Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
File: 4KE7ki7n67muzeGacNDiW3d1DQI.mft (raw, json)
Hash identifier: dO5xOxpNDDcS+3GXXZganh2Pc8/jRUbvwnikFQ5zrZQ=
Subject key identifier: 91:B9:D1:BE:0C:50:E9:DD:97:A9:40:56:E8:EB:AE:74:7B:61:27:80
Authority key identifier: E0:A1:3B:92:2E:E7:EB:B9:AE:CD:E1:9A:70:D0:E2:5B:77:75:0D:02
Certificate issuer: /CN=e0a13b922ee7ebb9aecde19a70d0e25b77750d02
Certificate serial: 01976EBDDDCA7EE2238BE9DD1274FE442AE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KE7ki7n67muzeGacNDiW3d1DQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
Manifest number: 0B83
Signing time: Sat 14 Jun 2025 14:00:26 +0000
Manifest this update: Sat 14 Jun 2025 14:00:26 +0000
Manifest next update: Sun 15 Jun 2025 14:00:26 +0000
Files and hashes: 1: 4KE7ki7n67muzeGacNDiW3d1DQI.crl (hash: FFniZ5eUCeePWws3oUpCC4VKpr/a2q2O2juT4gZAAQc=)
2: Y8AXUYDP-qGUFi9hzn6P0gBawaM.roa (hash: PbgeAgI/Sj2ZS05Cb4sm9ySYZjOm8LnX+ij5E01wZBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4KE7ki7n67muzeGacNDiW3d1DQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:bd:dd:ca:7e:e2:23:8b:e9:dd:12:74:fe:44:2a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0a13b922ee7ebb9aecde19a70d0e25b77750d02
Validity
Not Before: Jun 14 14:00:26 2025 GMT
Not After : Jun 15 14:00:26 2025 GMT
Subject: CN=91b9d1be0c50e9dd97a94056e8ebae747b612780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:93:6f:55:05:e7:0f:24:2a:4c:fb:e9:ac:58:
aa:ba:e0:4b:96:a4:10:58:18:c1:b4:1c:8d:ce:99:
9f:23:db:21:07:6c:8b:23:5b:a0:8b:5f:27:61:c5:
53:34:6b:07:e0:fa:6b:35:cf:3e:79:90:8e:85:10:
45:1f:8c:c8:e0:22:b7:85:51:f5:c1:8b:60:40:91:
b6:a8:2d:5e:34:48:f7:5b:a2:a8:34:ea:a0:a6:6f:
fa:03:5d:22:34:e4:60:8f:65:bb:cb:14:96:2e:a4:
62:66:b5:47:c7:9d:e9:8f:f2:f0:9e:a7:ef:12:2b:
79:ec:50:b6:d0:ae:0a:fc:52:c3:ec:ca:f4:1c:53:
c9:46:48:d8:3c:ef:eb:74:67:7b:be:2e:33:be:31:
5a:90:5f:8b:09:08:ee:3b:02:b1:f2:e4:ab:64:7a:
e6:12:43:c6:41:38:a6:38:25:d4:f2:a4:59:57:dc:
3b:21:82:1c:e8:ff:b2:fa:22:33:d3:47:20:30:4e:
4a:67:c8:b1:78:83:d6:15:6d:f6:08:b2:c3:3b:fa:
60:d9:36:39:70:d4:c3:02:d3:61:f5:33:bd:fb:33:
24:1b:4b:e2:1f:06:38:cd:cd:bb:9b:de:f8:c9:61:
39:1b:47:47:99:f7:73:33:7e:e8:ea:3b:ba:bf:13:
29:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B9:D1:BE:0C:50:E9:DD:97:A9:40:56:E8:EB:AE:74:7B:61:27:80
X509v3 Authority Key Identifier:
keyid:E0:A1:3B:92:2E:E7:EB:B9:AE:CD:E1:9A:70:D0:E2:5B:77:75:0D:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KE7ki7n67muzeGacNDiW3d1DQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:1a:3d:aa:61:90:80:1b:ba:96:67:76:02:e8:47:e3:52:9f:
a8:a1:cb:a7:2a:f7:40:d5:85:1f:b5:11:47:64:17:52:96:ce:
16:50:e8:aa:db:6e:29:23:91:28:83:29:84:80:f7:38:ac:78:
9c:c1:37:f6:26:d7:4d:c4:41:2c:ee:4a:06:92:9d:a5:d8:d7:
9e:e2:fb:6f:b3:df:30:0e:ff:b6:c6:7e:9f:c7:6b:36:2f:3e:
31:e1:b2:d7:a8:fc:22:a6:8e:87:f4:f8:8e:b7:f3:ce:8b:60:
39:7e:52:09:36:6f:55:0b:0e:1e:75:17:2d:c0:5e:7b:44:8d:
fb:bf:19:d6:b2:8d:b4:5b:a8:04:82:e0:9e:aa:a3:d8:68:fd:
f7:a9:22:7a:8b:32:79:85:aa:37:f8:2f:e1:9a:47:59:46:89:
02:fe:e7:9d:ab:6f:f8:47:bf:17:dd:5c:4d:f6:38:23:0f:53:
c7:cc:07:9e:66:24:1b:9d:96:b4:d6:6e:78:80:c6:8b:df:05:
2b:31:bf:1c:ef:19:7f:5c:23:dd:c1:13:fe:e9:55:f9:64:8a:
85:51:f3:61:14:38:9f:67:3c:0a:a7:7c:ed:99:69:78:2d:04:
10:c9:6c:af:7a:05:d7:8f:80:dc:55:d1:9e:67:91:6b:59:a0:
18:d7:ea:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZduvd3KfuIji+ndEnT+RCrgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwYTEzYjkyMmVlN2ViYjlhZWNkZTE5YTcwZDBlMjViNzc3
NTBkMDIwHhcNMjUwNjE0MTQwMDI2WhcNMjUwNjE1MTQwMDI2WjAzMTEwLwYDVQQD
Eyg5MWI5ZDFiZTBjNTBlOWRkOTdhOTQwNTZlOGViYWU3NDdiNjEyNzgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5NvVQXnDyQqTPvprFiquuBLlqQQ
WBjBtByNzpmfI9shB2yLI1ugi18nYcVTNGsH4PprNc8+eZCOhRBFH4zI4CK3hVH1
wYtgQJG2qC1eNEj3W6KoNOqgpm/6A10iNORgj2W7yxSWLqRiZrVHx53pj/Lwnqfv
Eit57FC20K4K/FLD7Mr0HFPJRkjYPO/rdGd7vi4zvjFakF+LCQjuOwKx8uSrZHrm
EkPGQTimOCXU8qRZV9w7IYIc6P+y+iIz00cgME5KZ8ixeIPWFW32CLLDO/pg2TY5
cNTDAtNh9TO9+zMkG0viHwY4zc27m974yWE5G0dHmfdzM37o6ju6vxMp2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJG50b4MUOndl6lAVujrrnR7YSeAMB8GA1UdIwQY
MBaAFOChO5Iu5+u5rs3hmnDQ4lt3dQ0CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEtFN2tpN242N211emVHYWNORGlXM2QxRFFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9mNzdjNWItMTliMi00YmMxLThmYWEt
MTBiMDIxMWQ5NmZjLzEvNEtFN2tpN242N211emVHYWNORGlXM2QxRFFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9mNzdjNWItMTliMi00YmMxLThmYWEtMTBiMDIxMWQ5NmZj
LzEvNEtFN2tpN242N211emVHYWNORGlXM2QxRFFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASho9qmGQ
gBu6lmd2AuhH41KfqKHLpyr3QNWFH7URR2QXUpbOFlDoqttuKSORKIMphID3OKx4
nME39ibXTcRBLO5KBpKdpdjXnuL7b7PfMA7/tsZ+n8drNi8+MeGy16j8IqaOh/T4
jrfzzotgOX5SCTZvVQsOHnUXLcBee0SN+78Z1rKNtFuoBILgnqqj2Gj996kieosy
eYWqN/gv4ZpHWUaJAv7nnatv+Ee/F91cTfY4Iw9Tx8wHnmYkG52WtNZueIDGi98F
KzG/HO8Zf1wj3cET/ulV+WSKhVHzYRQ4n2c8Cqd87ZlpeC0EEMlsr3oF14+A3FXR
nmeRa1mgGNfqFA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 22:33:13 2025 by rpki-client