Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
File: 4fR8EaOjyuBqGShgqWxQU-wEtdw.mft (raw, json)
Hash identifier: MYHbdD8Se9RrPE9i+9Hp6VRvfLAcG4BROqw/TaDDyw0=
Subject key identifier: 64:A1:CF:F2:6E:1F:BA:57:65:63:01:A8:C1:74:C3:D4:B6:94:48:D8
Authority key identifier: E1:F4:7C:11:A3:A3:CA:E0:6A:19:28:60:A9:6C:50:53:EC:04:B5:DC
Certificate issuer: /CN=e1f47c11a3a3cae06a192860a96c5053ec04b5dc
Certificate serial: 01978DA3C0710634C1D38CBE96170CAE33CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
Manifest number: 12B0
Signing time: Fri 20 Jun 2025 14:00:08 +0000
Manifest this update: Fri 20 Jun 2025 14:00:08 +0000
Manifest next update: Sat 21 Jun 2025 14:00:08 +0000
Files and hashes: 1: 1-HjAvExmkGaxksSqn85_Dy6VvJM.roa (hash: 8D5kTAs24JEFoR1NyKeFUo+R/Y6CsZUzK26/NpwtHaw=)
2: 4fR8EaOjyuBqGShgqWxQU-wEtdw.crl (hash: 2a72V91NClOIg2ooyXj629QWwB6tD5ZIASXi7A0AX1M=)
3: UBam_LF0XAef-2xohQdZlRl7HBg.roa (hash: 7WO0S2f70pIralvylysZjQGv/GwrHdv9TmJ840KoDXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 13:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8d:a3:c0:71:06:34:c1:d3:8c:be:96:17:0c:ae:33:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f47c11a3a3cae06a192860a96c5053ec04b5dc
Validity
Not Before: Jun 20 14:00:08 2025 GMT
Not After : Jun 21 14:00:08 2025 GMT
Subject: CN=64a1cff26e1fba57656301a8c174c3d4b69448d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:f4:43:c8:c2:c9:c9:10:e4:13:41:c0:4b:2b:
4c:26:a6:e4:68:72:00:42:66:39:d3:fb:8e:68:91:
e7:12:de:e6:ad:33:10:8a:87:32:fe:2a:26:8b:1b:
b0:44:b9:78:60:db:45:d6:98:f6:18:48:8c:b5:56:
71:83:0f:eb:1d:de:64:92:4c:3c:c1:f8:50:4e:aa:
c7:e7:ba:88:a3:96:1d:01:49:5f:f2:ba:00:f4:8f:
ec:76:a5:21:60:e3:e7:aa:22:92:21:2b:f8:04:da:
97:18:67:da:62:a9:98:96:f3:b2:97:a8:a3:d3:9e:
a6:12:3e:d4:94:7e:95:4d:f7:8b:f3:83:96:cb:cd:
96:12:85:7e:2a:f5:c6:18:65:8f:40:06:a5:73:84:
8a:b0:40:b6:77:6b:07:62:c0:c5:d5:06:73:9f:57:
28:98:29:95:49:bb:7e:87:ec:f2:1f:90:10:09:ed:
90:d1:5d:ee:09:c2:72:ef:6a:86:4c:b6:10:3c:a2:
90:01:1c:20:17:a1:ea:5f:9c:bc:c5:cf:ef:f5:0d:
12:4a:ec:ff:3c:27:5b:66:65:32:81:d8:70:a4:cb:
b1:14:34:9d:6a:ec:ab:4f:7b:7f:c2:18:46:4e:99:
7b:d3:c7:76:18:14:be:bb:9c:04:c5:2f:e0:50:e2:
1e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A1:CF:F2:6E:1F:BA:57:65:63:01:A8:C1:74:C3:D4:B6:94:48:D8
X509v3 Authority Key Identifier:
keyid:E1:F4:7C:11:A3:A3:CA:E0:6A:19:28:60:A9:6C:50:53:EC:04:B5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:93:48:c0:d9:7b:d1:13:7b:75:47:a0:ac:a9:7b:4b:0a:b9:
8a:57:7f:25:1d:21:68:9f:b7:76:2e:89:04:3c:72:68:9b:5b:
6b:ca:85:c8:5b:b6:b2:51:95:cf:b1:e5:23:29:2d:bb:c1:3d:
f4:47:37:2a:41:d4:43:bf:67:85:87:4d:1b:10:34:ce:68:1b:
f6:c6:2f:d6:6c:c8:67:13:b4:b1:e1:07:9a:e4:b5:c8:54:b6:
9f:20:37:a8:3c:c8:07:15:6b:98:a6:e2:36:3a:80:bd:88:27:
da:8c:07:32:16:a2:13:40:56:a8:85:d9:da:a9:81:38:1b:ea:
a4:56:4e:20:2d:d2:eb:4d:2d:63:91:11:17:ba:0b:cf:c3:79:
5a:01:c7:9e:96:1c:99:88:e1:74:53:c1:f7:a9:77:c8:6d:25:
29:08:e8:c9:85:9b:78:08:b1:15:0d:f0:b9:27:80:5e:be:c1:
7d:53:18:ce:d2:96:45:68:bd:e3:2e:ed:92:5f:c3:1c:6c:32:
22:fd:a4:a2:76:e0:6a:8b:37:25:86:c8:a1:97:ba:0e:85:fc:
79:5b:91:03:6c:5f:e9:de:5c:18:08:da:05:37:e2:fd:cb:74:
04:d1:ef:6c:89:62:4e:cd:a7:fe:eb:18:f1:cf:fa:97:77:fc:
be:3e:47:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeNo8BxBjTB04y+lhcMrjPMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxZjQ3YzExYTNhM2NhZTA2YTE5Mjg2MGE5NmM1MDUzZWMw
NGI1ZGMwHhcNMjUwNjIwMTQwMDA4WhcNMjUwNjIxMTQwMDA4WjAzMTEwLwYDVQQD
Eyg2NGExY2ZmMjZlMWZiYTU3NjU2MzAxYThjMTc0YzNkNGI2OTQ0OGQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7fRDyMLJyRDkE0HASytMJqbkaHIA
QmY50/uOaJHnEt7mrTMQiocy/iomixuwRLl4YNtF1pj2GEiMtVZxgw/rHd5kkkw8
wfhQTqrH57qIo5YdAUlf8roA9I/sdqUhYOPnqiKSISv4BNqXGGfaYqmYlvOyl6ij
056mEj7UlH6VTfeL84OWy82WEoV+KvXGGGWPQAalc4SKsEC2d2sHYsDF1QZzn1co
mCmVSbt+h+zyH5AQCe2Q0V3uCcJy72qGTLYQPKKQARwgF6HqX5y8xc/v9Q0SSuz/
PCdbZmUygdhwpMuxFDSdauyrT3t/whhGTpl708d2GBS+u5wExS/gUOIeIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGShz/JuH7pXZWMBqMF0w9S2lEjYMB8GA1UdIwQY
MBaAFOH0fBGjo8rgahkoYKlsUFPsBLXcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGZSOEVhT2p5dUJxR1NoZ3FXeFFVLXdFdGR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC85MDgwNzAtZmQ5NC00YTc1LTk4NzIt
MzFjNzMzMTk3MDczLzEvNGZSOEVhT2p5dUJxR1NoZ3FXeFFVLXdFdGR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC85MDgwNzAtZmQ5NC00YTc1LTk4NzItMzFjNzMzMTk3MDcz
LzEvNGZSOEVhT2p5dUJxR1NoZ3FXeFFVLXdFdGR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO5NIwNl7
0RN7dUegrKl7Swq5ild/JR0haJ+3di6JBDxyaJtba8qFyFu2slGVz7HlIyktu8E9
9Ec3KkHUQ79nhYdNGxA0zmgb9sYv1mzIZxO0seEHmuS1yFS2nyA3qDzIBxVrmKbi
NjqAvYgn2owHMhaiE0BWqIXZ2qmBOBvqpFZOIC3S600tY5ERF7oLz8N5WgHHnpYc
mYjhdFPB96l3yG0lKQjoyYWbeAixFQ3wuSeAXr7BfVMYztKWRWi94y7tkl/DHGwy
Iv2konbgaos3JYbIoZe6DoX8eVuRA2xf6d5cGAjaBTfi/ct0BNHvbIliTs2n/usY
8c/6l3f8vj5H9w==
-----END CERTIFICATE-----
Generated at Fri Jun 20 22:34:58 2025 by rpki-client