Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft
File: 4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft (raw, json)
Hash identifier: uduhzORkDQYHROf4YkDB3cj0nbr9PdUIYXoqspqBXRo=
Subject key identifier: 40:FC:61:F0:48:38:32:A0:26:B1:AF:EF:C1:52:81:D2:80:D2:E4:CF
Authority key identifier: E2:7E:1D:D0:74:66:27:80:36:BA:5C:D9:43:D7:B0:E0:21:CF:86:28
Certificate issuer: /CN=e27e1dd07466278036ba5cd943d7b0e021cf8628
Certificate serial: 01976E50780EABDFACF28B3BE7F4FD11B850
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft
Manifest number: 04E7
Signing time: Sat 14 Jun 2025 12:00:56 +0000
Manifest this update: Sat 14 Jun 2025 12:00:56 +0000
Manifest next update: Sun 15 Jun 2025 12:00:56 +0000
Files and hashes: 1: 4n4d0HRmJ4A2ulzZQ9ew4CHPhig.crl (hash: SO3GnoARrIvKZ8Ufet+fl2XnGKgTodzt4JOiFb1S7+w=)
2: u706ESzCaab-BH-FndS7iMc1Dos.roa (hash: SWvew+/mCjLa2ti6o+xXEQuSDQFlw4Q8eQ8sw7EInq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft
rsync://rpki.ripe.net/repository/DEFAULT/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:50:78:0e:ab:df:ac:f2:8b:3b:e7:f4:fd:11:b8:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e27e1dd07466278036ba5cd943d7b0e021cf8628
Validity
Not Before: Jun 14 12:00:56 2025 GMT
Not After : Jun 15 12:00:56 2025 GMT
Subject: CN=40fc61f0483832a026b1afefc15281d280d2e4cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2e:67:f6:11:3f:1e:86:74:a0:90:80:c1:ef:
75:23:1c:6d:d1:ff:3d:1d:f8:3c:a8:c6:63:d9:c8:
53:50:66:cf:65:af:cd:3e:a4:fe:31:dd:09:14:ee:
46:9d:15:92:d7:05:54:43:1b:de:9a:ae:13:cf:0c:
3c:e3:95:06:e8:5a:55:96:ab:c7:89:99:72:af:57:
14:3f:a4:0f:5e:f0:cd:35:5e:e1:a4:d6:19:cd:87:
0b:55:6e:25:d3:6a:37:fc:27:98:5b:48:82:13:fd:
e2:95:62:d3:01:8f:4f:54:9e:f7:92:3a:83:46:6d:
10:94:69:58:b0:07:48:b0:ed:ed:7f:11:e8:1a:09:
ab:17:28:f7:3f:29:62:e4:e1:c3:71:0a:90:4e:37:
cd:67:60:27:b7:51:d0:90:2b:00:3f:2d:97:6f:96:
08:04:59:e7:a8:e3:97:22:6a:b2:dd:8c:80:8c:7b:
64:97:87:93:28:8e:e9:f7:e0:75:2b:49:99:64:3c:
37:6e:0d:a5:53:db:23:a8:e9:d3:76:41:55:32:e2:
3c:e4:dc:18:d0:f4:4b:09:09:fd:60:c7:63:b8:5f:
16:a9:8b:d2:55:6a:b5:db:6e:1a:1e:6c:9a:df:e1:
f4:f9:ab:34:ca:12:3d:4d:eb:b0:f6:51:2e:f9:6f:
8e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:FC:61:F0:48:38:32:A0:26:B1:AF:EF:C1:52:81:D2:80:D2:E4:CF
X509v3 Authority Key Identifier:
keyid:E2:7E:1D:D0:74:66:27:80:36:BA:5C:D9:43:D7:B0:E0:21:CF:86:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:00:36:5a:04:d7:18:1d:46:27:ff:ad:33:2f:8f:8b:24:05:
a1:02:63:fc:5a:4a:4a:c5:dc:f9:7c:1f:6a:6b:07:ff:f5:95:
95:69:69:71:56:20:ba:d8:19:6c:1d:02:6c:93:cb:28:99:c2:
dd:df:f0:8d:cb:d6:d1:e0:f4:af:3d:5d:8a:2a:36:47:81:d9:
b5:d0:f6:98:54:ed:85:fa:af:74:6b:63:4e:31:47:53:e2:44:
22:8d:61:ee:2a:2e:e1:2b:a2:2d:27:e6:f8:df:7f:09:e4:cf:
79:47:58:2a:e5:c3:5b:bf:72:db:b1:13:40:66:21:86:b7:e4:
bc:7d:5f:a3:44:07:8c:ce:9b:e7:bd:12:9a:2e:f4:c7:56:79:
29:95:42:b5:e2:ef:05:89:e9:20:e4:f5:94:07:4d:c8:51:66:
2c:a2:06:50:d1:bb:8b:5b:d5:f3:ba:d6:59:f8:b5:87:34:bf:
9c:63:e3:4c:ec:38:e3:c9:97:f5:c6:c8:3d:e7:f3:4c:9b:cc:
3a:71:40:d8:7d:74:b8:bc:0d:a1:4e:fa:68:af:e9:7e:88:82:
c0:fc:ab:01:a9:0a:8b:19:a5:ff:a8:bc:f7:a5:cc:ea:60:44:
af:00:b6:6e:aa:f1:7f:af:b6:aa:70:da:1c:e8:f0:d0:c4:0b:
33:e8:91:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZduUHgOq9+s8os75/T9EbhQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyN2UxZGQwNzQ2NjI3ODAzNmJhNWNkOTQzZDdiMGUwMjFj
Zjg2MjgwHhcNMjUwNjE0MTIwMDU2WhcNMjUwNjE1MTIwMDU2WjAzMTEwLwYDVQQD
Eyg0MGZjNjFmMDQ4MzgzMmEwMjZiMWFmZWZjMTUyODFkMjgwZDJlNGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjC5n9hE/HoZ0oJCAwe91Ixxt0f89
Hfg8qMZj2chTUGbPZa/NPqT+Md0JFO5GnRWS1wVUQxvemq4Tzww845UG6FpVlqvH
iZlyr1cUP6QPXvDNNV7hpNYZzYcLVW4l02o3/CeYW0iCE/3ilWLTAY9PVJ73kjqD
Rm0QlGlYsAdIsO3tfxHoGgmrFyj3Pyli5OHDcQqQTjfNZ2Ant1HQkCsAPy2Xb5YI
BFnnqOOXImqy3YyAjHtkl4eTKI7p9+B1K0mZZDw3bg2lU9sjqOnTdkFVMuI85NwY
0PRLCQn9YMdjuF8WqYvSVWq1224aHmya3+H0+as0yhI9Teuw9lEu+W+O3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFED8YfBIODKgJrGv78FSgdKA0uTPMB8GA1UdIwQY
MBaAFOJ+HdB0ZieANrpc2UPXsOAhz4YoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNG40ZDBIUm1KNEEydWx6WlE5ZXc0Q0hQaGlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9hZTBkOGItNDg1Ny00YmE3LWIzNDIt
NWVjMzM2YmY3NDNiLzEvNG40ZDBIUm1KNEEydWx6WlE5ZXc0Q0hQaGlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9hZTBkOGItNDg1Ny00YmE3LWIzNDItNWVjMzM2YmY3NDNi
LzEvNG40ZDBIUm1KNEEydWx6WlE5ZXc0Q0hQaGlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUgA2WgTX
GB1GJ/+tMy+PiyQFoQJj/FpKSsXc+XwfamsH//WVlWlpcVYgutgZbB0CbJPLKJnC
3d/wjcvW0eD0rz1diio2R4HZtdD2mFTthfqvdGtjTjFHU+JEIo1h7iou4SuiLSfm
+N9/CeTPeUdYKuXDW79y27ETQGYhhrfkvH1fo0QHjM6b570Smi70x1Z5KZVCteLv
BYnpIOT1lAdNyFFmLKIGUNG7i1vV87rWWfi1hzS/nGPjTOw448mX9cbIPefzTJvM
OnFA2H10uLwNoU76aK/pfoiCwPyrAakKixml/6i896XM6mBErwC2bqrxf6+2qnDa
HOjw0MQLM+iRvA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 19:51:39 2025 by rpki-client