Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
File: 4FotrPXdTpv6LS2bLTw_lnh0WEE.mft (raw, json)
Hash identifier: paTFvyrY1mRqNI6FkpZRM3sH7GszXsXg2VxkJExC7zA=
Subject key identifier: 72:00:D8:AC:63:41:B5:F7:C0:59:61:74:9B:33:C1:1E:BA:73:40:CA
Authority key identifier: E0:5A:2D:AC:F5:DD:4E:9B:FA:2D:2D:9B:2D:3C:3F:96:78:74:58:41
Certificate issuer: /CN=e05a2dacf5dd4e9bfa2d2d9b2d3c3f9678745841
Certificate serial: 01987373E200AD27D61C6065835C29A56BF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
Manifest number: 1619
Signing time: Mon 04 Aug 2025 05:00:30 +0000
Manifest this update: Mon 04 Aug 2025 05:00:30 +0000
Manifest next update: Tue 05 Aug 2025 05:00:30 +0000
Files and hashes: 1: 4FotrPXdTpv6LS2bLTw_lnh0WEE.crl (hash: mYbE9bkFv8eLUh/jC7F8iCwXuFxlt6+Y0H7UI4GybKc=)
2: BS790JJGQ7DZlNZUL_em5Su64B4.roa (hash: VVqWBTRMk3+7j4zbJrp8La5lSHjcZGiKvxZueV8Sl7A=)
3: UJGm2ryO8HuvxtqrnMckm6HvQuw.roa (hash: LmIHTI0l7Czq42uu144MFysAfpmWgQRM3SWHkhVtvVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:73:e2:00:ad:27:d6:1c:60:65:83:5c:29:a5:6b:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e05a2dacf5dd4e9bfa2d2d9b2d3c3f9678745841
Validity
Not Before: Aug 4 05:00:30 2025 GMT
Not After : Aug 5 05:00:30 2025 GMT
Subject: CN=7200d8ac6341b5f7c05961749b33c11eba7340ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f3:20:83:5b:ba:36:44:5e:33:ee:5f:4b:8a:
07:75:22:bf:11:5a:bb:10:96:4c:75:f2:71:e3:d6:
5f:e0:f4:4e:1a:d4:09:75:23:2b:a4:de:9b:62:d6:
f8:fe:a4:3a:27:7b:cd:f0:04:44:8f:35:98:2b:11:
cb:bf:26:09:2c:b8:85:21:4d:61:49:4b:d2:7a:9a:
c5:a4:05:76:79:6f:7e:ff:81:f4:17:a2:a3:72:f6:
6c:8b:9f:d7:bf:e2:a2:14:c8:6d:1d:08:5a:8c:30:
65:1d:82:47:93:f2:60:fc:33:ad:2c:7a:d3:34:a3:
3b:fa:d1:a8:04:38:13:43:cc:d3:ab:dd:48:d1:ce:
e5:f0:54:2e:67:61:8c:6e:d9:91:6d:2a:65:d8:fc:
83:76:1e:75:c4:ad:dc:7c:bb:c5:28:e0:9e:db:ee:
b7:9d:c6:2f:ee:86:64:a1:8d:e1:d4:0d:7c:db:07:
25:97:c3:07:3f:9a:14:fb:c2:0e:4f:7e:37:93:40:
76:98:24:e5:db:7d:4f:16:d2:70:51:cc:93:25:82:
22:1c:3d:6d:9b:27:b7:5f:dc:7e:52:d0:45:d1:8a:
c8:de:67:cf:d7:82:15:f8:6c:2b:dd:03:67:06:ef:
ed:5d:d6:ea:d5:2c:0b:43:97:e7:76:28:54:8c:f3:
99:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:00:D8:AC:63:41:B5:F7:C0:59:61:74:9B:33:C1:1E:BA:73:40:CA
X509v3 Authority Key Identifier:
keyid:E0:5A:2D:AC:F5:DD:4E:9B:FA:2D:2D:9B:2D:3C:3F:96:78:74:58:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:e7:2e:ad:4b:5d:bb:8c:52:42:7e:ae:2f:ef:bf:65:88:aa:
1a:27:51:85:8f:6f:1f:68:de:a8:5a:df:18:5b:58:1e:4a:38:
60:67:bc:d1:a6:c4:2c:6f:c6:1b:d0:75:1a:75:09:b1:56:c0:
2b:cf:7e:40:16:ae:ed:d8:cc:43:6f:4c:37:ef:11:f2:b7:2c:
5e:cf:98:28:8d:16:fb:1b:95:f0:a1:33:01:72:6d:41:3f:24:
ba:fa:35:eb:a6:96:17:6b:41:f4:b1:9a:ac:a5:3b:6d:3f:ec:
7d:88:bf:45:80:49:7a:19:68:a9:2e:dd:14:ee:7b:1d:ae:cb:
7b:51:20:fd:ce:45:fd:52:57:c5:4c:c5:93:bb:d7:db:c3:90:
3a:9e:25:3f:d5:ca:57:21:0d:89:05:7c:4f:f2:91:b8:a8:3d:
4c:e4:a8:73:02:50:b1:b5:76:5f:b6:0a:cc:9e:8d:d4:21:c2:
6c:ea:1d:b9:e3:8b:ee:e4:66:48:d5:8c:4e:9e:be:5c:3a:bf:
36:2b:e5:86:fe:6c:6b:2c:6a:be:81:48:93:fd:6f:c1:d9:13:
29:8f:59:ca:d1:ce:d3:6d:77:cb:45:01:26:3e:e6:14:77:a9:
0c:c9:b6:c2:6a:a7:95:3e:e6:06:b0:41:04:89:89:7a:1c:dd:
b2:ae:39:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzc+IArSfWHGBlg1wppWv3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNWEyZGFjZjVkZDRlOWJmYTJkMmQ5YjJkM2MzZjk2Nzg3
NDU4NDEwHhcNMjUwODA0MDUwMDMwWhcNMjUwODA1MDUwMDMwWjAzMTEwLwYDVQQD
Eyg3MjAwZDhhYzYzNDFiNWY3YzA1OTYxNzQ5YjMzYzExZWJhNzM0MGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvMgg1u6NkReM+5fS4oHdSK/EVq7
EJZMdfJx49Zf4PROGtQJdSMrpN6bYtb4/qQ6J3vN8AREjzWYKxHLvyYJLLiFIU1h
SUvSeprFpAV2eW9+/4H0F6KjcvZsi5/Xv+KiFMhtHQhajDBlHYJHk/Jg/DOtLHrT
NKM7+tGoBDgTQ8zTq91I0c7l8FQuZ2GMbtmRbSpl2PyDdh51xK3cfLvFKOCe2+63
ncYv7oZkoY3h1A182wcll8MHP5oU+8IOT343k0B2mCTl231PFtJwUcyTJYIiHD1t
mye3X9x+UtBF0YrI3mfP14IV+Gwr3QNnBu/tXdbq1SwLQ5fndihUjPOZTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHIA2KxjQbX3wFlhdJszwR66c0DKMB8GA1UdIwQY
MBaAFOBaLaz13U6b+i0tmy08P5Z4dFhBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEZvdHJQWGRUcHY2TFMyYkxUd19sbmgwV0VFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8wMTAwMGItYWE5Ni00YmM2LThjYzEt
YWYwN2E5ZTg3ZmMwLzEvNEZvdHJQWGRUcHY2TFMyYkxUd19sbmgwV0VFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS8wMTAwMGItYWE5Ni00YmM2LThjYzEtYWYwN2E5ZTg3ZmMw
LzEvNEZvdHJQWGRUcHY2TFMyYkxUd19sbmgwV0VFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsucurUtd
u4xSQn6uL++/ZYiqGidRhY9vH2jeqFrfGFtYHko4YGe80abELG/GG9B1GnUJsVbA
K89+QBau7djMQ29MN+8R8rcsXs+YKI0W+xuV8KEzAXJtQT8kuvo166aWF2tB9LGa
rKU7bT/sfYi/RYBJehloqS7dFO57Ha7Le1Eg/c5F/VJXxUzFk7vX28OQOp4lP9XK
VyENiQV8T/KRuKg9TOSocwJQsbV2X7YKzJ6N1CHCbOodueOL7uRmSNWMTp6+XDq/
Nivlhv5sayxqvoFIk/1vwdkTKY9ZytHO0213y0UBJj7mFHepDMm2wmqnlT7mBrBB
BImJehzdsq45Cg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:35 2025 by rpki-client