Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
File: 4f9iX0oY0E1ZCludc7JVGkNbcXI.mft (raw, json)
Hash identifier: 9AsM0dMkPlMpj6FuSLeVi45oCSpNYlo4nQfjqvWQUcw=
Subject key identifier: E5:8D:AD:F6:2A:9B:47:C8:7C:4E:F5:C9:1F:F9:F1:79:45:57:A5:4D
Authority key identifier: E1:FF:62:5F:4A:18:D0:4D:59:0A:5B:9D:73:B2:55:1A:43:5B:71:72
Certificate issuer: /CN=e1ff625f4a18d04d590a5b9d73b2551a435b7172
Certificate serial: 0197B70EAD3005701DB115BC578CAE564B29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
Manifest number: 0F73
Signing time: Sat 28 Jun 2025 15:01:21 +0000
Manifest this update: Sat 28 Jun 2025 15:01:21 +0000
Manifest next update: Sun 29 Jun 2025 15:01:21 +0000
Files and hashes: 1: 4f9iX0oY0E1ZCludc7JVGkNbcXI.crl (hash: AKwGOIh7ef+1lZ2Kw7pBw5GLPElaPy/G3PVBHwHf52g=)
2: v-UIauQZjW8hDMdx3w3tSE6IDRc.roa (hash: uCYTkmd7Ahc37aZdyBrq8T1Px2W2MX7+A97XE/19qf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:ad:30:05:70:1d:b1:15:bc:57:8c:ae:56:4b:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ff625f4a18d04d590a5b9d73b2551a435b7172
Validity
Not Before: Jun 28 15:01:21 2025 GMT
Not After : Jun 29 15:01:21 2025 GMT
Subject: CN=e58dadf62a9b47c87c4ef5c91ff9f1794557a54d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5a:a6:03:ea:79:37:bd:ea:4a:db:d3:00:f2:
b1:4a:d4:23:67:93:e8:ab:5f:76:92:37:b1:b0:ce:
fe:a2:c4:0f:cd:d5:af:53:ae:47:2f:fc:9b:45:5d:
ef:b5:3b:94:ea:86:71:25:39:48:bf:7f:bd:3d:82:
4f:0e:0e:77:3f:c6:fe:db:e4:8d:ac:7a:3d:b4:4d:
50:e3:58:ab:22:17:d0:93:8a:f0:56:65:88:8b:74:
25:93:d2:eb:43:28:d0:8d:b6:b7:4d:5b:ed:d8:6b:
18:e7:cd:ce:41:15:93:94:44:6c:be:40:cf:d4:16:
31:96:15:a5:37:1a:ee:55:a0:42:06:e5:9d:e5:40:
a5:04:54:fd:10:56:13:fb:28:e1:f8:45:d2:76:ec:
9e:c2:d0:9c:0e:dd:e4:7c:e7:0a:55:3d:e2:64:8e:
b3:81:a6:71:cf:81:3d:4c:c7:62:c9:67:cd:89:0e:
2c:e0:e8:0a:4b:7b:b1:f4:6a:73:85:6d:c4:77:77:
30:f6:c1:37:0c:2b:d9:78:f8:2a:bd:00:45:95:94:
3d:19:0c:4b:fa:84:d7:2b:51:eb:6d:7c:93:e6:24:
ce:5d:69:42:15:47:37:0f:b9:ed:c0:b9:1e:81:d8:
86:b9:60:19:52:c1:ce:4c:9e:0b:03:b6:58:49:25:
64:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:8D:AD:F6:2A:9B:47:C8:7C:4E:F5:C9:1F:F9:F1:79:45:57:A5:4D
X509v3 Authority Key Identifier:
keyid:E1:FF:62:5F:4A:18:D0:4D:59:0A:5B:9D:73:B2:55:1A:43:5B:71:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:69:d2:f1:23:0c:81:a1:3c:5a:96:45:5b:5b:d3:6c:db:9e:
fe:a2:01:1c:31:d3:fb:fa:9a:1c:1b:00:37:27:05:72:f1:8b:
03:2c:34:8e:22:85:11:69:ad:bc:89:e0:c5:09:5a:8f:b4:f8:
c6:75:1e:82:93:e8:6a:5c:fa:18:d9:ea:2c:e7:70:1d:e5:2d:
e6:2a:3a:bc:06:ee:35:51:59:e5:5d:e7:5d:b8:fd:59:75:c9:
02:e2:89:7a:4f:19:f4:4a:2d:8a:73:6a:eb:75:a7:7f:8c:ba:
88:d6:75:20:ff:ee:ee:58:be:a2:27:a8:5d:ce:10:c0:dc:7e:
30:6c:28:fe:7d:e0:17:30:29:f5:f7:16:81:80:68:9d:ec:07:
ea:8d:f2:01:2b:4c:b5:d5:8b:97:a8:db:40:c9:43:ae:d5:b5:
58:2e:0b:35:03:7f:74:10:97:88:1b:82:60:2c:11:05:64:d5:
e1:ad:bb:16:5e:33:38:1d:9c:f4:74:e6:9f:32:d5:24:71:a4:
a3:f0:61:10:60:63:61:74:5a:41:61:42:06:bf:cc:7a:55:0d:
4c:f2:b8:5e:5b:37:e7:45:ec:c8:dc:cf:a0:3c:35:30:0e:08:
bf:8f:cd:1d:b4:b3:90:2b:3f:4c:24:76:15:af:42:a4:73:17:
19:1a:8e:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3Dq0wBXAdsRW8V4yuVkspMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxZmY2MjVmNGExOGQwNGQ1OTBhNWI5ZDczYjI1NTFhNDM1
YjcxNzIwHhcNMjUwNjI4MTUwMTIxWhcNMjUwNjI5MTUwMTIxWjAzMTEwLwYDVQQD
EyhlNThkYWRmNjJhOWI0N2M4N2M0ZWY1YzkxZmY5ZjE3OTQ1NTdhNTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFqmA+p5N73qStvTAPKxStQjZ5Po
q192kjexsM7+osQPzdWvU65HL/ybRV3vtTuU6oZxJTlIv3+9PYJPDg53P8b+2+SN
rHo9tE1Q41irIhfQk4rwVmWIi3Qlk9LrQyjQjba3TVvt2GsY583OQRWTlERsvkDP
1BYxlhWlNxruVaBCBuWd5UClBFT9EFYT+yjh+EXSduyewtCcDt3kfOcKVT3iZI6z
gaZxz4E9TMdiyWfNiQ4s4OgKS3ux9GpzhW3Ed3cw9sE3DCvZePgqvQBFlZQ9GQxL
+oTXK1HrbXyT5iTOXWlCFUc3D7ntwLkegdiGuWAZUsHOTJ4LA7ZYSSVk8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOWNrfYqm0fIfE71yR/58XlFV6VNMB8GA1UdIwQY
MBaAFOH/Yl9KGNBNWQpbnXOyVRpDW3FyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGY5aVgwb1kwRTFaQ2x1ZGM3SlZHa05iY1hJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC84ZjkwYTUtYzg3OC00ZGQ0LWIyZGIt
NGU1ODYxMTg3YzRmLzEvNGY5aVgwb1kwRTFaQ2x1ZGM3SlZHa05iY1hJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC84ZjkwYTUtYzg3OC00ZGQ0LWIyZGItNGU1ODYxMTg3YzRm
LzEvNGY5aVgwb1kwRTFaQ2x1ZGM3SlZHa05iY1hJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg2nS8SMM
gaE8WpZFW1vTbNue/qIBHDHT+/qaHBsANycFcvGLAyw0jiKFEWmtvIngxQlaj7T4
xnUegpPoalz6GNnqLOdwHeUt5io6vAbuNVFZ5V3nXbj9WXXJAuKJek8Z9EotinNq
63Wnf4y6iNZ1IP/u7li+oieoXc4QwNx+MGwo/n3gFzAp9fcWgYBonewH6o3yAStM
tdWLl6jbQMlDrtW1WC4LNQN/dBCXiBuCYCwRBWTV4a27Fl4zOB2c9HTmnzLVJHGk
o/BhEGBjYXRaQWFCBr/MelUNTPK4Xls350XsyNzPoDw1MA4Iv4/NHbSzkCs/TCR2
Fa9CpHMXGRqO7w==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:14:40 2025 by rpki-client