Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3e43b1-4d08-4846-a393-5236acc0a166/1/4hFKMKZ-PPs8rbY2jtICxIzSm6c.mft
File: 4hFKMKZ-PPs8rbY2jtICxIzSm6c.mft (raw, json)
Hash identifier: p01SGDG0glZ+AYA8wV/EE88xy5fOjicEWyYLSQUDtBQ=
Subject key identifier: 1E:D1:E5:B2:C9:59:D3:AD:87:6D:DA:3E:A6:6C:01:C8:99:9B:57:FC
Authority key identifier: E2:11:4A:30:A6:7E:3C:FB:3C:AD:B6:36:8E:D2:02:C4:8C:D2:9B:A7
Certificate issuer: /CN=e2114a30a67e3cfb3cadb6368ed202c48cd29ba7
Certificate serial: 01976C989C694D7439839F4D9A91EFCC2DE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4hFKMKZ-PPs8rbY2jtICxIzSm6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e43b1-4d08-4846-a393-5236acc0a166/1/4hFKMKZ-PPs8rbY2jtICxIzSm6c.mft
Manifest number: 10C0
Signing time: Sat 14 Jun 2025 04:00:30 +0000
Manifest this update: Sat 14 Jun 2025 04:00:30 +0000
Manifest next update: Sun 15 Jun 2025 04:00:30 +0000
Files and hashes: 1: 4hFKMKZ-PPs8rbY2jtICxIzSm6c.crl (hash: h9qWPDy+aTLMlZntvRJUE7BOiCqY8455jVjlgkFOYUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e43b1-4d08-4846-a393-5236acc0a166/1/4hFKMKZ-PPs8rbY2jtICxIzSm6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/3e43b1-4d08-4846-a393-5236acc0a166/1/4hFKMKZ-PPs8rbY2jtICxIzSm6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/4hFKMKZ-PPs8rbY2jtICxIzSm6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:9c:69:4d:74:39:83:9f:4d:9a:91:ef:cc:2d:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2114a30a67e3cfb3cadb6368ed202c48cd29ba7
Validity
Not Before: Jun 14 04:00:30 2025 GMT
Not After : Jun 15 04:00:30 2025 GMT
Subject: CN=1ed1e5b2c959d3ad876dda3ea66c01c8999b57fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a8:12:45:13:81:7a:83:fe:68:d8:2a:a6:e5:
0b:d4:ce:87:3c:60:c5:2a:3d:9a:f5:01:8b:c7:ae:
e0:16:9f:d4:b9:2c:53:73:ae:e3:2b:49:27:c1:e1:
09:29:7b:56:75:64:18:ca:95:15:cc:06:b9:59:ea:
bc:a2:82:de:2d:34:31:a3:04:1d:e7:18:0c:97:b7:
82:5c:62:6c:e3:7b:06:8f:73:17:88:8f:bb:2a:02:
ee:3c:67:1b:23:f0:ed:f4:e5:94:d8:83:7d:0f:9f:
44:a8:c1:dc:d0:28:07:81:22:9e:8e:f1:4f:ce:ce:
77:14:ab:d7:59:a9:44:33:1f:18:be:5c:72:56:0b:
3c:5a:b0:89:c9:f1:0b:22:7b:d7:b2:54:b1:b7:73:
c6:44:76:7d:65:84:e5:53:ec:27:df:bb:53:d2:d7:
f9:14:a0:4e:91:1b:5b:d2:48:24:52:67:c5:c7:76:
d6:11:5f:e4:55:d7:d5:92:45:fc:75:a7:59:81:12:
fa:c2:70:05:f4:53:5a:32:2b:48:52:c7:d7:83:65:
c3:19:5a:69:0e:ef:7e:d9:e5:39:85:07:1c:fd:49:
27:d4:96:24:1b:80:27:78:d2:9a:02:4e:0b:0b:30:
41:8f:1b:05:b9:af:5a:b7:19:d4:d4:68:62:c0:d3:
02:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:D1:E5:B2:C9:59:D3:AD:87:6D:DA:3E:A6:6C:01:C8:99:9B:57:FC
X509v3 Authority Key Identifier:
keyid:E2:11:4A:30:A6:7E:3C:FB:3C:AD:B6:36:8E:D2:02:C4:8C:D2:9B:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hFKMKZ-PPs8rbY2jtICxIzSm6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e43b1-4d08-4846-a393-5236acc0a166/1/4hFKMKZ-PPs8rbY2jtICxIzSm6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e43b1-4d08-4846-a393-5236acc0a166/1/4hFKMKZ-PPs8rbY2jtICxIzSm6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:a9:15:2c:95:fe:84:23:b9:68:41:98:f6:0a:77:68:3f:66:
f1:d5:14:5b:aa:79:01:b2:2c:50:1c:7b:9d:5c:42:d1:b4:5f:
ed:4b:01:dc:ab:e5:a6:ac:84:42:d3:69:e4:4e:9c:3d:4b:94:
2a:d0:1f:d1:da:c3:d2:3d:ae:10:27:3a:19:84:06:05:e4:fd:
5a:96:00:19:16:16:54:fa:9c:4f:04:51:2f:88:89:d0:e8:97:
2a:95:9b:78:78:09:0b:37:07:a6:07:6e:1f:6d:65:ce:b2:0f:
4e:14:45:32:e3:81:91:47:50:bd:b9:13:24:b9:3d:42:ec:f3:
e3:dd:6f:1c:73:4d:37:df:b3:c2:7e:5d:03:de:0d:d0:49:f5:
33:30:7f:f8:05:71:10:cb:00:cd:25:69:21:48:54:10:d6:28:
2a:aa:bb:45:d2:86:cd:82:09:8b:d6:ef:12:cb:1e:b2:b8:66:
f8:f1:e8:bb:ab:bb:46:25:9f:0d:79:57:52:57:68:0b:a1:b6:
d7:ee:8f:81:3f:2a:a2:03:2c:cb:07:40:a8:8e:62:1a:1a:91:
28:3e:2c:76:b6:d8:79:5a:d8:29:b9:54:88:41:47:60:dd:6f:
a7:02:56:fa:da:cf:25:72:60:01:ef:db:6e:e0:8f:20:b7:94:
56:f0:28:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsmJxpTXQ5g59NmpHvzC3hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyMTE0YTMwYTY3ZTNjZmIzY2FkYjYzNjhlZDIwMmM0OGNk
MjliYTcwHhcNMjUwNjE0MDQwMDMwWhcNMjUwNjE1MDQwMDMwWjAzMTEwLwYDVQQD
EygxZWQxZTViMmM5NTlkM2FkODc2ZGRhM2VhNjZjMDFjODk5OWI1N2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4agSRROBeoP+aNgqpuUL1M6HPGDF
Kj2a9QGLx67gFp/UuSxTc67jK0knweEJKXtWdWQYypUVzAa5Weq8ooLeLTQxowQd
5xgMl7eCXGJs43sGj3MXiI+7KgLuPGcbI/Dt9OWU2IN9D59EqMHc0CgHgSKejvFP
zs53FKvXWalEMx8YvlxyVgs8WrCJyfELInvXslSxt3PGRHZ9ZYTlU+wn37tT0tf5
FKBOkRtb0kgkUmfFx3bWEV/kVdfVkkX8dadZgRL6wnAF9FNaMitIUsfXg2XDGVpp
Du9+2eU5hQcc/Ukn1JYkG4AneNKaAk4LCzBBjxsFua9atxnU1GhiwNMCKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB7R5bLJWdOth23aPqZsAciZm1f8MB8GA1UdIwQY
MBaAFOIRSjCmfjz7PK22No7SAsSM0punMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGhGS01LWi1QUHM4cmJZMmp0SUN4SXpTbTZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8zZTQzYjEtNGQwOC00ODQ2LWEzOTMt
NTIzNmFjYzBhMTY2LzEvNGhGS01LWi1QUHM4cmJZMmp0SUN4SXpTbTZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8zZTQzYjEtNGQwOC00ODQ2LWEzOTMtNTIzNmFjYzBhMTY2
LzEvNGhGS01LWi1QUHM4cmJZMmp0SUN4SXpTbTZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGqkVLJX+
hCO5aEGY9gp3aD9m8dUUW6p5AbIsUBx7nVxC0bRf7UsB3KvlpqyEQtNp5E6cPUuU
KtAf0drD0j2uECc6GYQGBeT9WpYAGRYWVPqcTwRRL4iJ0OiXKpWbeHgJCzcHpgdu
H21lzrIPThRFMuOBkUdQvbkTJLk9Quzz491vHHNNN9+zwn5dA94N0En1MzB/+AVx
EMsAzSVpIUhUENYoKqq7RdKGzYIJi9bvEssesrhm+PHou6u7RiWfDXlXUldoC6G2
1+6PgT8qogMsywdAqI5iGhqRKD4sdrbYeVrYKblUiEFHYN1vpwJW+trPJXJgAe/b
buCPILeUVvAoMw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:44:03 2025 by rpki-client