
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.mft
File: 4IZuWnxyXctqE4zGw0DP2tQxXT4.mft (raw, json)
Hash identifier: JBbVoeHWzzLyrExdQEegTygtIVpbsY+QhXf/Z8wOXpU=
Subject key identifier: 2E:63:1E:57:67:96:6D:05:1E:A6:3C:11:B8:1B:E3:5A:9E:70:02:AA
Authority key identifier: E0:86:6E:5A:7C:72:5D:CB:6A:13:8C:C6:C3:40:CF:DA:D4:31:5D:3E
Certificate issuer: /CN=e0866e5a7c725dcb6a138cc6c340cfdad4315d3e
Certificate serial: 01987FE63AFCBCA766556CDC37C02EF7F327
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IZuWnxyXctqE4zGw0DP2tQxXT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.mft
Manifest number: 1619
Signing time: Wed 06 Aug 2025 15:00:51 +0000
Manifest this update: Wed 06 Aug 2025 15:00:51 +0000
Manifest next update: Thu 07 Aug 2025 15:00:51 +0000
Files and hashes: 1: 4IZuWnxyXctqE4zGw0DP2tQxXT4.crl (hash: kTYm4cJIrn+z2/69saNfKNGjUOLS3qQtUTyYKh0eWWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4IZuWnxyXctqE4zGw0DP2tQxXT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 15:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:e6:3a:fc:bc:a7:66:55:6c:dc:37:c0:2e:f7:f3:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0866e5a7c725dcb6a138cc6c340cfdad4315d3e
Validity
Not Before: Aug 6 15:00:51 2025 GMT
Not After : Aug 7 15:00:51 2025 GMT
Subject: CN=2e631e5767966d051ea63c11b81be35a9e7002aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:33:5c:b0:1c:23:64:14:0e:cd:1f:49:34:46:
e3:38:78:77:c1:9d:7b:18:4f:44:b5:45:92:98:56:
b7:9f:fb:5d:5a:70:2b:da:26:cb:e0:dc:88:7f:d6:
9e:04:ab:a9:71:8b:dc:f7:e9:b0:1f:76:62:45:50:
ab:1d:6a:7f:77:c5:9f:eb:fb:2a:11:fd:b3:ca:91:
1f:09:b3:21:9c:c1:ba:5b:fe:72:3f:4a:c7:03:d5:
65:f3:48:57:c1:fa:cc:78:ea:3b:8b:61:02:b4:7f:
85:c8:d7:c2:37:8c:8d:0b:66:31:bb:d7:aa:fc:16:
30:5d:10:64:75:24:53:8b:df:94:ee:4d:5a:ad:65:
55:aa:83:68:56:54:7f:60:d5:26:bf:ad:9b:0a:aa:
ca:75:6a:2f:63:9e:37:84:20:13:e2:e5:ff:9e:58:
e7:74:5a:da:fd:82:23:db:40:12:4a:f2:ba:35:2a:
e1:2b:b3:e6:b9:1f:fa:28:61:62:b4:64:ee:37:2c:
d9:cb:0c:04:0f:b8:d2:ee:91:8b:9f:69:e9:e6:b7:
8f:ec:2c:a3:c5:82:8e:7f:ef:56:3e:b0:cd:97:4c:
4c:fb:11:11:30:ce:12:b5:73:7e:28:0a:49:c8:97:
d9:3e:7e:74:2a:dc:d1:82:1b:2a:be:5e:6b:ad:0a:
49:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:63:1E:57:67:96:6D:05:1E:A6:3C:11:B8:1B:E3:5A:9E:70:02:AA
X509v3 Authority Key Identifier:
keyid:E0:86:6E:5A:7C:72:5D:CB:6A:13:8C:C6:C3:40:CF:DA:D4:31:5D:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IZuWnxyXctqE4zGw0DP2tQxXT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:b0:ba:41:11:26:e8:28:3f:35:4b:21:47:8e:1d:31:2a:ed:
b7:32:32:85:26:0a:ce:35:fd:d3:7f:d2:81:2b:2f:33:60:ac:
00:d5:94:61:31:d2:53:ff:8b:3b:09:53:10:74:f6:a0:58:93:
20:5d:58:f3:03:23:6d:c8:70:58:9b:5c:7b:92:51:c9:61:42:
6c:1e:1c:28:9a:3c:7e:ed:e3:c3:0d:5d:0d:09:fe:c1:da:df:
b3:95:f7:bf:c6:0f:38:82:81:be:02:f0:77:1f:79:73:a1:ad:
6b:c6:8b:b4:94:a1:4b:62:c4:b6:1b:81:b5:98:b2:c5:00:c7:
13:29:03:5e:cc:dd:49:ca:bd:a8:f3:43:bc:ad:f9:a6:35:fb:
b4:ff:8f:22:1e:a4:db:32:1b:94:c5:89:63:6e:5d:28:b2:3f:
67:b6:84:93:e1:db:67:bd:7f:21:a5:af:59:95:b3:a5:ad:a5:
03:93:f9:87:ca:58:bb:80:81:65:c0:78:47:b9:e2:92:b0:75:
22:ca:6c:75:6b:d4:89:b2:bd:3d:c2:18:fa:d4:29:8a:d7:9e:
13:ff:fc:ea:c4:32:a7:03:12:8f:88:74:db:ac:6c:ee:f9:24:
7a:ad:4e:f2:08:93:33:fe:e9:3f:4b:ed:a9:cc:94:af:d4:28:
c3:f5:5f:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh/5jr8vKdmVWzcN8Au9/MnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwODY2ZTVhN2M3MjVkY2I2YTEzOGNjNmMzNDBjZmRhZDQz
MTVkM2UwHhcNMjUwODA2MTUwMDUxWhcNMjUwODA3MTUwMDUxWjAzMTEwLwYDVQQD
EygyZTYzMWU1NzY3OTY2ZDA1MWVhNjNjMTFiODFiZTM1YTllNzAwMmFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzNcsBwjZBQOzR9JNEbjOHh3wZ17
GE9EtUWSmFa3n/tdWnAr2ibL4NyIf9aeBKupcYvc9+mwH3ZiRVCrHWp/d8Wf6/sq
Ef2zypEfCbMhnMG6W/5yP0rHA9Vl80hXwfrMeOo7i2ECtH+FyNfCN4yNC2Yxu9eq
/BYwXRBkdSRTi9+U7k1arWVVqoNoVlR/YNUmv62bCqrKdWovY543hCAT4uX/nljn
dFra/YIj20ASSvK6NSrhK7PmuR/6KGFitGTuNyzZywwED7jS7pGLn2np5reP7Cyj
xYKOf+9WPrDNl0xM+xERMM4StXN+KApJyJfZPn50KtzRghsqvl5rrQpJYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC5jHldnlm0FHqY8Ebgb41qecAKqMB8GA1UdIwQY
MBaAFOCGblp8cl3LahOMxsNAz9rUMV0+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEladVdueHlYY3RxRTR6R3cwRFAydFF4WFQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC83YmE4NzctNDgzOS00NzE3LThhYTQt
MjQ0MTliODc2ZjA4LzEvNEladVdueHlYY3RxRTR6R3cwRFAydFF4WFQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC83YmE4NzctNDgzOS00NzE3LThhYTQtMjQ0MTliODc2ZjA4
LzEvNEladVdueHlYY3RxRTR6R3cwRFAydFF4WFQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANbC6QREm
6Cg/NUshR44dMSrttzIyhSYKzjX903/SgSsvM2CsANWUYTHSU/+LOwlTEHT2oFiT
IF1Y8wMjbchwWJtce5JRyWFCbB4cKJo8fu3jww1dDQn+wdrfs5X3v8YPOIKBvgLw
dx95c6Gta8aLtJShS2LEthuBtZiyxQDHEykDXszdScq9qPNDvK35pjX7tP+PIh6k
2zIblMWJY25dKLI/Z7aEk+HbZ71/IaWvWZWzpa2lA5P5h8pYu4CBZcB4R7nikrB1
IspsdWvUibK9PcIY+tQpiteeE//86sQypwMSj4h026xs7vkkeq1O8giTM/7pP0vt
qcyUr9Qow/Vfqg==
-----END CERTIFICATE-----
Generated at Thu Aug 7 01:12:25 2025 by rpki-client