CctrcBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP4r3VX8lX2vtyuRBrVDAAPO79UNMB8GA1UdIwQY
MBaAFOKfSWQAnHS7ga7ZxnB4AT3IaO8XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHA5SlpBQ2NkTHVCcnRuR2NIZ0JQY2hvN3hjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS82NTVhMWMtYmFmNS00NzVmLWEzMDgt
OTMyYWIzNDFhMzY3LzEvNHA5SlpBQ2NkTHVCcnRuR2NIZ0JQY2hvN3hjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS82NTVhMWMtYmFmNS00NzVmLWEzMDgtOTMyYWIzNDFhMzY3
LzEvNHA5SlpBQ2NkTHVCcnRuR2NIZ0JQY2hvN3hjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsPJFSj7z
RCdXqI+Tzbiddk32igPtxbLx2Bxnex6u02pZmSPWSeZUNJJYYx2Pj/KIu5PoGslN
HThBF6FLK1Cm2d/gmjTvGOE9tbLB+dizLzqcb0KsHBSSQQ0wqK8b3wy+3WzuWEey
lkK9RhXmrU3vA3/XuxIW1WU7BMPehu7wVFuqWobLQ/ayor1OXDI8D0tUNJr/A0Oi
S92y5wur+RiY/Zek7tQX9aAAhYAUc5G+3GMzdmXzvg7/Dq5VgEsbnNDyoO2quzuf
byrIVXYuttUSd8MRHiuQlH4m/gz7wzrq+dZuevd5muRBeePZ8HLB4Myu+NUI0vmN
1vWBnLYnhnPp/Q==
-----END CERTIFICATE-----
Generated at Wed Apr 30 10:42:11 2025 by rpki-client