Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft
File: 4K4U6GPBsVoeouSaLrUEhT91tr0.mft (raw, json)
Hash identifier: T0+mjskkCSW/a7Ex3APozBAV+b+nhnu2hmRRkvyeH5U=
Subject key identifier: 25:8D:FD:16:C3:8B:C0:F3:5C:A0:EC:54:14:AC:9A:48:3C:37:BD:8B
Authority key identifier: E0:AE:14:E8:63:C1:B1:5A:1E:A2:E4:9A:2E:B5:04:85:3F:75:B6:BD
Certificate issuer: /CN=e0ae14e863c1b15a1ea2e49a2eb504853f75b6bd
Certificate serial: 01985268B5EEAE7464EDBBD8A4DEF2EC5DFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4K4U6GPBsVoeouSaLrUEhT91tr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft
Manifest number: 0697
Signing time: Mon 28 Jul 2025 19:00:50 +0000
Manifest this update: Mon 28 Jul 2025 19:00:50 +0000
Manifest next update: Tue 29 Jul 2025 19:00:50 +0000
Files and hashes: 1: 4K4U6GPBsVoeouSaLrUEhT91tr0.crl (hash: CF78U5YM5+BTibEBxXb4zqnDCsmTqNoTth6w9n1tFcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4K4U6GPBsVoeouSaLrUEhT91tr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 14:37:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:68:b5:ee:ae:74:64:ed:bb:d8:a4:de:f2:ec:5d:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0ae14e863c1b15a1ea2e49a2eb504853f75b6bd
Validity
Not Before: Jul 28 19:00:50 2025 GMT
Not After : Jul 29 19:00:50 2025 GMT
Subject: CN=258dfd16c38bc0f35ca0ec5414ac9a483c37bd8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:35:19:9d:37:fd:27:5a:39:b9:a3:f2:7d:0a:
8c:54:f1:0e:7d:3c:0a:8f:b0:9f:02:27:b8:1c:29:
a5:4a:0c:58:2f:ba:20:64:76:9f:05:54:84:f4:e4:
59:44:da:74:be:84:7f:54:64:5b:db:73:cf:bb:dd:
c8:78:c2:72:15:11:99:91:fe:7b:b4:d6:cb:29:be:
13:9a:41:2f:69:e3:58:af:e4:52:fb:91:90:51:4c:
45:84:1a:a2:99:36:aa:bc:e2:ae:69:c0:0b:90:a9:
6d:40:7e:39:2b:92:e4:7e:5c:e1:83:5b:d6:0a:ea:
d5:0d:0e:f7:15:69:e0:c8:6f:d6:1d:72:09:2a:0c:
86:8f:a4:ea:20:bf:79:11:8b:b6:68:6a:fe:ba:77:
c8:11:1c:50:77:81:6f:d5:72:e3:fd:6f:5e:61:a1:
42:82:a5:e5:26:24:fe:f4:2f:33:1e:64:54:d7:51:
06:28:1c:c9:cd:d4:b2:cc:7d:80:f6:04:44:a3:03:
1d:8e:78:5e:f7:46:05:7f:c5:e0:b2:0d:36:07:43:
9d:3e:95:37:f6:d1:a0:ea:d2:0c:7d:14:55:88:c1:
1d:ff:2f:31:ae:fa:73:5c:65:24:9a:cb:74:35:2e:
9f:0c:fb:a9:c4:20:e2:c0:b7:5f:a9:b0:ca:a4:66:
94:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:8D:FD:16:C3:8B:C0:F3:5C:A0:EC:54:14:AC:9A:48:3C:37:BD:8B
X509v3 Authority Key Identifier:
keyid:E0:AE:14:E8:63:C1:B1:5A:1E:A2:E4:9A:2E:B5:04:85:3F:75:B6:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4K4U6GPBsVoeouSaLrUEhT91tr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:e6:b1:3b:a0:4e:83:e0:d6:d0:ca:b5:c1:4c:77:13:87:7a:
51:34:ad:e6:62:58:ff:20:8e:e1:62:de:e6:25:ba:9f:eb:51:
34:55:67:05:4d:e8:81:9a:aa:a2:a6:23:8c:16:54:8e:7f:dd:
bd:62:c4:5c:74:ea:87:da:6e:af:f8:01:83:17:15:63:64:91:
95:6d:ad:51:41:14:4b:4d:8d:88:67:af:11:f4:b6:56:e7:57:
b4:3e:2a:fb:91:cf:53:41:ff:a7:01:81:9b:f2:a6:9f:e8:47:
36:df:12:2c:65:a0:8e:b4:27:eb:e8:d6:9a:b9:01:ac:a0:6f:
49:33:fb:2a:fc:d3:e4:21:bc:fb:95:95:0c:05:04:f9:23:6b:
29:5b:21:49:ce:7b:ca:84:d6:aa:a3:f7:80:a8:f6:9c:d4:bb:
5d:78:d4:79:72:e1:3f:5a:4e:3b:a8:a5:8e:be:1b:83:18:6d:
34:1f:25:ae:80:db:74:60:67:b9:4a:d8:4b:b4:7e:2d:b3:50:
70:e5:7e:89:d7:56:db:d6:21:d8:7d:b0:15:a3:db:82:22:ba:
3d:b7:96:0d:46:dd:27:b2:89:5d:b4:06:60:e2:d7:82:29:3b:
82:f6:68:5b:99:7e:05:d4:02:64:ab:00:d5:42:a1:d4:d8:22:
a5:3a:b7:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhSaLXurnRk7bvYpN7y7F38MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwYWUxNGU4NjNjMWIxNWExZWEyZTQ5YTJlYjUwNDg1M2Y3
NWI2YmQwHhcNMjUwNzI4MTkwMDUwWhcNMjUwNzI5MTkwMDUwWjAzMTEwLwYDVQQD
EygyNThkZmQxNmMzOGJjMGYzNWNhMGVjNTQxNGFjOWE0ODNjMzdiZDhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjUZnTf9J1o5uaPyfQqMVPEOfTwK
j7CfAie4HCmlSgxYL7ogZHafBVSE9ORZRNp0voR/VGRb23PPu93IeMJyFRGZkf57
tNbLKb4TmkEvaeNYr+RS+5GQUUxFhBqimTaqvOKuacALkKltQH45K5Lkflzhg1vW
CurVDQ73FWngyG/WHXIJKgyGj6TqIL95EYu2aGr+unfIERxQd4Fv1XLj/W9eYaFC
gqXlJiT+9C8zHmRU11EGKBzJzdSyzH2A9gREowMdjnhe90YFf8Xgsg02B0OdPpU3
9tGg6tIMfRRViMEd/y8xrvpzXGUkmst0NS6fDPupxCDiwLdfqbDKpGaUowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCWN/RbDi8DzXKDsVBSsmkg8N72LMB8GA1UdIwQY
MBaAFOCuFOhjwbFaHqLkmi61BIU/dba9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEs0VTZHUEJzVm9lb3VTYUxyVUVoVDkxdHIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9lZDk1NmUtYmVjMy00NGVlLTgxODYt
Yzc5MDVmYjM4NmE3LzEvNEs0VTZHUEJzVm9lb3VTYUxyVUVoVDkxdHIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9lZDk1NmUtYmVjMy00NGVlLTgxODYtYzc5MDVmYjM4NmE3
LzEvNEs0VTZHUEJzVm9lb3VTYUxyVUVoVDkxdHIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM+axO6BO
g+DW0Mq1wUx3E4d6UTSt5mJY/yCO4WLe5iW6n+tRNFVnBU3ogZqqoqYjjBZUjn/d
vWLEXHTqh9pur/gBgxcVY2SRlW2tUUEUS02NiGevEfS2VudXtD4q+5HPU0H/pwGB
m/Kmn+hHNt8SLGWgjrQn6+jWmrkBrKBvSTP7KvzT5CG8+5WVDAUE+SNrKVshSc57
yoTWqqP3gKj2nNS7XXjUeXLhP1pOO6iljr4bgxhtNB8lroDbdGBnuUrYS7R+LbNQ
cOV+iddW29Yh2H2wFaPbgiK6PbeWDUbdJ7KJXbQGYOLXgik7gvZoW5l+BdQCZKsA
1UKh1NgipTq3uQ==
-----END CERTIFICATE-----
Generated at Mon Jul 28 22:26:23 2025 by rpki-client