Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
File: 4q7DyKsR_AWMmo70AO8cPRRKe6g.mft (raw, json)
Hash identifier: 7SWdEyfFSA2CDbJAuGzPlOWCYXqGm90lJ/umxqDLNCg=
Subject key identifier: 45:1C:D8:C3:63:D8:D9:E1:7F:58:98:96:5F:52:7E:E3:F4:EE:84:F9
Authority key identifier: E2:AE:C3:C8:AB:11:FC:05:8C:9A:8E:F4:00:EF:1C:3D:14:4A:7B:A8
Certificate issuer: /CN=e2aec3c8ab11fc058c9a8ef400ef1c3d144a7ba8
Certificate serial: 01976884C939D7D61D9BC0F876277707900E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
Manifest number: 0812
Signing time: Fri 13 Jun 2025 09:00:22 +0000
Manifest this update: Fri 13 Jun 2025 09:00:22 +0000
Manifest next update: Sat 14 Jun 2025 09:00:22 +0000
Files and hashes: 1: 1qu70rxHLlsLAV5g5Efa66s6iag.roa (hash: YmJJTTwGISEG6l96iV4cbfKm+Xa4J2z07ynSRxjgi3U=)
2: 4q7DyKsR_AWMmo70AO8cPRRKe6g.crl (hash: +lkQi+Df2WnebTSI9PxGrd3gc29Cd2I2mtMdG1z32nY=)
3: q1pnCW-BLUiZBZvb23K3UxB_wVE.roa (hash: pCVPRKxVl5EU92p/4v7xk8uVkYaxmpQbOuLsACDt2jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:84:c9:39:d7:d6:1d:9b:c0:f8:76:27:77:07:90:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2aec3c8ab11fc058c9a8ef400ef1c3d144a7ba8
Validity
Not Before: Jun 13 09:00:22 2025 GMT
Not After : Jun 14 09:00:22 2025 GMT
Subject: CN=451cd8c363d8d9e17f5898965f527ee3f4ee84f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:da:c5:8d:2d:3c:50:0f:81:64:13:54:ad:68:
d5:d7:12:dd:62:90:f4:e7:7c:5e:45:6d:b5:c7:5e:
4b:38:ea:ed:52:57:78:6d:bb:35:85:b8:a2:ce:22:
6d:bf:df:ac:86:5c:c1:2f:ab:48:67:4d:04:8a:fa:
98:1b:27:95:fc:ca:6e:38:76:f7:48:88:16:5e:8e:
32:67:33:f2:b8:4b:58:4d:f7:11:eb:c1:12:6c:bf:
06:42:16:9a:40:a8:bb:ca:4f:98:48:dd:19:93:3b:
c9:1a:c8:3f:ca:5e:2d:8f:7d:0f:82:af:d8:85:97:
f9:c7:41:b6:00:1d:1a:b6:c7:7f:1a:d7:ef:ba:80:
fa:81:76:86:f3:41:68:02:70:3c:77:4c:dc:87:4a:
bb:2a:a7:67:4a:b6:1e:23:9f:f4:b2:d5:93:d2:9f:
60:2f:f0:b5:a7:7a:d7:b8:c1:0a:0c:a6:3c:4a:f5:
a6:30:da:c2:14:46:ef:fe:76:63:80:a6:27:bc:30:
a3:4c:ec:9c:0d:3f:0e:c3:79:46:9b:81:18:65:a9:
f8:1b:08:6b:cd:a2:cf:96:27:db:82:65:c2:cd:09:
bd:e1:c6:c9:2f:74:7a:3e:80:2c:59:1d:90:bf:9b:
da:7b:fe:09:9b:40:85:84:e7:01:e0:66:8d:5c:56:
ae:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:1C:D8:C3:63:D8:D9:E1:7F:58:98:96:5F:52:7E:E3:F4:EE:84:F9
X509v3 Authority Key Identifier:
keyid:E2:AE:C3:C8:AB:11:FC:05:8C:9A:8E:F4:00:EF:1C:3D:14:4A:7B:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:8f:a8:a3:ef:59:2d:4c:20:f4:a6:af:c6:a7:c8:7d:5d:04:
01:82:f0:a7:92:b6:51:4f:14:db:fd:26:da:6a:70:c3:5b:45:
13:b7:10:b6:7c:61:e4:66:1d:3f:2a:e0:a7:02:a9:fd:39:26:
49:90:0a:f2:4b:df:61:6a:5c:54:f3:6c:ae:f7:bd:9b:13:f7:
b6:f3:0a:c2:ce:48:a8:30:1a:1d:d3:7f:1d:6f:a9:dd:f2:e4:
c4:58:b5:1e:11:1f:3a:42:4a:0d:ac:e0:81:fa:38:5a:c4:1f:
23:3e:50:dd:e1:67:74:d4:ad:51:65:39:a5:db:8c:f0:77:3c:
dc:94:07:4f:eb:40:11:02:bc:f7:94:92:dd:2b:d3:ac:07:f0:
e1:60:16:8a:83:f4:c0:c3:1b:64:37:79:2b:91:19:e6:ac:c1:
96:a8:86:77:d5:d6:37:c9:03:81:64:29:66:7e:5f:09:d7:41:
35:c2:af:6d:fb:42:a2:75:c7:89:d7:c4:95:36:4a:f1:44:c9:
af:d4:03:87:3a:e3:62:cf:b2:a7:9a:cd:cf:c2:1e:13:f6:67:
ae:cc:35:4f:2e:21:f1:d4:50:b5:1b:3d:cb:b9:15:15:d6:aa:
df:9f:d2:22:00:94:a5:ec:4d:1e:41:59:e1:6b:19:11:4c:19:
9b:a1:63:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdohMk519Ydm8D4did3B5AOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYWVjM2M4YWIxMWZjMDU4YzlhOGVmNDAwZWYxYzNkMTQ0
YTdiYTgwHhcNMjUwNjEzMDkwMDIyWhcNMjUwNjE0MDkwMDIyWjAzMTEwLwYDVQQD
Eyg0NTFjZDhjMzYzZDhkOWUxN2Y1ODk4OTY1ZjUyN2VlM2Y0ZWU4NGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5trFjS08UA+BZBNUrWjV1xLdYpD0
53xeRW21x15LOOrtUld4bbs1hbiiziJtv9+shlzBL6tIZ00EivqYGyeV/MpuOHb3
SIgWXo4yZzPyuEtYTfcR68ESbL8GQhaaQKi7yk+YSN0ZkzvJGsg/yl4tj30Pgq/Y
hZf5x0G2AB0atsd/GtfvuoD6gXaG80FoAnA8d0zch0q7KqdnSrYeI5/0stWT0p9g
L/C1p3rXuMEKDKY8SvWmMNrCFEbv/nZjgKYnvDCjTOycDT8Ow3lGm4EYZan4Gwhr
zaLPlifbgmXCzQm94cbJL3R6PoAsWR2Qv5vae/4Jm0CFhOcB4GaNXFau3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEUc2MNj2Nnhf1iYll9SfuP07oT5MB8GA1UdIwQY
MBaAFOKuw8irEfwFjJqO9ADvHD0USnuoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHE3RHlLc1JfQVdNbW83MEFPOGNQUlJLZTZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9iYTE5ZTQtNzFjYy00NzBlLWJkYTUt
OWRhNGNjNjIwNTMzLzEvNHE3RHlLc1JfQVdNbW83MEFPOGNQUlJLZTZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9iYTE5ZTQtNzFjYy00NzBlLWJkYTUtOWRhNGNjNjIwNTMz
LzEvNHE3RHlLc1JfQVdNbW83MEFPOGNQUlJLZTZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmI+oo+9Z
LUwg9KavxqfIfV0EAYLwp5K2UU8U2/0m2mpww1tFE7cQtnxh5GYdPyrgpwKp/Tkm
SZAK8kvfYWpcVPNsrve9mxP3tvMKws5IqDAaHdN/HW+p3fLkxFi1HhEfOkJKDazg
gfo4WsQfIz5Q3eFndNStUWU5pduM8Hc83JQHT+tAEQK895SS3SvTrAfw4WAWioP0
wMMbZDd5K5EZ5qzBlqiGd9XWN8kDgWQpZn5fCddBNcKvbftConXHidfElTZK8UTJ
r9QDhzrjYs+yp5rNz8IeE/Znrsw1Ty4h8dRQtRs9y7kVFdaq35/SIgCUpexNHkFZ
4WsZEUwZm6FjZg==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:09:22 2025 by rpki-client