Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f11418-30b8-4657-a6ce-57b048c33b62/1/C4JANE7t1v9gI0SCv8MAHW4boJk.mft
File: C4JANE7t1v9gI0SCv8MAHW4boJk.mft (raw, json)
Hash identifier: ohjdq+P4gOklTCpNhRs5M7TT+3X14+JlJiubPYBQr5s=
Subject key identifier: 33:82:DB:5F:3C:C7:38:E3:1C:BF:26:8D:69:59:30:D9:59:7D:BA:CE
Authority key identifier: 0B:82:40:34:4E:ED:D6:FF:60:23:44:82:BF:C3:00:1D:6E:1B:A0:99
Certificate issuer: /CN=0b8240344eedd6ff60234482bfc3001d6e1ba099
Certificate serial: 019873069AC25D48750E8DBEF0B0A7E93B02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4JANE7t1v9gI0SCv8MAHW4boJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/f11418-30b8-4657-a6ce-57b048c33b62/1/C4JANE7t1v9gI0SCv8MAHW4boJk.mft
Manifest number: 45
Signing time: Mon 04 Aug 2025 03:01:09 +0000
Manifest this update: Mon 04 Aug 2025 03:01:09 +0000
Manifest next update: Tue 05 Aug 2025 03:01:09 +0000
Files and hashes: 1: C4JANE7t1v9gI0SCv8MAHW4boJk.crl (hash: 8ajJaDxbHjzdwzje8GxYokCwz+9mZon9pMJrq9JBUOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/f11418-30b8-4657-a6ce-57b048c33b62/1/C4JANE7t1v9gI0SCv8MAHW4boJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/f11418-30b8-4657-a6ce-57b048c33b62/1/C4JANE7t1v9gI0SCv8MAHW4boJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/C4JANE7t1v9gI0SCv8MAHW4boJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:9a:c2:5d:48:75:0e:8d:be:f0:b0:a7:e9:3b:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b8240344eedd6ff60234482bfc3001d6e1ba099
Validity
Not Before: Aug 4 03:01:09 2025 GMT
Not After : Aug 5 03:01:09 2025 GMT
Subject: CN=3382db5f3cc738e31cbf268d695930d9597dbace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:72:ab:a3:81:80:ef:8f:77:f0:61:b8:e3:d9:
35:ff:36:22:6f:cd:ef:6e:d8:4f:3c:72:ae:62:18:
0e:b0:a8:7a:83:03:68:76:ea:cb:13:0c:75:47:c8:
a9:9b:f8:bd:fc:b8:dc:7e:f0:d2:29:2e:6b:fc:95:
e6:68:86:a2:96:da:61:39:f2:52:a3:1c:2f:69:b4:
69:7e:c6:72:63:ac:ad:a8:d0:96:3c:73:c7:e3:8f:
64:92:a6:21:f4:8b:c9:4e:e8:e5:ca:84:7f:f6:50:
25:ed:4d:e1:02:f2:3b:c5:33:90:a2:db:1d:e4:bd:
26:3e:ad:43:96:29:1d:c1:5a:a5:08:19:e8:47:cc:
cd:99:7a:f0:28:b9:9c:4e:d2:49:1a:ca:3b:83:1a:
30:91:11:0e:dc:e3:26:18:fd:84:17:09:c3:8b:f5:
f7:21:a4:22:c5:9f:78:7c:3e:4b:d6:81:09:c6:bd:
8a:e9:50:cd:df:78:33:45:ea:77:38:4f:70:19:78:
69:97:5a:1c:92:cc:3a:8a:ad:27:a0:ec:33:4b:a3:
79:93:cd:5a:7d:0c:88:9d:45:2c:b8:15:e5:35:d7:
18:93:80:a4:be:5b:e4:38:f6:e0:c1:c4:72:26:89:
bc:6b:2c:19:94:5b:b5:b3:7d:a0:26:f5:3e:9d:92:
bb:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:82:DB:5F:3C:C7:38:E3:1C:BF:26:8D:69:59:30:D9:59:7D:BA:CE
X509v3 Authority Key Identifier:
keyid:0B:82:40:34:4E:ED:D6:FF:60:23:44:82:BF:C3:00:1D:6E:1B:A0:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4JANE7t1v9gI0SCv8MAHW4boJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f11418-30b8-4657-a6ce-57b048c33b62/1/C4JANE7t1v9gI0SCv8MAHW4boJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f11418-30b8-4657-a6ce-57b048c33b62/1/C4JANE7t1v9gI0SCv8MAHW4boJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:5b:8d:3a:50:cc:7d:dd:57:c9:01:2f:fd:1f:42:55:69:1f:
9e:d6:b6:51:33:6f:28:b3:79:82:fb:5e:4b:79:1e:4f:2c:ec:
8f:7b:63:19:5f:2d:39:21:ce:82:90:b3:fa:81:86:5a:e1:26:
85:06:a3:da:ea:69:39:43:89:7f:43:c5:57:9d:39:ee:fb:42:
5c:27:ca:f5:4e:db:38:c8:24:15:60:86:20:ce:1d:54:08:26:
04:51:bb:f9:6d:44:77:78:7b:3b:a2:2e:f4:68:a2:79:df:da:
6a:e5:81:d2:4f:f5:33:88:5b:91:d5:03:74:60:cc:0f:a0:09:
8e:10:ae:07:a4:77:27:df:d7:8c:32:c0:56:50:0e:db:5b:80:
22:4a:38:e2:55:57:28:a1:83:71:9c:2c:75:30:df:4a:5d:db:
69:e5:41:4d:bb:b0:74:d8:2c:d1:42:b7:6f:1e:af:bb:85:98:
d7:f8:a5:b1:a6:d3:df:99:7c:c6:84:3e:55:36:44:75:c7:ac:
a8:6f:79:15:b6:1a:de:a2:d8:44:e0:2e:76:45:a7:6e:c6:84:
f7:28:56:1f:d2:ac:75:31:c4:08:69:32:71:e9:0f:4c:c5:15:
89:13:05:18:52:3e:f1:5d:93:49:9e:af:17:d3:20:c0:33:f2:
82:f9:b1:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzBprCXUh1Do2+8LCn6TsCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiODI0MDM0NGVlZGQ2ZmY2MDIzNDQ4MmJmYzMwMDFkNmUx
YmEwOTkwHhcNMjUwODA0MDMwMTA5WhcNMjUwODA1MDMwMTA5WjAzMTEwLwYDVQQD
EygzMzgyZGI1ZjNjYzczOGUzMWNiZjI2OGQ2OTU5MzBkOTU5N2RiYWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHKro4GA74938GG449k1/zYib83v
bthPPHKuYhgOsKh6gwNodurLEwx1R8ipm/i9/LjcfvDSKS5r/JXmaIailtphOfJS
oxwvabRpfsZyY6ytqNCWPHPH449kkqYh9IvJTujlyoR/9lAl7U3hAvI7xTOQotsd
5L0mPq1DlikdwVqlCBnoR8zNmXrwKLmcTtJJGso7gxowkREO3OMmGP2EFwnDi/X3
IaQixZ94fD5L1oEJxr2K6VDN33gzRep3OE9wGXhpl1ocksw6iq0noOwzS6N5k81a
fQyInUUsuBXlNdcYk4CkvlvkOPbgwcRyJom8aywZlFu1s32gJvU+nZK71wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDOC2188xzjjHL8mjWlZMNlZfbrOMB8GA1UdIwQY
MBaAFAuCQDRO7db/YCNEgr/DAB1uG6CZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzRKQU5FN3QxdjlnSTBTQ3Y4TUFIVzRib0prLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9mMTE0MTgtMzBiOC00NjU3LWE2Y2Ut
NTdiMDQ4YzMzYjYyLzEvQzRKQU5FN3QxdjlnSTBTQ3Y4TUFIVzRib0prLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9mMTE0MTgtMzBiOC00NjU3LWE2Y2UtNTdiMDQ4YzMzYjYy
LzEvQzRKQU5FN3QxdjlnSTBTQ3Y4TUFIVzRib0prLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATluNOlDM
fd1XyQEv/R9CVWkfnta2UTNvKLN5gvteS3keTyzsj3tjGV8tOSHOgpCz+oGGWuEm
hQaj2uppOUOJf0PFV5057vtCXCfK9U7bOMgkFWCGIM4dVAgmBFG7+W1Ed3h7O6Iu
9Giied/aauWB0k/1M4hbkdUDdGDMD6AJjhCuB6R3J9/XjDLAVlAO21uAIko44lVX
KKGDcZwsdTDfSl3baeVBTbuwdNgs0UK3bx6vu4WY1/ilsabT35l8xoQ+VTZEdces
qG95FbYa3qLYROAudkWnbsaE9yhWH9KsdTHECGkycekPTMUViRMFGFI+8V2TSZ6v
F9MgwDPygvmx5g==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:36 2025 by rpki-client