Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft
File: 4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft (raw, json)
Hash identifier: zZHChSWPSd/7x5CLLNWdcl+zMhkd6v5QZHXZ99Zf2TI=
Subject key identifier: A9:FC:D4:FB:F0:B0:5B:52:14:54:80:B3:14:BA:FF:E0:BE:9F:78:21
Authority key identifier: E1:08:7E:2F:0D:F2:96:FE:11:E7:6E:E4:C1:01:7B:CF:12:05:B2:F0
Certificate issuer: /CN=e1087e2f0df296fe11e76ee4c1017bcf1205b2f0
Certificate serial: 019777C0E977A4AC1D7720FAB3F145BD2C2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Qh-Lw3ylv4R527kwQF7zxIFsvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft
Manifest number: 11B8
Signing time: Mon 16 Jun 2025 08:00:20 +0000
Manifest this update: Mon 16 Jun 2025 08:00:20 +0000
Manifest next update: Tue 17 Jun 2025 08:00:20 +0000
Files and hashes: 1: 4Qh-Lw3ylv4R527kwQF7zxIFsvA.crl (hash: g90+1HOmlhOReEGWH1limbwMSltiOun5JvOEtarBOCU=)
2: sG880b_RPrGdA8qdnVRGDqdPZs8.roa (hash: FkxQnvLlTo8fZxDMmVUsA4H8Po5+5uIaGq9jK/9F1N0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Qh-Lw3ylv4R527kwQF7zxIFsvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:c0:e9:77:a4:ac:1d:77:20:fa:b3:f1:45:bd:2c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1087e2f0df296fe11e76ee4c1017bcf1205b2f0
Validity
Not Before: Jun 16 08:00:20 2025 GMT
Not After : Jun 17 08:00:20 2025 GMT
Subject: CN=a9fcd4fbf0b05b52145480b314baffe0be9f7821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:24:c3:7c:63:82:d1:c9:d6:ad:a7:db:8c:96:
bf:82:9a:cd:8a:5a:16:1c:3a:d2:aa:40:90:c7:29:
1f:1d:8e:db:bd:bd:94:22:6e:3d:f2:58:0c:18:db:
b3:e6:42:00:b1:87:39:56:53:7d:16:58:ac:2e:7e:
78:e9:dc:dd:bd:a4:b6:1f:18:61:d6:ff:6d:43:62:
d2:a7:14:65:7a:23:9c:c4:ff:3b:61:eb:58:5c:7f:
ac:33:e4:2e:c0:6b:5a:c6:1c:f0:13:d2:6f:64:bb:
bc:f7:f2:c7:69:23:bf:a0:9a:ee:26:0c:17:3b:0a:
87:5c:b2:84:0f:ea:1d:23:1d:fb:4d:dd:32:6c:55:
b5:89:20:7b:18:72:18:ad:1f:ec:34:dd:62:e1:86:
2c:e3:a4:85:97:a8:35:d4:2c:95:1f:fd:bd:2f:5a:
64:42:4f:3d:78:97:4d:dd:b7:df:ad:b1:2a:4b:e5:
be:0b:9b:40:bc:13:cc:ae:f7:7a:c9:40:93:c0:97:
0e:25:b7:84:0c:4a:14:55:2d:96:22:13:d1:f0:fb:
c3:fb:d2:dc:94:8e:ff:b0:68:6d:78:33:a6:50:08:
bb:fa:33:eb:2a:27:7d:64:1b:3e:33:b3:94:f0:78:
e5:d9:ab:6d:85:d5:30:d3:de:86:4c:87:fc:3f:22:
64:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:FC:D4:FB:F0:B0:5B:52:14:54:80:B3:14:BA:FF:E0:BE:9F:78:21
X509v3 Authority Key Identifier:
keyid:E1:08:7E:2F:0D:F2:96:FE:11:E7:6E:E4:C1:01:7B:CF:12:05:B2:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Qh-Lw3ylv4R527kwQF7zxIFsvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:dc:07:f1:c0:62:93:a0:11:04:8e:b7:fb:8c:8a:d9:2a:d2:
a7:93:0d:87:89:ae:99:df:05:11:2a:74:f0:ce:23:51:2c:6a:
c6:53:eb:31:3f:e7:96:12:66:da:c9:1d:08:57:b1:a9:0c:18:
b3:ac:85:ef:be:f8:90:86:ea:d6:c1:ab:49:60:d4:7e:bd:df:
cc:06:68:39:79:f9:7c:90:ef:fa:13:29:39:a6:82:9c:15:09:
46:53:46:f1:7c:08:bd:ca:a6:ee:32:df:a9:5b:b7:50:46:05:
c3:d8:62:4b:f6:28:61:04:ac:29:c5:dd:8b:d1:e6:c4:0d:8e:
07:11:fc:cd:a6:e3:7d:cc:42:78:e9:9b:89:91:ac:24:f1:40:
9f:a9:0b:3b:15:67:83:bb:cf:5e:9d:49:c1:e4:f6:06:68:c5:
c5:73:46:ed:51:86:df:c9:02:95:20:6e:17:8d:82:18:4b:4b:
64:f9:76:cd:e1:0b:14:17:9f:f6:a0:87:75:64:a7:97:06:2b:
6d:a1:56:c9:df:65:e9:88:15:00:a0:ae:38:df:6a:a0:94:4c:
b5:c7:ef:7c:0b:84:1a:88:eb:48:e5:f8:74:4b:7c:75:d1:da:
b3:fc:a2:ac:da:e0:a7:29:cd:1d:ff:cf:29:64:8a:e7:da:61:
a8:2d:48:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd3wOl3pKwddyD6s/FFvSwuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMDg3ZTJmMGRmMjk2ZmUxMWU3NmVlNGMxMDE3YmNmMTIw
NWIyZjAwHhcNMjUwNjE2MDgwMDIwWhcNMjUwNjE3MDgwMDIwWjAzMTEwLwYDVQQD
EyhhOWZjZDRmYmYwYjA1YjUyMTQ1NDgwYjMxNGJhZmZlMGJlOWY3ODIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiTDfGOC0cnWrafbjJa/gprNiloW
HDrSqkCQxykfHY7bvb2UIm498lgMGNuz5kIAsYc5VlN9FlisLn546dzdvaS2Hxhh
1v9tQ2LSpxRleiOcxP87YetYXH+sM+QuwGtaxhzwE9JvZLu89/LHaSO/oJruJgwX
OwqHXLKED+odIx37Td0ybFW1iSB7GHIYrR/sNN1i4YYs46SFl6g11CyVH/29L1pk
Qk89eJdN3bffrbEqS+W+C5tAvBPMrvd6yUCTwJcOJbeEDEoUVS2WIhPR8PvD+9Lc
lI7/sGhteDOmUAi7+jPrKid9ZBs+M7OU8Hjl2atthdUw096GTIf8PyJkDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKn81PvwsFtSFFSAsxS6/+C+n3ghMB8GA1UdIwQY
MBaAFOEIfi8N8pb+Eedu5MEBe88SBbLwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFFoLUx3M3lsdjRSNTI3a3dRRjd6eElGc3ZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy84ZmMzOTctYWI4My00ZmVjLWI2YzQt
YTUwYTg4MGFhN2ZjLzEvNFFoLUx3M3lsdjRSNTI3a3dRRjd6eElGc3ZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy84ZmMzOTctYWI4My00ZmVjLWI2YzQtYTUwYTg4MGFhN2Zj
LzEvNFFoLUx3M3lsdjRSNTI3a3dRRjd6eElGc3ZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARtwH8cBi
k6ARBI63+4yK2SrSp5MNh4mumd8FESp08M4jUSxqxlPrMT/nlhJm2skdCFexqQwY
s6yF7774kIbq1sGrSWDUfr3fzAZoOXn5fJDv+hMpOaaCnBUJRlNG8XwIvcqm7jLf
qVu3UEYFw9hiS/YoYQSsKcXdi9HmxA2OBxH8zabjfcxCeOmbiZGsJPFAn6kLOxVn
g7vPXp1JweT2BmjFxXNG7VGG38kClSBuF42CGEtLZPl2zeELFBef9qCHdWSnlwYr
baFWyd9l6YgVAKCuON9qoJRMtcfvfAuEGojrSOX4dEt8ddHas/yirNrgpynNHf/P
KWSK59phqC1IWQ==
-----END CERTIFICATE-----
Generated at Mon Jun 16 11:53:46 2025 by rpki-client