Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft
File: 4eHrAgq2pUL2C1hXaYctnwYXryY.mft (raw, json)
Hash identifier: CJSCf3WSP9x5kjJpThMEwyz7ifdiMWIues1pphCDVbE=
Subject key identifier: 67:92:C7:95:8E:C5:54:9C:25:47:CE:C6:FA:78:C9:58:BC:CC:E9:34
Authority key identifier: E1:E1:EB:02:0A:B6:A5:42:F6:0B:58:57:69:87:2D:9F:06:17:AF:26
Certificate issuer: /CN=e1e1eb020ab6a542f60b585769872d9f0617af26
Certificate serial: 019896A54E881C33460C229AFD47541C3FDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4eHrAgq2pUL2C1hXaYctnwYXryY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft
Manifest number: 0838
Signing time: Mon 11 Aug 2025 01:01:12 +0000
Manifest this update: Mon 11 Aug 2025 01:01:12 +0000
Manifest next update: Tue 12 Aug 2025 01:01:12 +0000
Files and hashes: 1: 4eHrAgq2pUL2C1hXaYctnwYXryY.crl (hash: 2uhzVMza12gDW+kCnD9ouhVJNmzMDQvt1t8WlnVNHmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4eHrAgq2pUL2C1hXaYctnwYXryY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a5:4e:88:1c:33:46:0c:22:9a:fd:47:54:1c:3f:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1e1eb020ab6a542f60b585769872d9f0617af26
Validity
Not Before: Aug 11 01:01:12 2025 GMT
Not After : Aug 12 01:01:12 2025 GMT
Subject: CN=6792c7958ec5549c2547cec6fa78c958bccce934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5a:55:e9:66:ed:44:3b:08:fd:fd:32:a0:e2:
6a:f5:35:dc:af:ec:7c:5e:f7:48:d1:4f:18:c7:a3:
73:50:71:50:f5:9f:1a:92:f2:84:be:89:90:ee:39:
90:08:73:6a:f8:8b:72:89:57:18:26:88:82:2f:65:
11:81:3e:e5:2e:4a:a3:9c:fb:a6:97:b0:53:c0:22:
5e:c7:91:22:81:5e:b4:ac:d6:3c:83:78:56:8d:ef:
76:4a:6b:b8:c5:18:ab:97:1b:3d:c0:f7:53:bb:8d:
82:06:32:a8:2e:85:e0:39:e1:09:78:0b:69:3d:f7:
01:aa:5b:42:a3:c0:04:e3:75:ae:bf:c4:85:c6:aa:
2e:87:67:e9:c8:93:9e:46:b9:ed:e7:69:60:a9:03:
85:8b:38:cd:50:99:ad:ba:f4:c7:75:8f:d6:70:85:
c2:94:99:93:fb:36:6b:80:5e:1d:01:f3:31:e8:04:
0a:38:3a:0b:82:fa:3a:ca:dc:7e:dc:6e:90:96:fe:
80:d6:d6:fa:1a:33:ca:8f:35:30:c5:8c:af:da:69:
0e:87:2b:d6:89:88:82:bf:71:7b:3b:78:4c:04:d3:
1a:7c:64:95:cd:6c:c2:c8:2f:0c:8f:5b:d8:48:d5:
9d:d2:3c:51:b7:8b:74:72:31:a6:8d:95:41:8c:bb:
b3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:92:C7:95:8E:C5:54:9C:25:47:CE:C6:FA:78:C9:58:BC:CC:E9:34
X509v3 Authority Key Identifier:
keyid:E1:E1:EB:02:0A:B6:A5:42:F6:0B:58:57:69:87:2D:9F:06:17:AF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4eHrAgq2pUL2C1hXaYctnwYXryY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:c3:16:e0:6f:90:12:97:a0:4b:14:91:7c:2c:f1:b0:4f:7b:
37:e4:c2:79:09:3c:3b:db:db:58:b1:77:db:47:db:b9:b5:6b:
72:f2:86:d1:e5:4c:92:1c:9b:b4:92:95:0b:51:52:ad:eb:1d:
b6:6e:6a:94:e6:b5:7a:b6:10:2c:65:84:e8:55:ee:ca:b5:14:
fe:fa:02:c5:83:b0:70:24:73:ac:93:78:ed:d3:df:30:d3:64:
d7:b1:cf:86:6a:00:d8:ab:e5:cb:ec:e9:60:89:83:ec:f4:73:
07:1a:6e:9d:6f:90:ac:df:a8:6c:bc:58:0c:f6:c4:3e:a4:68:
73:da:ff:45:94:47:ba:6b:6e:37:bc:37:fa:f6:de:fe:ba:ff:
71:01:5f:1e:8b:e4:10:b1:0b:5c:26:cd:e6:bf:e2:a5:85:e6:
31:01:a6:27:21:58:db:f1:d0:b8:e5:68:8d:c4:a1:9d:19:97:
68:4d:58:07:42:e8:bb:f6:c4:6d:8a:92:0d:00:56:6e:0f:fa:
6e:0a:0d:24:b4:c7:3a:eb:9f:a2:69:e1:a0:68:97:91:3e:5e:
7b:90:c4:77:fa:a3:f1:12:14:19:d4:8a:8d:91:09:a3:15:54:
7c:bf:a8:a4:93:e3:56:f2:45:aa:f3:25:8b:ac:05:ba:65:79:
03:d6:58:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiWpU6IHDNGDCKa/UdUHD/dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxZTFlYjAyMGFiNmE1NDJmNjBiNTg1NzY5ODcyZDlmMDYx
N2FmMjYwHhcNMjUwODExMDEwMTEyWhcNMjUwODEyMDEwMTEyWjAzMTEwLwYDVQQD
Eyg2NzkyYzc5NThlYzU1NDljMjU0N2NlYzZmYTc4Yzk1OGJjY2NlOTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVpV6WbtRDsI/f0yoOJq9TXcr+x8
XvdI0U8Yx6NzUHFQ9Z8akvKEvomQ7jmQCHNq+ItyiVcYJoiCL2URgT7lLkqjnPum
l7BTwCJex5EigV60rNY8g3hWje92Smu4xRirlxs9wPdTu42CBjKoLoXgOeEJeAtp
PfcBqltCo8AE43Wuv8SFxqouh2fpyJOeRrnt52lgqQOFizjNUJmtuvTHdY/WcIXC
lJmT+zZrgF4dAfMx6AQKODoLgvo6ytx+3G6Qlv6A1tb6GjPKjzUwxYyv2mkOhyvW
iYiCv3F7O3hMBNMafGSVzWzCyC8Mj1vYSNWd0jxRt4t0cjGmjZVBjLuzIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGeSx5WOxVScJUfOxvp4yVi8zOk0MB8GA1UdIwQY
MBaAFOHh6wIKtqVC9gtYV2mHLZ8GF68mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGVIckFncTJwVUwyQzFoWGFZY3Rud1lYcnlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9lZWYzNjktNmIxMi00Nzg2LTk3ZTAt
YzgzNWU1ZGFhZjI0LzEvNGVIckFncTJwVUwyQzFoWGFZY3Rud1lYcnlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9lZWYzNjktNmIxMi00Nzg2LTk3ZTAtYzgzNWU1ZGFhZjI0
LzEvNGVIckFncTJwVUwyQzFoWGFZY3Rud1lYcnlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOsMW4G+Q
EpegSxSRfCzxsE97N+TCeQk8O9vbWLF320fbubVrcvKG0eVMkhybtJKVC1FSresd
tm5qlOa1erYQLGWE6FXuyrUU/voCxYOwcCRzrJN47dPfMNNk17HPhmoA2Kvly+zp
YImD7PRzBxpunW+QrN+obLxYDPbEPqRoc9r/RZRHumtuN7w3+vbe/rr/cQFfHovk
ELELXCbN5r/ipYXmMQGmJyFY2/HQuOVojcShnRmXaE1YB0Lou/bEbYqSDQBWbg/6
bgoNJLTHOuufomnhoGiXkT5ee5DEd/qj8RIUGdSKjZEJoxVUfL+opJPjVvJFqvMl
i6wFumV5A9ZYgg==
-----END CERTIFICATE-----
Generated at Mon Aug 11 09:55:12 2025 by rpki-client