Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
File: 4C7HTaVJNr70L-JgWX3W0h3M7fw.mft (raw, json)
Hash identifier: B6IfdS1XjxxffJ+ZsQZnZKYBYiMTUSFIpMPW3cmhyxg=
Subject key identifier: 08:47:71:B0:A8:8E:64:7F:8C:53:EF:19:D3:34:6B:32:B0:8F:97:7C
Authority key identifier: E0:2E:C7:4D:A5:49:36:BE:F4:2F:E2:60:59:7D:D6:D2:1D:CC:ED:FC
Certificate issuer: /CN=e02ec74da54936bef42fe260597dd6d21dccedfc
Certificate serial: 01988C58B61B139A662E2826551305E3D59C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
Manifest number: 158A
Signing time: Sat 09 Aug 2025 01:01:20 +0000
Manifest this update: Sat 09 Aug 2025 01:01:20 +0000
Manifest next update: Sun 10 Aug 2025 01:01:20 +0000
Files and hashes: 1: 4C7HTaVJNr70L-JgWX3W0h3M7fw.crl (hash: e6ol7WkW+2K08T2UCbsFZS6k3KgziU4ZcbanDpzS/M0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 01:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:58:b6:1b:13:9a:66:2e:28:26:55:13:05:e3:d5:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e02ec74da54936bef42fe260597dd6d21dccedfc
Validity
Not Before: Aug 9 01:01:20 2025 GMT
Not After : Aug 10 01:01:20 2025 GMT
Subject: CN=084771b0a88e647f8c53ef19d3346b32b08f977c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ae:33:ea:14:63:22:9b:12:4f:de:8f:7b:92:
26:b7:a1:bd:7c:ff:64:88:33:ec:1b:6c:6f:2f:a8:
58:cc:af:7d:48:fc:a2:41:85:d0:e6:09:2d:f0:1e:
ea:eb:e5:5c:34:f6:7a:11:7e:b0:a3:5f:7d:3f:e3:
ec:77:1b:e9:22:22:48:e7:db:32:36:22:d1:10:7d:
0e:42:ab:de:05:15:91:b1:2d:7d:82:36:11:97:0b:
9e:09:9e:a8:cb:e7:9f:d7:50:80:12:5b:52:ec:61:
54:88:51:f9:9f:5b:4a:63:b7:06:bf:1b:29:69:59:
ad:2a:ed:80:31:8f:be:1a:36:d8:6f:84:b4:f9:8e:
a1:6e:7d:dd:76:52:fa:2d:25:d0:9f:d9:a8:9b:52:
dc:e7:6a:8e:d6:dd:0c:0b:96:53:47:b8:73:23:31:
7d:7a:8a:9e:40:e6:2e:7c:00:96:ca:a9:cd:25:bf:
7d:69:ec:b8:b8:4b:3a:39:84:fe:3e:b1:e5:79:80:
e6:38:14:b5:25:80:e3:3a:b2:78:58:14:02:69:b9:
5d:6d:14:41:75:fa:51:63:36:35:d3:05:8b:2f:c6:
52:d4:4d:75:00:61:87:d5:2f:23:cb:37:74:55:b4:
93:89:5b:3a:57:2c:4b:23:ba:1a:0e:da:b8:60:7b:
4b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:47:71:B0:A8:8E:64:7F:8C:53:EF:19:D3:34:6B:32:B0:8F:97:7C
X509v3 Authority Key Identifier:
keyid:E0:2E:C7:4D:A5:49:36:BE:F4:2F:E2:60:59:7D:D6:D2:1D:CC:ED:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:44:93:a2:96:12:9f:25:49:e8:5f:68:aa:3e:7a:4a:0c:96:
b6:14:77:56:47:20:51:4d:97:fa:a1:44:9e:2e:3a:c7:06:57:
db:5c:df:2b:91:72:14:37:85:d6:b7:97:ed:01:fd:ba:bb:25:
c5:77:df:89:35:40:b2:99:22:e7:04:f6:a9:40:04:6d:f3:af:
3a:cb:67:99:6d:14:dd:61:f0:1f:36:79:09:7b:3f:8c:87:7a:
d4:c7:5c:68:9d:26:4c:a5:c7:25:0e:35:fa:d0:0e:0b:1e:3c:
11:fc:af:6b:7d:2b:10:7c:ef:94:bf:b2:e7:7f:43:31:81:0a:
e6:42:0b:e2:b8:4c:5e:75:fc:d4:72:3f:1d:cf:f3:c5:a0:11:
8c:11:2f:18:dd:98:4c:49:e4:cc:e3:d9:48:89:a4:1b:6e:9f:
6a:68:42:fe:6f:8a:66:36:99:f7:36:b3:ab:8a:98:6a:80:fc:
5c:8a:51:83:69:04:d7:08:f8:fa:b3:f4:32:22:be:c3:f2:c7:
da:db:d7:f5:62:81:30:b3:57:7a:b0:20:8f:5a:26:2a:b2:7e:
fb:0e:5c:95:eb:81:6f:a9:b4:80:71:05:15:fd:b4:50:d2:6b:
8f:41:8f:e0:eb:a7:89:5c:19:d4:fa:43:64:a6:59:1e:3f:e4:
46:26:a5:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiMWLYbE5pmLigmVRMF49WcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwMmVjNzRkYTU0OTM2YmVmNDJmZTI2MDU5N2RkNmQyMWRj
Y2VkZmMwHhcNMjUwODA5MDEwMTIwWhcNMjUwODEwMDEwMTIwWjAzMTEwLwYDVQQD
EygwODQ3NzFiMGE4OGU2NDdmOGM1M2VmMTlkMzM0NmIzMmIwOGY5NzdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAha4z6hRjIpsST96Pe5Imt6G9fP9k
iDPsG2xvL6hYzK99SPyiQYXQ5gkt8B7q6+VcNPZ6EX6wo199P+PsdxvpIiJI59sy
NiLREH0OQqveBRWRsS19gjYRlwueCZ6oy+ef11CAEltS7GFUiFH5n1tKY7cGvxsp
aVmtKu2AMY++GjbYb4S0+Y6hbn3ddlL6LSXQn9mom1Lc52qO1t0MC5ZTR7hzIzF9
eoqeQOYufACWyqnNJb99aey4uEs6OYT+PrHleYDmOBS1JYDjOrJ4WBQCabldbRRB
dfpRYzY10wWLL8ZS1E11AGGH1S8jyzd0VbSTiVs6VyxLI7oaDtq4YHtLcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAhHcbCojmR/jFPvGdM0azKwj5d8MB8GA1UdIwQY
MBaAFOAux02lSTa+9C/iYFl91tIdzO38MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEM3SFRhVkpOcjcwTC1KZ1dYM1cwaDNNN2Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi83NGUwMTMtNWExYy00MDAzLWJmOTIt
MDFiOGIwZjRiMDE5LzEvNEM3SFRhVkpOcjcwTC1KZ1dYM1cwaDNNN2Z3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi83NGUwMTMtNWExYy00MDAzLWJmOTItMDFiOGIwZjRiMDE5
LzEvNEM3SFRhVkpOcjcwTC1KZ1dYM1cwaDNNN2Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEkSTopYS
nyVJ6F9oqj56SgyWthR3VkcgUU2X+qFEni46xwZX21zfK5FyFDeF1reX7QH9ursl
xXffiTVAspki5wT2qUAEbfOvOstnmW0U3WHwHzZ5CXs/jId61MdcaJ0mTKXHJQ41
+tAOCx48Efyva30rEHzvlL+y539DMYEK5kIL4rhMXnX81HI/Hc/zxaARjBEvGN2Y
TEnkzOPZSImkG26famhC/m+KZjaZ9zazq4qYaoD8XIpRg2kE1wj4+rP0MiK+w/LH
2tvX9WKBMLNXerAgj1omKrJ++w5cleuBb6m0gHEFFf20UNJrj0GP4OuniVwZ1PpD
ZKZZHj/kRial0Q==
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:32:52 2025 by rpki-client