Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.mft
File: S4x70MRIa6Bzzi3lO6B01w5Ftec.mft (raw, json)
Hash identifier: kSu4dlpErMDUC5hIjFFHfHhtpKgBa4B+qYYmzxSixJ8=
Subject key identifier: DC:39:08:D7:F3:1E:8A:B2:C0:25:05:FC:F8:CC:3C:B6:0D:89:F5:5D
Authority key identifier: 4B:8C:7B:D0:C4:48:6B:A0:73:CE:2D:E5:3B:A0:74:D7:0E:45:B5:E7
Certificate issuer: /CN=4b8c7bd0c4486ba073ce2de53ba074d70e45b5e7
Certificate serial: 01987A1BA6E11DFB063644EA8FE81C7004E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4x70MRIa6Bzzi3lO6B01w5Ftec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.mft
Manifest number: 1618
Signing time: Tue 05 Aug 2025 12:01:29 +0000
Manifest this update: Tue 05 Aug 2025 12:01:29 +0000
Manifest next update: Wed 06 Aug 2025 12:01:29 +0000
Files and hashes: 1: 3JM1DqiUyjfx5MdpsDwZLHS0SmA.roa (hash: q6Ea605SgtRXxY5NI/ZcpQt4PK8j0Kx+z2u5Y/QaL0k=)
2: S4x70MRIa6Bzzi3lO6B01w5Ftec.crl (hash: rwzL1MzXLYZWKcXQrW/fkgYYf6NJ9Ivu3u0sLMAHA3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.mft
rsync://rpki.ripe.net/repository/DEFAULT/S4x70MRIa6Bzzi3lO6B01w5Ftec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 12:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:1b:a6:e1:1d:fb:06:36:44:ea:8f:e8:1c:70:04:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b8c7bd0c4486ba073ce2de53ba074d70e45b5e7
Validity
Not Before: Aug 5 12:01:29 2025 GMT
Not After : Aug 6 12:01:29 2025 GMT
Subject: CN=dc3908d7f31e8ab2c02505fcf8cc3cb60d89f55d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:41:e0:9e:c2:90:40:05:c5:b7:5b:03:4c:6a:
2f:a9:d4:ab:d9:61:2e:a9:e3:68:dc:23:4a:20:76:
68:00:25:ae:e9:fb:4a:cc:9a:2a:32:6b:ef:d3:50:
3c:5d:e7:83:04:b5:f6:6e:be:b0:40:2a:5d:5d:82:
0f:75:c0:84:2c:a5:83:a3:d2:ed:ce:9e:90:a6:b6:
6f:53:d6:60:b3:ad:ea:4d:d5:c5:bc:ed:e8:e1:9a:
5a:1a:d9:94:1f:80:95:a1:9f:17:5b:8e:77:ac:ae:
70:d0:2c:6b:28:55:79:02:0d:14:32:6f:00:d0:61:
06:3d:ac:af:2b:ea:42:27:8e:a9:cc:1a:b1:31:a5:
ce:61:ca:c7:12:1f:f6:5e:06:5a:61:18:7b:e0:04:
3e:93:8f:50:77:26:fa:a2:f1:bd:98:27:63:ab:ec:
47:61:84:56:96:4d:39:f3:2f:9e:9e:aa:d6:db:90:
49:eb:dc:f8:d0:9b:a9:c5:9b:cc:b0:97:83:2f:f7:
f3:40:9b:6d:93:ac:92:dd:64:b3:11:54:b4:34:c3:
8a:b1:e3:c7:14:6c:61:cc:14:87:ce:eb:c6:08:56:
02:5d:bf:27:d6:df:e4:19:e9:99:97:00:65:02:4c:
5e:3e:bf:8b:eb:a9:ef:98:28:3d:86:35:25:5e:c3:
68:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:39:08:D7:F3:1E:8A:B2:C0:25:05:FC:F8:CC:3C:B6:0D:89:F5:5D
X509v3 Authority Key Identifier:
keyid:4B:8C:7B:D0:C4:48:6B:A0:73:CE:2D:E5:3B:A0:74:D7:0E:45:B5:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4x70MRIa6Bzzi3lO6B01w5Ftec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:bf:a5:76:7f:6a:ea:b2:47:06:fa:dc:95:06:57:22:21:21:
73:ee:3d:cd:5a:56:f5:24:a7:d9:c4:4f:1e:b9:bc:4e:94:7c:
12:09:07:7a:59:2a:7d:63:64:57:29:2f:13:c6:84:42:9e:b4:
63:b2:4d:a9:03:f5:cd:ea:7f:c6:4a:d1:2d:6e:fc:41:28:3f:
14:dc:4e:16:05:8a:35:da:6d:cc:d8:b4:a3:fe:89:25:a8:0c:
fa:ef:d0:68:f5:f7:12:b3:ef:9c:35:cf:96:5e:d2:18:87:7e:
22:9d:89:6f:27:f1:60:81:9c:6f:8a:bf:4c:8d:99:fc:ff:d9:
12:80:60:31:02:16:56:21:5f:fd:13:53:44:f2:bc:2f:a4:74:
bf:cf:67:92:14:4b:77:33:b0:6e:d9:6d:cc:d4:2b:2a:9b:47:
5b:dd:a2:b7:3f:bc:bb:7d:17:ea:4d:0d:5c:97:b6:3a:6e:98:
d0:32:0e:af:6f:2d:d4:24:2b:2b:34:20:56:18:b8:95:a6:b2:
db:0e:06:fc:8a:58:8f:fc:5b:41:72:47:54:62:08:42:44:8a:
94:8b:21:8a:10:32:a6:35:a5:1b:b8:3a:1b:dc:df:fc:85:43:
6b:7f:94:60:66:16:2c:4e:4c:02:8b:f7:43:e7:80:87:14:11:
a0:fa:01:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh6G6bhHfsGNkTqj+gccAToMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiOGM3YmQwYzQ0ODZiYTA3M2NlMmRlNTNiYTA3NGQ3MGU0
NWI1ZTcwHhcNMjUwODA1MTIwMTI5WhcNMjUwODA2MTIwMTI5WjAzMTEwLwYDVQQD
EyhkYzM5MDhkN2YzMWU4YWIyYzAyNTA1ZmNmOGNjM2NiNjBkODlmNTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukHgnsKQQAXFt1sDTGovqdSr2WEu
qeNo3CNKIHZoACWu6ftKzJoqMmvv01A8XeeDBLX2br6wQCpdXYIPdcCELKWDo9Lt
zp6QprZvU9Zgs63qTdXFvO3o4ZpaGtmUH4CVoZ8XW453rK5w0CxrKFV5Ag0UMm8A
0GEGPayvK+pCJ46pzBqxMaXOYcrHEh/2XgZaYRh74AQ+k49Qdyb6ovG9mCdjq+xH
YYRWlk058y+enqrW25BJ69z40JupxZvMsJeDL/fzQJttk6yS3WSzEVS0NMOKsePH
FGxhzBSHzuvGCFYCXb8n1t/kGemZlwBlAkxePr+L66nvmCg9hjUlXsNo9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNw5CNfzHoqywCUF/PjMPLYNifVdMB8GA1UdIwQY
MBaAFEuMe9DESGugc84t5TugdNcORbXnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzR4NzBNUklhNkJ6emkzbE82QjAxdzVGdGVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wYjU4YWItZjcwNy00YWI2LTlhZTgt
MDI0MGU3NDQ3NmE3LzEvUzR4NzBNUklhNkJ6emkzbE82QjAxdzVGdGVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8wYjU4YWItZjcwNy00YWI2LTlhZTgtMDI0MGU3NDQ3NmE3
LzEvUzR4NzBNUklhNkJ6emkzbE82QjAxdzVGdGVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcb+ldn9q
6rJHBvrclQZXIiEhc+49zVpW9SSn2cRPHrm8TpR8EgkHelkqfWNkVykvE8aEQp60
Y7JNqQP1zep/xkrRLW78QSg/FNxOFgWKNdptzNi0o/6JJagM+u/QaPX3ErPvnDXP
ll7SGId+Ip2JbyfxYIGcb4q/TI2Z/P/ZEoBgMQIWViFf/RNTRPK8L6R0v89nkhRL
dzOwbtltzNQrKptHW92itz+8u30X6k0NXJe2Om6Y0DIOr28t1CQrKzQgVhi4laay
2w4G/IpYj/xbQXJHVGIIQkSKlIshihAypjWlG7g6G9zf/IVDa3+UYGYWLE5MAov3
Q+eAhxQRoPoBtQ==
-----END CERTIFICATE-----
Generated at Tue Aug 5 20:04:33 2025 by rpki-client