Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
File: 4IFCtC45SABI0fzqWHo2k9pMC4o.mft (raw, json)
Hash identifier: X7ucij9vvg49cW1lfDRIv/uM1UCOKz2Tu/78gXxqLF4=
Subject key identifier: 2E:8B:BD:0E:56:2C:CC:E9:8F:DD:00:66:75:B7:49:4B:DC:7A:1B:22
Authority key identifier: E0:81:42:B4:2E:39:48:00:48:D1:FC:EA:58:7A:36:93:DA:4C:0B:8A
Certificate issuer: /CN=e08142b42e39480048d1fcea587a3693da4c0b8a
Certificate serial: 0196789F3132C4F9572A05501DC6F720C367
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IFCtC45SABI0fzqWHo2k9pMC4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
Manifest number: 02FB
Signing time: Sun 27 Apr 2025 19:00:20 +0000
Manifest this update: Sun 27 Apr 2025 19:00:20 +0000
Manifest next update: Mon 28 Apr 2025 19:00:20 +0000
Files and hashes: 1: 4IFCtC45SABI0fzqWHo2k9pMC4o.crl (hash: Zt83nMoa6FRm/I4mGEIHwkwVGg9T63e27bnUeplTUVQ=)
2: SkmMZcDmD4tfD5IJGWfT10a999s.roa (hash: FtSYkAppozDXy+VqyVeW2kon4HMuVtycn1oxBmmVVwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4IFCtC45SABI0fzqWHo2k9pMC4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:9f:31:32:c4:f9:57:2a:05:50:1d:c6:f7:20:c3:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e08142b42e39480048d1fcea587a3693da4c0b8a
Validity
Not Before: Apr 27 19:00:20 2025 GMT
Not After : Apr 28 19:00:20 2025 GMT
Subject: CN=2e8bbd0e562ccce98fdd006675b7494bdc7a1b22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:20:df:bc:ed:fe:1f:d5:52:ba:50:34:dc:56:
45:70:d8:da:2c:dd:ed:b7:83:ff:eb:23:69:28:75:
b2:9a:d5:85:2e:ac:9b:d8:e6:43:a4:86:23:20:75:
c3:9a:45:6f:b4:cc:15:ea:65:87:98:0d:ea:c2:8c:
24:a6:a9:b1:a1:b7:65:12:3c:27:f0:58:18:54:6e:
c1:65:da:fa:a6:3b:c5:b1:8a:73:aa:25:01:81:8c:
1c:ad:b6:77:d8:b7:de:b9:e5:53:97:5f:6a:b5:1e:
76:75:1b:f5:89:1a:ea:6d:8e:40:65:10:76:ae:03:
17:51:91:a3:27:2c:95:54:83:9f:08:b0:40:70:32:
2e:9a:cb:3a:35:fb:5f:a5:e3:b5:82:8e:8c:90:a8:
0b:d4:20:3a:37:78:16:b6:84:5f:5f:35:66:37:f3:
e4:7d:59:98:e9:58:df:00:fb:96:02:0b:29:cf:0d:
53:4f:b0:27:ae:36:2a:ec:82:2b:e3:31:8a:67:9f:
ed:dd:49:db:ca:20:05:10:9d:48:7f:ff:2f:10:16:
81:4e:50:fe:83:74:28:d1:b1:d7:96:1d:9c:0d:33:
96:2c:21:91:09:8a:7a:3d:79:55:7f:e6:57:8d:e0:
20:29:c2:4e:28:14:86:e1:3b:63:a6:a8:45:b1:d3:
bf:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:8B:BD:0E:56:2C:CC:E9:8F:DD:00:66:75:B7:49:4B:DC:7A:1B:22
X509v3 Authority Key Identifier:
keyid:E0:81:42:B4:2E:39:48:00:48:D1:FC:EA:58:7A:36:93:DA:4C:0B:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IFCtC45SABI0fzqWHo2k9pMC4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:32:5d:54:9d:ea:04:b0:33:c9:a5:e0:93:ef:52:f5:ab:86:
38:5c:f8:72:4c:f8:a4:6d:d3:a9:01:34:cc:74:05:26:1a:af:
35:44:4b:ec:6e:f2:a4:c2:cd:bb:e4:c8:f8:ae:e6:a5:57:61:
c8:71:10:41:09:0d:b9:e6:91:9b:1f:45:3c:0a:d3:19:13:e4:
3a:47:b7:62:c6:66:30:d9:8a:f6:72:99:e9:d8:78:0a:88:38:
3c:e8:c7:38:e4:6a:6f:d3:7f:51:a2:9f:77:b2:ab:a1:27:04:
57:d5:20:67:4d:91:fc:aa:00:7d:9b:61:1b:0c:f1:cc:72:c0:
66:ba:72:4e:e2:bc:3c:b7:6a:24:7e:f7:48:03:4e:cb:6f:65:
62:a6:b8:6d:ac:f9:e5:97:93:9c:ce:ca:cd:10:67:c6:48:a7:
00:1a:80:e5:56:43:b6:6a:df:28:76:d4:8b:7e:3c:ba:c8:31:
78:1f:cf:b3:02:aa:ed:a9:3f:95:c3:04:b9:b9:a8:cf:eb:74:
cc:73:13:1a:a2:b4:b9:1b:9f:5b:c3:c9:36:98:87:db:e3:08:
b6:19:63:2f:17:6e:04:25:27:82:fe:fc:1a:eb:bf:b3:5e:b2:
de:7a:7f:8b:51:90:0f:76:84:9a:12:74:d2:54:fd:d3:8b:5d:
c8:9a:4b:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ4nzEyxPlXKgVQHcb3IMNnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwODE0MmI0MmUzOTQ4MDA0OGQxZmNlYTU4N2EzNjkzZGE0
YzBiOGEwHhcNMjUwNDI3MTkwMDIwWhcNMjUwNDI4MTkwMDIwWjAzMTEwLwYDVQQD
EygyZThiYmQwZTU2MmNjY2U5OGZkZDAwNjY3NWI3NDk0YmRjN2ExYjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSDfvO3+H9VSulA03FZFcNjaLN3t
t4P/6yNpKHWymtWFLqyb2OZDpIYjIHXDmkVvtMwV6mWHmA3qwowkpqmxobdlEjwn
8FgYVG7BZdr6pjvFsYpzqiUBgYwcrbZ32LfeueVTl19qtR52dRv1iRrqbY5AZRB2
rgMXUZGjJyyVVIOfCLBAcDIumss6NftfpeO1go6MkKgL1CA6N3gWtoRfXzVmN/Pk
fVmY6VjfAPuWAgspzw1TT7AnrjYq7IIr4zGKZ5/t3UnbyiAFEJ1If/8vEBaBTlD+
g3Qo0bHXlh2cDTOWLCGRCYp6PXlVf+ZXjeAgKcJOKBSG4TtjpqhFsdO/hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC6LvQ5WLMzpj90AZnW3SUvcehsiMB8GA1UdIwQY
MBaAFOCBQrQuOUgASNH86lh6NpPaTAuKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNElGQ3RDNDVTQUJJMGZ6cVdIbzJrOXBNQzRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8yODJhYzYtNzJjNi00YjJjLTlkZjkt
OGYxZjJjOTE0ZjA0LzEvNElGQ3RDNDVTQUJJMGZ6cVdIbzJrOXBNQzRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8yODJhYzYtNzJjNi00YjJjLTlkZjktOGYxZjJjOTE0ZjA0
LzEvNElGQ3RDNDVTQUJJMGZ6cVdIbzJrOXBNQzRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmzJdVJ3q
BLAzyaXgk+9S9auGOFz4ckz4pG3TqQE0zHQFJhqvNURL7G7ypMLNu+TI+K7mpVdh
yHEQQQkNueaRmx9FPArTGRPkOke3YsZmMNmK9nKZ6dh4Cog4POjHOORqb9N/UaKf
d7KroScEV9UgZ02R/KoAfZthGwzxzHLAZrpyTuK8PLdqJH73SANOy29lYqa4baz5
5ZeTnM7KzRBnxkinABqA5VZDtmrfKHbUi348usgxeB/PswKq7ak/lcMEubmoz+t0
zHMTGqK0uRufW8PJNpiH2+MIthljLxduBCUngv78Guu/s16y3np/i1GQD3aEmhJ0
0lT904tdyJpL2A==
-----END CERTIFICATE-----
Generated at Sun Apr 27 20:56:50 2025 by rpki-client