Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
File: 4IFCtC45SABI0fzqWHo2k9pMC4o.mft (raw, json)
Hash identifier: HrKUZOnl08zptBkvrpz3R7LMpIV6euAaCGLpL0EfJxs=
Subject key identifier: AE:DE:5F:FE:A8:34:C5:EB:15:52:4E:44:CD:67:31:C3:85:9F:55:BB
Authority key identifier: E0:81:42:B4:2E:39:48:00:48:D1:FC:EA:58:7A:36:93:DA:4C:0B:8A
Certificate issuer: /CN=e08142b42e39480048d1fcea587a3693da4c0b8a
Certificate serial: 01976A060F61882AC406F34F7FBAD3E0D2B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IFCtC45SABI0fzqWHo2k9pMC4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
Manifest number: 0378
Signing time: Fri 13 Jun 2025 16:01:11 +0000
Manifest this update: Fri 13 Jun 2025 16:01:11 +0000
Manifest next update: Sat 14 Jun 2025 16:01:11 +0000
Files and hashes: 1: 4IFCtC45SABI0fzqWHo2k9pMC4o.crl (hash: Hf6COWDqYdhggKvnLZUPDMU9gOX08d3Tw9DDvqDy4iw=)
2: SkmMZcDmD4tfD5IJGWfT10a999s.roa (hash: FtSYkAppozDXy+VqyVeW2kon4HMuVtycn1oxBmmVVwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4IFCtC45SABI0fzqWHo2k9pMC4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:06:0f:61:88:2a:c4:06:f3:4f:7f:ba:d3:e0:d2:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e08142b42e39480048d1fcea587a3693da4c0b8a
Validity
Not Before: Jun 13 16:01:11 2025 GMT
Not After : Jun 14 16:01:11 2025 GMT
Subject: CN=aede5ffea834c5eb15524e44cd6731c3859f55bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:cc:07:33:7d:05:65:2c:c4:67:54:56:6a:dd:
b5:b7:ac:b1:08:30:1f:b6:f4:12:cc:c6:ab:67:d7:
7a:cc:1e:95:43:20:95:69:3c:44:8d:82:b9:91:df:
f3:71:38:34:bd:df:c9:ec:f4:3f:ab:02:77:7b:b2:
cd:cb:f3:4b:28:a2:e5:bd:eb:9a:26:77:36:18:9c:
bd:0d:ec:93:f0:97:eb:56:b7:95:38:44:fa:42:59:
6d:57:19:3f:9c:f6:56:ad:c3:7c:bd:c4:15:c2:dc:
a1:80:20:f2:9b:ad:4e:2b:e0:cc:c8:21:10:94:6d:
92:8d:03:f8:e5:eb:45:c1:af:85:78:53:3a:9b:f0:
cb:4b:88:39:eb:7d:d1:57:43:12:56:6c:1b:3b:49:
d5:10:88:eb:ee:d8:6c:09:68:ac:c1:b5:32:d9:51:
8e:85:2b:72:7f:50:a7:f3:e6:13:bf:38:fb:a5:b5:
70:45:e9:e2:30:20:61:f4:9c:be:4d:4c:58:69:a6:
fd:96:fb:57:c6:ad:2f:68:25:cb:fc:fa:11:96:4f:
51:a8:29:83:d8:19:88:a7:0f:63:53:6c:40:cf:7e:
bd:99:7c:b0:24:3b:b7:df:98:5b:26:dd:2f:f3:2b:
d4:12:bc:2d:96:13:81:13:1b:b9:24:5c:3a:d9:61:
8f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:DE:5F:FE:A8:34:C5:EB:15:52:4E:44:CD:67:31:C3:85:9F:55:BB
X509v3 Authority Key Identifier:
keyid:E0:81:42:B4:2E:39:48:00:48:D1:FC:EA:58:7A:36:93:DA:4C:0B:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IFCtC45SABI0fzqWHo2k9pMC4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:15:84:13:d1:11:0d:14:2b:53:4e:5e:23:5f:a7:be:d8:ce:
4d:b1:e4:ee:27:56:8e:ff:a5:8f:16:8b:21:8d:68:63:a5:ef:
a7:57:11:60:9e:ec:81:74:81:27:fa:83:ae:4c:f0:19:78:07:
4f:b8:fb:c3:fb:84:9f:4d:3a:b7:2e:6f:be:f4:cb:13:a9:b9:
71:3c:9b:24:d7:9e:a9:64:28:c3:42:a0:81:16:cb:cd:f3:06:
cb:73:02:9d:49:d8:e9:43:4a:de:03:37:17:76:87:1b:3d:95:
5a:23:40:fe:c1:25:33:45:bf:7a:64:6e:da:79:45:37:9b:c3:
52:b5:1d:bc:32:22:65:c3:ad:4a:13:fa:70:64:83:7e:49:56:
32:f9:fa:b4:6b:59:8a:d8:80:71:52:7d:f2:8d:9c:58:93:dd:
78:b7:49:8f:c1:73:fe:a4:30:10:d5:4f:d6:a4:3b:d8:77:01:
d8:b1:a4:48:47:4e:44:e3:24:40:84:18:7b:7e:44:c6:d8:e6:
77:6e:8a:15:7a:50:af:6f:01:93:42:92:b7:e0:30:13:bb:1d:
bb:54:e4:5e:51:7f:7d:06:d2:1a:40:6d:e9:c8:3a:e5:a5:1a:
f3:62:42:e6:39:b7:a7:46:80:90:1d:32:48:2d:92:ee:59:30:
63:e1:1f:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdqBg9hiCrEBvNPf7rT4NKzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwODE0MmI0MmUzOTQ4MDA0OGQxZmNlYTU4N2EzNjkzZGE0
YzBiOGEwHhcNMjUwNjEzMTYwMTExWhcNMjUwNjE0MTYwMTExWjAzMTEwLwYDVQQD
EyhhZWRlNWZmZWE4MzRjNWViMTU1MjRlNDRjZDY3MzFjMzg1OWY1NWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8MwHM30FZSzEZ1RWat21t6yxCDAf
tvQSzMarZ9d6zB6VQyCVaTxEjYK5kd/zcTg0vd/J7PQ/qwJ3e7LNy/NLKKLlveua
Jnc2GJy9DeyT8JfrVreVOET6QlltVxk/nPZWrcN8vcQVwtyhgCDym61OK+DMyCEQ
lG2SjQP45etFwa+FeFM6m/DLS4g5633RV0MSVmwbO0nVEIjr7thsCWiswbUy2VGO
hStyf1Cn8+YTvzj7pbVwReniMCBh9Jy+TUxYaab9lvtXxq0vaCXL/PoRlk9RqCmD
2BmIpw9jU2xAz369mXywJDu335hbJt0v8yvUErwtlhOBExu5JFw62WGPnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK7eX/6oNMXrFVJORM1nMcOFn1W7MB8GA1UdIwQY
MBaAFOCBQrQuOUgASNH86lh6NpPaTAuKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNElGQ3RDNDVTQUJJMGZ6cVdIbzJrOXBNQzRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8yODJhYzYtNzJjNi00YjJjLTlkZjkt
OGYxZjJjOTE0ZjA0LzEvNElGQ3RDNDVTQUJJMGZ6cVdIbzJrOXBNQzRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8yODJhYzYtNzJjNi00YjJjLTlkZjktOGYxZjJjOTE0ZjA0
LzEvNElGQ3RDNDVTQUJJMGZ6cVdIbzJrOXBNQzRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdRWEE9ER
DRQrU05eI1+nvtjOTbHk7idWjv+ljxaLIY1oY6Xvp1cRYJ7sgXSBJ/qDrkzwGXgH
T7j7w/uEn006ty5vvvTLE6m5cTybJNeeqWQow0KggRbLzfMGy3MCnUnY6UNK3gM3
F3aHGz2VWiNA/sElM0W/emRu2nlFN5vDUrUdvDIiZcOtShP6cGSDfklWMvn6tGtZ
itiAcVJ98o2cWJPdeLdJj8Fz/qQwENVP1qQ72HcB2LGkSEdOROMkQIQYe35Extjm
d26KFXpQr28Bk0KSt+AwE7sdu1TkXlF/fQbSGkBt6cg65aUa82JC5jm3p0aAkB0y
SC2S7lkwY+EfoQ==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:01:54 2025 by rpki-client