Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.mft
File: 4M3iwfzj1v4hhTR92J3P0T67sVE.mft (raw, json)
Hash identifier: K1PvukWFzh3PdsljeuZCM5W4PZvzBBtDi7nW8M+yZ7c=
Subject key identifier: BF:B7:0F:5F:3A:43:65:A4:D8:CA:15:CF:B2:A5:C2:0D:14:E6:B3:2F
Authority key identifier: E0:CD:E2:C1:FC:E3:D6:FE:21:85:34:7D:D8:9D:CF:D1:3E:BB:B1:51
Certificate issuer: /CN=e0cde2c1fce3d6fe2185347dd89dcfd13ebbb151
Certificate serial: 01987450662802BA069591E8C24898A6B89B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4M3iwfzj1v4hhTR92J3P0T67sVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 09:01:22 +0000
Manifest this update: Mon 04 Aug 2025 09:01:22 +0000
Manifest next update: Tue 05 Aug 2025 09:01:22 +0000
Files and hashes: 1: 4M3iwfzj1v4hhTR92J3P0T67sVE.crl (hash: uCNrEnWKrjNR3V2fy+deHtIOutWmAZzmftLrdGzARAc=)
2: IcskwdSROKi9qZels4yHQYnddgE.roa (hash: vPtKorJ6NxT7CsrYyPVFrqYiL53IkN4t+VtNjaUnOjc=)
3: R1WYdjBFxaqOJXdmYl0VkK_31-A.roa (hash: jZxWD0uM9IaDgIRuAxwkdjeq40Xiof3RV5ZUg9OIXw4=)
4: UgQvx_lbsNuoPrOWEqQQU5trSo4.roa (hash: n18F2sXvjdyTqUjm8/utigztVnaPt5K+HXMDSCAPMDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4M3iwfzj1v4hhTR92J3P0T67sVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:66:28:02:ba:06:95:91:e8:c2:48:98:a6:b8:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0cde2c1fce3d6fe2185347dd89dcfd13ebbb151
Validity
Not Before: Aug 4 09:01:22 2025 GMT
Not After : Aug 5 09:01:22 2025 GMT
Subject: CN=bfb70f5f3a4365a4d8ca15cfb2a5c20d14e6b32f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:60:26:07:6d:cd:58:3a:25:14:e0:66:0d:7b:
76:c4:42:9b:ee:c2:d1:65:65:c0:16:40:26:59:73:
d5:0b:d9:c6:f1:11:0b:4e:33:7f:5e:01:3b:a9:03:
5d:2f:4d:d4:84:bd:c5:ea:56:ce:07:4f:ef:50:90:
4d:38:66:63:5c:59:29:ec:9d:21:94:84:3d:be:9b:
e2:b8:17:31:15:43:e8:d0:ae:c9:20:14:05:1d:7f:
64:5c:a2:ce:bd:11:e3:9d:6d:c5:14:6f:68:93:65:
9c:54:c3:e7:97:c6:09:06:d9:6e:1c:fa:e9:26:dd:
17:ac:42:72:96:bc:0c:fa:01:64:fc:27:0c:a8:fe:
24:c7:78:46:c4:75:d9:82:24:15:e9:19:9f:0a:8f:
c2:49:b3:fd:52:6e:83:fb:9b:50:2f:7b:0b:e5:b5:
67:b9:de:5a:61:71:5e:d6:f0:3a:33:e9:7b:c2:1a:
7d:74:e3:4b:f7:fa:6e:a6:a9:5f:70:50:28:23:f6:
89:6a:24:23:78:2b:65:de:b6:6f:93:41:0b:48:01:
54:b6:44:f5:07:50:30:78:78:76:dc:2a:7d:00:24:
e4:87:fa:73:e1:06:5a:5e:a3:de:36:1c:5c:65:77:
72:55:cd:5d:ff:86:8f:54:29:37:81:19:2b:d7:74:
86:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B7:0F:5F:3A:43:65:A4:D8:CA:15:CF:B2:A5:C2:0D:14:E6:B3:2F
X509v3 Authority Key Identifier:
keyid:E0:CD:E2:C1:FC:E3:D6:FE:21:85:34:7D:D8:9D:CF:D1:3E:BB:B1:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4M3iwfzj1v4hhTR92J3P0T67sVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:58:a2:bb:bf:47:c0:d7:cc:90:56:54:fb:3c:6a:f4:8c:fb:
d3:83:1e:70:d8:5b:17:e1:fe:01:b8:d5:17:de:25:b7:03:c0:
76:aa:7d:9c:35:4d:f2:02:dc:89:fd:7f:a5:c4:e9:9a:67:09:
fc:f1:05:51:b5:18:ba:5a:9d:b1:41:ab:b9:1e:b0:b1:20:ee:
e6:cf:a5:31:5d:97:90:e1:ea:0b:53:24:11:c7:b9:80:c0:65:
fe:50:1f:10:2b:3d:4d:67:a2:d0:3d:b0:93:22:f8:a6:38:43:
41:8c:4c:13:fe:75:76:03:f7:77:bd:a5:d2:80:74:72:4d:fa:
9f:a6:48:e7:db:c4:88:14:77:fd:73:e8:01:e2:36:ed:5d:45:
14:31:eb:bf:85:ab:2b:af:f3:9d:69:fc:b0:d7:f4:37:c2:7e:
d0:6f:96:07:dc:fe:13:f8:6a:d7:e5:c1:e0:c3:b3:ae:8e:f5:
d4:23:60:80:85:a2:93:71:f1:8a:9a:85:c3:ea:1d:3a:90:43:
6c:f5:d3:7a:26:f8:37:c0:bf:10:75:04:3b:b4:6c:b1:de:a3:
d7:73:1f:3c:48:55:02:d2:8c:db:d9:b5:b8:87:87:29:dd:5a:
ab:bf:6f:a2:9d:cc:a3:ea:b7:96:4f:c5:42:ce:39:05:5a:c6:
7a:61:aa:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0UGYoAroGlZHowkiYpribMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwY2RlMmMxZmNlM2Q2ZmUyMTg1MzQ3ZGQ4OWRjZmQxM2Vi
YmIxNTEwHhcNMjUwODA0MDkwMTIyWhcNMjUwODA1MDkwMTIyWjAzMTEwLwYDVQQD
EyhiZmI3MGY1ZjNhNDM2NWE0ZDhjYTE1Y2ZiMmE1YzIwZDE0ZTZiMzJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5mAmB23NWDolFOBmDXt2xEKb7sLR
ZWXAFkAmWXPVC9nG8RELTjN/XgE7qQNdL03UhL3F6lbOB0/vUJBNOGZjXFkp7J0h
lIQ9vpviuBcxFUPo0K7JIBQFHX9kXKLOvRHjnW3FFG9ok2WcVMPnl8YJBtluHPrp
Jt0XrEJylrwM+gFk/CcMqP4kx3hGxHXZgiQV6RmfCo/CSbP9Um6D+5tQL3sL5bVn
ud5aYXFe1vA6M+l7whp9dONL9/pupqlfcFAoI/aJaiQjeCtl3rZvk0ELSAFUtkT1
B1AweHh23Cp9ACTkh/pz4QZaXqPeNhxcZXdyVc1d/4aPVCk3gRkr13SGqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL+3D186Q2Wk2MoVz7Klwg0U5rMvMB8GA1UdIwQY
MBaAFODN4sH849b+IYU0fdidz9E+u7FRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNE0zaXdmemoxdjRoaFRSOTJKM1AwVDY3c1ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9lY2RkOTMtMWFhMC00YjlhLWI2YWEt
ZWNiMzEyNmZjOGVkLzEvNE0zaXdmemoxdjRoaFRSOTJKM1AwVDY3c1ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9lY2RkOTMtMWFhMC00YjlhLWI2YWEtZWNiMzEyNmZjOGVk
LzEvNE0zaXdmemoxdjRoaFRSOTJKM1AwVDY3c1ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVFiiu79H
wNfMkFZU+zxq9Iz704MecNhbF+H+AbjVF94ltwPAdqp9nDVN8gLcif1/pcTpmmcJ
/PEFUbUYulqdsUGruR6wsSDu5s+lMV2XkOHqC1MkEce5gMBl/lAfECs9TWei0D2w
kyL4pjhDQYxME/51dgP3d72l0oB0ck36n6ZI59vEiBR3/XPoAeI27V1FFDHrv4Wr
K6/znWn8sNf0N8J+0G+WB9z+E/hq1+XB4MOzro711CNggIWik3HxipqFw+odOpBD
bPXTeib4N8C/EHUEO7Rssd6j13MfPEhVAtKM29m1uIeHKd1aq79vop3Mo+q3lk/F
Qs45BVrGemGqvA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:44:04 2025 by rpki-client