Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft
File: M4QkGt5fJhrI7OhD5efbfuEI4zw.mft (raw, json)
Hash identifier: m6hoKyhkoxxTni+q/Gzj3hwj9ODRX8P/i0BXAeWAlJw=
Subject key identifier: C7:1B:B6:14:25:FF:30:5F:09:B8:9D:CD:3A:9B:85:02:EB:BB:9F:7F
Authority key identifier: 33:84:24:1A:DE:5F:26:1A:C8:EC:E8:43:E5:E7:DB:7E:E1:08:E3:3C
Certificate issuer: /CN=3384241ade5f261ac8ece843e5e7db7ee108e33c
Certificate serial: 0198737486EC9529B5FD2407882E27CA1313
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M4QkGt5fJhrI7OhD5efbfuEI4zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft
Manifest number: 0EB4
Signing time: Mon 04 Aug 2025 05:01:13 +0000
Manifest this update: Mon 04 Aug 2025 05:01:13 +0000
Manifest next update: Tue 05 Aug 2025 05:01:13 +0000
Files and hashes: 1: 1-f1gUau53_sy3TW5P4gG3FwDhSk.roa (hash: pHF5PYgAc9CB+XpxL2l9y3N2Zu2yiqeSaK0EFUgqKco=)
2: M4QkGt5fJhrI7OhD5efbfuEI4zw.crl (hash: viPkzdf+1IbzVmXYzXgj2HrTXacl4N4PfunlX4Ul36k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/M4QkGt5fJhrI7OhD5efbfuEI4zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:86:ec:95:29:b5:fd:24:07:88:2e:27:ca:13:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3384241ade5f261ac8ece843e5e7db7ee108e33c
Validity
Not Before: Aug 4 05:01:13 2025 GMT
Not After : Aug 5 05:01:13 2025 GMT
Subject: CN=c71bb61425ff305f09b89dcd3a9b8502ebbb9f7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0d:c8:f0:51:4c:95:59:a4:ac:63:46:3b:17:
bb:5b:6c:98:4e:0c:5b:00:6a:84:93:77:24:eb:86:
80:3a:a3:97:06:48:c2:d1:f2:cd:4c:82:dc:5f:ad:
5d:60:c0:d7:15:08:16:b6:73:b5:2a:ac:75:e1:5a:
30:a5:d6:3f:8c:20:3a:5f:8d:f5:7c:8e:61:ca:1e:
7c:cb:c5:2b:6a:15:d6:65:a6:d0:2d:9e:42:0f:17:
ca:1a:c0:d2:44:a4:4e:74:27:50:b4:75:93:63:24:
1c:0b:65:de:19:ba:bc:b3:9e:b1:c7:70:ce:61:4c:
4e:6c:44:da:76:4b:54:06:98:79:45:60:07:70:fe:
20:98:fd:98:4e:af:a6:ad:59:92:d8:2f:50:51:73:
fb:d5:e2:8e:4f:35:34:9a:39:fb:10:cb:aa:d4:9d:
0b:a8:35:ae:bf:29:40:b2:2f:05:b9:5d:d9:3d:58:
0c:f7:dd:ab:5d:dc:f7:24:34:a5:21:9a:f5:d0:c7:
9a:42:d0:22:c3:a4:c6:bc:34:2f:bf:59:29:64:65:
1d:1c:5d:a1:97:6f:9e:24:8a:2d:fa:24:10:92:b9:
e9:9b:96:c5:e1:18:d0:b3:fc:f8:fa:44:46:7e:50:
ae:1e:68:3a:d1:37:9b:ae:78:b7:c1:79:7e:65:4c:
b6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:1B:B6:14:25:FF:30:5F:09:B8:9D:CD:3A:9B:85:02:EB:BB:9F:7F
X509v3 Authority Key Identifier:
keyid:33:84:24:1A:DE:5F:26:1A:C8:EC:E8:43:E5:E7:DB:7E:E1:08:E3:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4QkGt5fJhrI7OhD5efbfuEI4zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:db:26:a5:3a:6b:76:13:4c:fc:1f:9e:98:e7:61:c8:dd:5c:
e6:14:4a:ab:70:56:ab:3c:e0:fe:13:c6:37:1f:32:02:2f:f0:
dd:ff:05:75:ba:df:ec:5c:66:05:2e:55:5a:9c:6b:15:d0:c6:
9e:34:95:3b:d6:1d:12:a4:2c:ee:0d:8b:cd:6c:42:f2:e9:42:
04:e7:bf:95:1e:ea:0f:3a:df:f5:4a:c2:90:4a:68:36:34:72:
94:18:b8:85:d1:c2:ca:31:45:b4:6d:94:62:af:6a:9e:2f:86:
4b:f6:cb:8b:74:d9:1e:24:fe:04:1d:dc:ed:eb:88:52:42:b2:
f1:3f:34:9c:34:41:7c:37:3d:65:7f:26:f2:b1:89:8f:d1:b5:
71:9f:63:86:ba:bd:b8:f7:74:c4:d5:8c:21:0d:a7:b8:3e:27:
e3:87:dd:e8:f2:18:b0:4f:75:97:14:81:af:27:21:e4:37:f1:
60:ad:41:8d:bd:af:a6:17:3b:93:d4:a4:cf:39:4c:d8:ee:c4:
89:f0:3d:9a:a7:84:06:6d:b3:2a:13:33:aa:1f:c5:73:1c:9d:
de:4d:69:7d:2b:50:f4:b6:47:d5:b7:fb:09:2d:42:8a:a8:bf:
01:6c:fc:ed:5d:35:fa:25:bd:ce:ad:d8:68:98:52:d8:f3:f8:
99:53:40:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzdIbslSm1/SQHiC4nyhMTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzODQyNDFhZGU1ZjI2MWFjOGVjZTg0M2U1ZTdkYjdlZTEw
OGUzM2MwHhcNMjUwODA0MDUwMTEzWhcNMjUwODA1MDUwMTEzWjAzMTEwLwYDVQQD
EyhjNzFiYjYxNDI1ZmYzMDVmMDliODlkY2QzYTliODUwMmViYmI5ZjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApw3I8FFMlVmkrGNGOxe7W2yYTgxb
AGqEk3ck64aAOqOXBkjC0fLNTILcX61dYMDXFQgWtnO1Kqx14VowpdY/jCA6X431
fI5hyh58y8UrahXWZabQLZ5CDxfKGsDSRKROdCdQtHWTYyQcC2XeGbq8s56xx3DO
YUxObETadktUBph5RWAHcP4gmP2YTq+mrVmS2C9QUXP71eKOTzU0mjn7EMuq1J0L
qDWuvylAsi8FuV3ZPVgM992rXdz3JDSlIZr10MeaQtAiw6TGvDQvv1kpZGUdHF2h
l2+eJIot+iQQkrnpm5bF4RjQs/z4+kRGflCuHmg60Tebrni3wXl+ZUy24wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMcbthQl/zBfCbidzTqbhQLru59/MB8GA1UdIwQY
MBaAFDOEJBreXyYayOzoQ+Xn237hCOM8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTRRa0d0NWZKaHJJN09oRDVlZmJmdUVJNHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8zYzU2ZTItZTRiOC00NWZjLTk1OWYt
YzdhYTE5ZWFiYmE3LzEvTTRRa0d0NWZKaHJJN09oRDVlZmJmdUVJNHp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8zYzU2ZTItZTRiOC00NWZjLTk1OWYtYzdhYTE5ZWFiYmE3
LzEvTTRRa0d0NWZKaHJJN09oRDVlZmJmdUVJNHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjtsmpTpr
dhNM/B+emOdhyN1c5hRKq3BWqzzg/hPGNx8yAi/w3f8Fdbrf7FxmBS5VWpxrFdDG
njSVO9YdEqQs7g2LzWxC8ulCBOe/lR7qDzrf9UrCkEpoNjRylBi4hdHCyjFFtG2U
Yq9qni+GS/bLi3TZHiT+BB3c7euIUkKy8T80nDRBfDc9ZX8m8rGJj9G1cZ9jhrq9
uPd0xNWMIQ2nuD4n44fd6PIYsE91lxSBrych5DfxYK1Bjb2vphc7k9SkzzlM2O7E
ifA9mqeEBm2zKhMzqh/Fcxyd3k1pfStQ9LZH1bf7CS1Ciqi/AWz87V01+iW9zq3Y
aJhS2PP4mVNAqA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:27 2025 by rpki-client