Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
File: 4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft (raw, json)
Hash identifier: ez3yFFxpFMLtfW8RNRnOIM/1pQsLSo4EqLoWtnK1yXc=
Subject key identifier: 70:73:D4:DD:83:49:99:A1:62:B7:83:72:4C:D1:D5:DE:D1:7C:64:A1
Authority key identifier: E1:B9:A3:CE:0F:59:39:10:81:9C:32:71:E1:E8:D0:BD:13:71:A6:BE
Certificate issuer: /CN=e1b9a3ce0f593910819c3271e1e8d0bd1371a6be
Certificate serial: 01976C624DEC4DD06EA283C7175071E7526B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
Manifest number: 14CC
Signing time: Sat 14 Jun 2025 03:01:11 +0000
Manifest this update: Sat 14 Jun 2025 03:01:11 +0000
Manifest next update: Sun 15 Jun 2025 03:01:11 +0000
Files and hashes: 1: 4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl (hash: TKevu2q/gWhWKVgv29gz007/ZzsHvLt8xl6hAnmIguw=)
2: a66Wq_cz1-opkUh3xxWdvnCXHIE.roa (hash: RBd7B7hKzSBV9gC+hmCCrVD1uw4jr8IoDZkTqDG8H1A=)
3: am2sy58F1CS8R1serePPA8VUSM8.roa (hash: mn9+spB9id4ITF5EVifryU58phMpNbZ14Htzb13CxjQ=)
4: mBtneH0apKymD1yidiviYwQz7bc.roa (hash: +okWaOCxw+vLPC+W7D2xJzjJ34ydGJtCuhpbcrxYg+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:62:4d:ec:4d:d0:6e:a2:83:c7:17:50:71:e7:52:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1b9a3ce0f593910819c3271e1e8d0bd1371a6be
Validity
Not Before: Jun 14 03:01:11 2025 GMT
Not After : Jun 15 03:01:11 2025 GMT
Subject: CN=7073d4dd834999a162b783724cd1d5ded17c64a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:49:2e:79:7f:8b:e6:9a:56:83:26:7c:63:ea:
68:0d:07:fe:3c:74:e7:c0:cf:3d:ec:dd:20:ca:eb:
59:a1:a3:2b:fa:07:54:64:0b:14:aa:25:85:1b:ef:
f2:6d:d9:f7:a8:fc:9a:8e:63:4b:e0:6a:87:9f:02:
cf:2b:78:8d:5b:ce:30:71:50:27:dd:2a:14:e7:8e:
3a:6d:32:a3:2b:d8:4e:dd:83:11:c7:e5:52:0e:ec:
48:10:2c:8f:a8:b2:6e:c8:36:4d:7a:5d:a0:17:a6:
f8:cd:9e:c4:0f:1d:b8:ca:48:c7:5f:e8:3b:01:77:
92:ed:55:e1:32:7e:58:ad:2e:5e:b8:a3:14:e9:34:
64:ae:83:ce:d8:74:65:fa:80:a1:20:e3:a6:6e:39:
5b:1c:79:0d:a2:c7:a0:71:82:55:5c:3b:75:72:78:
fc:41:fc:1f:a7:be:3f:c0:e2:9b:c9:7c:2e:7e:6c:
f7:b6:ac:5b:09:f3:4b:9f:87:50:69:6a:65:07:1e:
87:9f:93:54:71:4d:7d:c6:42:7c:ae:2d:3f:0c:d2:
a0:27:da:1b:c8:5c:77:be:fc:e5:56:31:b1:d5:a4:
9f:23:c7:bd:f6:85:23:8b:99:b1:60:80:54:14:67:
9b:4d:ef:69:5f:24:5d:89:53:d1:6f:12:a0:b3:58:
63:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:73:D4:DD:83:49:99:A1:62:B7:83:72:4C:D1:D5:DE:D1:7C:64:A1
X509v3 Authority Key Identifier:
keyid:E1:B9:A3:CE:0F:59:39:10:81:9C:32:71:E1:E8:D0:BD:13:71:A6:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:bb:f0:33:f5:d6:11:eb:04:3e:a8:4b:b4:a1:71:4e:5a:67:
56:1f:a6:c7:49:fd:29:6c:1d:2b:e6:80:ac:5e:74:53:f0:08:
9c:47:d6:1b:22:69:ea:09:11:e3:f9:5b:a0:17:25:5f:a9:39:
a4:02:a8:72:54:8f:1d:e8:7c:b7:0c:bb:5f:fb:91:7e:16:de:
88:b0:07:e3:98:f7:18:99:42:b9:55:57:7c:e8:19:20:eb:4c:
cb:6c:39:3c:f2:5b:1a:3f:ab:dc:3f:76:4b:6b:17:d1:09:b2:
e0:e6:82:fd:d7:22:df:f1:e3:1d:9b:69:93:f8:5f:c3:db:b1:
6b:20:8e:32:b0:1b:d1:58:8b:e8:ad:bf:e5:f3:ba:50:a3:e1:
a7:d8:99:ef:8e:b7:ea:b9:e1:d2:df:24:a1:73:eb:62:51:28:
b2:6a:04:f8:9b:cf:66:4c:f1:7f:b9:41:9a:d0:1b:bb:84:d2:
f6:c3:97:42:39:9c:c8:53:b0:39:70:39:d1:2e:66:38:03:b9:
0e:43:d0:ec:24:ef:d5:a4:d4:65:28:e6:9b:e8:7d:77:61:fc:
9c:20:39:6d:a9:84:6a:7e:aa:38:3c:e4:c9:53:1f:bb:77:a4:
15:0f:d8:79:fe:1d:a4:04:ef:19:c0:99:f7:60:f7:4b:aa:ba:
09:c2:fe:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsYk3sTdBuooPHF1Bx51JrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxYjlhM2NlMGY1OTM5MTA4MTljMzI3MWUxZThkMGJkMTM3
MWE2YmUwHhcNMjUwNjE0MDMwMTExWhcNMjUwNjE1MDMwMTExWjAzMTEwLwYDVQQD
Eyg3MDczZDRkZDgzNDk5OWExNjJiNzgzNzI0Y2QxZDVkZWQxN2M2NGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkkueX+L5ppWgyZ8Y+poDQf+PHTn
wM897N0gyutZoaMr+gdUZAsUqiWFG+/ybdn3qPyajmNL4GqHnwLPK3iNW84wcVAn
3SoU5446bTKjK9hO3YMRx+VSDuxIECyPqLJuyDZNel2gF6b4zZ7EDx24ykjHX+g7
AXeS7VXhMn5YrS5euKMU6TRkroPO2HRl+oChIOOmbjlbHHkNosegcYJVXDt1cnj8
Qfwfp74/wOKbyXwufmz3tqxbCfNLn4dQaWplBx6Hn5NUcU19xkJ8ri0/DNKgJ9ob
yFx3vvzlVjGx1aSfI8e99oUji5mxYIBUFGebTe9pXyRdiVPRbxKgs1hjFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHBz1N2DSZmhYreDckzR1d7RfGShMB8GA1UdIwQY
MBaAFOG5o84PWTkQgZwyceHo0L0Tcaa+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGJtanpnOVpPUkNCbkRKeDRlalF2Uk54cHI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8wZDhiZTgtYjRiNC00MzZlLTg2ZTIt
YmE0YzU2ZDhjMGNlLzEvNGJtanpnOVpPUkNCbkRKeDRlalF2Uk54cHI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8wZDhiZTgtYjRiNC00MzZlLTg2ZTItYmE0YzU2ZDhjMGNl
LzEvNGJtanpnOVpPUkNCbkRKeDRlalF2Uk54cHI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwbvwM/XW
EesEPqhLtKFxTlpnVh+mx0n9KWwdK+aArF50U/AInEfWGyJp6gkR4/lboBclX6k5
pAKoclSPHeh8twy7X/uRfhbeiLAH45j3GJlCuVVXfOgZIOtMy2w5PPJbGj+r3D92
S2sX0Qmy4OaC/dci3/HjHZtpk/hfw9uxayCOMrAb0ViL6K2/5fO6UKPhp9iZ7463
6rnh0t8koXPrYlEosmoE+JvPZkzxf7lBmtAbu4TS9sOXQjmcyFOwOXA50S5mOAO5
DkPQ7CTv1aTUZSjmm+h9d2H8nCA5bamEan6qODzkyVMfu3ekFQ/Yef4dpATvGcCZ
92D3S6q6CcL+2Q==
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:15:42 2025 by rpki-client