Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/4u1kMJX_plfeBc7spdILJlwbf1I.mft
File: 4u1kMJX_plfeBc7spdILJlwbf1I.mft (raw, json)
Hash identifier: tGo5LshQrK3RBStyfROHKFReEXyrnym9KtprPJ1vNKA=
Subject key identifier: C1:F8:09:F7:BC:22:98:91:64:7D:68:1A:83:6F:31:99:2F:8D:96:D0
Authority key identifier: E2:ED:64:30:95:FF:A6:57:DE:05:CE:EC:A5:D2:0B:26:5C:1B:7F:52
Certificate issuer: /CN=e2ed643095ffa657de05ceeca5d20b265c1b7f52
Certificate serial: 0198D4A7D40902866987FA59EFFF56BC1F6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4u1kMJX_plfeBc7spdILJlwbf1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/4u1kMJX_plfeBc7spdILJlwbf1I.mft
Manifest number: 0EC7
Signing time: Sat 23 Aug 2025 02:00:25 +0000
Manifest this update: Sat 23 Aug 2025 02:00:25 +0000
Manifest next update: Sun 24 Aug 2025 02:00:25 +0000
Files and hashes: 1: 4u1kMJX_plfeBc7spdILJlwbf1I.crl (hash: TsyOJxGjD/jqpnBF2MJBG/uTG4nUx3ZVbhlXPhRkYoE=)
2: m1S7Ig8EoJ-at70vZRF2UbuJi5Q.roa (hash: AiilIUPxxw08sr3kqUjUq/R6OJzvAGqmXWhwnhpEZ7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/4u1kMJX_plfeBc7spdILJlwbf1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/4u1kMJX_plfeBc7spdILJlwbf1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/4u1kMJX_plfeBc7spdILJlwbf1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:d4:09:02:86:69:87:fa:59:ef:ff:56:bc:1f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2ed643095ffa657de05ceeca5d20b265c1b7f52
Validity
Not Before: Aug 23 02:00:25 2025 GMT
Not After : Aug 24 02:00:25 2025 GMT
Subject: CN=c1f809f7bc229891647d681a836f31992f8d96d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:38:50:3a:77:c4:0f:21:ca:77:9e:62:4f:08:
59:fd:36:5d:4e:c4:be:0a:45:9c:5b:38:8a:17:25:
62:93:0a:57:93:67:35:b9:d7:3a:2b:ce:21:01:20:
61:a1:82:6e:81:37:f1:0c:09:ae:08:39:de:6d:62:
92:ee:0f:08:12:38:96:e0:d8:99:f5:83:a1:50:38:
89:65:98:5e:73:77:83:48:b7:bf:be:c0:d9:22:17:
e4:25:fa:a2:ea:c0:6d:2d:44:55:a0:24:cc:21:7f:
cb:af:c7:80:7b:6d:d9:01:e9:07:c9:d4:b3:0a:3e:
b4:79:1e:2d:d7:f2:79:4e:71:a1:c5:5b:c3:d4:c7:
bd:72:4d:e1:45:16:76:39:64:17:49:6f:9b:97:ca:
4d:93:ac:8f:29:f0:56:2a:72:cc:93:eb:0f:03:a2:
b2:66:cd:c2:d3:b0:82:c3:31:a2:21:bd:dc:8e:cf:
48:0b:23:a0:61:58:bf:cb:55:64:03:3b:89:4c:ba:
aa:dc:fa:02:90:d3:fc:d2:20:75:51:7b:3f:6a:85:
c6:72:23:09:c3:77:59:18:66:23:87:10:18:a5:51:
14:ec:10:02:e9:ec:e4:73:23:cc:3d:3f:16:35:62:
4f:40:ae:65:ec:da:4f:d3:27:bd:7c:ca:8a:3b:df:
97:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F8:09:F7:BC:22:98:91:64:7D:68:1A:83:6F:31:99:2F:8D:96:D0
X509v3 Authority Key Identifier:
keyid:E2:ED:64:30:95:FF:A6:57:DE:05:CE:EC:A5:D2:0B:26:5C:1B:7F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4u1kMJX_plfeBc7spdILJlwbf1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/4u1kMJX_plfeBc7spdILJlwbf1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/4u1kMJX_plfeBc7spdILJlwbf1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:a8:3c:51:b9:7c:f9:c9:5d:3e:5d:5d:60:28:50:b8:38:5e:
8e:89:25:63:23:d0:44:40:5f:34:7d:46:a3:52:8f:d0:00:da:
e9:ec:43:4c:bd:39:1d:48:2d:4b:2e:a2:af:4c:9e:8b:18:f9:
6a:db:83:3a:cd:07:63:23:da:20:ef:ad:6f:42:d9:03:0e:da:
5b:ea:ad:4d:a2:b9:d8:2a:ba:f5:6c:88:e6:0a:22:c1:b1:fe:
5c:f7:2d:d0:6d:0a:2e:a5:de:33:43:05:61:3a:37:57:46:fa:
2e:22:ed:60:dd:bd:99:1e:0f:ed:ed:c1:be:56:62:b0:a1:15:
d1:e5:1e:23:2e:3d:02:44:1f:35:db:d2:4c:b5:ea:2a:ce:ec:
4a:30:2a:66:ec:b5:47:38:f2:51:10:b8:1c:68:6f:d8:e8:67:
28:44:86:cb:38:ca:12:c4:f8:fb:da:44:26:3d:1a:85:11:a0:
8b:a6:c1:82:8e:4a:7c:2a:73:77:e1:72:21:58:de:2a:13:4c:
70:85:d2:0e:67:04:c0:5c:b0:04:62:91:0d:a1:60:53:bf:77:
89:96:2f:0d:2f:12:51:cb:b7:f0:aa:64:6d:7d:42:06:da:6d:
0f:39:aa:08:1b:66:76:3d:06:0d:0c:89:7f:e1:18:ce:35:68:
ce:0d:75:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUp9QJAoZph/pZ7/9WvB9sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZWQ2NDMwOTVmZmE2NTdkZTA1Y2VlY2E1ZDIwYjI2NWMx
YjdmNTIwHhcNMjUwODIzMDIwMDI1WhcNMjUwODI0MDIwMDI1WjAzMTEwLwYDVQQD
EyhjMWY4MDlmN2JjMjI5ODkxNjQ3ZDY4MWE4MzZmMzE5OTJmOGQ5NmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlThQOnfEDyHKd55iTwhZ/TZdTsS+
CkWcWziKFyVikwpXk2c1udc6K84hASBhoYJugTfxDAmuCDnebWKS7g8IEjiW4NiZ
9YOhUDiJZZhec3eDSLe/vsDZIhfkJfqi6sBtLURVoCTMIX/Lr8eAe23ZAekHydSz
Cj60eR4t1/J5TnGhxVvD1Me9ck3hRRZ2OWQXSW+bl8pNk6yPKfBWKnLMk+sPA6Ky
Zs3C07CCwzGiIb3cjs9ICyOgYVi/y1VkAzuJTLqq3PoCkNP80iB1UXs/aoXGciMJ
w3dZGGYjhxAYpVEU7BAC6ezkcyPMPT8WNWJPQK5l7NpP0ye9fMqKO9+XNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMH4Cfe8IpiRZH1oGoNvMZkvjZbQMB8GA1UdIwQY
MBaAFOLtZDCV/6ZX3gXO7KXSCyZcG39SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHUxa01KWF9wbGZlQmM3c3BkSUxKbHdiZjFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9lZWU2ZjQtNTQ4ZS00Y2VmLThmYTQt
OTNiMDIwZmU4ZmYxLzEvNHUxa01KWF9wbGZlQmM3c3BkSUxKbHdiZjFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni9lZWU2ZjQtNTQ4ZS00Y2VmLThmYTQtOTNiMDIwZmU4ZmYx
LzEvNHUxa01KWF9wbGZlQmM3c3BkSUxKbHdiZjFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWag8Ubl8
+cldPl1dYChQuDhejoklYyPQREBfNH1Go1KP0ADa6exDTL05HUgtSy6ir0yeixj5
atuDOs0HYyPaIO+tb0LZAw7aW+qtTaK52Cq69WyI5goiwbH+XPct0G0KLqXeM0MF
YTo3V0b6LiLtYN29mR4P7e3BvlZisKEV0eUeIy49AkQfNdvSTLXqKs7sSjAqZuy1
RzjyURC4HGhv2OhnKESGyzjKEsT4+9pEJj0ahRGgi6bBgo5KfCpzd+FyIVjeKhNM
cIXSDmcEwFywBGKRDaFgU793iZYvDS8SUcu38KpkbX1CBtptDzmqCBtmdj0GDQyJ
f+EYzjVozg11tg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:36:38 2025 by rpki-client