Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.mft
File: 4N8zRFExdiUqLLaQvPcF1kmBEfU.mft (raw, json)
Hash identifier: HLFZrLLxcSbCOJksCArmQxvI83maSR6SUnjRH9B1360=
Subject key identifier: 4D:3C:5E:77:C8:76:AD:36:A5:5F:AE:F0:04:BD:BA:A9:AB:25:4B:F6
Authority key identifier: E0:DF:33:44:51:31:76:25:2A:2C:B6:90:BC:F7:05:D6:49:81:11:F5
Certificate issuer: /CN=e0df3344513176252a2cb690bcf705d6498111f5
Certificate serial: 0197B5FC755025A013C9B2EA9609BF5D0944
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4N8zRFExdiUqLLaQvPcF1kmBEfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.mft
Manifest number: 08CF
Signing time: Sat 28 Jun 2025 10:01:50 +0000
Manifest this update: Sat 28 Jun 2025 10:01:50 +0000
Manifest next update: Sun 29 Jun 2025 10:01:50 +0000
Files and hashes: 1: 4N8zRFExdiUqLLaQvPcF1kmBEfU.crl (hash: Cqb3++dD0Vq4SG6/D4i7QVsADtx+4SLfhWq1IsWAv1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4N8zRFExdiUqLLaQvPcF1kmBEfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:75:50:25:a0:13:c9:b2:ea:96:09:bf:5d:09:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0df3344513176252a2cb690bcf705d6498111f5
Validity
Not Before: Jun 28 10:01:50 2025 GMT
Not After : Jun 29 10:01:50 2025 GMT
Subject: CN=4d3c5e77c876ad36a55faef004bdbaa9ab254bf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:31:82:bb:4d:71:01:9e:00:72:00:17:4e:e5:
2d:d2:55:7a:4a:97:5a:1b:8e:b4:07:1d:5c:18:c0:
3e:24:7f:83:bd:a2:10:14:6c:3d:45:7f:08:3e:99:
ba:23:a4:83:f4:9c:8f:73:1a:d6:73:b8:91:d2:15:
74:66:db:ed:93:b1:2b:90:a9:a3:49:54:9c:03:84:
dc:ee:01:f7:d5:6b:24:3b:9a:88:43:43:2b:12:36:
73:8f:fa:f5:8b:03:40:b6:a3:69:da:ec:1f:5a:dc:
76:69:ef:94:3d:df:8b:df:bf:58:28:f5:c0:56:5f:
c3:83:7f:de:ca:12:19:47:f3:b1:42:0f:2d:eb:dc:
df:0e:e8:dd:9f:53:ba:44:03:10:89:e7:ed:07:09:
55:cc:9b:46:d6:cf:be:39:38:5c:f4:53:1a:67:b5:
02:6f:59:79:38:96:a1:07:96:bf:1d:05:5e:96:4c:
42:d0:f7:e3:59:73:be:c9:9b:0f:72:5d:3f:be:cf:
fe:8d:89:fd:7b:4c:d2:a3:60:65:39:09:16:97:22:
48:9b:0a:8b:85:d5:88:32:68:47:3b:09:89:13:9d:
68:33:0d:d4:91:69:14:a4:9d:d8:6a:ae:92:c4:29:
c5:cb:e2:cc:a3:14:c1:60:63:9d:95:af:da:72:c5:
3b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:3C:5E:77:C8:76:AD:36:A5:5F:AE:F0:04:BD:BA:A9:AB:25:4B:F6
X509v3 Authority Key Identifier:
keyid:E0:DF:33:44:51:31:76:25:2A:2C:B6:90:BC:F7:05:D6:49:81:11:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N8zRFExdiUqLLaQvPcF1kmBEfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:e3:41:9a:0c:ff:00:ad:1e:3c:68:2a:ae:dc:15:9f:f7:83:
28:25:c9:8f:e5:8a:53:f5:c9:92:1b:c2:ca:60:84:2d:a9:27:
1a:08:45:9a:51:8a:de:13:63:86:5f:a7:93:99:75:b3:e1:3a:
9e:6c:e6:bc:b9:b3:d5:a1:90:58:18:9a:df:e5:1c:8c:df:3f:
4b:8e:09:e9:73:b1:71:3e:e9:28:95:05:c0:d0:01:81:75:ec:
d4:67:5a:2e:29:fc:a5:ed:72:b2:14:7c:58:75:11:a4:ca:6b:
74:e4:29:39:12:21:8f:ed:d5:30:c0:1a:a9:53:0f:0a:96:87:
a9:40:e6:b1:f3:95:8a:70:56:5e:12:61:57:72:f5:03:ef:61:
60:f5:14:12:53:43:d1:04:9c:2b:ee:3c:18:24:17:f6:41:94:
76:1c:d4:2e:9f:08:de:b4:2d:89:63:c5:43:28:a5:dc:c6:c9:
da:1f:31:1e:ed:5d:44:c9:10:b1:4d:d6:a4:2d:f3:6c:0c:74:
9e:91:a2:68:77:83:7a:18:bb:c7:d5:ed:65:88:38:b8:7b:7a:
10:03:d0:7c:c5:09:df:a1:89:dc:1b:51:c7:21:6f:3c:c2:8d:
cb:8e:da:4e:8d:57:31:31:30:86:f2:1d:29:3d:61:f1:02:f9:
cf:a2:ba:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1/HVQJaATybLqlgm/XQlEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwZGYzMzQ0NTEzMTc2MjUyYTJjYjY5MGJjZjcwNWQ2NDk4
MTExZjUwHhcNMjUwNjI4MTAwMTUwWhcNMjUwNjI5MTAwMTUwWjAzMTEwLwYDVQQD
Eyg0ZDNjNWU3N2M4NzZhZDM2YTU1ZmFlZjAwNGJkYmFhOWFiMjU0YmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3TGCu01xAZ4AcgAXTuUt0lV6Spda
G460Bx1cGMA+JH+DvaIQFGw9RX8IPpm6I6SD9JyPcxrWc7iR0hV0Ztvtk7ErkKmj
SVScA4Tc7gH31WskO5qIQ0MrEjZzj/r1iwNAtqNp2uwfWtx2ae+UPd+L379YKPXA
Vl/Dg3/eyhIZR/OxQg8t69zfDujdn1O6RAMQieftBwlVzJtG1s++OThc9FMaZ7UC
b1l5OJahB5a/HQVelkxC0PfjWXO+yZsPcl0/vs/+jYn9e0zSo2BlOQkWlyJImwqL
hdWIMmhHOwmJE51oMw3UkWkUpJ3Yaq6SxCnFy+LMoxTBYGOdla/acsU7nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE08XnfIdq02pV+u8AS9uqmrJUv2MB8GA1UdIwQY
MBaAFODfM0RRMXYlKiy2kLz3BdZJgRH1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNE44elJGRXhkaVVxTExhUXZQY0Yxa21CRWZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9jYzNiNmUtYjc0OS00NWYxLWE4Njgt
MjVlMjFjOWU3ZGU5LzEvNE44elJGRXhkaVVxTExhUXZQY0Yxa21CRWZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9jYzNiNmUtYjc0OS00NWYxLWE4NjgtMjVlMjFjOWU3ZGU5
LzEvNE44elJGRXhkaVVxTExhUXZQY0Yxa21CRWZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaONBmgz/
AK0ePGgqrtwVn/eDKCXJj+WKU/XJkhvCymCELaknGghFmlGK3hNjhl+nk5l1s+E6
nmzmvLmz1aGQWBia3+UcjN8/S44J6XOxcT7pKJUFwNABgXXs1GdaLin8pe1yshR8
WHURpMprdOQpORIhj+3VMMAaqVMPCpaHqUDmsfOVinBWXhJhV3L1A+9hYPUUElND
0QScK+48GCQX9kGUdhzULp8I3rQtiWPFQyil3MbJ2h8xHu1dRMkQsU3WpC3zbAx0
npGiaHeDehi7x9XtZYg4uHt6EAPQfMUJ36GJ3BtRxyFvPMKNy47aTo1XMTEwhvId
KT1h8QL5z6K6kA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:07:28 2025 by rpki-client