Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.mft
File: 4sFE7jL911AT5_G4wtgH09rti74.mft (raw, json)
Hash identifier: CbQCzy3soCzBccDFAbVhJWOrdc+PXUz31vkD0Dr1p3k=
Subject key identifier: 72:A6:95:3A:06:EC:ED:9C:4D:B5:D7:32:9C:DF:5A:6F:9D:DF:9A:F1
Authority key identifier: E2:C1:44:EE:32:FD:D7:50:13:E7:F1:B8:C2:D8:07:D3:DA:ED:8B:BE
Certificate issuer: /CN=e2c144ee32fdd75013e7f1b8c2d807d3daed8bbe
Certificate serial: 01976A3C7E0FECC45077815F72E83818C9D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sFE7jL911AT5_G4wtgH09rti74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.mft
Manifest number: 158D
Signing time: Fri 13 Jun 2025 17:00:38 +0000
Manifest this update: Fri 13 Jun 2025 17:00:38 +0000
Manifest next update: Sat 14 Jun 2025 17:00:38 +0000
Files and hashes: 1: 4sFE7jL911AT5_G4wtgH09rti74.crl (hash: 33F1wu/Ku2qNiZu9ZKxCbZkeRVoxsR4sW3Xz4rWod20=)
2: at7Oxyqw1YSxEoUOaW5RKvIjf0s.roa (hash: yOhpw2razZhrT29WlGA/CY3Yi3Lil58jkjnW17t8rig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sFE7jL911AT5_G4wtgH09rti74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:3c:7e:0f:ec:c4:50:77:81:5f:72:e8:38:18:c9:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c144ee32fdd75013e7f1b8c2d807d3daed8bbe
Validity
Not Before: Jun 13 17:00:38 2025 GMT
Not After : Jun 14 17:00:38 2025 GMT
Subject: CN=72a6953a06eced9c4db5d7329cdf5a6f9ddf9af1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:53:a2:a1:ef:c0:de:3a:97:13:86:eb:fb:ca:
53:95:28:94:c0:09:0d:fb:50:bd:fc:47:6c:eb:82:
50:07:e7:24:8e:46:2f:ec:ea:d3:57:a8:19:b7:8d:
94:7d:64:79:a9:28:a8:d5:a0:76:14:6e:e9:80:68:
19:2c:01:2f:a5:be:36:54:7f:06:96:d4:e6:fe:f1:
4b:5c:b4:63:f4:0b:8a:71:60:23:5c:5c:60:21:e1:
19:83:23:56:4d:48:fe:f8:15:50:60:2b:df:d5:27:
d2:5a:3e:d3:0f:e0:78:c5:77:c8:78:ce:1f:2f:50:
52:e4:a0:88:d7:6b:e2:19:93:83:b7:56:1e:85:67:
c8:e9:d7:1c:1e:ff:c7:80:2c:10:ec:ae:5f:4a:2e:
75:bc:fd:fb:53:24:fd:83:12:8e:b6:b3:54:e2:9d:
a5:a1:0b:9f:ed:cc:a2:08:d9:46:0d:91:0e:21:84:
b1:c5:17:fb:9d:86:7f:22:5e:62:00:e9:87:a4:0e:
83:69:2f:32:72:11:80:76:80:63:3e:8d:23:55:5c:
3c:e1:66:7a:15:25:61:02:98:b7:b9:e3:0e:d1:db:
82:bd:0e:52:7f:fe:ed:b9:40:d1:9f:bc:8c:db:c6:
ef:e9:9e:34:bf:47:7b:11:5a:74:c8:ef:38:b4:a5:
a0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A6:95:3A:06:EC:ED:9C:4D:B5:D7:32:9C:DF:5A:6F:9D:DF:9A:F1
X509v3 Authority Key Identifier:
keyid:E2:C1:44:EE:32:FD:D7:50:13:E7:F1:B8:C2:D8:07:D3:DA:ED:8B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sFE7jL911AT5_G4wtgH09rti74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:f3:50:6c:74:9b:8f:0d:7b:aa:1c:54:cc:af:c2:ab:79:9c:
8a:7a:7c:92:f3:69:83:34:75:86:23:f1:f7:84:07:31:80:56:
a9:dc:ea:c3:d9:f8:3e:27:5f:b9:c1:fe:ac:b1:b6:ed:3f:9b:
70:93:85:2a:3c:19:7d:c4:2a:0b:e9:0b:af:8a:96:68:1f:7f:
2f:28:07:c2:89:c4:6f:13:1b:69:90:fb:3e:64:a4:59:76:59:
05:d9:f5:35:1a:fe:12:28:ea:0d:67:7a:07:42:87:29:10:a2:
37:ba:a2:c8:4e:99:8e:cc:15:32:bb:4b:fb:88:b7:43:48:94:
4d:e0:80:b4:42:ea:5c:2b:31:9e:cd:07:6a:51:c4:b6:34:56:
21:79:45:47:54:fb:66:56:bc:99:c6:96:aa:dc:fe:ad:fe:5c:
8c:e8:e3:87:d4:cf:2f:c7:96:f7:64:ae:71:e9:b9:96:e3:d7:
45:07:d2:17:88:cf:14:33:c5:73:1c:cf:d1:ea:56:e4:44:66:
f6:16:83:11:4f:d9:c0:11:9f:41:ff:55:c3:c5:18:f1:46:aa:
1d:8a:ff:fb:68:72:86:63:22:97:29:31:38:16:c5:61:ee:09:
da:39:29:2b:a0:e6:db:6d:a3:37:8a:f7:c2:ce:c5:12:21:a3:
9d:52:9b:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdqPH4P7MRQd4Ffcug4GMnTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYzE0NGVlMzJmZGQ3NTAxM2U3ZjFiOGMyZDgwN2QzZGFl
ZDhiYmUwHhcNMjUwNjEzMTcwMDM4WhcNMjUwNjE0MTcwMDM4WjAzMTEwLwYDVQQD
Eyg3MmE2OTUzYTA2ZWNlZDljNGRiNWQ3MzI5Y2RmNWE2ZjlkZGY5YWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFOioe/A3jqXE4br+8pTlSiUwAkN
+1C9/Eds64JQB+ckjkYv7OrTV6gZt42UfWR5qSio1aB2FG7pgGgZLAEvpb42VH8G
ltTm/vFLXLRj9AuKcWAjXFxgIeEZgyNWTUj++BVQYCvf1SfSWj7TD+B4xXfIeM4f
L1BS5KCI12viGZODt1YehWfI6dccHv/HgCwQ7K5fSi51vP37UyT9gxKOtrNU4p2l
oQuf7cyiCNlGDZEOIYSxxRf7nYZ/Il5iAOmHpA6DaS8ychGAdoBjPo0jVVw84WZ6
FSVhApi3ueMO0duCvQ5Sf/7tuUDRn7yM28bv6Z40v0d7EVp0yO84tKWgQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHKmlToG7O2cTbXXMpzfWm+d35rxMB8GA1UdIwQY
MBaAFOLBRO4y/ddQE+fxuMLYB9Pa7Yu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHNGRTdqTDkxMUFUNV9HNHd0Z0gwOXJ0aTc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC81OWUxNGUtNDE1Zi00MDFhLWFkY2Ut
ZTFkZjQ1OTgwYzc4LzEvNHNGRTdqTDkxMUFUNV9HNHd0Z0gwOXJ0aTc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC81OWUxNGUtNDE1Zi00MDFhLWFkY2UtZTFkZjQ1OTgwYzc4
LzEvNHNGRTdqTDkxMUFUNV9HNHd0Z0gwOXJ0aTc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACvNQbHSb
jw17qhxUzK/Cq3mcinp8kvNpgzR1hiPx94QHMYBWqdzqw9n4PidfucH+rLG27T+b
cJOFKjwZfcQqC+kLr4qWaB9/LygHwonEbxMbaZD7PmSkWXZZBdn1NRr+EijqDWd6
B0KHKRCiN7qiyE6ZjswVMrtL+4i3Q0iUTeCAtELqXCsxns0HalHEtjRWIXlFR1T7
Zla8mcaWqtz+rf5cjOjjh9TPL8eW92Sucem5luPXRQfSF4jPFDPFcxzP0epW5ERm
9haDEU/ZwBGfQf9Vw8UY8UaqHYr/+2hyhmMilykxOBbFYe4J2jkpK6Dm222jN4r3
ws7FEiGjnVKbgA==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:37:47 2025 by rpki-client