Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/de37fa-1bd2-47f5-9e2b-ac4c8f19876d/1/4TcnopRRvk3Zkitg0cWW6Aaplfs.mft
File: 4TcnopRRvk3Zkitg0cWW6Aaplfs.mft (raw, json)
Hash identifier: FRP9Z7KY8tOLU8XrdpuQAcUV4V1ebquXhIjcHwu72DI=
Subject key identifier: 5D:35:1B:58:EF:5B:85:FF:05:35:D8:94:E1:59:1D:72:AC:E2:0C:28
Authority key identifier: E1:37:27:A2:94:51:BE:4D:D9:92:2B:60:D1:C5:96:E8:06:A9:95:FB
Certificate issuer: /CN=e13727a29451be4dd9922b60d1c596e806a995fb
Certificate serial: 01976960EE3465A91B80377E7AB9BB3D5E30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4TcnopRRvk3Zkitg0cWW6Aaplfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/de37fa-1bd2-47f5-9e2b-ac4c8f19876d/1/4TcnopRRvk3Zkitg0cWW6Aaplfs.mft
Manifest number: 1589
Signing time: Fri 13 Jun 2025 13:00:49 +0000
Manifest this update: Fri 13 Jun 2025 13:00:49 +0000
Manifest next update: Sat 14 Jun 2025 13:00:49 +0000
Files and hashes: 1: 4TcnopRRvk3Zkitg0cWW6Aaplfs.crl (hash: vPIcnPjDP7D4TBNcNKSvzfeGbzCaAcx7zpW8Gx2PVYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/de37fa-1bd2-47f5-9e2b-ac4c8f19876d/1/4TcnopRRvk3Zkitg0cWW6Aaplfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/de37fa-1bd2-47f5-9e2b-ac4c8f19876d/1/4TcnopRRvk3Zkitg0cWW6Aaplfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/4TcnopRRvk3Zkitg0cWW6Aaplfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:ee:34:65:a9:1b:80:37:7e:7a:b9:bb:3d:5e:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e13727a29451be4dd9922b60d1c596e806a995fb
Validity
Not Before: Jun 13 13:00:49 2025 GMT
Not After : Jun 14 13:00:49 2025 GMT
Subject: CN=5d351b58ef5b85ff0535d894e1591d72ace20c28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c5:9b:ca:75:fb:f6:f7:c3:a0:b1:16:8d:38:
10:1b:ec:de:0b:a8:b6:45:b6:7a:db:d6:c8:ed:52:
cd:94:cd:23:41:58:66:00:38:ae:fa:a3:aa:72:6b:
6e:de:63:4a:48:70:7c:41:59:67:cf:b5:fc:dd:a2:
07:03:f1:3f:4f:53:52:5b:f9:9d:cb:bc:2b:ae:90:
03:89:1c:00:96:63:61:08:a6:f8:bb:3d:3a:74:ff:
6f:12:45:27:5d:8a:06:e0:d7:93:6d:c8:53:92:65:
13:38:44:33:9e:fe:b8:b4:01:0a:30:2d:38:1a:dc:
ba:38:4b:6e:0d:95:56:89:89:57:40:49:ad:37:04:
ce:61:14:53:43:d8:2c:14:3d:84:f8:db:0d:35:bd:
fb:d7:d8:75:17:d2:aa:4d:3a:d7:5e:3d:4c:50:e3:
d1:69:27:44:eb:19:ca:34:1c:f6:5c:d8:75:32:c7:
01:40:5c:0f:63:ee:d2:b1:61:f4:82:3a:a2:bd:2b:
93:ae:9a:8b:c9:e9:0c:72:48:4b:49:46:6c:a3:f9:
5c:bc:90:71:c9:ff:e2:e6:df:15:c8:2f:10:81:83:
9c:83:17:a4:c7:58:89:c2:97:54:ea:9b:2f:d5:63:
a3:de:9d:b8:68:fc:e9:f3:39:b0:66:93:b3:eb:67:
5e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:35:1B:58:EF:5B:85:FF:05:35:D8:94:E1:59:1D:72:AC:E2:0C:28
X509v3 Authority Key Identifier:
keyid:E1:37:27:A2:94:51:BE:4D:D9:92:2B:60:D1:C5:96:E8:06:A9:95:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TcnopRRvk3Zkitg0cWW6Aaplfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/de37fa-1bd2-47f5-9e2b-ac4c8f19876d/1/4TcnopRRvk3Zkitg0cWW6Aaplfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/de37fa-1bd2-47f5-9e2b-ac4c8f19876d/1/4TcnopRRvk3Zkitg0cWW6Aaplfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:c2:0c:7d:f2:df:c4:d6:0b:d2:6b:e4:9b:be:1a:21:b3:91:
af:7e:74:b8:10:c1:6c:ae:14:60:23:61:1a:88:82:63:22:d9:
76:82:c4:c1:5e:59:d2:bc:cb:8d:09:21:3d:eb:8d:c8:64:b8:
57:13:90:3b:0d:1e:23:0a:63:9b:24:aa:dd:ba:b9:a1:bf:7f:
75:5c:32:87:73:43:1e:c9:ab:63:64:59:b4:98:9c:ef:be:a1:
4a:0c:ae:d5:41:3f:a8:8f:f4:e0:1e:a4:55:d5:a8:1f:4a:3c:
11:c6:a9:1e:01:6b:07:07:16:f4:fb:31:da:4e:9a:bf:73:e9:
f7:2b:46:79:eb:52:86:57:71:b1:53:59:9f:cb:10:c5:da:2d:
dc:c0:21:9e:62:06:42:8e:29:bf:ed:6d:f4:a1:68:60:74:f1:
b6:78:b8:40:f4:77:1d:62:59:eb:ef:3f:a4:9f:30:08:61:32:
ab:7e:26:18:e0:82:95:65:46:cb:21:1c:55:28:53:c1:2a:77:
72:8d:f4:22:f2:f5:5a:dc:e9:68:ce:3f:a5:f8:3a:35:f7:34:
a2:12:75:9a:22:76:81:32:68:6b:40:fc:12:46:69:56:5f:20:
bb:cc:45:29:bc:89:3c:b0:fa:38:42:6c:52:c4:19:d9:e2:4f:
88:73:69:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpYO40ZakbgDd+erm7PV4wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMzcyN2EyOTQ1MWJlNGRkOTkyMmI2MGQxYzU5NmU4MDZh
OTk1ZmIwHhcNMjUwNjEzMTMwMDQ5WhcNMjUwNjE0MTMwMDQ5WjAzMTEwLwYDVQQD
Eyg1ZDM1MWI1OGVmNWI4NWZmMDUzNWQ4OTRlMTU5MWQ3MmFjZTIwYzI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1sWbynX79vfDoLEWjTgQG+zeC6i2
RbZ629bI7VLNlM0jQVhmADiu+qOqcmtu3mNKSHB8QVlnz7X83aIHA/E/T1NSW/md
y7wrrpADiRwAlmNhCKb4uz06dP9vEkUnXYoG4NeTbchTkmUTOEQznv64tAEKMC04
Gty6OEtuDZVWiYlXQEmtNwTOYRRTQ9gsFD2E+NsNNb3719h1F9KqTTrXXj1MUOPR
aSdE6xnKNBz2XNh1MscBQFwPY+7SsWH0gjqivSuTrpqLyekMckhLSUZso/lcvJBx
yf/i5t8VyC8QgYOcgxekx1iJwpdU6psv1WOj3p24aPzp8zmwZpOz62de6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF01G1jvW4X/BTXYlOFZHXKs4gwoMB8GA1UdIwQY
MBaAFOE3J6KUUb5N2ZIrYNHFlugGqZX7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFRjbm9wUlJ2azNaa2l0ZzBjV1c2QWFwbGZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9kZTM3ZmEtMWJkMi00N2Y1LTllMmIt
YWM0YzhmMTk4NzZkLzEvNFRjbm9wUlJ2azNaa2l0ZzBjV1c2QWFwbGZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9kZTM3ZmEtMWJkMi00N2Y1LTllMmItYWM0YzhmMTk4NzZk
LzEvNFRjbm9wUlJ2azNaa2l0ZzBjV1c2QWFwbGZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWcIMffLf
xNYL0mvkm74aIbORr350uBDBbK4UYCNhGoiCYyLZdoLEwV5Z0rzLjQkhPeuNyGS4
VxOQOw0eIwpjmySq3bq5ob9/dVwyh3NDHsmrY2RZtJic776hSgyu1UE/qI/04B6k
VdWoH0o8EcapHgFrBwcW9Psx2k6av3Pp9ytGeetShldxsVNZn8sQxdot3MAhnmIG
Qo4pv+1t9KFoYHTxtni4QPR3HWJZ6+8/pJ8wCGEyq34mGOCClWVGyyEcVShTwSp3
co30IvL1WtzpaM4/pfg6Nfc0ohJ1miJ2gTJoa0D8EkZpVl8gu8xFKbyJPLD6OEJs
UsQZ2eJPiHNpUw==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:10:45 2025 by rpki-client