
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
File: 4a7RSE6W5L95k-m4Z7NMNNaorjY.mft (raw, json)
Hash identifier: P5Dz/DTtpH/H0DbcaUsqxWdGOZKf+bJL10njMIfHvg8=
Subject key identifier: 4A:DB:83:3C:5C:A2:62:E1:E7:A0:6B:13:5C:74:D7:EA:E0:3D:0A:DA
Authority key identifier: E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36
Certificate issuer: /CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36
Certificate serial: 01988BB3AE02E9F60DA705B004CF78792161
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
Manifest number: 0CDB
Signing time: Fri 08 Aug 2025 22:01:05 +0000
Manifest this update: Fri 08 Aug 2025 22:01:05 +0000
Manifest next update: Sat 09 Aug 2025 22:01:05 +0000
Files and hashes: 1: 4a7RSE6W5L95k-m4Z7NMNNaorjY.crl (hash: yVwc1gBCHyUQIGeLCQWOTw4XchGzFpBmJm6EXfQ+B8A=)
2: 7e4XWoTxR_4GFJNbOkXvGvD-gG4.roa (hash: 4YXw3iLwYdL9YkiJ0wB5yVfXs/BwnpG21A305csfmtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:b3:ae:02:e9:f6:0d:a7:05:b0:04:cf:78:79:21:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36
Validity
Not Before: Aug 8 22:01:05 2025 GMT
Not After : Aug 9 22:01:05 2025 GMT
Subject: CN=4adb833c5ca262e1e7a06b135c74d7eae03d0ada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:66:49:81:66:ba:ca:20:27:04:8b:10:a9:42:
6c:1d:71:5d:91:f9:c6:d9:af:c7:62:1c:27:a2:dc:
a5:6c:42:90:80:eb:26:ba:3e:22:c4:f6:d3:d7:23:
67:56:2f:11:95:b4:1d:6f:a3:cd:3a:a0:f8:50:cf:
e8:b0:0a:fd:76:08:23:d4:2f:4c:a2:56:88:d2:c8:
ca:9d:03:dd:69:eb:cb:a3:95:1f:da:fe:24:95:16:
b9:42:fe:07:75:f8:47:04:b0:c1:5a:35:2c:02:53:
66:26:3d:c0:7d:5a:35:74:a8:94:fe:e7:e8:f6:78:
c6:bd:7e:ff:51:9a:81:ca:a9:c5:06:f8:91:c0:3c:
61:87:23:55:f1:c6:f0:00:93:4c:56:80:f4:77:a1:
a2:1c:7f:b8:dd:83:d4:a5:fc:eb:1d:ff:93:2d:f7:
a7:68:9c:71:8c:a8:be:db:43:c8:c2:8d:ec:bd:4f:
25:a7:7b:25:28:35:a7:8f:18:9b:c2:08:3f:5c:e3:
9d:cb:f5:ae:61:4b:5d:86:e6:1c:b5:57:4b:77:cc:
ea:ee:80:61:c4:52:9e:3d:f0:2b:31:66:4f:93:51:
99:88:13:7a:a6:d6:3a:fe:34:c0:3f:b2:62:2d:d5:
13:a6:7d:46:ff:2d:8d:db:ee:78:36:5b:60:31:fa:
d1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:DB:83:3C:5C:A2:62:E1:E7:A0:6B:13:5C:74:D7:EA:E0:3D:0A:DA
X509v3 Authority Key Identifier:
keyid:E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:de:6c:28:22:ad:a1:57:23:3f:82:ec:c0:a6:6b:1d:db:05:
7d:47:97:f6:f8:a8:ad:e9:ab:a9:d2:41:94:0e:3b:55:59:4e:
cc:95:31:08:18:fe:65:31:57:82:65:c7:36:29:fe:d3:69:b0:
fd:a2:43:25:d5:0f:d2:81:57:8d:20:9c:cd:3c:35:5d:bb:2a:
a0:ee:ed:1d:58:73:49:0d:9c:57:b9:48:00:e7:09:f9:19:7e:
56:1b:1c:21:2c:4a:b8:11:e7:67:68:1c:7f:a1:83:0e:1e:30:
b6:16:2f:bc:8d:e9:d7:3f:9b:e3:cb:d3:c5:4c:12:13:10:be:
88:5b:71:55:c1:31:25:95:77:18:89:5a:fe:a3:32:5d:a3:17:
65:ae:0f:1f:18:1f:d6:13:c7:71:f7:93:04:37:f3:43:6f:14:
80:07:96:04:bd:21:69:0f:59:b5:73:18:bf:fa:af:f2:55:50:
6e:3f:ea:d1:22:78:fa:93:7f:c1:da:86:6d:0c:6f:ad:6f:82:
94:09:4d:ce:97:93:94:4f:f9:e5:fa:92:2b:ee:81:76:a4:fe:
fd:7a:2c:12:c4:f4:2d:65:ee:4d:3b:c4:7f:74:6a:d1:62:f9:
c1:4f:f8:ec:43:54:c2:6b:5c:83:63:46:44:e7:aa:ff:5b:6c:
19:77:d4:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLs64C6fYNpwWwBM94eSFhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxYWVkMTQ4NGU5NmU0YmY3OTkzZTliODY3YjM0YzM0ZDZh
OGFlMzYwHhcNMjUwODA4MjIwMTA1WhcNMjUwODA5MjIwMTA1WjAzMTEwLwYDVQQD
Eyg0YWRiODMzYzVjYTI2MmUxZTdhMDZiMTM1Yzc0ZDdlYWUwM2QwYWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWZJgWa6yiAnBIsQqUJsHXFdkfnG
2a/HYhwnotylbEKQgOsmuj4ixPbT1yNnVi8RlbQdb6PNOqD4UM/osAr9dggj1C9M
olaI0sjKnQPdaevLo5Uf2v4klRa5Qv4HdfhHBLDBWjUsAlNmJj3AfVo1dKiU/ufo
9njGvX7/UZqByqnFBviRwDxhhyNV8cbwAJNMVoD0d6GiHH+43YPUpfzrHf+TLfen
aJxxjKi+20PIwo3svU8lp3slKDWnjxibwgg/XOOdy/WuYUtdhuYctVdLd8zq7oBh
xFKePfArMWZPk1GZiBN6ptY6/jTAP7JiLdUTpn1G/y2N2+54NltgMfrR3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFErbgzxcomLh56BrE1x01+rgPQraMB8GA1UdIwQY
MBaAFOGu0UhOluS/eZPpuGezTDTWqK42MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGE3UlNFNlc1TDk1ay1tNFo3Tk1OTmFvcmpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81MjNhOTMtOGJiZC00NGFjLTg4YmQt
NGU3YmNhNTVmODIxLzEvNGE3UlNFNlc1TDk1ay1tNFo3Tk1OTmFvcmpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC81MjNhOTMtOGJiZC00NGFjLTg4YmQtNGU3YmNhNTVmODIx
LzEvNGE3UlNFNlc1TDk1ay1tNFo3Tk1OTmFvcmpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVd5sKCKt
oVcjP4LswKZrHdsFfUeX9vioremrqdJBlA47VVlOzJUxCBj+ZTFXgmXHNin+02mw
/aJDJdUP0oFXjSCczTw1XbsqoO7tHVhzSQ2cV7lIAOcJ+Rl+VhscISxKuBHnZ2gc
f6GDDh4wthYvvI3p1z+b48vTxUwSExC+iFtxVcExJZV3GIla/qMyXaMXZa4PHxgf
1hPHcfeTBDfzQ28UgAeWBL0haQ9ZtXMYv/qv8lVQbj/q0SJ4+pN/wdqGbQxvrW+C
lAlNzpeTlE/55fqSK+6BdqT+/XosEsT0LWXuTTvEf3Rq0WL5wU/47ENUwmtcg2NG
ROeq/1tsGXfUjg==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:22:10 2025 by rpki-client