Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/1162e7-4f74-4e69-ba99-b80efbd68bfd/1/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.mft
File: 4xL0QTgtW6HYDfRZvUbAoxWQ5y8.mft (raw, json)
Hash identifier: 6puEBGH1Uf5fZDXYLkPB42bt1DN8IN8/uMf1LRAk84M=
Subject key identifier: 13:94:2B:12:B4:02:8B:A1:9E:40:F6:75:D2:16:3F:3F:47:14:6E:45
Authority key identifier: E3:12:F4:41:38:2D:5B:A1:D8:0D:F4:59:BD:46:C0:A3:15:90:E7:2F
Certificate issuer: /CN=e312f441382d5ba1d80df459bd46c0a31590e72f
Certificate serial: 0197B7EA8E46D30492EC551FF2C8740D73D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/1162e7-4f74-4e69-ba99-b80efbd68bfd/1/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.mft
Manifest number: 0152
Signing time: Sat 28 Jun 2025 19:01:31 +0000
Manifest this update: Sat 28 Jun 2025 19:01:31 +0000
Manifest next update: Sun 29 Jun 2025 19:01:31 +0000
Files and hashes: 1: 4xL0QTgtW6HYDfRZvUbAoxWQ5y8.crl (hash: yzEC5q9nX6i0Z4j8vKH12ZVmRJBSo4ODhBDgVP+veX0=)
2: V9qSkag-yPFb6kdg7t_bXdafQY8.roa (hash: /gE5NbLPMb6fQQc04np3UK1UkGHwo2L/kFXUOBu9e5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/1162e7-4f74-4e69-ba99-b80efbd68bfd/1/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/1162e7-4f74-4e69-ba99-b80efbd68bfd/1/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:8e:46:d3:04:92:ec:55:1f:f2:c8:74:0d:73:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e312f441382d5ba1d80df459bd46c0a31590e72f
Validity
Not Before: Jun 28 19:01:31 2025 GMT
Not After : Jun 29 19:01:31 2025 GMT
Subject: CN=13942b12b4028ba19e40f675d2163f3f47146e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:46:cf:e7:99:22:b5:ea:dd:59:2e:4f:6c:2c:
5d:69:f7:aa:f9:d1:52:73:f6:bd:ff:c1:d0:c8:38:
44:26:22:46:b0:44:9b:b4:e6:4b:66:21:69:c4:75:
e0:23:ed:d4:61:ee:c4:86:85:76:42:49:db:3d:a1:
a2:ec:9f:b4:1a:16:15:a5:67:20:47:7c:63:3d:f7:
e9:0f:e6:6d:7f:a4:84:3e:f0:9c:e5:74:c2:92:25:
37:24:eb:8c:b9:b0:4f:0e:43:3e:c2:68:42:4c:d7:
fd:40:62:32:af:a1:b1:3a:c0:85:64:4e:87:d3:eb:
67:6c:b7:49:c3:ef:2c:66:61:c3:bb:39:82:1d:8a:
a3:c8:55:1d:41:3b:8e:4e:45:de:3a:ed:1e:c3:35:
11:a2:ab:64:5b:94:bb:17:d3:75:32:41:c9:04:d3:
bb:41:0b:03:55:65:c9:3d:c7:5f:39:9f:7e:dd:94:
77:f7:af:14:03:20:01:9b:c9:dd:d2:04:70:aa:3c:
d0:27:ac:42:d1:57:83:23:ed:69:c2:a7:51:5f:fe:
55:7f:82:cd:44:16:fd:24:10:ed:c2:86:a6:ad:ef:
51:a0:46:75:b1:29:53:3c:ba:8f:fc:e3:fc:95:4a:
39:6c:e7:40:d3:58:88:bb:6c:33:a9:b1:32:1c:cb:
0c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:94:2B:12:B4:02:8B:A1:9E:40:F6:75:D2:16:3F:3F:47:14:6E:45
X509v3 Authority Key Identifier:
keyid:E3:12:F4:41:38:2D:5B:A1:D8:0D:F4:59:BD:46:C0:A3:15:90:E7:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1162e7-4f74-4e69-ba99-b80efbd68bfd/1/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1162e7-4f74-4e69-ba99-b80efbd68bfd/1/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:b6:17:de:a3:79:37:5f:39:6a:b6:b9:59:a7:9e:eb:38:65:
31:9f:8b:87:4f:f4:72:a4:30:90:92:9d:2b:8d:f6:60:d7:69:
08:0b:a9:21:16:c5:df:6f:72:75:10:24:b5:13:62:70:5c:95:
34:a6:38:cf:91:fe:2d:3b:f7:f1:63:68:a4:52:9c:d1:b9:9a:
af:3f:30:4b:36:37:b1:aa:ec:f9:a3:0e:df:14:cf:db:55:6b:
08:13:39:b9:c7:dd:49:30:fe:43:3b:08:28:73:77:a1:3b:af:
d4:ee:a1:ac:8a:d3:41:6f:ab:b0:e4:a1:4b:93:b7:ef:95:7e:
12:2b:fa:51:cc:91:eb:24:39:58:b3:2d:35:73:97:26:85:d6:
8a:a9:1c:22:c1:c7:ed:f0:e5:c8:f2:20:da:7c:eb:f0:df:f2:
12:46:d5:44:58:d1:9a:74:e4:7f:a3:80:5f:60:57:57:88:ba:
fa:8a:ad:23:33:67:b7:d5:95:1b:3c:5e:59:66:2d:09:2f:7d:
ae:d0:ce:bb:c6:ea:57:90:e3:a3:1d:a3:7f:50:2f:00:96:5a:
75:a3:cf:14:e3:5a:5a:b7:a1:4c:b4:ff:a8:a1:cf:ef:0b:a5:
c2:96:97:d0:e3:90:b5:9e:89:56:3e:11:5a:77:b4:fe:19:cc:
5d:d6:70:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36o5G0wSS7FUf8sh0DXPVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMTJmNDQxMzgyZDViYTFkODBkZjQ1OWJkNDZjMGEzMTU5
MGU3MmYwHhcNMjUwNjI4MTkwMTMxWhcNMjUwNjI5MTkwMTMxWjAzMTEwLwYDVQQD
EygxMzk0MmIxMmI0MDI4YmExOWU0MGY2NzVkMjE2M2YzZjQ3MTQ2ZTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5kbP55kiterdWS5PbCxdafeq+dFS
c/a9/8HQyDhEJiJGsESbtOZLZiFpxHXgI+3UYe7EhoV2QknbPaGi7J+0GhYVpWcg
R3xjPffpD+Ztf6SEPvCc5XTCkiU3JOuMubBPDkM+wmhCTNf9QGIyr6GxOsCFZE6H
0+tnbLdJw+8sZmHDuzmCHYqjyFUdQTuOTkXeOu0ewzURoqtkW5S7F9N1MkHJBNO7
QQsDVWXJPcdfOZ9+3ZR3968UAyABm8nd0gRwqjzQJ6xC0VeDI+1pwqdRX/5Vf4LN
RBb9JBDtwoamre9RoEZ1sSlTPLqP/OP8lUo5bOdA01iIu2wzqbEyHMsM4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBOUKxK0AouhnkD2ddIWPz9HFG5FMB8GA1UdIwQY
MBaAFOMS9EE4LVuh2A30Wb1GwKMVkOcvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHhMMFFUZ3RXNkhZRGZSWnZVYkFveFdRNXk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8xMTYyZTctNGY3NC00ZTY5LWJhOTkt
YjgwZWZiZDY4YmZkLzEvNHhMMFFUZ3RXNkhZRGZSWnZVYkFveFdRNXk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8xMTYyZTctNGY3NC00ZTY5LWJhOTktYjgwZWZiZDY4YmZk
LzEvNHhMMFFUZ3RXNkhZRGZSWnZVYkFveFdRNXk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnbYX3qN5
N185ara5Waee6zhlMZ+Lh0/0cqQwkJKdK432YNdpCAupIRbF329ydRAktRNicFyV
NKY4z5H+LTv38WNopFKc0bmarz8wSzY3sars+aMO3xTP21VrCBM5ucfdSTD+QzsI
KHN3oTuv1O6hrIrTQW+rsOShS5O375V+Eiv6UcyR6yQ5WLMtNXOXJoXWiqkcIsHH
7fDlyPIg2nzr8N/yEkbVRFjRmnTkf6OAX2BXV4i6+oqtIzNnt9WVGzxeWWYtCS99
rtDOu8bqV5Djox2jf1AvAJZadaPPFONaWrehTLT/qKHP7wulwpaX0OOQtZ6JVj4R
Wne0/hnMXdZw/w==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:56:57 2025 by rpki-client