Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9b9703-3929-4a4e-93b7-a1bf42c58494/1/4SFHcEtsZk3PIjSS7mHV5fkXxek.mft
File: 4SFHcEtsZk3PIjSS7mHV5fkXxek.mft (raw, json)
Hash identifier: 8I3I1/3/sHEwIncOQD6hx2Y07tihz/rV24dNkiRAK2w=
Subject key identifier: 57:98:D9:14:E3:84:1F:C3:C0:D9:81:72:0D:97:C6:1D:50:C4:E8:D5
Authority key identifier: E1:21:47:70:4B:6C:66:4D:CF:22:34:92:EE:61:D5:E5:F9:17:C5:E9
Certificate issuer: /CN=e12147704b6c664dcf223492ee61d5e5f917c5e9
Certificate serial: 01987298C96ADD803011027CF6F14322D791
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4SFHcEtsZk3PIjSS7mHV5fkXxek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9b9703-3929-4a4e-93b7-a1bf42c58494/1/4SFHcEtsZk3PIjSS7mHV5fkXxek.mft
Manifest number: 0354
Signing time: Mon 04 Aug 2025 01:01:12 +0000
Manifest this update: Mon 04 Aug 2025 01:01:12 +0000
Manifest next update: Tue 05 Aug 2025 01:01:12 +0000
Files and hashes: 1: 4SFHcEtsZk3PIjSS7mHV5fkXxek.crl (hash: JeAk60063pKIeFHWqbo0MU43pCnhxA1/HMLXJudonmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9b9703-3929-4a4e-93b7-a1bf42c58494/1/4SFHcEtsZk3PIjSS7mHV5fkXxek.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9b9703-3929-4a4e-93b7-a1bf42c58494/1/4SFHcEtsZk3PIjSS7mHV5fkXxek.mft
rsync://rpki.ripe.net/repository/DEFAULT/4SFHcEtsZk3PIjSS7mHV5fkXxek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:c9:6a:dd:80:30:11:02:7c:f6:f1:43:22:d7:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e12147704b6c664dcf223492ee61d5e5f917c5e9
Validity
Not Before: Aug 4 01:01:12 2025 GMT
Not After : Aug 5 01:01:12 2025 GMT
Subject: CN=5798d914e3841fc3c0d981720d97c61d50c4e8d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d7:09:80:8f:12:eb:0e:81:4f:2c:44:23:0d:
04:3b:2a:44:6a:7f:fa:e8:1f:cd:a1:b8:14:60:e4:
5b:8e:2a:73:f9:46:ae:08:cc:ab:b0:27:a4:a0:ac:
4c:21:cb:90:be:1b:7b:31:28:63:77:58:c3:e7:b1:
6e:19:aa:b9:22:35:b1:08:bb:f9:a5:94:ea:b8:02:
bb:33:b0:41:1d:b0:6d:b4:d3:6e:5e:b3:24:f0:24:
b5:10:b9:4f:5c:ec:21:fe:f9:02:7b:81:7c:ac:1e:
1e:70:38:82:a7:0c:59:30:ae:46:a9:db:83:9d:f3:
7b:e9:f7:5a:29:db:49:0c:b6:77:b5:f4:11:a4:02:
d4:7f:b9:ba:78:40:1e:0c:e9:a6:00:bc:91:c9:a1:
47:2e:05:67:96:5e:ee:ab:11:81:11:da:34:5f:3c:
82:6c:d0:7e:da:9a:06:b6:0d:03:c1:52:dd:74:f2:
db:1a:84:b6:66:e3:29:8e:6a:95:16:5a:18:f4:5d:
a2:7a:30:17:47:3f:04:76:ad:a8:3f:eb:a0:c6:3b:
79:8c:10:4e:61:67:ca:bc:c0:0e:48:5f:7f:77:ff:
9c:90:d9:13:b6:1b:3a:f4:cd:f8:40:4f:64:54:71:
99:56:ab:ae:af:1b:2d:0b:f7:06:65:d6:0f:a8:d1:
c3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:98:D9:14:E3:84:1F:C3:C0:D9:81:72:0D:97:C6:1D:50:C4:E8:D5
X509v3 Authority Key Identifier:
keyid:E1:21:47:70:4B:6C:66:4D:CF:22:34:92:EE:61:D5:E5:F9:17:C5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SFHcEtsZk3PIjSS7mHV5fkXxek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9b9703-3929-4a4e-93b7-a1bf42c58494/1/4SFHcEtsZk3PIjSS7mHV5fkXxek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9b9703-3929-4a4e-93b7-a1bf42c58494/1/4SFHcEtsZk3PIjSS7mHV5fkXxek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:65:27:4b:4c:25:61:48:d7:ee:eb:fd:5c:e6:87:90:1b:0f:
85:a5:85:7f:ff:92:79:60:6d:fd:a1:83:5c:75:fe:6e:ab:53:
fd:f7:54:84:18:e2:4e:e3:11:08:33:32:53:a4:1d:67:a8:b6:
a9:7b:f5:b0:ce:61:24:6e:86:93:2c:a5:9d:a4:b8:fd:cd:6a:
17:bc:96:5a:43:9a:a2:08:c3:50:69:08:73:19:bd:ef:6e:b3:
0e:12:ba:00:7d:88:41:cd:5c:3a:d7:10:2d:04:50:46:27:78:
53:20:34:84:36:aa:a5:c1:03:7f:d7:26:50:af:33:06:2b:ed:
34:56:f2:66:87:a2:f6:ac:57:00:56:f8:33:6a:ff:64:ea:31:
81:3b:37:90:2b:13:b7:4a:4a:c9:aa:81:87:dc:66:ed:d9:9f:
77:32:62:43:62:89:c4:cb:0d:79:66:85:99:49:02:05:99:8e:
73:3a:30:d5:cf:a4:24:84:ba:79:77:16:1a:48:49:cb:81:31:
c0:8f:f4:52:36:d6:5b:34:8e:69:6c:3e:51:3c:0f:c1:2f:f4:
40:b8:36:ed:c3:2d:f0:ff:70:2b:2b:9f:d6:8d:87:bd:6b:bd:
a9:a8:f4:2c:c8:b6:fd:29:34:61:14:1e:b1:5c:ff:82:d4:58:
7d:9b:e6:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhymMlq3YAwEQJ89vFDIteRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMjE0NzcwNGI2YzY2NGRjZjIyMzQ5MmVlNjFkNWU1Zjkx
N2M1ZTkwHhcNMjUwODA0MDEwMTEyWhcNMjUwODA1MDEwMTEyWjAzMTEwLwYDVQQD
Eyg1Nzk4ZDkxNGUzODQxZmMzYzBkOTgxNzIwZDk3YzYxZDUwYzRlOGQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNcJgI8S6w6BTyxEIw0EOypEan/6
6B/NobgUYORbjipz+UauCMyrsCekoKxMIcuQvht7MShjd1jD57FuGaq5IjWxCLv5
pZTquAK7M7BBHbBttNNuXrMk8CS1ELlPXOwh/vkCe4F8rB4ecDiCpwxZMK5GqduD
nfN76fdaKdtJDLZ3tfQRpALUf7m6eEAeDOmmALyRyaFHLgVnll7uqxGBEdo0XzyC
bNB+2poGtg0DwVLddPLbGoS2ZuMpjmqVFloY9F2iejAXRz8Edq2oP+ugxjt5jBBO
YWfKvMAOSF9/d/+ckNkTths69M34QE9kVHGZVquurxstC/cGZdYPqNHDmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFeY2RTjhB/DwNmBcg2Xxh1QxOjVMB8GA1UdIwQY
MBaAFOEhR3BLbGZNzyI0ku5h1eX5F8XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFNGSGNFdHNaazNQSWpTUzdtSFY1ZmtYeGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85Yjk3MDMtMzkyOS00YTRlLTkzYjct
YTFiZjQyYzU4NDk0LzEvNFNGSGNFdHNaazNQSWpTUzdtSFY1ZmtYeGVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy85Yjk3MDMtMzkyOS00YTRlLTkzYjctYTFiZjQyYzU4NDk0
LzEvNFNGSGNFdHNaazNQSWpTUzdtSFY1ZmtYeGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAImUnS0wl
YUjX7uv9XOaHkBsPhaWFf/+SeWBt/aGDXHX+bqtT/fdUhBjiTuMRCDMyU6QdZ6i2
qXv1sM5hJG6GkyylnaS4/c1qF7yWWkOaogjDUGkIcxm9726zDhK6AH2IQc1cOtcQ
LQRQRid4UyA0hDaqpcEDf9cmUK8zBivtNFbyZoei9qxXAFb4M2r/ZOoxgTs3kCsT
t0pKyaqBh9xm7dmfdzJiQ2KJxMsNeWaFmUkCBZmOczow1c+kJIS6eXcWGkhJy4Ex
wI/0UjbWWzSOaWw+UTwPwS/0QLg27cMt8P9wKyuf1o2HvWu9qaj0LMi2/Sk0YRQe
sVz/gtRYfZvmOw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:01 2025 by rpki-client