Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft
File: 4wEfCFnQaghJdfTovStVZxDdjDA.mft (raw, json)
Hash identifier: IejY/TBDPu6bkQQipmc4axGnClZlv40EWI3E/1JagEE=
Subject key identifier: 5A:20:43:05:58:3E:95:33:61:00:B4:D0:40:EE:BB:A1:DD:54:08:32
Authority key identifier: E3:01:1F:08:59:D0:6A:08:49:75:F4:E8:BD:2B:55:67:10:DD:8C:30
Certificate issuer: /CN=e3011f0859d06a084975f4e8bd2b556710dd8c30
Certificate serial: 019769CEFCFA1A7E2DEEABF593975A78ABA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wEfCFnQaghJdfTovStVZxDdjDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft
Manifest number: 1017
Signing time: Fri 13 Jun 2025 15:01:02 +0000
Manifest this update: Fri 13 Jun 2025 15:01:02 +0000
Manifest next update: Sat 14 Jun 2025 15:01:02 +0000
Files and hashes: 1: 4wEfCFnQaghJdfTovStVZxDdjDA.crl (hash: FiQr9FhHFSk6lbjiQR6PXQgFjevfU7XFE6Z1bLTSO3Y=)
2: y5czNixkNluft47-krcqIbdqVD0.roa (hash: AmEHJkAG0oDmal6HjQJOOd7Nfm7cgEA//96C9SqFxV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4wEfCFnQaghJdfTovStVZxDdjDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:fc:fa:1a:7e:2d:ee:ab:f5:93:97:5a:78:ab:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3011f0859d06a084975f4e8bd2b556710dd8c30
Validity
Not Before: Jun 13 15:01:02 2025 GMT
Not After : Jun 14 15:01:02 2025 GMT
Subject: CN=5a204305583e95336100b4d040eebba1dd540832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:39:8d:85:29:49:64:03:33:6b:5b:ac:fb:80:
c5:da:13:86:08:ee:e2:35:18:21:21:78:ea:b7:05:
df:38:f9:17:72:0b:32:b0:3f:49:74:33:37:b1:b2:
dc:c3:02:2a:c7:9e:7e:90:ae:44:bb:27:d9:37:a7:
0e:df:c3:ff:5d:1b:2f:cf:79:26:ec:1c:12:cc:d2:
b6:ae:db:6f:8d:d3:db:8f:9d:bb:0b:c8:44:dd:5e:
5a:de:f3:1b:9e:7f:94:93:e5:08:bb:09:84:99:02:
7b:02:15:66:8a:77:c9:88:eb:5c:0a:e0:0d:9b:fa:
26:ff:be:3a:29:70:c7:41:6d:b5:50:96:28:33:58:
8d:27:d9:fe:fc:a8:cc:1d:7f:5a:2a:86:a9:4d:df:
2a:83:c9:a4:f9:dc:94:d2:ee:6a:62:bc:21:ef:cd:
3e:df:0f:7a:3e:a3:db:73:01:5e:11:74:2c:ab:02:
95:68:ae:5e:eb:bb:a2:5a:70:13:bb:f2:96:50:a7:
63:3d:67:95:a6:e6:a0:3f:d4:5d:25:b7:c1:0a:7f:
1a:98:03:85:e9:52:5e:1d:f7:49:ce:9d:c0:ee:3f:
7f:31:eb:eb:42:f4:96:46:50:7e:e3:77:c4:ce:e2:
a5:cc:98:3c:16:f4:a0:8f:9b:c8:cd:af:02:49:95:
f1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:20:43:05:58:3E:95:33:61:00:B4:D0:40:EE:BB:A1:DD:54:08:32
X509v3 Authority Key Identifier:
keyid:E3:01:1F:08:59:D0:6A:08:49:75:F4:E8:BD:2B:55:67:10:DD:8C:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wEfCFnQaghJdfTovStVZxDdjDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:fd:6a:da:c2:e6:79:16:b7:e3:6b:16:a3:cf:9a:e0:47:5d:
0d:f7:0c:80:ce:52:4b:41:55:b0:b2:3d:ac:54:99:05:a6:d3:
22:76:2f:33:e0:b9:b3:4a:c8:b8:ba:e9:ff:b2:dc:db:c0:e4:
cb:60:4a:cf:83:15:b3:64:17:33:38:c2:53:38:42:bd:70:67:
c7:be:d7:fc:6e:2f:45:ca:db:aa:dc:9b:a8:c0:b1:3a:71:c7:
e5:82:39:84:ab:d6:12:fc:01:9e:45:63:ed:f9:fc:98:b1:7f:
c6:a6:47:25:3e:9c:52:65:f4:23:ff:ee:ce:f3:fe:db:ac:74:
f5:a4:2f:80:33:27:5b:b1:21:72:3d:88:27:3f:74:94:00:fa:
9f:02:54:0d:72:6b:a8:20:f5:c0:ba:5e:dc:f3:6c:1f:7e:a2:
3a:30:8d:34:20:fd:5f:26:c3:50:c8:60:28:33:dc:d3:b8:ea:
23:a6:07:d2:5a:5d:9a:aa:4a:2c:f9:d0:2b:a5:c3:91:ff:2a:
0c:ce:39:4c:9b:ed:b0:f7:09:8c:bc:08:5e:fe:a2:bc:79:a1:
46:e5:8a:3c:18:74:20:73:92:00:23:d1:34:fe:5f:ab:f5:ae:
b0:2f:d3:b1:f7:3c:52:96:1f:bc:e5:dd:d4:31:69:c8:48:ea:
2b:78:76:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpzvz6Gn4t7qv1k5daeKulMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMDExZjA4NTlkMDZhMDg0OTc1ZjRlOGJkMmI1NTY3MTBk
ZDhjMzAwHhcNMjUwNjEzMTUwMTAyWhcNMjUwNjE0MTUwMTAyWjAzMTEwLwYDVQQD
Eyg1YTIwNDMwNTU4M2U5NTMzNjEwMGI0ZDA0MGVlYmJhMWRkNTQwODMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5zmNhSlJZAMza1us+4DF2hOGCO7i
NRghIXjqtwXfOPkXcgsysD9JdDM3sbLcwwIqx55+kK5EuyfZN6cO38P/XRsvz3km
7BwSzNK2rttvjdPbj527C8hE3V5a3vMbnn+Uk+UIuwmEmQJ7AhVminfJiOtcCuAN
m/om/746KXDHQW21UJYoM1iNJ9n+/KjMHX9aKoapTd8qg8mk+dyU0u5qYrwh780+
3w96PqPbcwFeEXQsqwKVaK5e67uiWnATu/KWUKdjPWeVpuagP9RdJbfBCn8amAOF
6VJeHfdJzp3A7j9/MevrQvSWRlB+43fEzuKlzJg8FvSgj5vIza8CSZXxqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFogQwVYPpUzYQC00EDuu6HdVAgyMB8GA1UdIwQY
MBaAFOMBHwhZ0GoISXX06L0rVWcQ3YwwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHdFZkNGblFhZ2hKZGZUb3ZTdFZaeERkakRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9lOGY3MjctY2IyMy00M2NlLTg1ZDIt
ZDQ4YjdkMjYyNGRiLzEvNHdFZkNGblFhZ2hKZGZUb3ZTdFZaeERkakRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9lOGY3MjctY2IyMy00M2NlLTg1ZDItZDQ4YjdkMjYyNGRi
LzEvNHdFZkNGblFhZ2hKZGZUb3ZTdFZaeERkakRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG/1q2sLm
eRa342sWo8+a4EddDfcMgM5SS0FVsLI9rFSZBabTInYvM+C5s0rIuLrp/7Lc28Dk
y2BKz4MVs2QXMzjCUzhCvXBnx77X/G4vRcrbqtybqMCxOnHH5YI5hKvWEvwBnkVj
7fn8mLF/xqZHJT6cUmX0I//uzvP+26x09aQvgDMnW7Ehcj2IJz90lAD6nwJUDXJr
qCD1wLpe3PNsH36iOjCNNCD9XybDUMhgKDPc07jqI6YH0lpdmqpKLPnQK6XDkf8q
DM45TJvtsPcJjLwIXv6ivHmhRuWKPBh0IHOSACPRNP5fq/WusC/Tsfc8UpYfvOXd
1DFpyEjqK3h2Ew==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:20:06 2025 by rpki-client