Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft
File: 4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft (raw, json)
Hash identifier: 2vsmj36QkHHDFJmeR9Qd7YHhicGGsGBc++hxoVJjTX0=
Subject key identifier: EA:4D:31:47:99:01:AD:6C:72:EF:C1:6E:E3:95:4D:8B:EF:65:2A:64
Authority key identifier: E2:9E:D9:A9:D1:B6:B5:38:3E:BF:94:6D:5F:C5:49:80:61:25:63:EA
Certificate issuer: /CN=e29ed9a9d1b6b5383ebf946d5fc54980612563ea
Certificate serial: 0198D583E8BB637D6433D454F2C49D61332F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4p7ZqdG2tTg-v5RtX8VJgGElY-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 06:00:48 +0000
Manifest this update: Sat 23 Aug 2025 06:00:48 +0000
Manifest next update: Sun 24 Aug 2025 06:00:48 +0000
Files and hashes: 1: 4p7ZqdG2tTg-v5RtX8VJgGElY-o.crl (hash: zJUTlHOgwZ2PURYB/1P8vcseydLWwLzVauMOKXJGdec=)
2: BfpSqqWPnz2zm8axpIU080CSsRs.roa (hash: i9cs+yG6O1Ft1obwZZ0jOFlWDCTv2KU1uV2QUmB00UQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4p7ZqdG2tTg-v5RtX8VJgGElY-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:e8:bb:63:7d:64:33:d4:54:f2:c4:9d:61:33:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e29ed9a9d1b6b5383ebf946d5fc54980612563ea
Validity
Not Before: Aug 23 06:00:48 2025 GMT
Not After : Aug 24 06:00:48 2025 GMT
Subject: CN=ea4d31479901ad6c72efc16ee3954d8bef652a64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0a:fa:d9:f8:87:1b:8a:82:67:25:33:da:ec:
94:d8:bb:dc:74:b5:b5:25:11:f6:95:9c:5f:3b:bc:
df:48:8d:7c:c1:b9:1c:22:ff:a4:24:20:f2:d7:ee:
27:be:14:39:86:9a:4c:6b:2a:ef:f0:0a:79:7c:10:
97:47:46:9e:64:72:95:f9:c0:8f:9b:de:16:d8:7f:
23:81:9f:03:16:b2:d1:9a:b3:4f:13:00:57:56:c5:
6c:90:cd:66:c7:5b:80:3d:b4:c0:ad:70:1b:a0:be:
bc:03:1a:ae:ba:35:a2:11:d7:f2:04:e5:84:d3:43:
fa:a3:e5:61:5b:02:58:99:37:0a:56:91:20:33:16:
ca:50:bf:2e:cc:3e:5f:05:0c:1c:49:87:5c:6f:e6:
aa:53:23:f8:bd:e3:36:e8:6a:7f:e9:82:6d:83:6c:
40:3a:d3:67:0b:64:00:bd:83:c4:cd:fa:e7:03:57:
59:13:e3:d8:63:0f:cb:12:70:b0:ed:cc:f1:c5:0f:
9b:c4:80:f0:ea:41:f0:97:2d:fe:ad:78:4d:65:64:
d3:9a:3c:c4:fc:60:83:8b:4a:d1:c7:04:f6:fd:18:
97:32:d8:84:a7:21:dd:ea:ae:5c:e7:b6:2f:9b:e2:
15:4c:18:73:7f:97:18:61:bc:f0:bb:b1:65:c7:93:
f5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:4D:31:47:99:01:AD:6C:72:EF:C1:6E:E3:95:4D:8B:EF:65:2A:64
X509v3 Authority Key Identifier:
keyid:E2:9E:D9:A9:D1:B6:B5:38:3E:BF:94:6D:5F:C5:49:80:61:25:63:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4p7ZqdG2tTg-v5RtX8VJgGElY-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:bc:e7:a1:8e:aa:12:bd:29:b6:7c:78:71:ae:05:85:a6:4a:
00:d2:16:6d:a1:2a:ff:81:33:62:02:b8:84:07:fa:18:d3:5c:
1e:a8:af:28:e8:9c:8c:c7:22:ef:c0:32:f3:9e:46:7c:c2:81:
68:b3:5a:90:0f:b5:92:5c:fc:ba:b3:13:a3:4f:d7:b2:2c:fe:
a1:3d:36:5d:af:ce:f2:bc:fb:53:b1:fd:11:10:89:a6:7b:9c:
44:c3:10:ae:7b:8b:03:70:e8:40:6a:aa:25:38:84:1d:b2:a0:
63:5c:95:54:8b:81:41:12:ad:fc:26:60:e4:bd:06:76:aa:b8:
eb:59:46:58:95:ed:32:66:08:40:0f:0a:9b:dc:f2:1d:49:b3:
8c:c8:2f:23:86:89:94:9a:e5:87:e3:5e:89:ef:c1:35:7d:16:
94:37:ec:19:fe:23:67:7a:09:c3:b6:65:3e:cd:06:7d:0e:03:
8d:ba:b7:c5:42:6c:3b:6f:39:7f:a8:1b:74:95:5b:42:a6:bd:
19:dc:8a:fd:7f:68:89:1a:bf:ac:26:a6:29:c0:da:07:b5:9a:
28:cf:b3:e2:ca:97:49:62:28:1e:09:91:a8:25:9c:f6:d5:0c:
70:79:d4:0f:10:44:b2:b5:f4:c1:68:ed:ae:b0:0a:f1:ab:43:
dd:aa:5b:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg+i7Y31kM9RU8sSdYTMvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyOWVkOWE5ZDFiNmI1MzgzZWJmOTQ2ZDVmYzU0OTgwNjEy
NTYzZWEwHhcNMjUwODIzMDYwMDQ4WhcNMjUwODI0MDYwMDQ4WjAzMTEwLwYDVQQD
EyhlYTRkMzE0Nzk5MDFhZDZjNzJlZmMxNmVlMzk1NGQ4YmVmNjUyYTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAr62fiHG4qCZyUz2uyU2LvcdLW1
JRH2lZxfO7zfSI18wbkcIv+kJCDy1+4nvhQ5hppMayrv8Ap5fBCXR0aeZHKV+cCP
m94W2H8jgZ8DFrLRmrNPEwBXVsVskM1mx1uAPbTArXAboL68AxquujWiEdfyBOWE
00P6o+VhWwJYmTcKVpEgMxbKUL8uzD5fBQwcSYdcb+aqUyP4veM26Gp/6YJtg2xA
OtNnC2QAvYPEzfrnA1dZE+PYYw/LEnCw7czxxQ+bxIDw6kHwly3+rXhNZWTTmjzE
/GCDi0rRxwT2/RiXMtiEpyHd6q5c57Yvm+IVTBhzf5cYYbzwu7Flx5P1jQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOpNMUeZAa1scu/BbuOVTYvvZSpkMB8GA1UdIwQY
MBaAFOKe2anRtrU4Pr+UbV/FSYBhJWPqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHA3WnFkRzJ0VGctdjVSdFg4VkpnR0VsWS1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8zOGVjNWItMzM2ZC00YTFjLWE4NGEt
ZjZjNjg1OWIzMGYwLzEvNHA3WnFkRzJ0VGctdjVSdFg4VkpnR0VsWS1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8zOGVjNWItMzM2ZC00YTFjLWE4NGEtZjZjNjg1OWIzMGYw
LzEvNHA3WnFkRzJ0VGctdjVSdFg4VkpnR0VsWS1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd7znoY6q
Er0ptnx4ca4FhaZKANIWbaEq/4EzYgK4hAf6GNNcHqivKOicjMci78Ay855GfMKB
aLNakA+1klz8urMTo0/Xsiz+oT02Xa/O8rz7U7H9ERCJpnucRMMQrnuLA3DoQGqq
JTiEHbKgY1yVVIuBQRKt/CZg5L0Gdqq461lGWJXtMmYIQA8Km9zyHUmzjMgvI4aJ
lJrlh+Neie/BNX0WlDfsGf4jZ3oJw7ZlPs0GfQ4Djbq3xUJsO285f6gbdJVbQqa9
GdyK/X9oiRq/rCamKcDaB7WaKM+z4sqXSWIoHgmRqCWc9tUMcHnUDxBEsrX0wWjt
rrAK8atD3apbSw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:31:56 2025 by rpki-client