Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
File: 4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft (raw, json)
Hash identifier: 9J0dKV/2xrQNmxkGWswMoVCg2WcAcgG/N3zcEt7C1ak=
Subject key identifier: 33:F1:93:1A:3D:71:38:67:22:76:06:F9:C8:28:40:01:11:ED:28:C9
Authority key identifier: E2:BD:92:76:A6:F7:8D:AC:10:02:C3:78:3A:18:D4:5E:C1:4B:5D:43
Certificate issuer: /CN=e2bd9276a6f78dac1002c3783a18d45ec14b5d43
Certificate serial: 0197B70EFCDC33970CC7B21957B6FC158905
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
Manifest number: 11ED
Signing time: Sat 28 Jun 2025 15:01:42 +0000
Manifest this update: Sat 28 Jun 2025 15:01:42 +0000
Manifest next update: Sun 29 Jun 2025 15:01:42 +0000
Files and hashes: 1: 4r2Sdqb3jawQAsN4OhjUXsFLXUM.crl (hash: zRdLq++hfqXtrzl5ZRjlxR2P9IKaRLIDpY4lN8lDoqo=)
2: mOT0OYFh_GTToGk2uZIA05IaKkw.roa (hash: GG4lCtM4E3X4xtxRGjZF0g1O2sssvUKDA/6mYRaIOI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:fc:dc:33:97:0c:c7:b2:19:57:b6:fc:15:89:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2bd9276a6f78dac1002c3783a18d45ec14b5d43
Validity
Not Before: Jun 28 15:01:42 2025 GMT
Not After : Jun 29 15:01:42 2025 GMT
Subject: CN=33f1931a3d713867227606f9c828400111ed28c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ba:08:70:fe:bc:db:3d:eb:93:58:60:9a:41:
1d:fc:c1:04:81:d5:c5:5b:2b:6b:2f:54:95:8c:6c:
19:ce:bb:ff:e9:40:35:01:2e:9c:54:37:88:d9:a2:
ad:f3:b6:48:88:49:b8:e1:c3:42:2c:c6:77:e4:61:
70:b7:d0:1c:36:7c:8e:2f:77:95:cc:cf:22:c9:8d:
1d:89:4a:fe:ef:be:fd:e3:1a:0c:39:26:5f:82:d5:
2c:44:8a:a4:c7:af:9c:c3:e9:f8:1a:6e:3b:2e:cc:
4f:e6:68:40:80:45:f2:ff:6f:fb:c1:18:7a:5d:9c:
31:58:fa:09:33:af:62:e1:f3:1d:ab:05:20:9a:a4:
01:ea:53:1b:9b:80:8e:b3:fb:a2:b5:31:2f:2c:25:
06:f1:08:cf:5a:96:4d:14:fd:37:89:20:40:60:ea:
d4:b0:29:5f:87:3a:85:87:49:ef:f6:4f:b9:d6:0c:
c5:8d:eb:13:ac:a7:db:b1:20:aa:59:3a:c4:40:f9:
ba:59:44:5f:24:d3:bc:91:99:90:78:34:6b:61:60:
b4:ff:d2:33:7f:48:0a:86:a6:04:85:ac:b8:f0:34:
0a:02:14:83:73:f3:09:a6:c4:01:55:89:a2:4d:65:
c7:42:6b:ee:fa:f8:bd:9e:b6:03:89:77:a0:0f:c0:
f1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F1:93:1A:3D:71:38:67:22:76:06:F9:C8:28:40:01:11:ED:28:C9
X509v3 Authority Key Identifier:
keyid:E2:BD:92:76:A6:F7:8D:AC:10:02:C3:78:3A:18:D4:5E:C1:4B:5D:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:eb:9c:12:23:c0:e5:9d:b6:8c:5b:dc:8d:2b:76:94:7d:74:
19:c8:0d:1c:1e:6b:ae:d8:56:88:d5:08:44:70:da:b5:a5:a2:
b4:8c:db:68:7b:79:1c:13:ca:f2:6f:a2:e4:3d:5f:84:6c:71:
f2:f1:9e:78:d1:82:e0:92:b7:1a:b8:8a:ee:d0:59:3d:2d:96:
42:67:d5:c1:4b:ce:a1:34:cd:3b:28:ab:4e:d8:ef:2e:eb:ed:
fa:f7:9b:a1:34:8e:e5:53:7c:f9:25:c7:aa:01:2e:00:f0:25:
3d:bd:57:22:8e:e0:94:83:4a:97:0f:d2:8c:14:23:e6:3f:86:
fd:8f:38:e9:ea:7d:46:0d:85:99:f9:87:3f:68:ea:33:4b:93:
6c:36:da:88:d2:e3:a5:c2:4a:a1:b5:a2:2d:a1:30:48:30:ac:
7f:4f:fb:e8:a6:98:ad:3d:38:86:44:7a:43:b3:50:8b:41:77:
d4:c5:6d:b0:47:54:ce:de:c3:36:eb:39:19:bd:57:35:ea:29:
ca:84:6c:d1:d6:fb:e6:5f:00:18:8b:53:8a:47:64:7c:dd:39:
25:71:bf:30:cc:1b:62:6b:e7:7a:b1:bc:b6:6b:ed:5d:93:63:
a4:80:2f:a5:89:06:cc:c9:fd:9f:25:0e:05:d4:8c:12:89:92:
96:01:8d:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DvzcM5cMx7IZV7b8FYkFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYmQ5Mjc2YTZmNzhkYWMxMDAyYzM3ODNhMThkNDVlYzE0
YjVkNDMwHhcNMjUwNjI4MTUwMTQyWhcNMjUwNjI5MTUwMTQyWjAzMTEwLwYDVQQD
EygzM2YxOTMxYTNkNzEzODY3MjI3NjA2ZjljODI4NDAwMTExZWQyOGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsboIcP682z3rk1hgmkEd/MEEgdXF
WytrL1SVjGwZzrv/6UA1AS6cVDeI2aKt87ZIiEm44cNCLMZ35GFwt9AcNnyOL3eV
zM8iyY0diUr+77794xoMOSZfgtUsRIqkx6+cw+n4Gm47LsxP5mhAgEXy/2/7wRh6
XZwxWPoJM69i4fMdqwUgmqQB6lMbm4COs/uitTEvLCUG8QjPWpZNFP03iSBAYOrU
sClfhzqFh0nv9k+51gzFjesTrKfbsSCqWTrEQPm6WURfJNO8kZmQeDRrYWC0/9Iz
f0gKhqYEhay48DQKAhSDc/MJpsQBVYmiTWXHQmvu+vi9nrYDiXegD8DxwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDPxkxo9cThnInYG+cgoQAER7SjJMB8GA1UdIwQY
MBaAFOK9knam942sEALDeDoY1F7BS11DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHIyU2RxYjNqYXdRQXNONE9oalVYc0ZMWFVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9hNTg4MWEtOThlOC00ZTQ1LWJjYjgt
NzFlZWNmODk4ZDQyLzEvNHIyU2RxYjNqYXdRQXNONE9oalVYc0ZMWFVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9hNTg4MWEtOThlOC00ZTQ1LWJjYjgtNzFlZWNmODk4ZDQy
LzEvNHIyU2RxYjNqYXdRQXNONE9oalVYc0ZMWFVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcOucEiPA
5Z22jFvcjSt2lH10GcgNHB5rrthWiNUIRHDataWitIzbaHt5HBPK8m+i5D1fhGxx
8vGeeNGC4JK3GriK7tBZPS2WQmfVwUvOoTTNOyirTtjvLuvt+veboTSO5VN8+SXH
qgEuAPAlPb1XIo7glINKlw/SjBQj5j+G/Y846ep9Rg2FmfmHP2jqM0uTbDbaiNLj
pcJKobWiLaEwSDCsf0/76KaYrT04hkR6Q7NQi0F31MVtsEdUzt7DNus5Gb1XNeop
yoRs0db75l8AGItTikdkfN05JXG/MMwbYmvnerG8tmvtXZNjpIAvpYkGzMn9nyUO
BdSMEomSlgGNOg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:48:17 2025 by rpki-client