Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft
File: 4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft (raw, json)
Hash identifier: 3liUlamx2nm68nWop8zfoCX2X5dZk7PHH0sMbLgzIjg=
Subject key identifier: DE:51:3A:12:0E:41:A0:66:08:3E:A6:EE:55:A6:C5:46:5B:09:8A:0E
Authority key identifier: E2:E1:EF:85:11:B7:56:2B:F3:DC:3C:0B:04:09:3B:33:7B:CE:03:91
Certificate issuer: /CN=e2e1ef8511b7562bf3dc3c0b04093b337bce0391
Certificate serial: 0198469ACA24A53468C4CA0AA8904148C1CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uHvhRG3Vivz3DwLBAk7M3vOA5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft
Manifest number: 0F28
Signing time: Sat 26 Jul 2025 12:00:05 +0000
Manifest this update: Sat 26 Jul 2025 12:00:05 +0000
Manifest next update: Sun 27 Jul 2025 12:00:05 +0000
Files and hashes: 1: 4uHvhRG3Vivz3DwLBAk7M3vOA5E.crl (hash: 2s96s0wrkourwnfOVVz/6oW/rXu7HHV0b2BH8o2YM1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/4uHvhRG3Vivz3DwLBAk7M3vOA5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:9a:ca:24:a5:34:68:c4:ca:0a:a8:90:41:48:c1:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e1ef8511b7562bf3dc3c0b04093b337bce0391
Validity
Not Before: Jul 26 12:00:05 2025 GMT
Not After : Jul 27 12:00:05 2025 GMT
Subject: CN=de513a120e41a066083ea6ee55a6c5465b098a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:39:2d:79:02:65:d5:66:5a:4d:ec:fe:1a:e8:
13:fa:c5:b0:92:ca:65:37:c7:60:4f:c2:48:c5:20:
54:c7:07:fa:ad:cd:b4:7f:45:b5:68:75:b8:07:50:
1f:09:73:7f:80:42:74:a6:ff:54:c1:b4:6a:06:1d:
36:c0:cf:b4:da:8c:ba:f9:fa:fa:ab:61:a8:96:7a:
26:35:6f:b5:42:f6:f9:dc:e7:65:86:1f:d1:8e:83:
81:a9:59:f1:3c:4d:8a:50:39:49:28:5f:0d:29:37:
54:2e:4b:45:ad:f0:d5:c2:66:44:53:aa:d3:8f:cc:
d9:ab:ea:3f:44:e6:d3:07:5f:50:b2:37:c6:0e:f1:
f0:df:1b:e6:32:dc:5e:5a:83:44:51:c2:89:51:07:
53:4e:a6:8a:00:f2:f9:6f:c6:a6:49:48:19:0d:ce:
0a:c6:e8:34:09:af:67:80:55:ac:95:f9:b1:11:bd:
13:15:83:a2:79:fa:8a:c0:3e:8c:66:ef:38:d1:cd:
3e:68:8b:ab:a6:ec:75:c6:95:b6:fa:c2:9a:a3:d3:
e0:57:78:ed:4a:bb:42:3e:29:f2:6c:79:c6:ad:f7:
e2:de:82:6e:42:f9:c5:73:f2:33:40:ac:ac:9a:db:
51:aa:29:1a:5f:31:72:51:d4:f5:96:c5:94:3c:84:
bd:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:51:3A:12:0E:41:A0:66:08:3E:A6:EE:55:A6:C5:46:5B:09:8A:0E
X509v3 Authority Key Identifier:
keyid:E2:E1:EF:85:11:B7:56:2B:F3:DC:3C:0B:04:09:3B:33:7B:CE:03:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uHvhRG3Vivz3DwLBAk7M3vOA5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:ed:06:ab:9f:a6:52:ea:67:41:d7:30:08:15:a4:45:73:9a:
c5:d9:6f:3d:96:ac:00:c8:a1:2e:46:87:bb:11:bb:15:49:6e:
d5:68:37:7d:e2:1a:4f:2b:20:be:b2:bf:d4:ec:6f:a1:d8:f9:
70:9a:40:e6:fb:d2:67:21:3a:8e:a6:0c:6f:18:71:d1:39:44:
97:89:a0:27:b3:dd:32:2e:73:dc:06:07:bf:c0:e1:7b:15:ed:
3c:87:20:c6:a3:6d:2d:2a:92:02:70:32:64:17:ff:c5:1a:04:
c9:e1:84:f3:74:f7:aa:b3:94:f1:00:7e:63:a7:4e:fc:86:47:
8b:59:23:97:ae:fe:94:0c:45:e5:d9:ca:a2:3e:a9:7f:e5:94:
47:50:d8:2b:0d:48:5e:ec:52:79:7f:b0:57:b0:0b:16:1e:1f:
62:b5:30:f1:cb:e9:6f:8f:f1:02:f1:65:b4:cf:d8:b5:a5:97:
bc:d0:d8:e6:e7:5d:ad:a6:f4:c7:58:02:7c:93:cf:c6:bf:5e:
0f:e0:2a:9c:ba:01:c8:8f:c2:03:4e:3e:9e:51:17:fb:ac:c6:
cd:50:68:72:d5:d8:4a:b2:eb:1c:3b:15:5f:17:02:67:31:2d:
12:67:63:cf:0a:39:f8:7c:34:1a:20:63:bf:a6:ba:6f:50:04:
c1:8d:20:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhGmsokpTRoxMoKqJBBSMHLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZTFlZjg1MTFiNzU2MmJmM2RjM2MwYjA0MDkzYjMzN2Jj
ZTAzOTEwHhcNMjUwNzI2MTIwMDA1WhcNMjUwNzI3MTIwMDA1WjAzMTEwLwYDVQQD
EyhkZTUxM2ExMjBlNDFhMDY2MDgzZWE2ZWU1NWE2YzU0NjViMDk4YTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zkteQJl1WZaTez+GugT+sWwkspl
N8dgT8JIxSBUxwf6rc20f0W1aHW4B1AfCXN/gEJ0pv9UwbRqBh02wM+02oy6+fr6
q2GolnomNW+1Qvb53Odlhh/RjoOBqVnxPE2KUDlJKF8NKTdULktFrfDVwmZEU6rT
j8zZq+o/RObTB19QsjfGDvHw3xvmMtxeWoNEUcKJUQdTTqaKAPL5b8amSUgZDc4K
xug0Ca9ngFWslfmxEb0TFYOiefqKwD6MZu840c0+aIurpux1xpW2+sKao9PgV3jt
SrtCPinybHnGrffi3oJuQvnFc/IzQKysmttRqikaXzFyUdT1lsWUPIS9jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN5ROhIOQaBmCD6m7lWmxUZbCYoOMB8GA1UdIwQY
MBaAFOLh74URt1Yr89w8CwQJOzN7zgORMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHVIdmhSRzNWaXZ6M0R3TEJBazdNM3ZPQTVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9lY2I1ZDQtYjQ0OC00MmU0LWI0YTMt
OWI2NTg5MGUyZWFlLzEvNHVIdmhSRzNWaXZ6M0R3TEJBazdNM3ZPQTVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9lY2I1ZDQtYjQ0OC00MmU0LWI0YTMtOWI2NTg5MGUyZWFl
LzEvNHVIdmhSRzNWaXZ6M0R3TEJBazdNM3ZPQTVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAie0Gq5+m
UupnQdcwCBWkRXOaxdlvPZasAMihLkaHuxG7FUlu1Wg3feIaTysgvrK/1Oxvodj5
cJpA5vvSZyE6jqYMbxhx0TlEl4mgJ7PdMi5z3AYHv8DhexXtPIcgxqNtLSqSAnAy
ZBf/xRoEyeGE83T3qrOU8QB+Y6dO/IZHi1kjl67+lAxF5dnKoj6pf+WUR1DYKw1I
XuxSeX+wV7ALFh4fYrUw8cvpb4/xAvFltM/YtaWXvNDY5uddrab0x1gCfJPPxr9e
D+AqnLoByI/CA04+nlEX+6zGzVBoctXYSrLrHDsVXxcCZzEtEmdjzwo5+Hw0GiBj
v6a6b1AEwY0gpQ==
-----END CERTIFICATE-----
Generated at Sat Jul 26 19:56:34 2025 by rpki-client