Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.mft
File: e4mF-uoIWYwFzDC4LigjBq95MxY.mft (raw, json)
Hash identifier: O4int6XlKT2+SaGa83N6y+qfsUeevk63spEP/wqUSoY=
Subject key identifier: FB:DD:17:70:43:7A:09:BA:1D:FC:DA:AF:6C:7B:EC:92:8D:9A:EF:A0
Authority key identifier: 7B:89:85:FA:EA:08:59:8C:05:CC:30:B8:2E:28:23:06:AF:79:33:16
Certificate issuer: /CN=7b8985faea08598c05cc30b82e282306af793316
Certificate serial: 0197C0EDA64703B22FCD7BBC08D5ABEC4479
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4mF-uoIWYwFzDC4LigjBq95MxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.mft
Manifest number: 0E55
Signing time: Mon 30 Jun 2025 13:01:29 +0000
Manifest this update: Mon 30 Jun 2025 13:01:29 +0000
Manifest next update: Tue 01 Jul 2025 13:01:29 +0000
Files and hashes: 1: e4mF-uoIWYwFzDC4LigjBq95MxY.crl (hash: mgOoqiedQZYDievXUs197eueQ7D3Heqv9S9RYy5NMco=)
2: wezzDoLmoG44JNaFHHcOefdwrnE.roa (hash: feMtqmKbJF8l19fJuaMh5zzlgwe36jwzuX192DfrtQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/e4mF-uoIWYwFzDC4LigjBq95MxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 13:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:ed:a6:47:03:b2:2f:cd:7b:bc:08:d5:ab:ec:44:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b8985faea08598c05cc30b82e282306af793316
Validity
Not Before: Jun 30 13:01:29 2025 GMT
Not After : Jul 1 13:01:29 2025 GMT
Subject: CN=fbdd1770437a09ba1dfcdaaf6c7bec928d9aefa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:2b:b6:67:07:48:68:9b:1c:aa:f7:93:b2:a8:
16:43:42:33:a3:33:ad:15:f8:05:43:60:9b:95:02:
09:05:54:9d:a5:96:35:6b:36:3b:d3:0e:17:7a:e2:
70:5e:70:67:c7:3f:af:c5:52:cc:5d:37:db:94:97:
c1:50:90:0d:73:f5:83:ba:4f:e8:17:9c:cd:93:2e:
73:6f:4a:e8:92:3a:f0:66:ec:53:8c:1d:74:c5:1b:
80:4d:ef:07:a5:e0:f9:41:76:0c:64:5d:e8:0d:c5:
a7:84:67:72:eb:a5:41:dd:0c:ed:50:2f:f6:f0:64:
db:84:71:72:2b:84:b2:32:0d:3e:b8:20:aa:fb:51:
8e:7c:d9:20:24:66:52:0c:01:69:67:11:66:ff:ca:
b4:70:15:70:e4:90:53:81:6e:b0:ad:bf:78:e9:94:
29:17:36:50:bb:02:b7:7c:4b:fd:b2:76:9e:57:e6:
61:2f:13:69:51:73:fb:11:26:28:98:81:75:bd:69:
de:0f:e3:61:66:68:a3:1e:bf:ab:7a:75:7c:3e:1c:
e4:8b:cc:a1:0e:b8:56:ce:3a:c9:f8:48:d0:4c:94:
83:43:34:42:d2:71:9d:29:73:83:3d:fa:2c:50:0b:
c5:a7:11:ac:c6:24:c9:d2:d8:ce:e4:6f:3c:58:12:
99:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:DD:17:70:43:7A:09:BA:1D:FC:DA:AF:6C:7B:EC:92:8D:9A:EF:A0
X509v3 Authority Key Identifier:
keyid:7B:89:85:FA:EA:08:59:8C:05:CC:30:B8:2E:28:23:06:AF:79:33:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4mF-uoIWYwFzDC4LigjBq95MxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:a5:eb:b4:2e:54:1e:19:a1:c9:69:41:f8:99:0e:77:0f:c2:
9f:8e:2b:e9:c3:1b:21:f0:57:59:cc:2f:82:40:91:c4:64:0c:
16:ad:80:27:54:91:cd:34:3e:62:60:64:f1:72:23:7f:9b:0c:
25:20:4e:a8:55:97:14:cf:6b:b0:fe:d3:bc:a6:3a:48:3d:5a:
dd:91:8e:01:4e:ce:7d:22:a0:ae:41:dc:03:2c:a6:28:b5:7b:
2e:44:74:46:dd:6e:cc:08:c1:38:ba:18:ff:9c:87:8b:7c:a5:
25:05:a2:de:0f:bc:8b:22:c1:77:c9:5d:49:b3:9d:41:86:7f:
eb:33:21:17:22:bf:72:d6:cf:11:ae:01:f3:00:6d:dd:f9:fc:
30:41:5b:e1:6e:f2:1c:c0:1e:03:09:09:d8:a3:27:5e:7b:b8:
7f:01:ad:d5:f3:09:eb:21:91:fd:2d:1b:7d:82:ec:ce:12:f4:
00:49:1d:ea:7c:2a:2b:19:07:dd:60:1f:4a:c3:a8:27:93:16:
ac:16:ee:ae:1d:0d:eb:24:79:60:bd:65:ac:03:cd:26:85:28:
35:38:a1:17:1a:47:bd:80:14:6c:fb:48:4f:c8:37:25:77:9e:
44:1d:e6:17:e2:de:b1:1d:61:7e:9a:74:f1:c2:03:4f:92:21:
42:d8:cd:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfA7aZHA7IvzXu8CNWr7ER5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiODk4NWZhZWEwODU5OGMwNWNjMzBiODJlMjgyMzA2YWY3
OTMzMTYwHhcNMjUwNjMwMTMwMTI5WhcNMjUwNzAxMTMwMTI5WjAzMTEwLwYDVQQD
EyhmYmRkMTc3MDQzN2EwOWJhMWRmY2RhYWY2YzdiZWM5MjhkOWFlZmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Su2ZwdIaJscqveTsqgWQ0IzozOt
FfgFQ2CblQIJBVSdpZY1azY70w4XeuJwXnBnxz+vxVLMXTfblJfBUJANc/WDuk/o
F5zNky5zb0rokjrwZuxTjB10xRuATe8HpeD5QXYMZF3oDcWnhGdy66VB3QztUC/2
8GTbhHFyK4SyMg0+uCCq+1GOfNkgJGZSDAFpZxFm/8q0cBVw5JBTgW6wrb946ZQp
FzZQuwK3fEv9snaeV+ZhLxNpUXP7ESYomIF1vWneD+NhZmijHr+renV8Phzki8yh
DrhWzjrJ+EjQTJSDQzRC0nGdKXODPfosUAvFpxGsxiTJ0tjO5G88WBKZ/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPvdF3BDegm6Hfzar2x77JKNmu+gMB8GA1UdIwQY
MBaAFHuJhfrqCFmMBcwwuC4oIwaveTMWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTRtRi11b0lXWXdGekRDNExpZ2pCcTk1TXhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9lNTliYTEtM2Q1Yi00Mjk5LWE4NTIt
MzdjODZlMzU1MjY3LzEvZTRtRi11b0lXWXdGekRDNExpZ2pCcTk1TXhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9lNTliYTEtM2Q1Yi00Mjk5LWE4NTItMzdjODZlMzU1MjY3
LzEvZTRtRi11b0lXWXdGekRDNExpZ2pCcTk1TXhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADKXrtC5U
HhmhyWlB+JkOdw/Cn44r6cMbIfBXWcwvgkCRxGQMFq2AJ1SRzTQ+YmBk8XIjf5sM
JSBOqFWXFM9rsP7TvKY6SD1a3ZGOAU7OfSKgrkHcAyymKLV7LkR0Rt1uzAjBOLoY
/5yHi3ylJQWi3g+8iyLBd8ldSbOdQYZ/6zMhFyK/ctbPEa4B8wBt3fn8MEFb4W7y
HMAeAwkJ2KMnXnu4fwGt1fMJ6yGR/S0bfYLszhL0AEkd6nwqKxkH3WAfSsOoJ5MW
rBburh0N6yR5YL1lrAPNJoUoNTihFxpHvYAUbPtIT8g3JXeeRB3mF+LesR1hfpp0
8cIDT5IhQtjNMA==
-----END CERTIFICATE-----
Generated at Mon Jun 30 17:26:05 2025 by rpki-client