Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
File: 4C7HTaVJNr70L-JgWX3W0h3M7fw.mft (raw, json)
Hash identifier: fAN0bzHXee3nMfUw86/SA+L2VZLWQdAD5+TmgTPOyFc=
Subject key identifier: 7F:A8:E4:EC:12:9C:56:18:D3:30:CD:A5:E8:1A:A6:53:F2:54:EC:8F
Authority key identifier: E0:2E:C7:4D:A5:49:36:BE:F4:2F:E2:60:59:7D:D6:D2:1D:CC:ED:FC
Certificate issuer: /CN=e02ec74da54936bef42fe260597dd6d21dccedfc
Certificate serial: 0197B7EACE9BE9B1C28F3B37D0CD59D38379
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
Manifest number: 151C
Signing time: Sat 28 Jun 2025 19:01:48 +0000
Manifest this update: Sat 28 Jun 2025 19:01:48 +0000
Manifest next update: Sun 29 Jun 2025 19:01:48 +0000
Files and hashes: 1: 4C7HTaVJNr70L-JgWX3W0h3M7fw.crl (hash: 6pG1x0nBuENzWaPU8T49kRwHi2uJ+qCXDpRhKRxXjgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:ce:9b:e9:b1:c2:8f:3b:37:d0:cd:59:d3:83:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e02ec74da54936bef42fe260597dd6d21dccedfc
Validity
Not Before: Jun 28 19:01:48 2025 GMT
Not After : Jun 29 19:01:48 2025 GMT
Subject: CN=7fa8e4ec129c5618d330cda5e81aa653f254ec8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c0:9e:75:99:b3:c4:ab:3d:a9:b1:42:dd:98:
cf:3b:6c:e6:b8:21:57:dd:c8:34:37:d8:68:66:fc:
98:dc:b5:b7:ad:4b:d6:40:73:bb:6c:4c:6e:95:44:
fc:e3:3f:d0:e8:04:f7:40:35:af:d3:8e:fe:04:5c:
4d:64:83:5e:4b:7a:bb:09:3b:77:3e:d8:66:c8:cf:
d0:48:36:15:ea:12:1b:40:ae:f4:ba:62:90:44:5a:
f7:a1:a8:19:cb:11:cc:b3:1d:a0:7d:d7:c5:13:c4:
b8:49:20:53:8f:90:97:30:f2:61:4a:00:2a:3c:c8:
4e:f1:81:5b:c4:6b:e1:fc:0a:e7:87:75:e5:4e:18:
97:0b:3e:c5:8d:e9:f8:9d:31:22:30:9e:de:3e:1a:
8a:9d:7f:6c:a5:73:9e:07:7e:bc:59:52:41:15:70:
e2:85:9b:8b:ae:d7:14:de:76:ac:c5:a5:83:c1:ee:
05:59:c4:00:f7:b7:ec:ea:4e:f9:1f:20:9b:e2:93:
e4:50:dd:7b:5d:cc:2a:65:30:9e:ff:88:60:43:36:
4a:39:1e:f5:10:4c:70:09:3a:17:fa:8c:8b:33:95:
a0:05:bc:05:85:01:d8:e5:f4:e7:76:71:67:c6:29:
a8:0a:65:7f:d9:42:82:fe:3c:46:52:ea:d2:ba:42:
be:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A8:E4:EC:12:9C:56:18:D3:30:CD:A5:E8:1A:A6:53:F2:54:EC:8F
X509v3 Authority Key Identifier:
keyid:E0:2E:C7:4D:A5:49:36:BE:F4:2F:E2:60:59:7D:D6:D2:1D:CC:ED:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:61:25:43:53:4f:d9:79:91:97:7b:6d:55:d2:9e:44:f3:4a:
a0:09:21:00:d9:9d:1f:cc:59:42:d8:5b:d5:0e:18:10:7b:eb:
31:85:ff:56:15:f9:54:0f:39:83:37:1c:8f:51:28:0f:7d:48:
08:4f:6c:f3:a3:d4:4e:70:1f:05:3e:9d:09:be:d7:a5:95:a3:
15:0b:65:05:c3:91:23:46:f2:fc:83:00:c1:15:26:59:f8:e3:
4b:82:72:37:82:ff:92:a5:ee:24:f2:ee:29:14:d3:63:0b:63:
f5:68:23:5b:92:d6:91:c6:be:c5:72:74:5d:ed:80:ab:c5:58:
b8:39:8e:2d:5c:18:21:78:26:39:9c:39:b3:a0:fe:c5:82:25:
2c:41:30:61:6c:b4:f8:17:f1:08:61:99:ef:db:ea:84:8e:7c:
fc:0b:16:ae:3a:c5:f5:69:92:4a:b3:ae:23:07:82:e0:1a:9a:
6b:35:fe:b3:de:38:92:93:b7:88:85:a0:8a:d5:9b:02:38:a4:
8d:43:ea:9e:4e:74:a2:8e:01:5c:eb:ea:51:58:54:3b:ff:f5:
1a:db:6e:6d:4f:85:ce:44:60:18:46:3d:6e:e9:c6:17:8b:99:
83:e2:78:1b:cd:eb:90:7f:82:bf:51:52:c8:dc:92:98:50:79:
67:09:2a:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36s6b6bHCjzs30M1Z04N5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwMmVjNzRkYTU0OTM2YmVmNDJmZTI2MDU5N2RkNmQyMWRj
Y2VkZmMwHhcNMjUwNjI4MTkwMTQ4WhcNMjUwNjI5MTkwMTQ4WjAzMTEwLwYDVQQD
Eyg3ZmE4ZTRlYzEyOWM1NjE4ZDMzMGNkYTVlODFhYTY1M2YyNTRlYzhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4MCedZmzxKs9qbFC3ZjPO2zmuCFX
3cg0N9hoZvyY3LW3rUvWQHO7bExulUT84z/Q6AT3QDWv047+BFxNZINeS3q7CTt3
PthmyM/QSDYV6hIbQK70umKQRFr3oagZyxHMsx2gfdfFE8S4SSBTj5CXMPJhSgAq
PMhO8YFbxGvh/Arnh3XlThiXCz7Fjen4nTEiMJ7ePhqKnX9spXOeB368WVJBFXDi
hZuLrtcU3nasxaWDwe4FWcQA97fs6k75HyCb4pPkUN17XcwqZTCe/4hgQzZKOR71
EExwCToX+oyLM5WgBbwFhQHY5fTndnFnximoCmV/2UKC/jxGUurSukK+UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH+o5OwSnFYY0zDNpegaplPyVOyPMB8GA1UdIwQY
MBaAFOAux02lSTa+9C/iYFl91tIdzO38MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEM3SFRhVkpOcjcwTC1KZ1dYM1cwaDNNN2Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi83NGUwMTMtNWExYy00MDAzLWJmOTIt
MDFiOGIwZjRiMDE5LzEvNEM3SFRhVkpOcjcwTC1KZ1dYM1cwaDNNN2Z3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi83NGUwMTMtNWExYy00MDAzLWJmOTItMDFiOGIwZjRiMDE5
LzEvNEM3SFRhVkpOcjcwTC1KZ1dYM1cwaDNNN2Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj2ElQ1NP
2XmRl3ttVdKeRPNKoAkhANmdH8xZQthb1Q4YEHvrMYX/VhX5VA85gzccj1EoD31I
CE9s86PUTnAfBT6dCb7XpZWjFQtlBcORI0by/IMAwRUmWfjjS4JyN4L/kqXuJPLu
KRTTYwtj9WgjW5LWkca+xXJ0Xe2Aq8VYuDmOLVwYIXgmOZw5s6D+xYIlLEEwYWy0
+BfxCGGZ79vqhI58/AsWrjrF9WmSSrOuIweC4BqaazX+s944kpO3iIWgitWbAjik
jUPqnk50oo4BXOvqUVhUO//1GttubU+FzkRgGEY9bunGF4uZg+J4G83rkH+Cv1FS
yNySmFB5ZwkqPA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:21:17 2025 by rpki-client