Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
File: 4fR8EaOjyuBqGShgqWxQU-wEtdw.mft (raw, json)
Hash identifier: Mr4YQLmPsdGRONg/lRlhRIqOLdQdx3Z2dgC4Q76rkCU=
Subject key identifier: 3F:60:58:68:AB:3F:BA:F4:D1:61:CB:28:F0:8A:84:B3:9B:D4:31:7E
Authority key identifier: E1:F4:7C:11:A3:A3:CA:E0:6A:19:28:60:A9:6C:50:53:EC:04:B5:DC
Certificate issuer: /CN=e1f47c11a3a3cae06a192860a96c5053ec04b5dc
Certificate serial: 0197D13C0CA95B90C4902C62143CBA03C010
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
Manifest number: 12D3
Signing time: Thu 03 Jul 2025 17:01:02 +0000
Manifest this update: Thu 03 Jul 2025 17:01:02 +0000
Manifest next update: Fri 04 Jul 2025 17:01:02 +0000
Files and hashes: 1: 1-HjAvExmkGaxksSqn85_Dy6VvJM.roa (hash: 8D5kTAs24JEFoR1NyKeFUo+R/Y6CsZUzK26/NpwtHaw=)
2: 4fR8EaOjyuBqGShgqWxQU-wEtdw.crl (hash: WyYKXbSXjKlNdSnZA7s6Tw6WP1PTVX0G70OC4U55rKA=)
3: UBam_LF0XAef-2xohQdZlRl7HBg.roa (hash: 7WO0S2f70pIralvylysZjQGv/GwrHdv9TmJ840KoDXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d1:3c:0c:a9:5b:90:c4:90:2c:62:14:3c:ba:03:c0:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f47c11a3a3cae06a192860a96c5053ec04b5dc
Validity
Not Before: Jul 3 17:01:02 2025 GMT
Not After : Jul 4 17:01:02 2025 GMT
Subject: CN=3f605868ab3fbaf4d161cb28f08a84b39bd4317e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:61:df:f6:8d:04:0d:fd:54:0c:da:a6:8b:fa:
0a:3c:e6:0e:af:94:6b:a5:7a:8b:5b:89:cc:46:68:
5d:ff:cd:72:5e:07:c0:da:d6:b1:1e:87:ab:fb:50:
f6:df:5d:f8:23:65:c8:a4:76:5f:37:16:2b:82:dd:
16:66:09:87:7a:23:c9:0f:7e:6a:f3:a2:b4:a2:51:
04:35:ac:56:56:ea:b0:63:62:a3:47:91:43:9a:1c:
17:a9:73:a2:b2:c5:de:2b:e6:9a:c7:56:bd:dd:be:
7e:5e:04:8d:f7:23:9a:ea:c5:5f:34:7c:fd:fe:ed:
7c:3f:34:70:86:40:bb:17:35:50:56:0b:9d:ec:84:
ce:fa:76:d8:62:ec:13:e0:43:66:3a:bc:60:ca:22:
06:cb:bb:8c:56:a8:82:ed:79:c2:c8:e3:40:99:01:
da:78:e2:5a:17:6a:c2:f4:1f:75:86:0a:4e:05:de:
9e:46:94:53:4f:d8:58:68:39:50:01:85:16:7a:a0:
61:5f:c6:b6:64:bb:a7:8d:fe:8f:a2:34:df:b5:82:
e1:c2:01:ee:f9:33:82:c4:f8:0d:59:ee:62:aa:03:
e7:c5:5d:8e:58:12:a9:e8:43:e8:5b:d8:1a:e6:28:
52:90:d8:ea:e7:26:03:b7:a6:99:b7:68:57:71:de:
66:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:60:58:68:AB:3F:BA:F4:D1:61:CB:28:F0:8A:84:B3:9B:D4:31:7E
X509v3 Authority Key Identifier:
keyid:E1:F4:7C:11:A3:A3:CA:E0:6A:19:28:60:A9:6C:50:53:EC:04:B5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:2a:fb:d4:8d:b0:bf:4d:ac:6a:57:81:24:c3:cf:09:e9:55:
e6:b0:64:ed:34:61:13:1a:d3:0d:fd:9a:3d:08:01:54:29:cc:
22:b7:2f:6e:68:a0:5d:f6:db:40:b9:5d:64:3a:5e:dc:66:fa:
23:a2:07:41:fe:7a:79:51:57:8e:be:13:19:c0:a1:48:9e:eb:
42:f5:03:34:c3:4c:40:45:53:86:f9:7a:09:0e:80:f5:f0:6a:
2c:51:bd:33:50:10:c5:4d:dd:15:eb:c5:2e:e9:8e:42:a0:11:
bd:95:7e:2b:7c:66:b0:76:7b:23:0f:89:a0:bc:49:ab:07:6e:
72:6a:44:12:8c:dc:a5:17:19:8e:a0:11:10:2f:c5:db:d0:50:
52:3a:2e:ac:84:d5:91:99:f7:3f:1e:f4:6d:21:c6:a6:7b:b5:
cb:ce:0e:73:40:40:bb:f6:8f:b7:f0:ed:f2:d4:1f:09:ec:83:
90:11:24:cd:d0:2b:08:63:71:53:68:79:3b:31:20:c0:e3:7d:
8d:83:ed:ba:17:95:64:25:eb:16:8e:a6:bf:46:39:6a:8a:eb:
0c:4f:69:75:1c:54:13:b3:d3:3f:e0:23:24:9d:ff:ac:c3:19:
55:c0:ea:e5:eb:63:69:98:ca:13:3b:a7:87:92:7e:57:55:e3:
70:54:f7:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfRPAypW5DEkCxiFDy6A8AQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxZjQ3YzExYTNhM2NhZTA2YTE5Mjg2MGE5NmM1MDUzZWMw
NGI1ZGMwHhcNMjUwNzAzMTcwMTAyWhcNMjUwNzA0MTcwMTAyWjAzMTEwLwYDVQQD
EygzZjYwNTg2OGFiM2ZiYWY0ZDE2MWNiMjhmMDhhODRiMzliZDQzMTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2Hf9o0EDf1UDNqmi/oKPOYOr5Rr
pXqLW4nMRmhd/81yXgfA2taxHoer+1D23134I2XIpHZfNxYrgt0WZgmHeiPJD35q
86K0olEENaxWVuqwY2KjR5FDmhwXqXOissXeK+aax1a93b5+XgSN9yOa6sVfNHz9
/u18PzRwhkC7FzVQVgud7ITO+nbYYuwT4ENmOrxgyiIGy7uMVqiC7XnCyONAmQHa
eOJaF2rC9B91hgpOBd6eRpRTT9hYaDlQAYUWeqBhX8a2ZLunjf6PojTftYLhwgHu
+TOCxPgNWe5iqgPnxV2OWBKp6EPoW9ga5ihSkNjq5yYDt6aZt2hXcd5mQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD9gWGirP7r00WHLKPCKhLOb1DF+MB8GA1UdIwQY
MBaAFOH0fBGjo8rgahkoYKlsUFPsBLXcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGZSOEVhT2p5dUJxR1NoZ3FXeFFVLXdFdGR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC85MDgwNzAtZmQ5NC00YTc1LTk4NzIt
MzFjNzMzMTk3MDczLzEvNGZSOEVhT2p5dUJxR1NoZ3FXeFFVLXdFdGR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC85MDgwNzAtZmQ5NC00YTc1LTk4NzItMzFjNzMzMTk3MDcz
LzEvNGZSOEVhT2p5dUJxR1NoZ3FXeFFVLXdFdGR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyyr71I2w
v02saleBJMPPCelV5rBk7TRhExrTDf2aPQgBVCnMIrcvbmigXfbbQLldZDpe3Gb6
I6IHQf56eVFXjr4TGcChSJ7rQvUDNMNMQEVThvl6CQ6A9fBqLFG9M1AQxU3dFevF
LumOQqARvZV+K3xmsHZ7Iw+JoLxJqwducmpEEozcpRcZjqAREC/F29BQUjourITV
kZn3Px70bSHGpnu1y84Oc0BAu/aPt/Dt8tQfCeyDkBEkzdArCGNxU2h5OzEgwON9
jYPtuheVZCXrFo6mv0Y5aorrDE9pdRxUE7PTP+AjJJ3/rMMZVcDq5etjaZjKEzun
h5J+V1XjcFT3Mg==
-----END CERTIFICATE-----
Generated at Thu Jul 3 21:33:39 2025 by rpki-client