Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
File: S1ejnbXHqja-gs11HlDLkCMDPco.mft (raw, json)
Hash identifier: 21zq5xjv/useHDYAv/uJUD8bypqYds3/JMzfcYlkQuc=
Subject key identifier: 66:69:78:5A:B0:C0:D6:E4:98:24:20:86:01:10:A5:25:E6:9F:E6:2B
Authority key identifier: 4B:57:A3:9D:B5:C7:AA:36:BE:82:CD:75:1E:50:CB:90:23:03:3D:CA
Certificate issuer: /CN=4b57a39db5c7aa36be82cd751e50cb9023033dca
Certificate serial: 0196760C361EDF7E29C192DF4C52E314C7E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1ejnbXHqja-gs11HlDLkCMDPco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
Manifest number: D4
Signing time: Sun 27 Apr 2025 07:00:33 +0000
Manifest this update: Sun 27 Apr 2025 07:00:33 +0000
Manifest next update: Mon 28 Apr 2025 07:00:33 +0000
Files and hashes: 1: S1ejnbXHqja-gs11HlDLkCMDPco.crl (hash: GluoP97uLmaUSLcQ1vhHch4FHLYQ61PO46XlPlHZ3gw=)
2: zO8Iwb0BsWTcNVLMLIiP_wo8DJM.roa (hash: OPJwqPTjOpu2TkWSPAK04GvaPgxXe8e980q4NWTbl0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
rsync://rpki.ripe.net/repository/DEFAULT/S1ejnbXHqja-gs11HlDLkCMDPco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:36:1e:df:7e:29:c1:92:df:4c:52:e3:14:c7:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b57a39db5c7aa36be82cd751e50cb9023033dca
Validity
Not Before: Apr 27 07:00:33 2025 GMT
Not After : Apr 28 07:00:33 2025 GMT
Subject: CN=6669785ab0c0d6e4982420860110a525e69fe62b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:98:b4:1a:be:d0:ec:5f:e3:ed:46:88:64:80:
91:a4:08:a6:76:fa:14:e1:45:ce:90:92:ee:0e:45:
69:04:33:fa:5e:a3:a7:51:46:4a:9d:ba:6e:83:2a:
c9:89:82:0f:37:60:32:df:ec:10:f5:ea:b7:e3:eb:
bd:69:8b:af:86:bf:93:c8:15:03:df:83:f1:49:c7:
39:9c:7f:a4:73:44:5f:40:70:55:52:b7:93:44:4e:
73:e0:9c:78:96:b7:a7:f5:a5:8b:ac:c9:65:c8:1a:
88:cd:55:4c:68:99:ae:ea:97:a6:59:28:87:0b:9f:
43:e3:70:be:88:54:44:24:71:ae:c2:36:b4:4a:a6:
25:2f:33:41:8a:ad:27:ec:1a:27:3e:3e:ce:23:f3:
6d:3e:9a:76:1c:31:82:1c:fe:4c:b2:c3:26:5d:98:
8a:aa:fa:63:82:ff:d1:b8:b9:cf:46:2b:c1:7a:9a:
93:3e:70:28:06:be:2e:78:fa:8e:e7:78:06:9b:03:
de:d5:d2:fa:f8:cf:b3:b4:66:4a:4a:d2:48:f9:40:
01:7b:fa:09:a7:9f:0e:47:e4:c5:5a:a9:27:f3:8d:
e2:af:c3:52:22:0f:9c:3f:84:e6:d8:00:9f:17:bd:
8e:ee:7d:b2:ae:c2:08:58:8f:7c:a3:24:21:53:23:
76:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:69:78:5A:B0:C0:D6:E4:98:24:20:86:01:10:A5:25:E6:9F:E6:2B
X509v3 Authority Key Identifier:
keyid:4B:57:A3:9D:B5:C7:AA:36:BE:82:CD:75:1E:50:CB:90:23:03:3D:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1ejnbXHqja-gs11HlDLkCMDPco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:5e:01:12:ff:3f:57:f7:69:13:72:98:7f:fb:94:15:f3:90:
63:1d:d2:09:66:65:81:12:f0:eb:2b:ed:23:d7:28:21:73:f1:
15:ca:24:44:c0:15:c1:c6:de:30:b2:f2:6c:f2:e1:e5:1e:91:
1e:3f:a2:fa:fb:51:ef:10:ff:db:45:ee:4b:65:d2:4e:a1:c1:
f5:2f:77:27:43:93:19:6a:70:d8:1e:a6:c8:7c:69:63:d6:0f:
b5:3f:f9:25:b0:2c:12:e3:ed:5a:c8:e2:25:94:3e:13:c2:ef:
fd:e9:79:c9:51:31:30:b8:8c:8d:c4:43:77:d9:a3:6e:af:2e:
ed:3f:6f:cb:bc:90:39:dd:32:ad:41:e4:1f:c5:22:73:8b:99:
32:81:e9:74:ea:bc:88:2a:ca:4b:52:99:71:79:08:2d:3c:ea:
9e:49:39:74:52:54:63:bb:a7:b9:0d:84:bc:34:53:2a:61:ad:
aa:54:fc:00:e6:c9:bf:fd:36:fb:26:da:3e:a6:dd:ad:a0:97:
90:6f:79:d6:56:3c:6d:66:8d:23:9f:d0:36:a0:99:69:d9:4e:
ee:1b:53:37:f1:10:f3:0f:9f:88:98:38:ec:cc:0f:d2:c7:fc:
97:22:dc:39:6e:44:fd:3d:25:7e:a0:ea:7d:4c:c5:80:17:f4:
fd:9a:9f:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2DDYe334pwZLfTFLjFMfnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiNTdhMzlkYjVjN2FhMzZiZTgyY2Q3NTFlNTBjYjkwMjMw
MzNkY2EwHhcNMjUwNDI3MDcwMDMzWhcNMjUwNDI4MDcwMDMzWjAzMTEwLwYDVQQD
Eyg2NjY5Nzg1YWIwYzBkNmU0OTgyNDIwODYwMTEwYTUyNWU2OWZlNjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJi0Gr7Q7F/j7UaIZICRpAimdvoU
4UXOkJLuDkVpBDP6XqOnUUZKnbpugyrJiYIPN2Ay3+wQ9eq34+u9aYuvhr+TyBUD
34PxScc5nH+kc0RfQHBVUreTRE5z4Jx4lren9aWLrMllyBqIzVVMaJmu6pemWSiH
C59D43C+iFREJHGuwja0SqYlLzNBiq0n7BonPj7OI/NtPpp2HDGCHP5MssMmXZiK
qvpjgv/RuLnPRivBepqTPnAoBr4uePqO53gGmwPe1dL6+M+ztGZKStJI+UABe/oJ
p58OR+TFWqkn843ir8NSIg+cP4Tm2ACfF72O7n2yrsIIWI98oyQhUyN2KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGZpeFqwwNbkmCQghgEQpSXmn+YrMB8GA1UdIwQY
MBaAFEtXo521x6o2voLNdR5Qy5AjAz3KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzFlam5iWEhxamEtZ3MxMUhsRExrQ01EUGNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi83YTY5YjUtMmJmYi00ODFhLWIzZmIt
YjNkMTg5NmYzNjlmLzEvUzFlam5iWEhxamEtZ3MxMUhsRExrQ01EUGNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi83YTY5YjUtMmJmYi00ODFhLWIzZmItYjNkMTg5NmYzNjlm
LzEvUzFlam5iWEhxamEtZ3MxMUhsRExrQ01EUGNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQV4BEv8/
V/dpE3KYf/uUFfOQYx3SCWZlgRLw6yvtI9coIXPxFcokRMAVwcbeMLLybPLh5R6R
Hj+i+vtR7xD/20XuS2XSTqHB9S93J0OTGWpw2B6myHxpY9YPtT/5JbAsEuPtWsji
JZQ+E8Lv/el5yVExMLiMjcRDd9mjbq8u7T9vy7yQOd0yrUHkH8Uic4uZMoHpdOq8
iCrKS1KZcXkILTzqnkk5dFJUY7unuQ2EvDRTKmGtqlT8AObJv/02+ybaPqbdraCX
kG951lY8bWaNI5/QNqCZadlO7htTN/EQ8w+fiJg47MwP0sf8lyLcOW5E/T0lfqDq
fUzFgBf0/Zqfew==
-----END CERTIFICATE-----
Generated at Sun Apr 27 11:20:22 2025 by rpki-client