Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
File: 4a7RSE6W5L95k-m4Z7NMNNaorjY.mft (raw, json)
Hash identifier: vVtgVDfYuQvTF4ZRfUYZAq0CMGJdr5mEKFEdDDvexP8=
Subject key identifier: 73:52:E6:E9:6B:2A:CC:28:85:1F:E8:A1:6B:AD:8A:2E:78:17:12:4C
Authority key identifier: E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36
Certificate issuer: /CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36
Certificate serial: 0197B745698CBBF61E71CD0AF2913279E8DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
Manifest number: 0C6D
Signing time: Sat 28 Jun 2025 16:01:08 +0000
Manifest this update: Sat 28 Jun 2025 16:01:08 +0000
Manifest next update: Sun 29 Jun 2025 16:01:08 +0000
Files and hashes: 1: 4a7RSE6W5L95k-m4Z7NMNNaorjY.crl (hash: XolcUnivTEz93AaxhqXiUb/Z4I+ggq/iKgXG+SiOnC8=)
2: 7e4XWoTxR_4GFJNbOkXvGvD-gG4.roa (hash: 4YXw3iLwYdL9YkiJ0wB5yVfXs/BwnpG21A305csfmtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:69:8c:bb:f6:1e:71:cd:0a:f2:91:32:79:e8:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36
Validity
Not Before: Jun 28 16:01:08 2025 GMT
Not After : Jun 29 16:01:08 2025 GMT
Subject: CN=7352e6e96b2acc28851fe8a16bad8a2e7817124c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:96:e5:b2:9f:9f:4a:30:bd:36:fb:35:02:97:
79:61:d2:cf:d6:d6:5a:4b:6d:03:9b:9d:30:cb:6c:
10:96:af:3e:58:30:35:79:3a:1c:35:a9:3d:7d:9c:
44:06:39:6d:0b:fe:5e:bc:ce:dc:e5:72:3c:00:11:
78:80:22:41:dc:cd:52:0f:59:07:18:7c:af:cc:d7:
01:ed:e6:b6:a3:06:4a:b1:b6:85:07:2f:19:20:62:
e6:af:25:f4:81:e4:8e:5d:56:25:f4:80:91:b2:b0:
f1:f9:5a:fa:31:18:ab:e2:81:9f:9b:7d:0b:14:14:
6d:6c:8f:3c:c1:40:f4:64:bd:d2:55:a4:82:fb:6a:
b5:05:85:8b:52:01:1f:b1:35:ca:4b:3c:e3:55:b8:
b1:64:56:e1:0c:48:db:f1:03:25:a0:ad:e2:16:2e:
ae:2d:51:4a:38:c0:b2:8e:43:a0:53:66:4b:df:be:
a5:70:c3:8a:f5:f1:f0:0f:62:5a:b0:ad:cc:d4:a3:
fe:89:e0:9f:50:77:a4:b0:78:c5:0f:df:5e:5b:68:
cc:51:0f:c7:d9:12:b1:db:b2:70:4c:a6:d4:65:f0:
4d:bb:b9:b1:df:ed:2d:54:0a:87:ff:5f:62:47:c0:
69:0c:b2:c4:39:8a:3c:32:62:c3:85:d5:47:4c:92:
6f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:52:E6:E9:6B:2A:CC:28:85:1F:E8:A1:6B:AD:8A:2E:78:17:12:4C
X509v3 Authority Key Identifier:
keyid:E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:df:2c:39:0f:f6:a9:64:6a:16:4a:e4:e7:48:f4:93:30:5c:
9b:11:d0:cb:92:1c:c8:2f:cc:6e:58:a4:94:a0:52:ac:b1:8b:
b1:46:7c:33:79:e3:b5:29:0a:69:69:b9:ea:72:d7:9d:2c:e9:
47:e0:59:c8:ef:b4:c4:a4:ee:12:08:1e:77:ff:07:a2:0c:0b:
bc:7e:53:b1:3d:e9:b1:63:ba:b8:87:8f:07:22:2b:4b:4e:d0:
28:59:13:a8:7e:53:d6:1d:4d:ca:14:83:4e:cd:e2:bb:e0:a4:
bc:7e:1c:c1:5c:2d:67:04:08:2f:a2:4e:f5:5a:2d:8c:94:18:
31:e7:2d:f3:5a:69:10:c5:47:d6:8f:e9:ad:f4:92:17:30:96:
1d:c2:59:37:77:6a:b0:d7:9b:a1:58:40:0e:a1:fa:7c:8f:0e:
b4:b9:fe:bd:f8:17:c0:89:82:62:96:11:c5:65:e6:09:31:73:
5d:28:a1:ef:c8:ce:6f:f5:70:dc:a0:69:7d:86:e6:92:64:c2:
a4:a5:d5:ff:b7:4d:10:2f:f7:56:df:e4:b5:0e:1e:5b:19:2c:
13:b0:9a:8a:c9:5c:82:74:89:e4:69:62:18:c8:78:1d:1e:c5:
09:a9:5d:9f:f2:30:a5:10:29:89:90:f9:8c:07:04:6b:14:19:
c5:2c:78:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RWmMu/Yecc0K8pEyeejeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxYWVkMTQ4NGU5NmU0YmY3OTkzZTliODY3YjM0YzM0ZDZh
OGFlMzYwHhcNMjUwNjI4MTYwMTA4WhcNMjUwNjI5MTYwMTA4WjAzMTEwLwYDVQQD
Eyg3MzUyZTZlOTZiMmFjYzI4ODUxZmU4YTE2YmFkOGEyZTc4MTcxMjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZblsp+fSjC9Nvs1Apd5YdLP1tZa
S20Dm50wy2wQlq8+WDA1eTocNak9fZxEBjltC/5evM7c5XI8ABF4gCJB3M1SD1kH
GHyvzNcB7ea2owZKsbaFBy8ZIGLmryX0geSOXVYl9ICRsrDx+Vr6MRir4oGfm30L
FBRtbI88wUD0ZL3SVaSC+2q1BYWLUgEfsTXKSzzjVbixZFbhDEjb8QMloK3iFi6u
LVFKOMCyjkOgU2ZL376lcMOK9fHwD2JasK3M1KP+ieCfUHeksHjFD99eW2jMUQ/H
2RKx27JwTKbUZfBNu7mx3+0tVAqH/19iR8BpDLLEOYo8MmLDhdVHTJJvFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHNS5ulrKswohR/ooWutii54FxJMMB8GA1UdIwQY
MBaAFOGu0UhOluS/eZPpuGezTDTWqK42MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGE3UlNFNlc1TDk1ay1tNFo3Tk1OTmFvcmpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81MjNhOTMtOGJiZC00NGFjLTg4YmQt
NGU3YmNhNTVmODIxLzEvNGE3UlNFNlc1TDk1ay1tNFo3Tk1OTmFvcmpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC81MjNhOTMtOGJiZC00NGFjLTg4YmQtNGU3YmNhNTVmODIx
LzEvNGE3UlNFNlc1TDk1ay1tNFo3Tk1OTmFvcmpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOt8sOQ/2
qWRqFkrk50j0kzBcmxHQy5IcyC/MbliklKBSrLGLsUZ8M3njtSkKaWm56nLXnSzp
R+BZyO+0xKTuEgged/8HogwLvH5TsT3psWO6uIePByIrS07QKFkTqH5T1h1NyhSD
Ts3iu+CkvH4cwVwtZwQIL6JO9VotjJQYMect81ppEMVH1o/prfSSFzCWHcJZN3dq
sNeboVhADqH6fI8OtLn+vfgXwImCYpYRxWXmCTFzXSih78jOb/Vw3KBpfYbmkmTC
pKXV/7dNEC/3Vt/ktQ4eWxksE7CaislcgnSJ5GliGMh4HR7FCaldn/IwpRApiZD5
jAcEaxQZxSx4og==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:55:46 2025 by rpki-client