Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft
File: 4Sz8faj6dKFt04wXwgoBksuy0_4.mft (raw, json)
Hash identifier: JPalfXPD/OYS5sQ8gvBh77zjU96WCh+Nh0GAhlWLywA=
Subject key identifier: E8:D2:33:DC:51:62:39:E6:09:BA:67:AC:D7:D9:58:4C:7E:C4:32:05
Authority key identifier: E1:2C:FC:7D:A8:FA:74:A1:6D:D3:8C:17:C2:0A:01:92:CB:B2:D3:FE
Certificate issuer: /CN=e12cfc7da8fa74a16dd38c17c20a0192cbb2d3fe
Certificate serial: 019851C38E443927A86C4E0EEBAAA4AE4C94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Sz8faj6dKFt04wXwgoBksuy0_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft
Manifest number: 0CD5
Signing time: Mon 28 Jul 2025 16:00:27 +0000
Manifest this update: Mon 28 Jul 2025 16:00:27 +0000
Manifest next update: Tue 29 Jul 2025 16:00:27 +0000
Files and hashes: 1: 4Sz8faj6dKFt04wXwgoBksuy0_4.crl (hash: gEBW2QBCxJ7NW/Rlpyu97elm95Y1Spo67lgncA68+8I=)
2: CzgWRo2OrtBEMKgJ83rtq5Y3g98.roa (hash: 2xTrIXSTjNXzltKj7q0eYjRCvrpmaN3vPbRoQNYjpK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Sz8faj6dKFt04wXwgoBksuy0_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:c3:8e:44:39:27:a8:6c:4e:0e:eb:aa:a4:ae:4c:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e12cfc7da8fa74a16dd38c17c20a0192cbb2d3fe
Validity
Not Before: Jul 28 16:00:27 2025 GMT
Not After : Jul 29 16:00:27 2025 GMT
Subject: CN=e8d233dc516239e609ba67acd7d9584c7ec43205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:52:cf:75:a4:16:84:03:a0:92:18:9d:7e:29:
55:ad:65:77:cf:f4:a6:2c:76:f0:28:b5:85:90:28:
75:dc:99:23:02:a8:92:08:10:1b:ba:87:02:16:9f:
5f:e0:16:b6:0d:d1:42:e3:59:9d:99:9f:d3:27:69:
bf:ae:e3:9f:e7:63:33:f0:15:ef:a9:3b:1f:b2:f9:
31:2b:f1:1d:00:36:3f:2f:96:fb:87:42:38:08:66:
25:73:6d:94:2d:f0:1a:0f:37:f5:62:38:5c:82:42:
73:d6:31:95:5f:cc:93:5e:15:41:93:4d:03:ad:fd:
d1:b1:7f:de:8a:25:ad:c4:e6:a2:6b:27:63:4d:54:
c2:1b:f5:fe:58:93:eb:5c:42:b6:f5:72:9c:c8:99:
07:a1:19:43:dc:17:9d:4c:a3:4a:db:2c:2a:be:38:
72:7e:c3:84:3a:ef:89:63:c1:de:c7:a2:03:a8:3f:
89:71:7b:c0:10:a9:01:31:68:9d:93:3c:34:e1:69:
10:80:68:15:d3:4f:d4:18:4f:31:02:72:31:49:e7:
bc:3a:b3:92:fd:3c:32:75:d0:93:8b:9a:e9:50:af:
82:b8:29:dc:01:eb:53:17:c2:74:8e:0f:14:77:20:
6f:52:4c:7c:77:a3:d6:bc:49:ab:c1:27:d7:f3:17:
30:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D2:33:DC:51:62:39:E6:09:BA:67:AC:D7:D9:58:4C:7E:C4:32:05
X509v3 Authority Key Identifier:
keyid:E1:2C:FC:7D:A8:FA:74:A1:6D:D3:8C:17:C2:0A:01:92:CB:B2:D3:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Sz8faj6dKFt04wXwgoBksuy0_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:f0:bc:9c:f1:36:21:a7:6a:28:97:65:c0:8d:ac:ea:34:ad:
d3:44:32:77:90:83:01:ab:a9:3e:98:23:20:f2:81:da:d5:a5:
84:b0:9a:36:94:c5:90:45:b9:04:93:f7:71:ac:02:4f:ac:61:
03:4a:3e:e9:1e:04:1b:3e:f1:4d:4e:11:5d:2e:f9:02:af:33:
33:9f:d8:82:fc:a4:61:92:38:29:9e:29:be:be:6d:7a:78:1f:
00:36:2b:9e:2a:f5:21:81:dc:d2:a3:12:f2:8b:97:df:0c:f5:
33:3c:1b:79:9f:66:d4:98:7c:8d:f8:1a:39:e4:66:91:4e:c9:
c9:c7:76:5e:3b:7c:73:76:b9:fc:2b:b9:2e:ff:9b:2f:5b:16:
e3:a2:59:af:bd:cf:5f:8e:b9:b4:78:20:d3:64:c2:c7:94:2a:
84:80:2a:30:fd:76:78:42:c5:b1:99:d9:03:29:3a:36:01:c3:
4a:23:4e:99:71:0c:eb:15:5e:1a:08:b8:e9:e6:07:79:c4:6e:
ca:32:13:a9:1f:83:88:9b:9b:f1:4f:0f:95:1c:bf:33:2a:d6:
dd:13:74:5c:80:9d:f7:46:71:fa:23:f0:e9:d8:a9:70:1e:dd:
00:4e:0d:34:60:48:3e:c5:29:d6:4e:d4:9d:57:4b:57:b1:fc:
47:23:95:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhRw45EOSeobE4O66qkrkyUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMmNmYzdkYThmYTc0YTE2ZGQzOGMxN2MyMGEwMTkyY2Ji
MmQzZmUwHhcNMjUwNzI4MTYwMDI3WhcNMjUwNzI5MTYwMDI3WjAzMTEwLwYDVQQD
EyhlOGQyMzNkYzUxNjIzOWU2MDliYTY3YWNkN2Q5NTg0YzdlYzQzMjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlLPdaQWhAOgkhidfilVrWV3z/Sm
LHbwKLWFkCh13JkjAqiSCBAbuocCFp9f4Ba2DdFC41mdmZ/TJ2m/ruOf52Mz8BXv
qTsfsvkxK/EdADY/L5b7h0I4CGYlc22ULfAaDzf1YjhcgkJz1jGVX8yTXhVBk00D
rf3RsX/eiiWtxOaiaydjTVTCG/X+WJPrXEK29XKcyJkHoRlD3BedTKNK2ywqvjhy
fsOEOu+JY8Hex6IDqD+JcXvAEKkBMWidkzw04WkQgGgV00/UGE8xAnIxSee8OrOS
/TwyddCTi5rpUK+CuCncAetTF8J0jg8UdyBvUkx8d6PWvEmrwSfX8xcwlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOjSM9xRYjnmCbpnrNfZWEx+xDIFMB8GA1UdIwQY
MBaAFOEs/H2o+nShbdOMF8IKAZLLstP+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFN6OGZhajZkS0Z0MDR3WHdnb0Jrc3V5MF80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9hNmFlZmYtOWI5YS00YzE4LTk0NzQt
MjI3MmI0ZGJhYTYyLzEvNFN6OGZhajZkS0Z0MDR3WHdnb0Jrc3V5MF80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC9hNmFlZmYtOWI5YS00YzE4LTk0NzQtMjI3MmI0ZGJhYTYy
LzEvNFN6OGZhajZkS0Z0MDR3WHdnb0Jrc3V5MF80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaPC8nPE2
IadqKJdlwI2s6jSt00Qyd5CDAaupPpgjIPKB2tWlhLCaNpTFkEW5BJP3cawCT6xh
A0o+6R4EGz7xTU4RXS75Aq8zM5/YgvykYZI4KZ4pvr5tengfADYrnir1IYHc0qMS
8ouX3wz1MzwbeZ9m1Jh8jfgaOeRmkU7Jycd2Xjt8c3a5/Cu5Lv+bL1sW46JZr73P
X465tHgg02TCx5QqhIAqMP12eELFsZnZAyk6NgHDSiNOmXEM6xVeGgi46eYHecRu
yjITqR+DiJub8U8PlRy/MyrW3RN0XICd90Zx+iPw6dipcB7dAE4NNGBIPsUp1k7U
nVdLV7H8RyOV8w==
-----END CERTIFICATE-----
Generated at Tue Jul 29 02:02:16 2025 by rpki-client