Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/c0443e-9608-4196-9625-d096f1e25e97/1/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.mft
File: 4ApvLmM_zzre-HJcxb4Op5Fd1Aw.mft (raw, json)
Hash identifier: gNKJGMOcaw3BNU0UTxVp4DBqVJAJU0c4XJ6x49RHtiU=
Subject key identifier: 77:10:B0:E5:A3:07:8F:7F:EC:C7:71:CD:2C:B6:5D:78:C8:F5:06:48
Authority key identifier: E0:0A:6F:2E:63:3F:CF:3A:DE:F8:72:5C:C5:BE:0E:A7:91:5D:D4:0C
Certificate issuer: /CN=e00a6f2e633fcf3adef8725cc5be0ea7915dd40c
Certificate serial: 01987418B4FA6D1AE4FFCD4F6D3D76B118BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/c0443e-9608-4196-9625-d096f1e25e97/1/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.mft
Manifest number: 0A18
Signing time: Mon 04 Aug 2025 08:00:32 +0000
Manifest this update: Mon 04 Aug 2025 08:00:32 +0000
Manifest next update: Tue 05 Aug 2025 08:00:32 +0000
Files and hashes: 1: 4ApvLmM_zzre-HJcxb4Op5Fd1Aw.crl (hash: JA+C5ysJk9TtbgniSl/si+WzWPdiGpGB+11dY+HbryY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/c0443e-9608-4196-9625-d096f1e25e97/1/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/c0443e-9608-4196-9625-d096f1e25e97/1/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:b4:fa:6d:1a:e4:ff:cd:4f:6d:3d:76:b1:18:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e00a6f2e633fcf3adef8725cc5be0ea7915dd40c
Validity
Not Before: Aug 4 08:00:32 2025 GMT
Not After : Aug 5 08:00:32 2025 GMT
Subject: CN=7710b0e5a3078f7fecc771cd2cb65d78c8f50648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8e:a4:9c:08:1c:a7:cd:86:ec:8a:ab:77:7f:
25:f8:db:e9:fd:9b:41:f8:b0:77:23:92:56:25:ab:
2f:0e:86:e9:2a:18:6c:56:8a:6d:85:73:a8:88:00:
d4:1d:9d:0c:73:1c:3a:23:59:b1:06:18:32:b1:62:
5d:ac:11:7d:68:76:37:9f:ae:fb:ca:d9:27:39:5c:
49:90:89:73:1f:d9:76:c3:05:9a:d1:1b:28:a4:18:
bc:dc:e8:47:cc:b8:ba:20:17:2e:ff:27:22:1d:93:
1e:3b:80:f1:75:bd:cc:8f:8c:a4:30:48:93:30:c5:
9a:b8:13:84:0d:68:db:a0:0b:46:82:39:e9:35:4e:
4c:bb:5f:06:87:2e:86:b6:6e:87:a0:76:63:e9:a3:
7f:2e:04:a8:c5:fe:a8:88:30:5a:64:d8:07:a2:be:
f9:35:6b:48:49:e0:e9:59:33:73:31:ee:21:3c:ab:
4c:b8:a2:7e:06:19:9f:46:e7:66:d9:80:77:b5:1c:
c1:5b:a8:90:93:60:4e:a2:58:b1:39:6d:7d:98:66:
6f:d7:e3:e5:85:38:4f:e1:93:67:44:14:8b:b7:a2:
92:7a:da:69:09:69:26:ef:ee:bb:54:c1:c1:b2:18:
d0:17:3f:94:ad:27:d2:33:9d:62:b1:37:d8:ad:3a:
e1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:10:B0:E5:A3:07:8F:7F:EC:C7:71:CD:2C:B6:5D:78:C8:F5:06:48
X509v3 Authority Key Identifier:
keyid:E0:0A:6F:2E:63:3F:CF:3A:DE:F8:72:5C:C5:BE:0E:A7:91:5D:D4:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c0443e-9608-4196-9625-d096f1e25e97/1/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c0443e-9608-4196-9625-d096f1e25e97/1/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:85:6d:bf:10:9b:58:31:3b:7f:bd:28:1c:37:44:0f:d1:23:
77:99:dd:33:d4:46:2a:cb:69:dc:1a:f4:b6:29:be:5e:f3:f6:
19:c2:38:e6:2d:47:a5:c3:db:36:c1:41:e7:da:fc:bc:9e:b3:
07:7d:72:41:3a:c6:e6:c9:a6:d5:a3:fd:af:24:52:10:57:2c:
3c:d1:64:67:3a:6b:80:55:54:97:88:48:50:87:fc:4b:fc:f1:
49:6f:f4:c2:9e:e7:dc:eb:b5:4e:ed:34:ce:7d:80:e2:73:4f:
a8:3f:c1:a4:00:a6:6b:77:ef:ff:71:30:33:cf:bf:2f:c1:59:
3f:ff:66:1c:82:4b:79:d6:80:08:d7:4f:88:87:81:f6:79:3a:
d7:08:91:ef:b6:8f:0b:a8:33:df:4a:cb:54:c9:7d:6b:01:2a:
d2:75:6e:55:9d:36:f3:3a:fa:18:35:e1:1e:59:de:d4:8a:20:
ce:fd:a1:75:a2:db:44:66:8d:53:85:bf:28:3b:57:71:77:55:
1b:77:93:46:e4:ba:8b:26:76:20:4c:93:9e:fa:1e:02:a4:82:
82:14:23:d1:8c:68:ab:40:b3:60:d4:95:5a:9c:cf:84:13:94:
73:d3:2a:bd:5b:41:26:b1:75:67:d9:60:c2:cc:7c:f8:f4:14:
b6:06:2b:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0GLT6bRrk/81PbT12sRi+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwMGE2ZjJlNjMzZmNmM2FkZWY4NzI1Y2M1YmUwZWE3OTE1
ZGQ0MGMwHhcNMjUwODA0MDgwMDMyWhcNMjUwODA1MDgwMDMyWjAzMTEwLwYDVQQD
Eyg3NzEwYjBlNWEzMDc4ZjdmZWNjNzcxY2QyY2I2NWQ3OGM4ZjUwNjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq46knAgcp82G7Iqrd38l+Nvp/ZtB
+LB3I5JWJasvDobpKhhsVopthXOoiADUHZ0Mcxw6I1mxBhgysWJdrBF9aHY3n677
ytknOVxJkIlzH9l2wwWa0RsopBi83OhHzLi6IBcu/yciHZMeO4Dxdb3Mj4ykMEiT
MMWauBOEDWjboAtGgjnpNU5Mu18Ghy6Gtm6HoHZj6aN/LgSoxf6oiDBaZNgHor75
NWtISeDpWTNzMe4hPKtMuKJ+BhmfRudm2YB3tRzBW6iQk2BOolixOW19mGZv1+Pl
hThP4ZNnRBSLt6KSetppCWkm7+67VMHBshjQFz+UrSfSM51isTfYrTrhWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHcQsOWjB49/7MdxzSy2XXjI9QZIMB8GA1UdIwQY
MBaAFOAKby5jP8863vhyXMW+DqeRXdQMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEFwdkxtTV96enJlLUhKY3hiNE9wNUZkMUF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9jMDQ0M2UtOTYwOC00MTk2LTk2MjUt
ZDA5NmYxZTI1ZTk3LzEvNEFwdkxtTV96enJlLUhKY3hiNE9wNUZkMUF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9jMDQ0M2UtOTYwOC00MTk2LTk2MjUtZDA5NmYxZTI1ZTk3
LzEvNEFwdkxtTV96enJlLUhKY3hiNE9wNUZkMUF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEIVtvxCb
WDE7f70oHDdED9Ejd5ndM9RGKstp3Br0tim+XvP2GcI45i1HpcPbNsFB59r8vJ6z
B31yQTrG5smm1aP9ryRSEFcsPNFkZzprgFVUl4hIUIf8S/zxSW/0wp7n3Ou1Tu00
zn2A4nNPqD/BpACma3fv/3EwM8+/L8FZP/9mHIJLedaACNdPiIeB9nk61wiR77aP
C6gz30rLVMl9awEq0nVuVZ028zr6GDXhHlne1Iogzv2hdaLbRGaNU4W/KDtXcXdV
G3eTRuS6iyZ2IEyTnvoeAqSCghQj0Yxoq0CzYNSVWpzPhBOUc9MqvVtBJrF1Z9lg
wsx8+PQUtgYreg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:21:05 2025 by rpki-client