Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.mft
File: 4EBYhNrFnaHl1YUZPgZWgfnWYV4.mft (raw, json)
Hash identifier: noMIfWXlib7x7Vx80TymsVyz1E3HQ3HcnVVjsp8P7e8=
Subject key identifier: F2:C2:3D:0E:E7:C8:66:32:34:35:CB:75:43:00:23:BD:9F:77:A4:85
Authority key identifier: E0:40:58:84:DA:C5:9D:A1:E5:D5:85:19:3E:06:56:81:F9:D6:61:5E
Certificate issuer: /CN=e0405884dac59da1e5d585193e065681f9d6615e
Certificate serial: 019897138D2686A7EC19CE7A8D2D1CFBA263
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4EBYhNrFnaHl1YUZPgZWgfnWYV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.mft
Manifest number: 048D
Signing time: Mon 11 Aug 2025 03:01:37 +0000
Manifest this update: Mon 11 Aug 2025 03:01:37 +0000
Manifest next update: Tue 12 Aug 2025 03:01:37 +0000
Files and hashes: 1: 4EBYhNrFnaHl1YUZPgZWgfnWYV4.crl (hash: 7KPlYPIPnS4UlcFSy9n62No7bTSKz3vDIedc74lqo+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4EBYhNrFnaHl1YUZPgZWgfnWYV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:13:8d:26:86:a7:ec:19:ce:7a:8d:2d:1c:fb:a2:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0405884dac59da1e5d585193e065681f9d6615e
Validity
Not Before: Aug 11 03:01:37 2025 GMT
Not After : Aug 12 03:01:37 2025 GMT
Subject: CN=f2c23d0ee7c866323435cb75430023bd9f77a485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:01:af:05:d4:5c:f1:e7:70:37:0b:79:75:16:
cd:aa:f4:f9:12:74:ae:50:14:02:35:c5:1a:d1:df:
ea:b7:0e:60:93:1e:3b:43:ee:31:6e:f9:04:5c:ed:
47:28:bd:7a:9d:5c:48:32:d1:d5:87:99:bc:19:87:
39:48:e3:f4:06:f2:88:f2:09:61:55:a3:af:4b:fc:
42:1d:cc:f8:0d:1f:ea:56:4f:3e:84:04:04:7c:4d:
85:b9:95:bb:a1:8a:5c:6d:62:26:73:8f:81:88:36:
33:16:0f:9d:73:e4:1c:2c:21:ba:32:93:cc:ab:88:
99:85:21:6b:7b:fe:74:11:e8:4c:28:67:6e:2f:19:
da:1c:2b:8b:11:61:95:4f:df:8b:06:16:80:83:dd:
a1:9e:c3:b8:e4:46:29:72:16:e9:1d:87:83:68:81:
b4:b8:9e:93:6c:13:11:70:a6:8c:11:3b:00:1b:21:
be:54:39:f9:18:ec:1d:23:a9:04:1c:4b:ee:b1:bf:
9d:2a:be:5c:d1:c1:9d:4d:cd:a5:dc:d0:3d:dd:d9:
3e:94:f6:7e:03:3d:67:db:80:38:16:52:f9:a9:db:
e8:e7:f9:72:ca:18:e8:d0:f4:d6:dd:1b:c2:c7:e6:
30:7f:a1:e2:3c:db:09:11:ee:e9:50:e9:13:25:81:
f7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C2:3D:0E:E7:C8:66:32:34:35:CB:75:43:00:23:BD:9F:77:A4:85
X509v3 Authority Key Identifier:
keyid:E0:40:58:84:DA:C5:9D:A1:E5:D5:85:19:3E:06:56:81:F9:D6:61:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4EBYhNrFnaHl1YUZPgZWgfnWYV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:32:6d:b8:a2:8e:53:62:05:6a:a8:67:fe:c4:3a:e0:e5:58:
01:0d:d7:ca:df:9e:55:c9:58:bd:71:42:81:2c:bc:81:8c:39:
99:8c:ed:90:82:d1:d3:c3:35:a3:b4:5d:bf:55:85:90:dc:7b:
64:12:f8:b1:e6:cc:4b:89:45:77:ad:b5:03:70:42:a4:c9:33:
5a:7f:e9:15:6d:23:2e:15:fd:62:fc:b9:df:0b:ee:38:6d:e8:
25:c2:91:71:91:d6:97:a3:49:1e:f9:6b:be:f8:78:63:db:d9:
0a:aa:80:38:57:a2:9a:a0:67:6c:f1:d7:24:ea:0d:40:47:4b:
2d:04:ca:9e:66:c7:d3:fe:88:68:f4:25:ba:6c:56:48:54:47:
17:41:38:00:3c:41:1b:d1:06:ac:99:1e:bf:19:fd:ab:38:2e:
46:af:a2:80:87:2a:67:46:8f:db:6c:d1:01:ef:8c:3b:bc:ba:
3d:87:c8:c3:92:99:37:6c:88:51:52:c4:e6:d2:31:d6:c2:86:
30:c5:dc:d8:3a:37:7b:9a:24:a9:f1:51:a4:05:cb:71:da:66:
e0:fa:1b:4d:e2:78:f4:ad:9c:3f:d4:af:f6:73:46:ef:52:82:
61:23:ae:aa:f4:96:a4:0e:13:b9:d2:31:ed:36:a2:46:60:fd:
b5:04:f8:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiXE40mhqfsGc56jS0c+6JjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNDA1ODg0ZGFjNTlkYTFlNWQ1ODUxOTNlMDY1NjgxZjlk
NjYxNWUwHhcNMjUwODExMDMwMTM3WhcNMjUwODEyMDMwMTM3WjAzMTEwLwYDVQQD
EyhmMmMyM2QwZWU3Yzg2NjMyMzQzNWNiNzU0MzAwMjNiZDlmNzdhNDg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgGvBdRc8edwNwt5dRbNqvT5EnSu
UBQCNcUa0d/qtw5gkx47Q+4xbvkEXO1HKL16nVxIMtHVh5m8GYc5SOP0BvKI8glh
VaOvS/xCHcz4DR/qVk8+hAQEfE2FuZW7oYpcbWImc4+BiDYzFg+dc+QcLCG6MpPM
q4iZhSFre/50EehMKGduLxnaHCuLEWGVT9+LBhaAg92hnsO45EYpchbpHYeDaIG0
uJ6TbBMRcKaMETsAGyG+VDn5GOwdI6kEHEvusb+dKr5c0cGdTc2l3NA93dk+lPZ+
Az1n24A4FlL5qdvo5/lyyhjo0PTW3RvCx+Ywf6HiPNsJEe7pUOkTJYH3fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPLCPQ7nyGYyNDXLdUMAI72fd6SFMB8GA1UdIwQY
MBaAFOBAWITaxZ2h5dWFGT4GVoH51mFeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEVCWWhOckZuYUhsMVlVWlBnWldnZm5XWVY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS82MzkzYmItN2Q1MS00ZjFjLTg4ZDMt
MWNmNzFkZjgyOGQ4LzEvNEVCWWhOckZuYUhsMVlVWlBnWldnZm5XWVY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS82MzkzYmItN2Q1MS00ZjFjLTg4ZDMtMWNmNzFkZjgyOGQ4
LzEvNEVCWWhOckZuYUhsMVlVWlBnWldnZm5XWVY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALDJtuKKO
U2IFaqhn/sQ64OVYAQ3Xyt+eVclYvXFCgSy8gYw5mYztkILR08M1o7Rdv1WFkNx7
ZBL4sebMS4lFd621A3BCpMkzWn/pFW0jLhX9Yvy53wvuOG3oJcKRcZHWl6NJHvlr
vvh4Y9vZCqqAOFeimqBnbPHXJOoNQEdLLQTKnmbH0/6IaPQlumxWSFRHF0E4ADxB
G9EGrJkevxn9qzguRq+igIcqZ0aP22zRAe+MO7y6PYfIw5KZN2yIUVLE5tIx1sKG
MMXc2Do3e5okqfFRpAXLcdpm4PobTeJ49K2cP9Sv9nNG71KCYSOuqvSWpA4TudIx
7TaiRmD9tQT43Q==
-----END CERTIFICATE-----
Generated at Mon Aug 11 05:50:38 2025 by rpki-client