Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
File: _4ztOwmpBeuWhpxY9mtPi1kVA7A.mft (raw, json)
Hash identifier: c+vcLg0dzblswi6h79DFMWfXK8nIAVvMvco5sxIF2H8=
Subject key identifier: E3:13:92:56:F3:CC:A9:96:6C:57:18:5F:2C:A5:B2:74:B8:A3:F2:31
Authority key identifier: FF:8C:ED:3B:09:A9:05:EB:96:86:9C:58:F6:6B:4F:8B:59:15:03:B0
Certificate issuer: /CN=ff8ced3b09a905eb96869c58f66b4f8b591503b0
Certificate serial: 01968247739662AC9B32E3A7B27EEB10AA7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
Manifest number: 1515
Signing time: Tue 29 Apr 2025 16:00:42 +0000
Manifest this update: Tue 29 Apr 2025 16:00:42 +0000
Manifest next update: Wed 30 Apr 2025 16:00:42 +0000
Files and hashes: 1: _-ujCkb2AK4IkutlVxIW61CZKcg.roa (hash: ZnHaosgaFt/JXW9m08DluSmRz1C9FDWxKl8XbDANYsM=)
2: _4ztOwmpBeuWhpxY9mtPi1kVA7A.crl (hash: LKpxWAbJmJ8yIdicxw7QfD/TGIsSDLEeORMWT2EDw2s=)
3: xOQc72Z94YWZ0x4WXA9ac2DfTkA.roa (hash: JOazIpcEkdoXe7dHpDJ/1wfs3pC+0YfgMICoYiHagPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:47:73:96:62:ac:9b:32:e3:a7:b2:7e:eb:10:aa:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8ced3b09a905eb96869c58f66b4f8b591503b0
Validity
Not Before: Apr 29 16:00:42 2025 GMT
Not After : Apr 30 16:00:42 2025 GMT
Subject: CN=e3139256f3cca9966c57185f2ca5b274b8a3f231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cd:87:e9:e7:2e:6b:b2:4f:1e:48:a1:d7:29:
28:c1:87:79:20:b3:16:af:cb:69:06:1f:5a:06:95:
21:4c:e9:a7:fe:6a:03:f7:af:43:7d:c2:ac:ca:b8:
db:c6:9e:b6:ec:46:21:19:e6:f1:79:df:f5:1c:d4:
b3:90:65:93:0c:74:16:f5:3d:7e:ab:78:ae:a9:8c:
c0:b5:dd:21:74:31:d9:e8:66:29:ef:36:71:13:df:
64:ac:28:b8:da:a8:07:60:6d:78:99:03:67:5b:12:
4d:dc:fe:20:aa:80:93:b0:4b:c1:e3:9a:53:03:80:
56:57:17:2d:a9:95:3d:c5:a6:ef:ea:13:03:3e:86:
6b:e1:da:87:60:1c:16:10:3c:a9:57:d0:e5:f3:0f:
ba:80:f1:1d:75:b6:45:6c:2b:f6:8b:97:b5:95:e5:
da:9d:62:29:16:0b:36:e5:c3:d8:65:b3:92:88:d4:
7f:16:44:3c:3f:59:6f:83:32:95:c2:c8:33:47:ac:
27:40:f0:f0:0b:14:f5:9c:31:c2:be:a2:72:b3:8c:
ee:11:9e:3f:1c:ac:2f:4c:17:21:a6:9b:68:6c:ec:
63:8c:e6:4a:6e:69:e8:76:b6:71:c1:f1:30:98:1e:
27:03:11:f3:bc:3c:39:7a:39:e8:33:4d:e0:2a:a9:
9e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:13:92:56:F3:CC:A9:96:6C:57:18:5F:2C:A5:B2:74:B8:A3:F2:31
X509v3 Authority Key Identifier:
keyid:FF:8C:ED:3B:09:A9:05:EB:96:86:9C:58:F6:6B:4F:8B:59:15:03:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:0f:65:e2:9d:94:d9:58:bc:ee:8d:52:4f:cd:79:12:be:21:
21:56:ff:15:f4:10:48:b6:fb:49:35:41:a3:6b:a9:70:5b:0f:
0a:4c:64:4b:e1:9a:77:f2:9f:d5:a1:2b:d8:e3:aa:95:6b:ce:
26:1c:fe:5f:30:0d:9f:44:b2:c3:ad:30:74:fe:2f:19:12:ec:
b3:10:82:b5:09:46:d7:71:5a:d2:27:33:3e:bd:e2:2b:6c:48:
07:44:f7:ff:06:3e:93:4a:39:17:6e:e6:b2:12:af:af:42:c1:
a1:fa:46:92:f6:da:d7:79:5e:91:b6:f1:2c:ec:36:ca:37:26:
ed:00:be:bf:09:73:ff:a7:cf:9f:4d:f5:77:0b:b2:b2:c0:04:
e1:ac:0f:ae:f0:a8:7e:2c:e9:99:02:69:c1:25:fb:ed:2f:5b:
dc:43:9a:9e:a8:19:8b:6b:a6:c6:98:1c:7c:1f:87:19:b3:95:
83:b8:55:91:0a:0d:c0:ab:88:61:42:2a:97:d8:36:99:d8:02:
f1:0c:27:8b:4a:2c:40:b5:2f:3e:d1:93:46:c7:c9:66:b4:98:
a1:9c:7d:35:bb:6e:fe:11:0d:de:03:b6:f9:e9:60:ff:de:4f:
5a:5a:79:8c:93:e4:c6:0d:9e:fc:1e:56:d1:3c:14:18:38:87:
44:0f:ae:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaCR3OWYqybMuOnsn7rEKp+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmOGNlZDNiMDlhOTA1ZWI5Njg2OWM1OGY2NmI0ZjhiNTkx
NTAzYjAwHhcNMjUwNDI5MTYwMDQyWhcNMjUwNDMwMTYwMDQyWjAzMTEwLwYDVQQD
EyhlMzEzOTI1NmYzY2NhOTk2NmM1NzE4NWYyY2E1YjI3NGI4YTNmMjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt82H6ecua7JPHkih1ykowYd5ILMW
r8tpBh9aBpUhTOmn/moD969DfcKsyrjbxp627EYhGebxed/1HNSzkGWTDHQW9T1+
q3iuqYzAtd0hdDHZ6GYp7zZxE99krCi42qgHYG14mQNnWxJN3P4gqoCTsEvB45pT
A4BWVxctqZU9xabv6hMDPoZr4dqHYBwWEDypV9Dl8w+6gPEddbZFbCv2i5e1leXa
nWIpFgs25cPYZbOSiNR/FkQ8P1lvgzKVwsgzR6wnQPDwCxT1nDHCvqJys4zuEZ4/
HKwvTBchpptobOxjjOZKbmnodrZxwfEwmB4nAxHzvDw5ejnoM03gKqmejQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOMTklbzzKmWbFcYXyylsnS4o/IxMB8GA1UdIwQY
MBaAFP+M7TsJqQXrloacWPZrT4tZFQOwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzR6dE93bXBCZXVXaHB4WTltdFBpMWtWQTdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8wMTYwOGQtMDhmMS00YWI1LWE5MjYt
YmU1NjFjY2RlZDJjLzEvXzR6dE93bXBCZXVXaHB4WTltdFBpMWtWQTdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8wMTYwOGQtMDhmMS00YWI1LWE5MjYtYmU1NjFjY2RlZDJj
LzEvXzR6dE93bXBCZXVXaHB4WTltdFBpMWtWQTdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZw9l4p2U
2Vi87o1ST815Er4hIVb/FfQQSLb7STVBo2upcFsPCkxkS+Gad/Kf1aEr2OOqlWvO
Jhz+XzANn0Syw60wdP4vGRLssxCCtQlG13Fa0iczPr3iK2xIB0T3/wY+k0o5F27m
shKvr0LBofpGkvba13lekbbxLOw2yjcm7QC+vwlz/6fPn031dwuyssAE4awPrvCo
fizpmQJpwSX77S9b3EOanqgZi2umxpgcfB+HGbOVg7hVkQoNwKuIYUIql9g2mdgC
8Qwni0osQLUvPtGTRsfJZrSYoZx9Nbtu/hEN3gO2+elg/95PWlp5jJPkxg2e/B5W
0TwUGDiHRA+ucw==
-----END CERTIFICATE-----
Generated at Wed Apr 30 00:07:38 2025 by rpki-client