Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
File: 4IFCtC45SABI0fzqWHo2k9pMC4o.mft (raw, json)
Hash identifier: X0DhBLS8FBFnVex+7AAIjiwpA1ZvflhuFSKdx2KkcyM=
Subject key identifier: F0:FA:21:8F:25:1F:1E:01:9E:13:DB:03:44:A2:28:0F:FF:2A:2D:02
Authority key identifier: E0:81:42:B4:2E:39:48:00:48:D1:FC:EA:58:7A:36:93:DA:4C:0B:8A
Certificate issuer: /CN=e08142b42e39480048d1fcea587a3693da4c0b8a
Certificate serial: 01967C7C201A304A42BFD423925338DE31F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IFCtC45SABI0fzqWHo2k9pMC4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
Manifest number: 02FD
Signing time: Mon 28 Apr 2025 13:00:31 +0000
Manifest this update: Mon 28 Apr 2025 13:00:31 +0000
Manifest next update: Tue 29 Apr 2025 13:00:31 +0000
Files and hashes: 1: 4IFCtC45SABI0fzqWHo2k9pMC4o.crl (hash: /e2JQ2RmDmRiTK4iN0lm8Pbmigm+nQt+VZrIOhdlwSc=)
2: SkmMZcDmD4tfD5IJGWfT10a999s.roa (hash: FtSYkAppozDXy+VqyVeW2kon4HMuVtycn1oxBmmVVwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4IFCtC45SABI0fzqWHo2k9pMC4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 13:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:7c:20:1a:30:4a:42:bf:d4:23:92:53:38:de:31:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e08142b42e39480048d1fcea587a3693da4c0b8a
Validity
Not Before: Apr 28 13:00:31 2025 GMT
Not After : Apr 29 13:00:31 2025 GMT
Subject: CN=f0fa218f251f1e019e13db0344a2280fff2a2d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cf:81:b5:89:b6:d1:a4:00:91:9a:d0:f5:0c:
a1:f9:ca:cd:6d:57:62:38:76:27:7a:cc:dd:ff:d7:
d7:a5:e6:eb:db:2c:94:8d:1d:96:0f:50:ba:2f:43:
18:c1:44:37:ce:09:f9:96:be:6d:ae:e5:dd:3e:7c:
7e:56:15:7f:57:2b:6c:ec:6f:b9:85:6d:af:2e:89:
e8:49:44:52:c4:e2:f1:96:2d:df:a5:02:9d:30:8f:
24:e0:bf:3d:60:41:20:a2:ef:52:49:b7:cc:5c:9e:
b6:f4:44:27:dc:89:67:a1:69:8f:43:0d:a1:46:0b:
68:ec:a9:57:d8:7b:96:d0:6e:19:c7:85:d2:75:be:
98:07:81:09:62:ec:09:7d:32:f4:2b:17:69:ec:c2:
18:6d:38:8a:c3:d2:d6:7f:cb:12:14:06:8a:8f:a5:
50:8a:e2:d0:d2:2b:d6:e6:f3:d7:d1:2b:70:9f:b5:
63:fa:96:8a:9c:78:a2:39:f3:41:3c:0d:6c:a2:59:
8d:72:e2:65:87:4e:14:b0:95:cb:a8:dd:95:06:e9:
ee:cd:b0:b5:34:57:0d:f2:2f:42:7d:1d:99:49:33:
fa:2c:df:9e:58:e3:92:ba:73:c9:24:56:1e:f4:83:
59:b6:b7:0d:95:d5:af:42:b4:f7:74:aa:19:fc:08:
ed:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:FA:21:8F:25:1F:1E:01:9E:13:DB:03:44:A2:28:0F:FF:2A:2D:02
X509v3 Authority Key Identifier:
keyid:E0:81:42:B4:2E:39:48:00:48:D1:FC:EA:58:7A:36:93:DA:4C:0B:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IFCtC45SABI0fzqWHo2k9pMC4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:dc:fc:b8:e5:09:e8:4e:4c:bb:10:29:6a:7e:02:1f:13:c0:
43:98:75:14:8c:d6:87:30:1e:dc:6c:41:38:e6:5a:a0:cb:ed:
b1:85:6d:2d:fd:33:56:cc:eb:df:36:3f:5f:15:05:4b:71:ca:
e6:fb:ec:18:78:24:48:b5:2a:da:be:6d:4e:bf:3c:eb:f3:53:
7b:21:35:4d:74:c2:1c:72:60:d8:01:c1:9a:6c:2f:bf:ab:38:
d4:f1:5e:46:58:2e:12:15:3a:66:11:92:78:41:bd:3e:7a:77:
74:2b:8d:b1:11:2b:e9:d5:dd:d3:6d:e4:b0:5f:63:78:27:0e:
71:c6:e1:6f:9e:d9:e5:3a:2e:3d:b2:69:b6:d8:e7:cf:80:4a:
20:8e:1f:cd:d3:22:16:1b:79:4d:e8:e1:3f:48:39:c5:37:a6:
0a:0a:11:87:86:16:36:93:a1:29:d1:04:bf:a1:c2:fb:d9:03:
bc:e4:c6:21:63:1f:7b:85:f5:8d:7b:d8:93:83:ab:74:bb:2f:
38:c3:55:68:15:2f:44:21:31:c7:2a:3c:02:9d:ed:0a:ba:f7:
21:ff:49:68:e5:43:b9:74:0c:48:51:4e:f0:13:92:1d:ce:13:
ee:7f:2c:e2:09:47:36:70:d7:9d:dc:fc:e8:6a:22:b1:de:5f:
07:b9:7d:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ8fCAaMEpCv9QjklM43jH3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwODE0MmI0MmUzOTQ4MDA0OGQxZmNlYTU4N2EzNjkzZGE0
YzBiOGEwHhcNMjUwNDI4MTMwMDMxWhcNMjUwNDI5MTMwMDMxWjAzMTEwLwYDVQQD
EyhmMGZhMjE4ZjI1MWYxZTAxOWUxM2RiMDM0NGEyMjgwZmZmMmEyZDAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuM+BtYm20aQAkZrQ9Qyh+crNbVdi
OHYneszd/9fXpebr2yyUjR2WD1C6L0MYwUQ3zgn5lr5truXdPnx+VhV/Vyts7G+5
hW2vLonoSURSxOLxli3fpQKdMI8k4L89YEEgou9SSbfMXJ629EQn3IlnoWmPQw2h
Rgto7KlX2HuW0G4Zx4XSdb6YB4EJYuwJfTL0Kxdp7MIYbTiKw9LWf8sSFAaKj6VQ
iuLQ0ivW5vPX0Stwn7Vj+paKnHiiOfNBPA1solmNcuJlh04UsJXLqN2VBunuzbC1
NFcN8i9CfR2ZSTP6LN+eWOOSunPJJFYe9INZtrcNldWvQrT3dKoZ/AjthwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPD6IY8lHx4BnhPbA0SiKA//Ki0CMB8GA1UdIwQY
MBaAFOCBQrQuOUgASNH86lh6NpPaTAuKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNElGQ3RDNDVTQUJJMGZ6cVdIbzJrOXBNQzRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8yODJhYzYtNzJjNi00YjJjLTlkZjkt
OGYxZjJjOTE0ZjA0LzEvNElGQ3RDNDVTQUJJMGZ6cVdIbzJrOXBNQzRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8yODJhYzYtNzJjNi00YjJjLTlkZjktOGYxZjJjOTE0ZjA0
LzEvNElGQ3RDNDVTQUJJMGZ6cVdIbzJrOXBNQzRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADNz8uOUJ
6E5MuxApan4CHxPAQ5h1FIzWhzAe3GxBOOZaoMvtsYVtLf0zVszr3zY/XxUFS3HK
5vvsGHgkSLUq2r5tTr886/NTeyE1TXTCHHJg2AHBmmwvv6s41PFeRlguEhU6ZhGS
eEG9Pnp3dCuNsREr6dXd023ksF9jeCcOccbhb57Z5TouPbJpttjnz4BKII4fzdMi
Fht5TejhP0g5xTemCgoRh4YWNpOhKdEEv6HC+9kDvOTGIWMfe4X1jXvYk4OrdLsv
OMNVaBUvRCExxyo8Ap3tCrr3If9JaOVDuXQMSFFO8BOSHc4T7n8s4glHNnDXndz8
6Goisd5fB7l9SA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:49:20 2025 by rpki-client