Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
File: 4p9JZACcdLuBrtnGcHgBPcho7xc.mft (raw, json)
Hash identifier: 7im1oDATIGINVZHntUM9l8U9BS69AEnBpGyW89QzZ0w=
Subject key identifier: 66:73:01:5E:78:8F:43:2A:D2:1B:0A:0E:42:31:90:31:8A:27:88:88
Authority key identifier: E2:9F:49:64:00:9C:74:BB:81:AE:D9:C6:70:78:01:3D:C8:68:EF:17
Certificate issuer: /CN=e29f4964009c74bb81aed9c67078013dc868ef17
Certificate serial: 019680FDCDAE7D4971881B5C3F3E29DECC2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
Manifest number: 1516
Signing time: Tue 29 Apr 2025 10:00:38 +0000
Manifest this update: Tue 29 Apr 2025 10:00:38 +0000
Manifest next update: Wed 30 Apr 2025 10:00:38 +0000
Files and hashes: 1: 1KTjmYkB3cj_19bwNwOyE5tGxCk.roa (hash: H8xeX/8Uyv31FbjznlcJqitCSYJrp0RSe/v1PmExVLA=)
2: 4p9JZACcdLuBrtnGcHgBPcho7xc.crl (hash: RaFFjU7zHYmjUkqvbnG91HcOneSUw1B0gBHAuqAO7c4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 10:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:fd:cd:ae:7d:49:71:88:1b:5c:3f:3e:29:de:cc:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e29f4964009c74bb81aed9c67078013dc868ef17
Validity
Not Before: Apr 29 10:00:38 2025 GMT
Not After : Apr 30 10:00:38 2025 GMT
Subject: CN=6673015e788f432ad21b0a0e423190318a278888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d6:64:13:22:f1:fd:af:43:18:5a:e7:08:86:
e7:e0:78:de:38:27:da:87:40:b2:94:09:ab:53:cf:
be:e0:e6:6b:53:6f:2e:3b:9a:ad:e9:df:08:6e:2c:
40:3b:42:d0:be:b5:64:16:ad:db:84:17:a7:58:42:
8c:30:1f:9c:56:32:50:86:35:0b:1d:c6:fd:ae:26:
d4:3e:42:29:4c:b9:dd:87:9c:2c:5a:a6:14:64:96:
31:10:b4:1a:e4:88:ab:fa:3f:72:86:25:0b:c2:8a:
41:88:19:6b:20:67:c4:31:16:be:a9:57:e1:eb:27:
66:74:e9:70:3d:15:80:28:5c:79:15:2d:38:b3:0d:
54:e5:3e:79:32:66:4e:d2:8e:07:bd:79:38:af:eb:
19:2f:86:9d:bb:5d:ae:1b:d8:6e:e7:07:45:f4:e0:
b5:82:92:5e:b4:12:7d:c3:5a:d6:a8:92:09:4a:75:
df:77:ac:21:1a:c3:6c:3c:4f:b1:6d:a0:6a:3e:4e:
95:53:fd:51:82:a5:dd:cd:0c:98:ab:ad:3a:bd:d6:
7c:b2:8c:94:cd:ea:49:3a:06:af:dd:8c:5c:ec:4f:
42:84:03:0b:58:c6:48:ee:8c:e6:fb:8b:03:f9:a6:
8b:d5:27:2e:d8:f4:63:dd:95:26:ee:38:fe:61:3a:
7c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:73:01:5E:78:8F:43:2A:D2:1B:0A:0E:42:31:90:31:8A:27:88:88
X509v3 Authority Key Identifier:
keyid:E2:9F:49:64:00:9C:74:BB:81:AE:D9:C6:70:78:01:3D:C8:68:EF:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:d3:a8:34:00:4a:5b:52:c3:bf:64:65:0b:23:a8:91:4f:3a:
1b:3c:45:21:a9:b1:83:d0:28:71:60:57:f1:62:d2:ca:96:cd:
97:84:b7:61:cc:37:96:95:97:ee:c8:f2:a6:b9:a2:88:b4:a3:
d6:55:f3:19:b6:a3:46:7b:65:86:b7:c2:16:82:ea:bc:e1:84:
8a:4f:29:0b:0a:87:55:f0:49:29:c7:16:7b:d8:4f:25:d8:1e:
7c:f6:0c:a3:27:47:47:71:b6:94:82:54:5a:4c:c8:f6:5e:db:
6d:ec:33:5b:26:79:8e:48:17:e7:18:b5:e5:90:8e:6c:da:ef:
ce:e5:11:bc:6f:26:96:ec:12:bb:1c:97:b3:4a:53:0a:71:64:
bd:fe:a2:99:7f:4a:ca:b4:2c:82:14:08:e4:dc:f4:45:f5:99:
ca:72:cf:b4:c4:15:67:02:96:22:47:db:14:3e:f4:f4:0c:6b:
0b:c9:3a:e9:54:9a:76:85:27:4b:16:bf:30:9f:86:53:7d:eb:
37:b3:5d:78:27:57:44:6b:08:09:30:79:a4:d3:dc:a2:a3:0f:
1e:a9:bb:38:e2:86:77:7b:3a:0d:39:bf:59:8a:d8:92:c9:55:
64:e5:96:e7:32:b1:33:46:65:83:fa:1a:32:2a:a1:81:25:2c:
47:43:11:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaA/c2ufUlxiBtcPz4p3swsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyOWY0OTY0MDA5Yzc0YmI4MWFlZDljNjcwNzgwMTNkYzg2
OGVmMTcwHhcNMjUwNDI5MTAwMDM4WhcNMjUwNDMwMTAwMDM4WjAzMTEwLwYDVQQD
Eyg2NjczMDE1ZTc4OGY0MzJhZDIxYjBhMGU0MjMxOTAzMThhMjc4ODg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9ZkEyLx/a9DGFrnCIbn4HjeOCfa
h0CylAmrU8++4OZrU28uO5qt6d8IbixAO0LQvrVkFq3bhBenWEKMMB+cVjJQhjUL
Hcb9ribUPkIpTLndh5wsWqYUZJYxELQa5Iir+j9yhiULwopBiBlrIGfEMRa+qVfh
6ydmdOlwPRWAKFx5FS04sw1U5T55MmZO0o4HvXk4r+sZL4adu12uG9hu5wdF9OC1
gpJetBJ9w1rWqJIJSnXfd6whGsNsPE+xbaBqPk6VU/1RgqXdzQyYq606vdZ8soyU
zepJOgav3Yxc7E9ChAMLWMZI7ozm+4sD+aaL1Scu2PRj3ZUm7jj+YTp86QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGZzAV54j0Mq0hsKDkIxkDGKJ4iIMB8GA1UdIwQY
MBaAFOKfSWQAnHS7ga7ZxnB4AT3IaO8XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHA5SlpBQ2NkTHVCcnRuR2NIZ0JQY2hvN3hjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS82NTVhMWMtYmFmNS00NzVmLWEzMDgt
OTMyYWIzNDFhMzY3LzEvNHA5SlpBQ2NkTHVCcnRuR2NIZ0JQY2hvN3hjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS82NTVhMWMtYmFmNS00NzVmLWEzMDgtOTMyYWIzNDFhMzY3
LzEvNHA5SlpBQ2NkTHVCcnRuR2NIZ0JQY2hvN3hjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXdOoNABK
W1LDv2RlCyOokU86GzxFIamxg9AocWBX8WLSypbNl4S3Ycw3lpWX7sjyprmiiLSj
1lXzGbajRntlhrfCFoLqvOGEik8pCwqHVfBJKccWe9hPJdgefPYMoydHR3G2lIJU
WkzI9l7bbewzWyZ5jkgX5xi15ZCObNrvzuURvG8mluwSuxyXs0pTCnFkvf6imX9K
yrQsghQI5Nz0RfWZynLPtMQVZwKWIkfbFD709AxrC8k66VSadoUnSxa/MJ+GU33r
N7NdeCdXRGsICTB5pNPcoqMPHqm7OOKGd3s6DTm/WYrYkslVZOWW5zKxM0Zlg/oa
MiqhgSUsR0MRPQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 18:45:58 2025 by rpki-client