Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft
File: 4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft (raw, json)
Hash identifier: OlyerUGK5/t8eLUfyRDkMS6gtpZitcYt83KkUeCNWAw=
Subject key identifier: 43:E8:AC:D9:1F:0C:EE:65:FD:C6:86:B5:08:68:3D:91:32:61:8D:0A
Authority key identifier: E2:7E:1D:D0:74:66:27:80:36:BA:5C:D9:43:D7:B0:E0:21:CF:86:28
Certificate issuer: /CN=e27e1dd07466278036ba5cd943d7b0e021cf8628
Certificate serial: 0197B5C4F9FFF8764C31161988C3F0882A52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft
Manifest number: 050C
Signing time: Sat 28 Jun 2025 09:01:14 +0000
Manifest this update: Sat 28 Jun 2025 09:01:14 +0000
Manifest next update: Sun 29 Jun 2025 09:01:14 +0000
Files and hashes: 1: 4n4d0HRmJ4A2ulzZQ9ew4CHPhig.crl (hash: pHiQKqnzczfBAZJuGuzmgZoGRSs3lOpJWGm8G7M5ML4=)
2: u706ESzCaab-BH-FndS7iMc1Dos.roa (hash: SWvew+/mCjLa2ti6o+xXEQuSDQFlw4Q8eQ8sw7EInq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft
rsync://rpki.ripe.net/repository/DEFAULT/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:f9:ff:f8:76:4c:31:16:19:88:c3:f0:88:2a:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e27e1dd07466278036ba5cd943d7b0e021cf8628
Validity
Not Before: Jun 28 09:01:14 2025 GMT
Not After : Jun 29 09:01:14 2025 GMT
Subject: CN=43e8acd91f0cee65fdc686b508683d9132618d0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:da:65:d8:33:a3:0f:eb:d6:5d:b6:04:02:19:
75:4b:02:f8:ab:d1:06:46:5c:21:6a:a7:30:c4:50:
e0:3c:b5:c3:dc:44:5c:e7:24:87:de:68:0a:e5:44:
9c:a3:43:74:98:98:b3:4b:81:f7:24:22:2a:cf:80:
99:6d:82:83:4a:64:49:94:eb:50:b8:bd:3a:62:75:
74:33:ff:b7:5a:a2:01:dc:8c:be:1d:27:7b:43:0e:
fa:35:e8:48:90:79:6c:1d:2c:cd:21:f4:da:11:4f:
61:c6:c1:98:00:3a:3a:85:01:69:16:66:3f:0f:98:
50:b3:eb:78:67:f3:0e:1b:b2:c4:7f:9a:97:53:2f:
03:34:ad:f6:26:e3:ca:a4:b2:79:7d:c2:42:46:cd:
97:2e:17:a7:93:58:2e:a4:ee:f3:c3:a5:9a:92:0d:
1d:54:eb:45:e0:14:82:a5:67:c0:43:13:86:ac:7f:
31:57:9a:67:0b:4c:03:58:72:dc:39:5b:44:ff:c8:
1c:ce:df:a5:3b:f8:fc:11:ed:90:a6:42:89:fb:13:
e3:21:34:32:35:6c:42:11:a3:c1:c6:60:1b:9f:db:
82:16:0d:d1:86:af:ef:e8:28:77:78:92:82:55:25:
87:ea:9f:d1:11:ca:16:30:72:5c:83:75:4d:65:dd:
0b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E8:AC:D9:1F:0C:EE:65:FD:C6:86:B5:08:68:3D:91:32:61:8D:0A
X509v3 Authority Key Identifier:
keyid:E2:7E:1D:D0:74:66:27:80:36:BA:5C:D9:43:D7:B0:E0:21:CF:86:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:05:02:e0:74:30:c7:aa:bb:c6:e6:04:49:2f:a7:ed:34:51:
77:87:64:dd:e9:5e:d3:0c:d9:a4:2a:e4:11:15:d4:25:c6:14:
4a:c2:d4:72:29:e6:e4:67:d3:70:75:68:16:60:75:8c:1d:c4:
59:0a:c5:c8:f6:d2:18:0a:2f:33:d4:25:bc:dd:83:76:21:86:
47:dd:f6:f1:d1:de:2d:9c:2b:73:13:b1:01:0d:f3:b0:79:59:
a4:cf:64:d5:4c:5b:55:00:a2:fa:ff:c8:bc:af:83:44:01:32:
03:89:79:90:f6:2f:18:49:4e:83:a6:e1:24:fb:70:f2:e5:68:
eb:05:df:45:4a:7b:52:62:f9:b8:29:cd:9b:c5:4c:c0:9f:c0:
78:50:27:c9:eb:97:e5:c3:b4:19:64:be:fd:32:81:95:2c:34:
b5:a1:af:50:c0:95:6a:d0:b0:3a:b8:26:16:a9:8a:15:17:ca:
61:e9:98:83:1b:08:25:23:fb:5f:4c:1d:b8:f5:8f:11:7f:19:
4a:32:6e:c8:58:c9:1c:df:39:47:29:7c:65:51:72:81:c6:d8:
88:19:03:bb:24:4e:13:8e:8d:64:0d:86:a7:c6:f3:e6:7a:c1:
fc:71:66:15:b8:80:db:37:34:5b:d2:91:ab:78:e4:72:2b:af:
a7:71:83:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1xPn/+HZMMRYZiMPwiCpSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyN2UxZGQwNzQ2NjI3ODAzNmJhNWNkOTQzZDdiMGUwMjFj
Zjg2MjgwHhcNMjUwNjI4MDkwMTE0WhcNMjUwNjI5MDkwMTE0WjAzMTEwLwYDVQQD
Eyg0M2U4YWNkOTFmMGNlZTY1ZmRjNjg2YjUwODY4M2Q5MTMyNjE4ZDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntpl2DOjD+vWXbYEAhl1SwL4q9EG
RlwhaqcwxFDgPLXD3ERc5ySH3mgK5USco0N0mJizS4H3JCIqz4CZbYKDSmRJlOtQ
uL06YnV0M/+3WqIB3Iy+HSd7Qw76NehIkHlsHSzNIfTaEU9hxsGYADo6hQFpFmY/
D5hQs+t4Z/MOG7LEf5qXUy8DNK32JuPKpLJ5fcJCRs2XLhenk1gupO7zw6Wakg0d
VOtF4BSCpWfAQxOGrH8xV5pnC0wDWHLcOVtE/8gczt+lO/j8Ee2QpkKJ+xPjITQy
NWxCEaPBxmAbn9uCFg3Rhq/v6Ch3eJKCVSWH6p/REcoWMHJcg3VNZd0LjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEPorNkfDO5l/caGtQhoPZEyYY0KMB8GA1UdIwQY
MBaAFOJ+HdB0ZieANrpc2UPXsOAhz4YoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNG40ZDBIUm1KNEEydWx6WlE5ZXc0Q0hQaGlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9hZTBkOGItNDg1Ny00YmE3LWIzNDIt
NWVjMzM2YmY3NDNiLzEvNG40ZDBIUm1KNEEydWx6WlE5ZXc0Q0hQaGlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9hZTBkOGItNDg1Ny00YmE3LWIzNDItNWVjMzM2YmY3NDNi
LzEvNG40ZDBIUm1KNEEydWx6WlE5ZXc0Q0hQaGlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArwUC4HQw
x6q7xuYESS+n7TRRd4dk3ele0wzZpCrkERXUJcYUSsLUcinm5GfTcHVoFmB1jB3E
WQrFyPbSGAovM9QlvN2DdiGGR9328dHeLZwrcxOxAQ3zsHlZpM9k1UxbVQCi+v/I
vK+DRAEyA4l5kPYvGElOg6bhJPtw8uVo6wXfRUp7UmL5uCnNm8VMwJ/AeFAnyeuX
5cO0GWS+/TKBlSw0taGvUMCVatCwOrgmFqmKFRfKYemYgxsIJSP7X0wduPWPEX8Z
SjJuyFjJHN85Ryl8ZVFygcbYiBkDuyROE46NZA2Gp8bz5nrB/HFmFbiA2zc0W9KR
q3jkciuvp3GDGw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:01:39 2025 by rpki-client