Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.mft
File: 4SLitYIzoZPR9yd4Vl1smNdhY6c.mft (raw, json)
Hash identifier: 2lvbBJ7HJM7h+ZJInTrahz3Iq76ydCGS5eRfTj+HVfU=
Subject key identifier: A1:8A:98:E9:43:C9:CF:F9:DC:6C:E7:1E:1F:89:4B:71:B4:E7:C6:B1
Authority key identifier: E1:22:E2:B5:82:33:A1:93:D1:F7:27:78:56:5D:6C:98:D7:61:63:A7
Certificate issuer: /CN=e122e2b58233a193d1f72778565d6c98d76163a7
Certificate serial: 0198D4A837F55CCC4F9C59169E41106ACBBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4SLitYIzoZPR9yd4Vl1smNdhY6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.mft
Manifest number: 1227
Signing time: Sat 23 Aug 2025 02:00:50 +0000
Manifest this update: Sat 23 Aug 2025 02:00:50 +0000
Manifest next update: Sun 24 Aug 2025 02:00:50 +0000
Files and hashes: 1: 4SLitYIzoZPR9yd4Vl1smNdhY6c.crl (hash: tIDuNQXnFuk6PMvsUM9UMhNnaaDwC/+mVFxnvr0iU0M=)
2: nD4yzDe8gN70BN6Uz9ud-RgMLcw.roa (hash: 7QOqgSW5O1ke2t+FI1SJBMG+D851WexAWFy5Iq9dI8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/4SLitYIzoZPR9yd4Vl1smNdhY6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:37:f5:5c:cc:4f:9c:59:16:9e:41:10:6a:cb:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e122e2b58233a193d1f72778565d6c98d76163a7
Validity
Not Before: Aug 23 02:00:50 2025 GMT
Not After : Aug 24 02:00:50 2025 GMT
Subject: CN=a18a98e943c9cff9dc6ce71e1f894b71b4e7c6b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3f:50:ab:16:21:5a:4f:33:fd:b9:32:c5:f6:
61:f4:23:ce:a5:dd:d1:37:fe:4f:f5:25:92:09:d3:
a0:28:8d:8a:93:6f:f7:57:48:1f:ed:ac:22:0e:62:
c1:a8:e8:71:35:24:b1:7d:b8:66:21:d6:f1:9a:ac:
64:6a:67:fb:e3:cb:91:f2:d1:1f:e2:36:6c:21:8a:
96:7f:9a:09:11:2a:aa:96:f8:b2:72:7e:b1:d3:da:
db:f4:8b:03:f9:4d:42:73:94:8f:b3:a0:11:94:e7:
d7:f6:41:fc:23:ce:f7:0e:50:57:a5:e6:1d:a9:7c:
5b:47:f8:31:c4:f2:1f:38:78:18:53:cb:26:fe:b9:
04:e3:26:10:a9:3a:b2:6f:f9:93:a3:bc:ff:02:c7:
ca:14:d9:a2:1b:9e:94:a1:c1:6c:2d:ad:54:7c:9c:
30:cc:f8:0a:38:e6:07:fa:88:d8:95:06:f4:cc:a8:
27:53:a3:80:43:81:b5:18:c7:82:c8:8d:c7:29:a5:
ab:c0:96:72:23:39:67:fb:1b:76:57:7d:c2:28:d6:
b7:15:77:50:99:aa:e5:f2:a3:35:a0:19:29:13:de:
95:ae:e1:44:de:b3:e9:13:b5:87:cf:24:3e:9e:e5:
d8:9a:6b:15:03:24:e5:f2:4a:9b:54:f8:42:87:65:
2a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:8A:98:E9:43:C9:CF:F9:DC:6C:E7:1E:1F:89:4B:71:B4:E7:C6:B1
X509v3 Authority Key Identifier:
keyid:E1:22:E2:B5:82:33:A1:93:D1:F7:27:78:56:5D:6C:98:D7:61:63:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SLitYIzoZPR9yd4Vl1smNdhY6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:b0:4b:d3:e5:9a:36:ce:88:56:95:44:3b:31:8b:86:4c:5d:
0d:f4:5c:6f:d5:27:d2:f7:ec:eb:83:11:b4:57:65:50:41:86:
5a:4e:22:01:3f:bd:95:01:41:dd:ee:56:57:32:af:6b:a4:9d:
2f:b1:0f:64:b7:73:0f:5f:72:f1:10:de:18:8f:74:e9:dc:84:
56:80:b0:ad:69:ef:bb:0b:97:78:fc:35:33:85:d5:11:61:a0:
35:58:07:71:db:2d:b4:40:14:f6:c4:0d:a3:90:eb:85:bb:65:
b9:0f:d5:e0:e4:84:cc:17:7d:7e:fb:3d:75:56:98:66:4e:7c:
ae:2f:e2:ef:a4:7c:a5:7b:8b:a5:43:38:5a:0d:85:77:fb:67:
bf:5a:b4:17:eb:cb:75:c8:ed:0b:95:3d:0b:de:43:34:a5:8b:
6c:93:65:32:38:03:69:ab:dd:bc:58:00:97:44:ac:8c:79:de:
ad:d2:ed:c6:74:76:14:10:e3:59:1b:25:3b:7d:1d:58:71:a7:
46:2e:e6:f8:5b:c4:49:61:85:31:27:e0:ab:00:de:68:5f:68:
26:89:6c:3f:c9:7d:ac:9b:48:d9:f4:83:ab:ab:37:d8:29:23:
ce:7a:7c:b9:84:b6:fe:8a:10:dd:26:4d:c3:38:7e:4f:36:33:
0c:c9:df:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUqDf1XMxPnFkWnkEQasu7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMjJlMmI1ODIzM2ExOTNkMWY3Mjc3ODU2NWQ2Yzk4ZDc2
MTYzYTcwHhcNMjUwODIzMDIwMDUwWhcNMjUwODI0MDIwMDUwWjAzMTEwLwYDVQQD
EyhhMThhOThlOTQzYzljZmY5ZGM2Y2U3MWUxZjg5NGI3MWI0ZTdjNmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqz9QqxYhWk8z/bkyxfZh9CPOpd3R
N/5P9SWSCdOgKI2Kk2/3V0gf7awiDmLBqOhxNSSxfbhmIdbxmqxkamf748uR8tEf
4jZsIYqWf5oJESqqlviycn6x09rb9IsD+U1Cc5SPs6ARlOfX9kH8I873DlBXpeYd
qXxbR/gxxPIfOHgYU8sm/rkE4yYQqTqyb/mTo7z/AsfKFNmiG56UocFsLa1UfJww
zPgKOOYH+ojYlQb0zKgnU6OAQ4G1GMeCyI3HKaWrwJZyIzln+xt2V33CKNa3FXdQ
marl8qM1oBkpE96VruFE3rPpE7WHzyQ+nuXYmmsVAyTl8kqbVPhCh2UqhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKGKmOlDyc/53GznHh+JS3G058axMB8GA1UdIwQY
MBaAFOEi4rWCM6GT0fcneFZdbJjXYWOnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFNMaXRZSXpvWlBSOXlkNFZsMXNtTmRoWTZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9kODE1ZmQtY2ZhYi00YTRhLTk1OTUt
NDE2NmI3NWIwOGFmLzEvNFNMaXRZSXpvWlBSOXlkNFZsMXNtTmRoWTZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9kODE1ZmQtY2ZhYi00YTRhLTk1OTUtNDE2NmI3NWIwOGFm
LzEvNFNMaXRZSXpvWlBSOXlkNFZsMXNtTmRoWTZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALLBL0+Wa
Ns6IVpVEOzGLhkxdDfRcb9Un0vfs64MRtFdlUEGGWk4iAT+9lQFB3e5WVzKva6Sd
L7EPZLdzD19y8RDeGI906dyEVoCwrWnvuwuXePw1M4XVEWGgNVgHcdsttEAU9sQN
o5DrhbtluQ/V4OSEzBd9fvs9dVaYZk58ri/i76R8pXuLpUM4Wg2Fd/tnv1q0F+vL
dcjtC5U9C95DNKWLbJNlMjgDaavdvFgAl0SsjHnerdLtxnR2FBDjWRslO30dWHGn
Ri7m+FvESWGFMSfgqwDeaF9oJolsP8l9rJtI2fSDq6s32Ckjznp8uYS2/ooQ3SZN
wzh+TzYzDMnfnw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:40:34 2025 by rpki-client