Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft
File: 4kvChw3iWZ2vZkl_VynHSzPvmTo.mft (raw, json)
Hash identifier: FKez1MgrW6xbeGFHRFT30aT1/8TLXwKr30n51ReXNK4=
Subject key identifier: B0:D4:9F:FA:38:DA:0E:53:3A:1E:37:2A:AD:0C:AA:AF:57:D1:CC:69
Authority key identifier: E2:4B:C2:87:0D:E2:59:9D:AF:66:49:7F:57:29:C7:4B:33:EF:99:3A
Certificate issuer: /CN=e24bc2870de2599daf66497f5729c74b33ef993a
Certificate serial: 01967BA0950C8B45D14353FC640AE5FD818D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kvChw3iWZ2vZkl_VynHSzPvmTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft
Manifest number: 1512
Signing time: Mon 28 Apr 2025 09:00:43 +0000
Manifest this update: Mon 28 Apr 2025 09:00:43 +0000
Manifest next update: Tue 29 Apr 2025 09:00:43 +0000
Files and hashes: 1: 1-rpc7ufolrPPESf1-RPYDxCY_T8.roa (hash: aMrW8McI1AnE66yXNAmSVq0+rlupGq2T5Ly3LIkG59o=)
2: 4kvChw3iWZ2vZkl_VynHSzPvmTo.crl (hash: 7ChJ77Rq+CWWmLsiTDQ0sZVjSpTybG/AYB/KscNHGDE=)
3: fTOQFI1UvSwnT9wznNbLZs3UG2U.roa (hash: L/h45q4tkE5FoRZ0DX9ltIgAYeRk4jVnxVfoOe4XvCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kvChw3iWZ2vZkl_VynHSzPvmTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:a0:95:0c:8b:45:d1:43:53:fc:64:0a:e5:fd:81:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e24bc2870de2599daf66497f5729c74b33ef993a
Validity
Not Before: Apr 28 09:00:43 2025 GMT
Not After : Apr 29 09:00:43 2025 GMT
Subject: CN=b0d49ffa38da0e533a1e372aad0caaaf57d1cc69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:32:36:af:61:a1:cf:71:1f:4c:00:71:da:34:
db:b1:6d:e7:17:08:a9:d8:87:3a:9e:bf:81:45:f8:
4a:84:4b:23:c4:7a:cd:b3:99:a3:e1:62:ac:2a:4d:
3e:81:ad:36:29:bc:ee:54:0e:2c:06:e0:ea:1a:cb:
49:1b:12:bd:b5:7a:fa:20:4f:ff:5d:4a:66:a1:da:
69:9c:74:32:11:1c:60:f6:4a:86:40:ed:f8:22:68:
25:5d:07:80:91:26:13:5d:86:64:a6:91:fa:d6:3a:
eb:2e:d0:00:7b:8d:fa:95:ad:1b:f5:9e:6e:d3:6c:
e2:3e:23:7d:ab:0c:fd:a2:01:ed:58:5f:06:8e:ff:
40:6c:6e:64:43:89:36:e6:bd:09:c4:d3:58:fa:85:
d3:78:61:74:87:1e:49:b3:af:a8:1d:43:53:68:c8:
c9:97:c7:42:38:13:9f:46:1a:90:db:4d:99:e9:38:
c1:3f:c0:13:74:67:1b:3b:50:c1:0c:6a:33:44:11:
1f:8f:6b:6d:2d:af:70:df:8a:56:aa:8d:d8:75:c5:
ee:0f:92:4c:bd:cf:63:1b:74:5a:35:ce:f4:55:ec:
8d:44:c6:b7:a1:90:ea:2e:ef:82:18:49:03:1f:f5:
5b:97:74:43:f7:7d:d5:bf:74:3c:a4:7d:75:4e:25:
01:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D4:9F:FA:38:DA:0E:53:3A:1E:37:2A:AD:0C:AA:AF:57:D1:CC:69
X509v3 Authority Key Identifier:
keyid:E2:4B:C2:87:0D:E2:59:9D:AF:66:49:7F:57:29:C7:4B:33:EF:99:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kvChw3iWZ2vZkl_VynHSzPvmTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:dc:20:38:74:3a:3e:09:71:d7:57:c1:6b:00:d1:18:4f:6e:
b8:f1:c6:61:b7:20:ed:59:9d:6e:70:e2:a5:b9:ed:a3:a4:a9:
c3:c3:40:70:7e:f5:3f:c2:92:cf:51:07:2d:9c:63:d3:30:5e:
57:a2:60:09:e5:4d:42:53:85:e8:dd:56:42:4b:9a:0f:00:68:
cb:c0:71:0a:cb:5b:55:ed:d3:8f:e8:25:95:26:1d:81:4b:79:
e9:44:42:90:db:ac:23:b1:ee:a6:de:61:16:60:68:8d:80:45:
9b:d7:4a:d9:3a:10:54:3b:04:49:15:4b:b7:8a:73:43:01:90:
35:bb:e5:6f:ae:69:19:41:e3:b4:69:9f:96:d6:14:a8:d2:a2:
0b:67:b2:59:c7:f0:60:38:23:b7:85:b5:27:23:e6:73:25:61:
19:c2:66:7d:e3:c4:9f:71:56:8d:8d:12:f5:f4:6f:d6:11:82:
18:08:a7:30:72:f9:f7:70:9a:95:f5:86:a8:d4:26:ee:0f:72:
f2:fa:94:d4:8a:96:29:b4:22:1c:95:a5:1b:b2:e1:8c:43:d2:
4e:98:c6:51:b9:97:f7:b7:f0:12:e3:cc:01:88:fd:39:94:73:
71:a1:f0:24:5d:1c:c5:35:dd:ca:4a:51:43:bb:0b:09:d8:65:
97:aa:d3:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ7oJUMi0XRQ1P8ZArl/YGNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyNGJjMjg3MGRlMjU5OWRhZjY2NDk3ZjU3MjljNzRiMzNl
Zjk5M2EwHhcNMjUwNDI4MDkwMDQzWhcNMjUwNDI5MDkwMDQzWjAzMTEwLwYDVQQD
EyhiMGQ0OWZmYTM4ZGEwZTUzM2ExZTM3MmFhZDBjYWFhZjU3ZDFjYzY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzI2r2Ghz3EfTABx2jTbsW3nFwip
2Ic6nr+BRfhKhEsjxHrNs5mj4WKsKk0+ga02KbzuVA4sBuDqGstJGxK9tXr6IE//
XUpmodppnHQyERxg9kqGQO34ImglXQeAkSYTXYZkppH61jrrLtAAe436la0b9Z5u
02ziPiN9qwz9ogHtWF8Gjv9AbG5kQ4k25r0JxNNY+oXTeGF0hx5Js6+oHUNTaMjJ
l8dCOBOfRhqQ202Z6TjBP8ATdGcbO1DBDGozRBEfj2ttLa9w34pWqo3YdcXuD5JM
vc9jG3RaNc70VeyNRMa3oZDqLu+CGEkDH/Vbl3RD933Vv3Q8pH11TiUBeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLDUn/o42g5TOh43Kq0Mqq9X0cxpMB8GA1UdIwQY
MBaAFOJLwocN4lmdr2ZJf1cpx0sz75k6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGt2Q2h3M2lXWjJ2WmtsX1Z5bkhTelB2bVRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9iZTE3MjAtODAxZS00ZjllLWE1YzEt
NjhhMmYwYmI1YjdhLzEvNGt2Q2h3M2lXWjJ2WmtsX1Z5bkhTelB2bVRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9iZTE3MjAtODAxZS00ZjllLWE1YzEtNjhhMmYwYmI1Yjdh
LzEvNGt2Q2h3M2lXWjJ2WmtsX1Z5bkhTelB2bVRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANtwgOHQ6
Pglx11fBawDRGE9uuPHGYbcg7VmdbnDipbnto6Spw8NAcH71P8KSz1EHLZxj0zBe
V6JgCeVNQlOF6N1WQkuaDwBoy8BxCstbVe3Tj+gllSYdgUt56URCkNusI7Hupt5h
FmBojYBFm9dK2ToQVDsESRVLt4pzQwGQNbvlb65pGUHjtGmfltYUqNKiC2eyWcfw
YDgjt4W1JyPmcyVhGcJmfePEn3FWjY0S9fRv1hGCGAinMHL593CalfWGqNQm7g9y
8vqU1IqWKbQiHJWlG7LhjEPSTpjGUbmX97fwEuPMAYj9OZRzcaHwJF0cxTXdykpR
Q7sLCdhll6rTeQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:14:02 2025 by rpki-client