Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft
File: 4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft (raw, json)
Hash identifier: rB7RNZ+JfNBtAF/uVVxI4KGJEHBdXZ8pnSFR7aPwdhU=
Subject key identifier: D2:B9:DF:32:7F:2D:96:22:0B:4C:A9:4A:6B:4E:4B:B5:C1:09:6C:FF
Authority key identifier: E1:B1:5B:C5:B9:02:19:9E:B8:6D:60:78:C4:82:ED:ED:D3:DD:DE:B4
Certificate issuer: /CN=e1b15bc5b902199eb86d6078c482ededd3dddeb4
Certificate serial: 01988CFCD682D6DE2C3429CDCFEDF9EB0E38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bFbxbkCGZ64bWB4xILt7dPd3rQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft
Manifest number: 1620
Signing time: Sat 09 Aug 2025 04:00:36 +0000
Manifest this update: Sat 09 Aug 2025 04:00:36 +0000
Manifest next update: Sun 10 Aug 2025 04:00:36 +0000
Files and hashes: 1: 4bFbxbkCGZ64bWB4xILt7dPd3rQ.crl (hash: Jnzk+dCJM9P/hEiTLn4qh7qYncvvrzJqQrxDMrSxL9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4bFbxbkCGZ64bWB4xILt7dPd3rQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:fc:d6:82:d6:de:2c:34:29:cd:cf:ed:f9:eb:0e:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1b15bc5b902199eb86d6078c482ededd3dddeb4
Validity
Not Before: Aug 9 04:00:36 2025 GMT
Not After : Aug 10 04:00:36 2025 GMT
Subject: CN=d2b9df327f2d96220b4ca94a6b4e4bb5c1096cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:57:85:d4:a6:da:f1:aa:88:37:48:ba:80:8c:
01:91:82:ad:8d:f2:3c:76:02:db:0f:f9:23:d4:7e:
52:02:d3:b2:20:97:a5:5b:aa:46:e2:65:4d:8f:b9:
ca:f4:42:77:72:25:d5:60:c8:35:e0:ae:9b:1e:29:
ea:d9:0b:c8:9d:20:20:1c:a9:cc:10:47:ba:30:71:
15:30:75:93:eb:c2:4c:13:fe:80:53:b9:1d:71:6f:
f1:3e:ff:83:81:9b:d3:bb:63:58:de:35:e1:e0:e4:
02:c0:7d:3d:6c:12:1b:21:c5:3a:98:15:e7:c8:2a:
a7:07:a6:3e:d2:64:6e:5f:23:9f:f7:0c:cf:8d:07:
53:88:d8:6a:0e:b6:18:92:9b:6f:24:16:0f:77:25:
2c:c1:4d:5a:ae:6a:c5:81:e1:c7:78:2b:a0:28:36:
b6:49:1d:64:e3:47:64:50:53:41:cd:b2:92:fe:53:
48:2c:47:ce:6d:82:81:5f:0f:eb:e3:50:90:d6:45:
50:d5:89:c1:55:8b:31:44:e6:47:68:8a:c8:2a:3e:
02:8a:01:6b:54:1a:e8:df:c6:54:26:a3:a7:5c:47:
2c:8d:1e:39:63:36:b2:8a:a6:df:5c:c3:42:b6:ea:
1a:6f:be:44:c9:5d:35:b7:79:8d:89:fc:66:3e:f6:
6f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B9:DF:32:7F:2D:96:22:0B:4C:A9:4A:6B:4E:4B:B5:C1:09:6C:FF
X509v3 Authority Key Identifier:
keyid:E1:B1:5B:C5:B9:02:19:9E:B8:6D:60:78:C4:82:ED:ED:D3:DD:DE:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bFbxbkCGZ64bWB4xILt7dPd3rQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:9e:8e:5b:b8:9a:0a:45:5c:25:6e:e2:22:2a:c4:2b:60:e1:
0e:72:7f:59:87:91:c1:b2:8b:eb:cc:06:cc:88:10:5c:c0:83:
ae:cf:66:4b:b3:92:67:31:54:28:61:db:82:e0:b0:1b:b6:47:
bb:6d:3a:6f:e6:69:a6:68:5c:0b:e4:8a:41:0a:9d:8c:d0:45:
00:a8:18:71:15:78:29:61:9a:d4:f1:12:15:ba:18:b2:7b:44:
d2:25:e4:cb:2c:2c:9e:ba:35:bb:f0:d7:d9:ab:2c:0d:f2:00:
40:03:47:93:63:99:21:11:09:42:dc:4e:32:60:ff:59:9f:02:
b9:34:e4:d1:e0:95:3c:8d:dd:90:e1:ab:b8:9f:5c:04:4d:99:
bc:50:77:0c:de:f3:37:2e:ee:10:b7:31:ee:b1:47:cb:ae:86:
88:04:bd:4d:4c:fc:02:69:ef:cc:28:0b:09:cc:ee:ad:31:a7:
3c:10:be:51:d1:dd:6d:5c:09:aa:4a:a0:f8:cf:7f:95:fa:f1:
f9:e5:6e:ba:cd:57:6e:3e:c2:fa:2d:19:3b:01:3f:61:90:06:
e8:ff:14:a2:df:f0:8c:99:67:0c:95:a3:43:2c:ca:ef:2c:6f:
58:41:03:85:c0:60:d2:22:1d:77:e3:a6:b1:95:05:c6:06:0a:
81:2b:e2:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiM/NaC1t4sNCnNz+356w44MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxYjE1YmM1YjkwMjE5OWViODZkNjA3OGM0ODJlZGVkZDNk
ZGRlYjQwHhcNMjUwODA5MDQwMDM2WhcNMjUwODEwMDQwMDM2WjAzMTEwLwYDVQQD
EyhkMmI5ZGYzMjdmMmQ5NjIyMGI0Y2E5NGE2YjRlNGJiNWMxMDk2Y2ZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1eF1Kba8aqIN0i6gIwBkYKtjfI8
dgLbD/kj1H5SAtOyIJelW6pG4mVNj7nK9EJ3ciXVYMg14K6bHinq2QvInSAgHKnM
EEe6MHEVMHWT68JME/6AU7kdcW/xPv+DgZvTu2NY3jXh4OQCwH09bBIbIcU6mBXn
yCqnB6Y+0mRuXyOf9wzPjQdTiNhqDrYYkptvJBYPdyUswU1armrFgeHHeCugKDa2
SR1k40dkUFNBzbKS/lNILEfObYKBXw/r41CQ1kVQ1YnBVYsxROZHaIrIKj4CigFr
VBro38ZUJqOnXEcsjR45YzayiqbfXMNCtuoab75EyV01t3mNifxmPvZvHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNK53zJ/LZYiC0ypSmtOS7XBCWz/MB8GA1UdIwQY
MBaAFOGxW8W5AhmeuG1geMSC7e3T3d60MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGJGYnhia0NHWjY0YldCNHhJTHQ3ZFBkM3JRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9mNmQ2NTUtNzNlYS00MjJhLWE5NjMt
NDFhOTgwMDFjZjJiLzEvNGJGYnhia0NHWjY0YldCNHhJTHQ3ZFBkM3JRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9mNmQ2NTUtNzNlYS00MjJhLWE5NjMtNDFhOTgwMDFjZjJi
LzEvNGJGYnhia0NHWjY0YldCNHhJTHQ3ZFBkM3JRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmZ6OW7ia
CkVcJW7iIirEK2DhDnJ/WYeRwbKL68wGzIgQXMCDrs9mS7OSZzFUKGHbguCwG7ZH
u206b+ZppmhcC+SKQQqdjNBFAKgYcRV4KWGa1PESFboYsntE0iXkyywsnro1u/DX
2assDfIAQANHk2OZIREJQtxOMmD/WZ8CuTTk0eCVPI3dkOGruJ9cBE2ZvFB3DN7z
Ny7uELcx7rFHy66GiAS9TUz8AmnvzCgLCczurTGnPBC+UdHdbVwJqkqg+M9/lfrx
+eVuus1Xbj7C+i0ZOwE/YZAG6P8Uot/wjJlnDJWjQyzK7yxvWEEDhcBg0iIdd+Om
sZUFxgYKgSvioQ==
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:35:58 2025 by rpki-client