Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
File: R4x_xrIR4nH3SD9yHUXyON195cQ.mft (raw, json)
Hash identifier: 0d1JIV0ZnUVPqDC6KLKG7iCnW8uH5U3+/FJZiBfQ07U=
Subject key identifier: AD:B9:86:75:BE:CF:70:8E:41:9C:F6:FE:3F:75:75:60:A6:3D:62:C5
Authority key identifier: 47:8C:7F:C6:B2:11:E2:71:F7:48:3F:72:1D:45:F2:38:DD:7D:E5:C4
Certificate issuer: /CN=478c7fc6b211e271f7483f721d45f238dd7de5c4
Certificate serial: 0197730987E7BABF97E087C96669B5566DAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
Manifest number: 073D
Signing time: Sun 15 Jun 2025 10:01:33 +0000
Manifest this update: Sun 15 Jun 2025 10:01:33 +0000
Manifest next update: Mon 16 Jun 2025 10:01:33 +0000
Files and hashes: 1: R4x_xrIR4nH3SD9yHUXyON195cQ.crl (hash: PTZNuusQ0AMQWxOmaAslkVlKINgholvwn0kvG3qEKn4=)
2: bgKhGgsXnxYOt5etHFWwqDnUeNs.roa (hash: uM75kFMM5Lx2SB0GVKIXvYn71xMx4/TssgSDMD0euaE=)
3: eJaPcqVrFJ9nAn0ii5m8-wTNE2M.roa (hash: LKpNzbSMRXo8Ez4GuvTIIep3ThOtGE1xLAuyWwSMRJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:09:87:e7:ba:bf:97:e0:87:c9:66:69:b5:56:6d:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=478c7fc6b211e271f7483f721d45f238dd7de5c4
Validity
Not Before: Jun 15 10:01:33 2025 GMT
Not After : Jun 16 10:01:33 2025 GMT
Subject: CN=adb98675becf708e419cf6fe3f757560a63d62c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ed:35:58:a7:04:73:04:4b:40:7c:8c:de:07:
c0:c3:d2:31:9f:1a:a1:ea:8b:ed:c7:3a:85:48:c8:
d4:db:8d:72:bd:6e:53:d4:12:53:ea:d8:f8:6d:b3:
11:ce:1b:72:e0:99:71:cf:f8:13:3d:45:a1:c0:8d:
97:d2:67:9d:17:e0:02:25:ec:49:b7:63:cc:2c:ae:
71:55:cc:b3:29:18:db:a6:f5:e5:e3:f5:1e:71:b7:
5b:6f:c1:26:d9:10:f1:af:3a:c3:93:61:1d:01:a5:
91:c1:17:c6:c8:c1:ad:fa:08:fc:51:de:63:0c:57:
14:84:b3:98:87:f7:09:28:99:73:1c:e5:95:0a:36:
04:35:73:37:c6:6a:af:1a:fd:06:79:85:9b:d5:8e:
64:0a:ee:f6:fb:6d:96:90:14:df:ac:25:6d:d2:42:
cb:33:72:cb:ef:73:55:80:73:bd:0a:ca:85:82:15:
14:30:e6:b9:87:bd:7a:6f:14:e0:f5:66:cb:ab:e0:
a1:04:7e:35:43:68:6a:26:65:47:b7:de:f6:96:1d:
ea:ee:f2:46:3e:30:32:9b:0c:04:f2:8b:4e:b5:26:
8a:63:3d:2b:44:4b:91:b7:62:a2:2b:6a:94:0f:77:
ef:3d:60:5a:6f:7a:c9:99:de:12:df:01:27:46:bb:
ee:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B9:86:75:BE:CF:70:8E:41:9C:F6:FE:3F:75:75:60:A6:3D:62:C5
X509v3 Authority Key Identifier:
keyid:47:8C:7F:C6:B2:11:E2:71:F7:48:3F:72:1D:45:F2:38:DD:7D:E5:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:e4:ee:a5:c1:43:9d:3f:a0:3a:3d:47:0f:8c:aa:ee:79:3c:
12:de:b1:68:ed:e5:6d:cd:4a:61:c6:4b:e7:7e:b4:c4:d4:72:
0b:94:c1:74:62:ef:56:73:eb:e0:31:1a:2b:15:5c:e8:1b:0a:
4f:db:ee:03:69:d0:42:ef:39:76:87:78:2a:ec:8b:cc:a7:0d:
4e:21:af:a6:ba:1c:7a:a9:1a:87:aa:aa:9b:af:a9:48:82:78:
ea:93:c8:66:9b:85:a0:d6:ec:e1:56:d7:32:51:08:d4:dc:d6:
18:22:fb:1a:8c:0b:d2:34:b2:47:d9:05:43:f9:fe:a5:a9:d9:
65:80:4a:6e:cb:17:8d:9b:de:68:f8:cd:ec:ff:91:5f:52:ee:
f6:70:e8:95:ec:db:7f:c3:e6:b7:2c:2a:62:39:a0:7d:2a:77:
88:74:15:bf:ff:01:aa:e7:92:03:75:79:0d:ba:a5:df:9f:95:
da:78:fc:ee:b1:13:e5:0c:e4:d0:d8:36:f9:89:b5:2e:cc:5a:
c3:3b:ee:dd:f1:ee:54:62:1c:28:5b:ca:03:0c:3e:db:fe:17:
c1:c6:b1:f6:37:fd:a8:39:f9:71:bc:da:c5:99:cf:84:ad:66:
07:9d:de:77:06:74:e3:ba:2e:91:7b:92:a6:e1:c8:9e:e2:e0:
09:73:09:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdzCYfnur+X4IfJZmm1Vm2vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3OGM3ZmM2YjIxMWUyNzFmNzQ4M2Y3MjFkNDVmMjM4ZGQ3
ZGU1YzQwHhcNMjUwNjE1MTAwMTMzWhcNMjUwNjE2MTAwMTMzWjAzMTEwLwYDVQQD
EyhhZGI5ODY3NWJlY2Y3MDhlNDE5Y2Y2ZmUzZjc1NzU2MGE2M2Q2MmM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAie01WKcEcwRLQHyM3gfAw9Ixnxqh
6ovtxzqFSMjU241yvW5T1BJT6tj4bbMRzhty4Jlxz/gTPUWhwI2X0medF+ACJexJ
t2PMLK5xVcyzKRjbpvXl4/Uecbdbb8Em2RDxrzrDk2EdAaWRwRfGyMGt+gj8Ud5j
DFcUhLOYh/cJKJlzHOWVCjYENXM3xmqvGv0GeYWb1Y5kCu72+22WkBTfrCVt0kLL
M3LL73NVgHO9CsqFghUUMOa5h716bxTg9WbLq+ChBH41Q2hqJmVHt972lh3q7vJG
PjAymwwE8otOtSaKYz0rREuRt2KiK2qUD3fvPWBab3rJmd4S3wEnRrvukwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK25hnW+z3COQZz2/j91dWCmPWLFMB8GA1UdIwQY
MBaAFEeMf8ayEeJx90g/ch1F8jjdfeXEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjR4X3hySVI0bkgzU0Q5eUhVWHlPTjE5NWNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS82ZTJjYmYtNzA1Ni00NDE5LWI1MWMt
NjJiMWRhMjYxMzI5LzEvUjR4X3hySVI0bkgzU0Q5eUhVWHlPTjE5NWNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS82ZTJjYmYtNzA1Ni00NDE5LWI1MWMtNjJiMWRhMjYxMzI5
LzEvUjR4X3hySVI0bkgzU0Q5eUhVWHlPTjE5NWNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi+TupcFD
nT+gOj1HD4yq7nk8Et6xaO3lbc1KYcZL5360xNRyC5TBdGLvVnPr4DEaKxVc6BsK
T9vuA2nQQu85dod4KuyLzKcNTiGvproceqkah6qqm6+pSIJ46pPIZpuFoNbs4VbX
MlEI1NzWGCL7GowL0jSyR9kFQ/n+panZZYBKbssXjZveaPjN7P+RX1Lu9nDolezb
f8PmtywqYjmgfSp3iHQVv/8BqueSA3V5Dbql35+V2nj87rET5Qzk0Ng2+Ym1Lsxa
wzvu3fHuVGIcKFvKAww+2/4Xwcax9jf9qDn5cbzaxZnPhK1mB53edwZ047oukXuS
puHInuLgCXMJWg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:56:08 2025 by rpki-client