
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft
File: u4K408Gw94w6GfYWTrKCHiMM_k4.mft (raw, json)
Hash identifier: yxPTvnKSwS86bs1MvGToY9L0xz3wdrZfM7sT5Do/UdQ=
Subject key identifier: 6D:09:EB:14:E1:F2:3F:2E:A9:83:91:0B:51:9F:31:48:31:5F:37:FF
Authority key identifier: BB:82:B8:D3:C1:B0:F7:8C:3A:19:F6:16:4E:B2:82:1E:23:0C:FE:4E
Certificate issuer: /CN=bb82b8d3c1b0f78c3a19f6164eb2821e230cfe4e
Certificate serial: 0197C726AB40799970C2D9A045E1B57B4041
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4K408Gw94w6GfYWTrKCHiMM_k4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft
Manifest number: 0FB7
Signing time: Tue 01 Jul 2025 18:01:29 +0000
Manifest this update: Tue 01 Jul 2025 18:01:29 +0000
Manifest next update: Wed 02 Jul 2025 18:01:29 +0000
Files and hashes: 1: sZvwZMkTNt-iUTiQmQ2RW61JCrY.roa (hash: ILtUTNlj+OmXDu1giFXN+JTJafdCM0FAh4hCT6vGfZc=)
2: u4K408Gw94w6GfYWTrKCHiMM_k4.crl (hash: AdLXmB3hcUypBJegQF6BBBqYs10JImGy7WOAUfLBYWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft
rsync://rpki.ripe.net/repository/DEFAULT/u4K408Gw94w6GfYWTrKCHiMM_k4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c7:26:ab:40:79:99:70:c2:d9:a0:45:e1:b5:7b:40:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb82b8d3c1b0f78c3a19f6164eb2821e230cfe4e
Validity
Not Before: Jul 1 18:01:29 2025 GMT
Not After : Jul 2 18:01:29 2025 GMT
Subject: CN=6d09eb14e1f23f2ea983910b519f3148315f37ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a4:db:6e:b0:c0:69:d8:19:db:65:54:51:85:
c5:41:2f:ce:d3:68:c5:e8:ad:33:0a:77:81:f3:a2:
50:b0:14:a2:e7:a0:b5:7a:22:41:27:41:72:e7:6d:
c9:16:11:43:3d:a3:8f:41:a1:83:dd:c7:d8:da:13:
49:6b:82:5a:8e:32:f8:df:36:49:c1:ee:cb:c8:03:
6a:eb:46:8e:46:f0:3a:53:13:13:27:44:0c:54:1b:
9e:10:c7:f0:61:62:b3:c5:fe:0e:80:43:6c:d1:60:
0e:5d:d1:8e:f8:c9:03:af:1f:d1:bd:21:3a:b0:2a:
e8:2a:55:ff:d4:c8:23:c1:01:6b:74:07:47:82:75:
7b:e1:a5:54:85:57:d3:50:79:47:b7:0f:c5:95:f5:
f8:c1:6e:cb:b2:7b:06:43:c2:55:1d:cd:ec:9a:bf:
f0:f9:9b:90:cd:e3:0c:0c:f4:23:a3:fb:e2:2d:2d:
2c:6f:af:d0:e5:8e:4c:fe:e0:00:5f:01:aa:f3:8e:
42:31:ae:66:b7:9d:a3:cc:27:6b:4e:98:03:f0:2f:
b6:46:2a:e9:64:a6:14:06:fe:bd:98:9e:22:23:65:
dd:d5:85:ee:47:7f:1b:73:fd:a3:20:63:90:15:10:
c2:df:75:4e:91:6d:f3:f8:0b:6f:72:b5:7f:cf:f8:
32:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:09:EB:14:E1:F2:3F:2E:A9:83:91:0B:51:9F:31:48:31:5F:37:FF
X509v3 Authority Key Identifier:
keyid:BB:82:B8:D3:C1:B0:F7:8C:3A:19:F6:16:4E:B2:82:1E:23:0C:FE:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4K408Gw94w6GfYWTrKCHiMM_k4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:2d:3e:6e:82:23:d4:61:0f:a6:cd:51:df:b4:92:ac:65:95:
0d:84:e7:42:4d:36:e7:6f:4f:33:49:1b:c8:54:ae:eb:d8:27:
b6:2e:b9:b2:06:73:38:b2:b9:5b:1c:9e:0a:74:6f:29:bf:ae:
bf:86:46:ec:9f:6e:32:62:27:6c:1b:8a:90:69:04:d5:46:97:
65:c6:cd:72:c3:e7:10:b7:a7:3c:29:9c:32:a0:ea:93:91:1b:
93:8c:1c:8b:6c:51:65:b6:f9:3d:e1:ae:1b:f3:1c:05:45:7c:
64:e7:12:1a:e8:9c:89:30:bb:36:1b:f2:75:95:6b:f1:15:62:
df:ed:ee:69:67:ca:22:12:20:78:e2:28:a3:73:80:43:4b:39:
5d:7e:c8:af:97:8b:68:c6:94:7e:4d:56:4d:ab:bf:0f:3d:8a:
39:5a:3a:49:0a:b9:df:76:f8:9b:b9:8d:28:c6:85:ab:bb:b1:
ee:f0:de:dd:55:43:13:9d:17:bc:5e:07:e8:ba:6b:cc:67:4b:
ea:84:cf:21:6e:88:28:00:7c:69:84:1e:79:fa:76:6d:6b:41:
55:62:e4:bc:23:d6:cb:b4:e5:70:9c:3c:8b:2f:b2:1f:02:a9:
a4:ad:f3:bc:43:d6:89:6c:ea:14:70:58:15:05:1c:a1:ba:3d:
4d:b3:e8:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfHJqtAeZlwwtmgReG1e0BBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiODJiOGQzYzFiMGY3OGMzYTE5ZjYxNjRlYjI4MjFlMjMw
Y2ZlNGUwHhcNMjUwNzAxMTgwMTI5WhcNMjUwNzAyMTgwMTI5WjAzMTEwLwYDVQQD
Eyg2ZDA5ZWIxNGUxZjIzZjJlYTk4MzkxMGI1MTlmMzE0ODMxNWYzN2ZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraTbbrDAadgZ22VUUYXFQS/O02jF
6K0zCneB86JQsBSi56C1eiJBJ0Fy523JFhFDPaOPQaGD3cfY2hNJa4JajjL43zZJ
we7LyANq60aORvA6UxMTJ0QMVBueEMfwYWKzxf4OgENs0WAOXdGO+MkDrx/RvSE6
sCroKlX/1MgjwQFrdAdHgnV74aVUhVfTUHlHtw/FlfX4wW7LsnsGQ8JVHc3smr/w
+ZuQzeMMDPQjo/viLS0sb6/Q5Y5M/uAAXwGq845CMa5mt52jzCdrTpgD8C+2Rirp
ZKYUBv69mJ4iI2Xd1YXuR38bc/2jIGOQFRDC33VOkW3z+AtvcrV/z/gywQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG0J6xTh8j8uqYORC1GfMUgxXzf/MB8GA1UdIwQY
MBaAFLuCuNPBsPeMOhn2Fk6ygh4jDP5OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTRLNDA4R3c5NHc2R2ZZV1RyS0NIaU1NX2s0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8yODBjYTktZjdkOC00ZmZhLWJhMzQt
YTEzZjQ0ODFiYzZjLzEvdTRLNDA4R3c5NHc2R2ZZV1RyS0NIaU1NX2s0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8yODBjYTktZjdkOC00ZmZhLWJhMzQtYTEzZjQ0ODFiYzZj
LzEvdTRLNDA4R3c5NHc2R2ZZV1RyS0NIaU1NX2s0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgi0+boIj
1GEPps1R37SSrGWVDYTnQk02529PM0kbyFSu69gnti65sgZzOLK5WxyeCnRvKb+u
v4ZG7J9uMmInbBuKkGkE1UaXZcbNcsPnELenPCmcMqDqk5Ebk4wci2xRZbb5PeGu
G/McBUV8ZOcSGuiciTC7NhvydZVr8RVi3+3uaWfKIhIgeOIoo3OAQ0s5XX7Ir5eL
aMaUfk1WTau/Dz2KOVo6SQq533b4m7mNKMaFq7ux7vDe3VVDE50XvF4H6LprzGdL
6oTPIW6IKAB8aYQeefp2bWtBVWLkvCPWy7TlcJw8iy+yHwKppK3zvEPWiWzqFHBY
FQUcobo9TbPoyQ==
-----END CERTIFICATE-----
Generated at Tue Jul 1 20:24:54 2025 by rpki-client