Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft
File: 4wEfCFnQaghJdfTovStVZxDdjDA.mft (raw, json)
Hash identifier: gw1aufrt2XsccJhdLG43yY+PTsv64jg+iUtaPYQOTOY=
Subject key identifier: 19:15:D4:95:4D:1A:48:3B:D4:EF:31:6A:35:CD:A8:19:8F:F6:0E:60
Authority key identifier: E3:01:1F:08:59:D0:6A:08:49:75:F4:E8:BD:2B:55:67:10:DD:8C:30
Certificate issuer: /CN=e3011f0859d06a084975f4e8bd2b556710dd8c30
Certificate serial: 01984219CD464384854E8E4CAFC3D49800B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wEfCFnQaghJdfTovStVZxDdjDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft
Manifest number: 1087
Signing time: Fri 25 Jul 2025 15:00:43 +0000
Manifest this update: Fri 25 Jul 2025 15:00:43 +0000
Manifest next update: Sat 26 Jul 2025 15:00:43 +0000
Files and hashes: 1: 4wEfCFnQaghJdfTovStVZxDdjDA.crl (hash: cgjXsVYiBbmluDntGMXcW/KHKKYRSpODELdzMZMhjAs=)
2: y5czNixkNluft47-krcqIbdqVD0.roa (hash: AmEHJkAG0oDmal6HjQJOOd7Nfm7cgEA//96C9SqFxV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4wEfCFnQaghJdfTovStVZxDdjDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 15:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:42:19:cd:46:43:84:85:4e:8e:4c:af:c3:d4:98:00:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3011f0859d06a084975f4e8bd2b556710dd8c30
Validity
Not Before: Jul 25 15:00:43 2025 GMT
Not After : Jul 26 15:00:43 2025 GMT
Subject: CN=1915d4954d1a483bd4ef316a35cda8198ff60e60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fe:0c:7e:24:70:51:ea:61:95:3f:59:2a:e6:
a0:ee:11:ec:b3:59:77:1d:20:dc:09:2d:7c:b5:ef:
6c:cf:ed:f7:49:d2:2c:a6:c8:0f:44:57:4f:6e:c2:
b9:db:17:ac:bc:6f:b4:4f:44:fa:19:e6:a8:aa:4f:
9a:10:c0:20:fd:92:d6:c2:93:1a:f5:57:b4:63:c4:
c5:6a:1c:c3:e2:ed:8e:84:6d:ea:58:bf:8d:78:0e:
1d:eb:03:9b:ef:c9:6a:1c:9d:02:b3:4e:71:da:02:
ab:0c:e8:7f:37:da:ba:9f:a3:bd:75:8b:34:a0:d4:
10:ab:cc:e9:6a:be:30:15:fb:17:0a:da:52:0f:25:
3b:d8:ae:7c:89:0d:df:6e:e1:76:80:b6:25:67:34:
f0:bf:b9:60:73:cb:04:69:51:ed:e3:41:66:d8:57:
df:65:da:80:b6:c2:6b:1d:d0:2b:9f:c5:a1:f3:e3:
0b:33:eb:1d:b1:bb:7a:4b:25:bd:aa:58:d8:2f:67:
97:3a:71:b7:0b:a1:a0:28:79:d0:53:7d:a4:8f:03:
4f:96:05:02:3c:3a:d7:f8:e9:32:89:84:5e:38:68:
15:18:96:ec:70:7d:18:83:26:9e:9c:b5:e9:94:92:
d0:68:9c:51:03:51:85:73:c2:f9:0d:dd:55:d2:a4:
0e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:15:D4:95:4D:1A:48:3B:D4:EF:31:6A:35:CD:A8:19:8F:F6:0E:60
X509v3 Authority Key Identifier:
keyid:E3:01:1F:08:59:D0:6A:08:49:75:F4:E8:BD:2B:55:67:10:DD:8C:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wEfCFnQaghJdfTovStVZxDdjDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:46:63:9c:1d:4d:d8:39:43:0b:0b:4b:bb:3a:0e:a6:07:de:
a6:13:78:8a:02:a6:fc:36:dc:1d:bc:14:a0:2b:60:27:99:52:
6a:a4:a5:90:b3:17:16:87:4f:52:ee:1d:cf:33:2b:3f:16:f6:
fa:03:2d:2f:11:eb:29:19:98:70:c0:ea:4a:49:be:ae:a3:10:
35:08:d0:a5:f6:da:17:13:7a:15:7d:f8:3c:fd:6d:88:d7:fd:
47:b7:53:40:97:a1:54:d5:3f:47:29:92:6b:a6:8c:3d:6f:c9:
c2:46:f8:19:6c:b1:3a:7a:f3:95:37:f9:ac:26:62:c1:da:1b:
4c:c6:c4:e6:62:c6:bb:42:74:d1:0a:72:bd:04:af:6f:9b:d1:
b9:88:a0:ea:0d:85:c9:00:b4:3a:e4:48:5f:47:d1:93:b4:27:
55:ca:35:5f:0a:03:fe:0b:95:f2:ea:84:95:4d:59:33:fa:ff:
79:af:4d:ae:e0:9a:68:80:29:96:11:c8:83:dd:9f:41:80:a6:
a0:0a:37:ae:0a:c1:f1:36:46:12:23:35:b4:2b:72:25:9a:87:
c6:0b:a7:b3:eb:56:f2:c8:3f:46:d3:bd:e0:eb:ab:8d:ff:2b:
07:78:2e:a1:40:28:d9:79:4f:75:e3:ab:50:d5:f6:bf:03:fe:
6b:00:44:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhCGc1GQ4SFTo5Mr8PUmACwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMDExZjA4NTlkMDZhMDg0OTc1ZjRlOGJkMmI1NTY3MTBk
ZDhjMzAwHhcNMjUwNzI1MTUwMDQzWhcNMjUwNzI2MTUwMDQzWjAzMTEwLwYDVQQD
EygxOTE1ZDQ5NTRkMWE0ODNiZDRlZjMxNmEzNWNkYTgxOThmZjYwZTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwv4MfiRwUephlT9ZKuag7hHss1l3
HSDcCS18te9sz+33SdIspsgPRFdPbsK52xesvG+0T0T6Geaoqk+aEMAg/ZLWwpMa
9Ve0Y8TFahzD4u2OhG3qWL+NeA4d6wOb78lqHJ0Cs05x2gKrDOh/N9q6n6O9dYs0
oNQQq8zpar4wFfsXCtpSDyU72K58iQ3fbuF2gLYlZzTwv7lgc8sEaVHt40Fm2Fff
ZdqAtsJrHdArn8Wh8+MLM+sdsbt6SyW9qljYL2eXOnG3C6GgKHnQU32kjwNPlgUC
PDrX+OkyiYReOGgVGJbscH0YgyaenLXplJLQaJxRA1GFc8L5Dd1V0qQOEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBkV1JVNGkg71O8xajXNqBmP9g5gMB8GA1UdIwQY
MBaAFOMBHwhZ0GoISXX06L0rVWcQ3YwwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHdFZkNGblFhZ2hKZGZUb3ZTdFZaeERkakRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9lOGY3MjctY2IyMy00M2NlLTg1ZDIt
ZDQ4YjdkMjYyNGRiLzEvNHdFZkNGblFhZ2hKZGZUb3ZTdFZaeERkakRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9lOGY3MjctY2IyMy00M2NlLTg1ZDItZDQ4YjdkMjYyNGRi
LzEvNHdFZkNGblFhZ2hKZGZUb3ZTdFZaeERkakRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIkZjnB1N
2DlDCwtLuzoOpgfephN4igKm/DbcHbwUoCtgJ5lSaqSlkLMXFodPUu4dzzMrPxb2
+gMtLxHrKRmYcMDqSkm+rqMQNQjQpfbaFxN6FX34PP1tiNf9R7dTQJehVNU/RymS
a6aMPW/Jwkb4GWyxOnrzlTf5rCZiwdobTMbE5mLGu0J00QpyvQSvb5vRuYig6g2F
yQC0OuRIX0fRk7QnVco1XwoD/guV8uqElU1ZM/r/ea9NruCaaIAplhHIg92fQYCm
oAo3rgrB8TZGEiM1tCtyJZqHxguns+tW8sg/RtO94Ourjf8rB3guoUAo2XlPdeOr
UNX2vwP+awBERQ==
-----END CERTIFICATE-----
Generated at Sat Jul 26 00:04:53 2025 by rpki-client