Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.mft
File: 4aMjVGSEIgy0AgYzgPQBY2kmKs8.mft (raw, json)
Hash identifier: En7A/M+BsV7Y4/TsCXVcp0ClEFGFMM1ApobxgvAH6g4=
Subject key identifier: E4:79:9B:E6:78:0A:D4:13:96:09:8F:DE:49:AE:A3:70:CF:F8:6F:17
Authority key identifier: E1:A3:23:54:64:84:22:0C:B4:02:06:33:80:F4:01:63:69:26:2A:CF
Certificate issuer: /CN=e1a323546484220cb402063380f4016369262acf
Certificate serial: 01988BEB077FE3C4263F403B2D3791B1C389
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4aMjVGSEIgy0AgYzgPQBY2kmKs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.mft
Manifest number: 0967
Signing time: Fri 08 Aug 2025 23:01:32 +0000
Manifest this update: Fri 08 Aug 2025 23:01:32 +0000
Manifest next update: Sat 09 Aug 2025 23:01:32 +0000
Files and hashes: 1: 4aMjVGSEIgy0AgYzgPQBY2kmKs8.crl (hash: OskBAJageAd1uv97CZln9/TWxNgYveJnL3+udfxNVrs=)
2: oLxnPDOjx34zqrjQ27ju_ZuWYV4.roa (hash: aFW6lgXJpeg0bmQI7iZHPliZcmK0ToNkD5OYtI2CIQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4aMjVGSEIgy0AgYzgPQBY2kmKs8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:eb:07:7f:e3:c4:26:3f:40:3b:2d:37:91:b1:c3:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1a323546484220cb402063380f4016369262acf
Validity
Not Before: Aug 8 23:01:32 2025 GMT
Not After : Aug 9 23:01:32 2025 GMT
Subject: CN=e4799be6780ad41396098fde49aea370cff86f17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c3:0a:05:ef:82:66:87:fa:1b:76:c0:fc:75:
00:b4:b4:e5:6b:51:93:ff:9b:ae:61:dc:ef:3b:02:
2e:bf:90:4f:96:b0:36:6b:b3:f4:97:b4:ef:24:2a:
84:39:54:6f:66:2a:6a:ad:28:7d:02:5d:cd:0b:cf:
2e:23:58:a0:3f:ea:bd:b6:81:07:bf:19:b0:87:60:
38:b6:3a:10:8b:ca:96:48:de:68:f3:40:d9:7d:8f:
c5:18:47:e9:de:b7:24:86:41:7a:6a:10:fa:1c:eb:
ae:c6:03:1b:bc:ee:02:33:f9:12:f5:91:34:f0:bf:
c6:c1:d5:04:53:b4:94:22:b0:36:4e:75:b4:10:18:
51:49:5c:62:76:7d:cf:99:98:2e:c1:6d:59:a9:8a:
56:d0:78:90:5d:79:51:d7:e4:74:9e:dd:0c:fb:5d:
f8:6b:3d:9d:ca:62:84:2b:fa:81:7b:8c:1a:6f:4a:
42:68:40:72:e6:f2:83:21:01:c5:3e:ca:68:de:5d:
fb:f6:8d:81:c2:d5:1a:eb:de:b5:08:c3:0b:c7:a0:
01:89:72:65:2a:ff:c8:34:b9:14:81:40:7c:bd:fa:
5f:86:8b:59:dc:32:06:c1:e7:4c:39:1e:2b:1f:4e:
16:a2:76:e4:7e:61:58:88:90:f0:55:91:c8:e2:23:
5f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:79:9B:E6:78:0A:D4:13:96:09:8F:DE:49:AE:A3:70:CF:F8:6F:17
X509v3 Authority Key Identifier:
keyid:E1:A3:23:54:64:84:22:0C:B4:02:06:33:80:F4:01:63:69:26:2A:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4aMjVGSEIgy0AgYzgPQBY2kmKs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:18:71:26:c2:a9:ca:60:9b:91:84:49:0f:3c:2d:72:4f:df:
d9:c7:c3:f0:a5:6a:1a:92:a9:c0:35:e8:10:c0:41:9a:ac:28:
20:d1:ab:fb:90:c7:06:53:4b:50:62:7d:b7:f6:09:79:b2:dd:
80:2c:6c:10:c0:65:e6:f3:67:23:7a:77:b8:80:c8:b9:94:14:
77:67:0c:b8:82:21:05:1e:f9:8c:57:22:8b:09:2e:db:0b:80:
f3:2a:7a:de:83:8d:0c:78:12:a4:b1:c3:87:15:bb:29:ab:32:
31:c3:98:b3:49:98:29:85:db:25:1f:36:53:23:54:65:3d:38:
c6:8d:0c:f5:66:e4:a8:6c:f4:cc:c5:02:0d:67:73:81:0e:82:
a4:88:b9:f0:a3:87:dd:c3:77:0b:40:e6:62:f8:1f:47:b0:53:
5c:83:bb:75:64:5a:12:ef:3b:cf:18:94:46:29:35:ae:ad:29:
f8:22:60:ac:97:d9:d2:d5:58:00:8e:f0:48:a8:5c:de:d8:0e:
9d:d7:9e:7a:c9:e2:b0:0b:b4:0a:73:48:d6:26:d1:83:d5:34:
b4:e5:42:70:60:c8:f5:52:da:75:4f:d0:82:30:05:99:f2:5a:
c2:e7:6b:61:5a:74:6f:02:66:36:5e:44:74:cf:cd:c5:6a:7b:
b6:13:ba:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiL6wd/48QmP0A7LTeRscOJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxYTMyMzU0NjQ4NDIyMGNiNDAyMDYzMzgwZjQwMTYzNjky
NjJhY2YwHhcNMjUwODA4MjMwMTMyWhcNMjUwODA5MjMwMTMyWjAzMTEwLwYDVQQD
EyhlNDc5OWJlNjc4MGFkNDEzOTYwOThmZGU0OWFlYTM3MGNmZjg2ZjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsMKBe+CZof6G3bA/HUAtLTla1GT
/5uuYdzvOwIuv5BPlrA2a7P0l7TvJCqEOVRvZipqrSh9Al3NC88uI1igP+q9toEH
vxmwh2A4tjoQi8qWSN5o80DZfY/FGEfp3rckhkF6ahD6HOuuxgMbvO4CM/kS9ZE0
8L/GwdUEU7SUIrA2TnW0EBhRSVxidn3PmZguwW1ZqYpW0HiQXXlR1+R0nt0M+134
az2dymKEK/qBe4wab0pCaEBy5vKDIQHFPspo3l379o2BwtUa6961CMMLx6ABiXJl
Kv/INLkUgUB8vfpfhotZ3DIGwedMOR4rH04WonbkfmFYiJDwVZHI4iNf3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOR5m+Z4CtQTlgmP3kmuo3DP+G8XMB8GA1UdIwQY
MBaAFOGjI1RkhCIMtAIGM4D0AWNpJirPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGFNalZHU0VJZ3kwQWdZemdQUUJZMmttS3M4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9kMjFkYTQtZjY1Yi00NTMxLTk3NmEt
OGVjMDYwNGU2OTI5LzEvNGFNalZHU0VJZ3kwQWdZemdQUUJZMmttS3M4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9kMjFkYTQtZjY1Yi00NTMxLTk3NmEtOGVjMDYwNGU2OTI5
LzEvNGFNalZHU0VJZ3kwQWdZemdQUUJZMmttS3M4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABBhxJsKp
ymCbkYRJDzwtck/f2cfD8KVqGpKpwDXoEMBBmqwoINGr+5DHBlNLUGJ9t/YJebLd
gCxsEMBl5vNnI3p3uIDIuZQUd2cMuIIhBR75jFciiwku2wuA8yp63oONDHgSpLHD
hxW7KasyMcOYs0mYKYXbJR82UyNUZT04xo0M9WbkqGz0zMUCDWdzgQ6CpIi58KOH
3cN3C0DmYvgfR7BTXIO7dWRaEu87zxiURik1rq0p+CJgrJfZ0tVYAI7wSKhc3tgO
ndeeesnisAu0CnNI1ibRg9U0tOVCcGDI9VLadU/QgjAFmfJawudrYVp0bwJmNl5E
dM/NxWp7thO6tQ==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:03:11 2025 by rpki-client