Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
File: 4jDeX9PCRVFzumlqmUQdliDYHTg.mft (raw, json)
Hash identifier: Q9EKIFgV4vyzTynt9Ckc/NHNu8bhAXQZaEFoomvOz6Y=
Subject key identifier: 48:B9:D3:B5:9D:D6:9B:CA:D0:4B:1A:AF:D1:30:0D:14:31:75:F8:46
Authority key identifier: E2:30:DE:5F:D3:C2:45:51:73:BA:69:6A:99:44:1D:96:20:D8:1D:38
Certificate issuer: /CN=e230de5fd3c2455173ba696a99441d9620d81d38
Certificate serial: 01976FD15F4484AC1400780410A42C9CB901
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
Manifest number: 0BA8
Signing time: Sat 14 Jun 2025 19:01:21 +0000
Manifest this update: Sat 14 Jun 2025 19:01:21 +0000
Manifest next update: Sun 15 Jun 2025 19:01:21 +0000
Files and hashes: 1: 4jDeX9PCRVFzumlqmUQdliDYHTg.crl (hash: OgI5qUIWqy8ohbnK7C456nolb803xfwzfwE9U9hsIZE=)
2: qADZbjUspL_WRqhq7wvNpX-fT-E.roa (hash: 8V+RbGGUYULjGMvZVkBND643qQkjbKJgabtjnmu0hrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d1:5f:44:84:ac:14:00:78:04:10:a4:2c:9c:b9:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e230de5fd3c2455173ba696a99441d9620d81d38
Validity
Not Before: Jun 14 19:01:21 2025 GMT
Not After : Jun 15 19:01:21 2025 GMT
Subject: CN=48b9d3b59dd69bcad04b1aafd1300d143175f846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2e:92:11:a3:d8:fc:af:16:fa:a6:78:b4:27:
14:11:54:0b:2c:4a:be:b6:ba:66:88:71:35:b3:59:
93:ad:d0:31:f8:e9:51:d4:d2:8d:aa:d5:c6:c8:d5:
70:db:a0:14:fe:13:81:b1:17:6d:6c:e9:d7:22:5d:
8d:9a:1f:82:ca:ea:9b:00:61:f0:9d:49:6f:b4:70:
92:ce:2b:59:05:f9:a8:f5:1e:b7:6a:7c:5c:d9:76:
25:3f:a5:e7:b5:68:64:0c:51:95:6c:d2:0b:f5:3c:
0c:10:c4:11:b8:9b:6b:e6:96:8f:83:5e:d8:a9:2e:
e3:fc:ea:37:c0:93:c8:df:22:be:aa:ed:11:18:af:
7d:4f:80:ee:1c:e9:47:3b:f8:72:e1:1d:01:5e:0c:
ae:98:f3:13:02:69:a3:9d:5f:43:cd:1e:13:1b:49:
71:98:13:2a:26:ce:d9:f7:ae:a2:47:15:2e:8d:64:
97:7f:ab:b1:5e:30:d9:21:f4:a9:5f:09:dd:bc:f8:
ef:59:52:c5:ff:b7:dc:0c:f9:e0:ab:15:f8:7b:d4:
dc:2f:0d:16:e6:58:c3:56:9d:cf:66:d4:d0:24:eb:
08:99:b9:7e:41:64:5e:13:2e:2a:da:da:d4:db:91:
f6:df:57:f9:65:40:9c:2c:25:be:93:71:47:18:82:
b2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B9:D3:B5:9D:D6:9B:CA:D0:4B:1A:AF:D1:30:0D:14:31:75:F8:46
X509v3 Authority Key Identifier:
keyid:E2:30:DE:5F:D3:C2:45:51:73:BA:69:6A:99:44:1D:96:20:D8:1D:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:06:73:4b:cb:65:57:51:cd:5f:d1:f1:e3:6e:52:d8:17:dd:
cc:2a:97:e9:db:ce:93:51:7a:62:54:ef:b3:37:80:3b:32:e5:
4d:07:24:0c:0f:1b:ea:89:cd:9c:d7:a4:15:ff:10:06:87:72:
2b:6c:09:d5:47:29:ca:5f:1d:9e:7c:48:43:18:12:9b:0b:b6:
0c:01:8b:22:73:75:aa:b7:b4:51:01:3a:91:e0:df:82:11:8e:
ed:ae:6a:ad:5e:45:b7:02:a5:9a:64:0e:e9:c5:f2:1c:3e:2a:
4a:de:6d:f4:94:1b:9d:01:b8:ca:82:65:ba:2e:a5:49:8a:ec:
f1:d9:37:fd:34:16:d8:fb:f4:3b:51:db:f8:c1:b9:44:ec:24:
73:1e:11:2b:59:b3:a9:4f:18:c4:2b:3d:b6:a5:12:0c:3f:8e:
ea:af:da:1d:da:32:9f:cd:4e:ad:10:91:85:00:32:f1:cd:ec:
8d:7d:59:a3:ff:e0:e0:12:b2:99:d9:ae:ad:70:60:16:fe:0e:
40:47:c2:cc:44:27:51:d2:08:99:76:72:6b:46:ee:d3:76:de:
7f:9a:ef:b9:c2:ae:11:12:28:f3:58:94:6e:ac:24:3f:74:51:
a0:ca:9e:3b:b5:06:26:82:9d:b7:26:e9:61:15:0a:ff:c5:3d:
3d:53:49:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdv0V9EhKwUAHgEEKQsnLkBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyMzBkZTVmZDNjMjQ1NTE3M2JhNjk2YTk5NDQxZDk2MjBk
ODFkMzgwHhcNMjUwNjE0MTkwMTIxWhcNMjUwNjE1MTkwMTIxWjAzMTEwLwYDVQQD
Eyg0OGI5ZDNiNTlkZDY5YmNhZDA0YjFhYWZkMTMwMGQxNDMxNzVmODQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1C6SEaPY/K8W+qZ4tCcUEVQLLEq+
trpmiHE1s1mTrdAx+OlR1NKNqtXGyNVw26AU/hOBsRdtbOnXIl2Nmh+CyuqbAGHw
nUlvtHCSzitZBfmo9R63anxc2XYlP6XntWhkDFGVbNIL9TwMEMQRuJtr5paPg17Y
qS7j/Oo3wJPI3yK+qu0RGK99T4DuHOlHO/hy4R0BXgyumPMTAmmjnV9DzR4TG0lx
mBMqJs7Z966iRxUujWSXf6uxXjDZIfSpXwndvPjvWVLF/7fcDPngqxX4e9TcLw0W
5ljDVp3PZtTQJOsImbl+QWReEy4q2trU25H231f5ZUCcLCW+k3FHGIKylwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEi507Wd1pvK0Esar9EwDRQxdfhGMB8GA1UdIwQY
MBaAFOIw3l/TwkVRc7ppaplEHZYg2B04MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGpEZVg5UENSVkZ6dW1scW1VUWRsaURZSFRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9mYWM3ZWQtOTAxOC00NWRiLTg5NDct
ZmI1YzU4MmU0MDk3LzEvNGpEZVg5UENSVkZ6dW1scW1VUWRsaURZSFRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9mYWM3ZWQtOTAxOC00NWRiLTg5NDctZmI1YzU4MmU0MDk3
LzEvNGpEZVg5UENSVkZ6dW1scW1VUWRsaURZSFRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWwZzS8tl
V1HNX9Hx425S2BfdzCqX6dvOk1F6YlTvszeAOzLlTQckDA8b6onNnNekFf8QBody
K2wJ1Ucpyl8dnnxIQxgSmwu2DAGLInN1qre0UQE6keDfghGO7a5qrV5FtwKlmmQO
6cXyHD4qSt5t9JQbnQG4yoJlui6lSYrs8dk3/TQW2Pv0O1Hb+MG5ROwkcx4RK1mz
qU8YxCs9tqUSDD+O6q/aHdoyn81OrRCRhQAy8c3sjX1Zo//g4BKymdmurXBgFv4O
QEfCzEQnUdIImXZya0bu03bef5rvucKuERIo81iUbqwkP3RRoMqeO7UGJoKdtybp
YRUK/8U9PVNJvQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 22:00:57 2025 by rpki-client