Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft
File: 4fhh7IT8VurKm4xjbnkj5vktzOo.mft (raw, json)
Hash identifier: 0cmsnhckE7FzRDsnGUcIvX+573gA+fwU8Cm/ERcxMk4=
Subject key identifier: 37:49:65:A5:86:28:2F:FC:E3:7F:30:FF:CD:4B:F4:18:A6:A7:49:43
Authority key identifier: E1:F8:61:EC:84:FC:56:EA:CA:9B:8C:63:6E:79:23:E6:F9:2D:CC:EA
Certificate issuer: /CN=e1f861ec84fc56eaca9b8c636e7923e6f92dccea
Certificate serial: 019896A64BCCC6166CD7B1BBF12172FA92B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fhh7IT8VurKm4xjbnkj5vktzOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft
Manifest number: 1626
Signing time: Mon 11 Aug 2025 01:02:17 +0000
Manifest this update: Mon 11 Aug 2025 01:02:17 +0000
Manifest next update: Tue 12 Aug 2025 01:02:17 +0000
Files and hashes: 1: 4fhh7IT8VurKm4xjbnkj5vktzOo.crl (hash: /tm92Q1I4UohnA1RU0u/WS4QEEIPSLpK5Ya1OgH2qoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fhh7IT8VurKm4xjbnkj5vktzOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a6:4b:cc:c6:16:6c:d7:b1:bb:f1:21:72:fa:92:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f861ec84fc56eaca9b8c636e7923e6f92dccea
Validity
Not Before: Aug 11 01:02:17 2025 GMT
Not After : Aug 12 01:02:17 2025 GMT
Subject: CN=374965a586282ffce37f30ffcd4bf418a6a74943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:77:e8:8b:f1:1a:21:ea:30:af:6a:34:d6:76:
53:ec:bb:36:3d:fd:c8:01:18:ce:31:11:51:10:c3:
7b:5d:96:ae:93:99:57:1e:1f:26:47:1e:09:bd:d2:
92:bb:c3:ce:4c:fa:f5:ef:58:07:77:e9:c3:26:85:
dc:06:fe:86:a3:a1:19:76:79:3d:3a:9b:0e:ce:6c:
11:13:ff:0b:80:78:d6:bf:64:3e:2b:42:07:64:26:
71:ab:6a:5d:dd:8a:53:cf:fe:98:7d:ed:3d:af:fe:
79:b6:48:34:1b:9a:36:73:fb:70:c7:18:3d:34:b6:
09:7f:fc:2f:73:c8:bc:28:46:08:ff:ca:8d:92:83:
f5:67:38:32:4d:09:7e:63:d9:72:48:2a:48:87:6f:
81:71:0e:77:15:8c:35:c0:f1:9b:8b:f5:31:76:7c:
eb:a2:14:e4:5d:e0:1a:91:26:7d:ef:06:e9:44:f2:
22:7c:f6:5a:31:f8:1a:9d:06:c4:ab:48:c3:b8:de:
66:7e:e0:d7:1b:3b:b4:57:d0:10:b7:de:e8:b5:fc:
40:e4:3b:7a:ca:4e:1b:1e:7c:33:ad:dc:38:67:b8:
6b:b9:0f:f0:26:b5:ad:a0:c0:14:3f:95:f6:67:a8:
55:04:56:c2:f9:d8:a3:c5:cd:49:5d:7b:45:9e:6b:
73:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:49:65:A5:86:28:2F:FC:E3:7F:30:FF:CD:4B:F4:18:A6:A7:49:43
X509v3 Authority Key Identifier:
keyid:E1:F8:61:EC:84:FC:56:EA:CA:9B:8C:63:6E:79:23:E6:F9:2D:CC:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fhh7IT8VurKm4xjbnkj5vktzOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:bf:3f:15:13:54:bd:36:48:40:cf:d9:1d:ef:5d:1e:f6:5a:
5c:c8:af:eb:d5:99:2c:a8:4b:09:bc:78:d9:c9:c6:1d:59:b2:
b0:73:e0:96:cc:d5:9c:87:1f:48:21:78:1b:3a:db:c9:00:67:
65:2b:f5:33:24:5d:d7:68:2a:dd:32:fc:eb:4f:2f:2b:4c:d6:
f6:b8:a9:8c:dd:03:d3:13:9f:c9:3d:69:f9:b3:38:0e:0a:ef:
a6:b5:24:3f:f3:51:a9:07:4a:2f:fc:70:0e:4a:51:7d:bb:64:
8b:62:ec:8c:56:99:ca:61:e5:c0:64:02:7d:c1:c0:19:09:6d:
0e:59:57:26:9f:c4:ed:f1:fe:b8:b8:ef:60:40:69:77:01:ad:
98:5f:61:a3:b5:46:eb:c6:f9:96:cc:4a:49:90:b9:7f:18:b0:
f9:95:91:19:2e:70:d9:6a:de:7f:29:b2:28:ab:a2:16:24:eb:
81:00:9f:e7:9f:75:61:20:7a:4b:33:4c:bc:a2:35:b7:47:e5:
98:09:da:3a:b8:29:4f:85:dd:c8:4e:97:28:db:80:ae:6b:55:
37:84:6a:a6:70:0b:9d:5c:e3:0f:c3:2b:8e:0c:94:41:0a:29:
ad:15:5e:81:2a:17:ff:e3:23:05:f6:7c:62:b2:ae:44:05:e5:
cc:07:03:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiWpkvMxhZs17G78SFy+pK2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxZjg2MWVjODRmYzU2ZWFjYTliOGM2MzZlNzkyM2U2Zjky
ZGNjZWEwHhcNMjUwODExMDEwMjE3WhcNMjUwODEyMDEwMjE3WjAzMTEwLwYDVQQD
EygzNzQ5NjVhNTg2MjgyZmZjZTM3ZjMwZmZjZDRiZjQxOGE2YTc0OTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHfoi/EaIeowr2o01nZT7Ls2Pf3I
ARjOMRFREMN7XZauk5lXHh8mRx4JvdKSu8POTPr171gHd+nDJoXcBv6Go6EZdnk9
OpsOzmwRE/8LgHjWv2Q+K0IHZCZxq2pd3YpTz/6Yfe09r/55tkg0G5o2c/twxxg9
NLYJf/wvc8i8KEYI/8qNkoP1ZzgyTQl+Y9lySCpIh2+BcQ53FYw1wPGbi/Uxdnzr
ohTkXeAakSZ97wbpRPIifPZaMfganQbEq0jDuN5mfuDXGzu0V9AQt97otfxA5Dt6
yk4bHnwzrdw4Z7hruQ/wJrWtoMAUP5X2Z6hVBFbC+dijxc1JXXtFnmtznwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDdJZaWGKC/8438w/81L9Bimp0lDMB8GA1UdIwQY
MBaAFOH4YeyE/FbqypuMY255I+b5LczqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGZoaDdJVDhWdXJLbTR4amJua2o1dmt0ek9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mZDhhOTQtZGFlZi00NjQ0LWJiNWUt
MjFhNGQ1Y2MyYWJmLzEvNGZoaDdJVDhWdXJLbTR4amJua2o1dmt0ek9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mZDhhOTQtZGFlZi00NjQ0LWJiNWUtMjFhNGQ1Y2MyYWJm
LzEvNGZoaDdJVDhWdXJLbTR4amJua2o1dmt0ek9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkb8/FRNU
vTZIQM/ZHe9dHvZaXMiv69WZLKhLCbx42cnGHVmysHPglszVnIcfSCF4GzrbyQBn
ZSv1MyRd12gq3TL8608vK0zW9ripjN0D0xOfyT1p+bM4DgrvprUkP/NRqQdKL/xw
DkpRfbtki2LsjFaZymHlwGQCfcHAGQltDllXJp/E7fH+uLjvYEBpdwGtmF9ho7VG
68b5lsxKSZC5fxiw+ZWRGS5w2WrefymyKKuiFiTrgQCf5591YSB6SzNMvKI1t0fl
mAnaOrgpT4XdyE6XKNuArmtVN4RqpnALnVzjD8MrjgyUQQoprRVegSoX/+MjBfZ8
YrKuRAXlzAcDcg==
-----END CERTIFICATE-----
Generated at Mon Aug 11 09:52:17 2025 by rpki-client