Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.mft
File: 4MijkN3l4VGaS9PadUqT6YhJLWc.mft (raw, json)
Hash identifier: fFqkOQrfXfIWoKfw/kU728eSZb9NdQH/1NLOajo4g94=
Subject key identifier: B5:2E:81:AD:6E:F3:D9:A0:F2:36:7E:60:FE:7F:D8:47:58:4F:29:2A
Authority key identifier: E0:C8:A3:90:DD:E5:E1:51:9A:4B:D3:DA:75:4A:93:E9:88:49:2D:67
Certificate issuer: /CN=e0c8a390dde5e1519a4bd3da754a93e988492d67
Certificate serial: 01984B53D3FA1BEC7A9F7967FD077C0CACD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4MijkN3l4VGaS9PadUqT6YhJLWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.mft
Manifest number: 160E
Signing time: Sun 27 Jul 2025 10:00:41 +0000
Manifest this update: Sun 27 Jul 2025 10:00:41 +0000
Manifest next update: Mon 28 Jul 2025 10:00:41 +0000
Files and hashes: 1: 4MijkN3l4VGaS9PadUqT6YhJLWc.crl (hash: VHMETXeyUkk15u5Vuso2WHG0rp06ieGNzFkoolg4EyI=)
2: YqwVujDHhfLEawoR2PJTNXDGOkQ.roa (hash: HReVdGArp33wnWKEmG0bJpK865E8KNNuSsxXzjPZYbc=)
3: vkyQ9sRT6gVwv-_r5Hxs_vmkNXI.roa (hash: GjybPH2LVIWOFxXMsKltGKhDG48Wj0AmaSelmA4NfrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4MijkN3l4VGaS9PadUqT6YhJLWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:d3:fa:1b:ec:7a:9f:79:67:fd:07:7c:0c:ac:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0c8a390dde5e1519a4bd3da754a93e988492d67
Validity
Not Before: Jul 27 10:00:41 2025 GMT
Not After : Jul 28 10:00:41 2025 GMT
Subject: CN=b52e81ad6ef3d9a0f2367e60fe7fd847584f292a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:04:d1:9c:da:72:5e:26:56:45:a7:87:66:3e:
f0:09:fc:6e:c9:92:ed:18:42:25:1f:24:1f:7c:9e:
c4:e7:0c:9d:83:17:a2:3a:f4:ef:f8:2a:f4:40:7b:
48:ec:60:f8:bf:15:fc:3e:f9:21:30:b9:50:61:97:
14:23:05:81:92:cd:6f:f8:0a:fe:5a:a3:38:58:bf:
f5:e1:18:5f:72:32:e7:43:23:69:d2:1a:5b:17:c7:
88:68:51:a8:9e:88:19:2f:70:89:f4:90:0f:11:cd:
b5:aa:9c:5e:a7:71:24:6f:2f:6f:cb:a3:35:0d:e2:
67:ab:ea:5d:28:23:c7:30:e0:b4:f2:97:e4:43:2a:
af:13:72:bd:c0:cd:3b:80:0b:48:fe:d7:8f:89:29:
7e:b8:5b:7d:45:2b:51:ba:f0:a7:49:0b:06:29:87:
4d:57:5d:5e:ab:45:57:43:2e:57:89:7c:cb:69:b6:
92:4c:6f:f7:0a:bb:3b:c4:3d:09:45:f4:bb:6b:7c:
59:81:51:87:9b:07:e4:75:07:f1:09:76:33:98:25:
71:2b:10:f3:07:65:d5:de:55:e0:1b:d9:16:24:f0:
24:49:68:d3:d6:cf:a2:bd:c1:5c:7d:0a:6e:81:b7:
25:5a:ad:f5:fe:ff:73:56:55:1e:31:c8:8f:7e:94:
99:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:2E:81:AD:6E:F3:D9:A0:F2:36:7E:60:FE:7F:D8:47:58:4F:29:2A
X509v3 Authority Key Identifier:
keyid:E0:C8:A3:90:DD:E5:E1:51:9A:4B:D3:DA:75:4A:93:E9:88:49:2D:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MijkN3l4VGaS9PadUqT6YhJLWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:ac:72:65:43:ff:ad:f0:6e:f4:90:f5:39:a4:d7:0c:ae:0f:
37:23:ba:40:8d:73:35:b5:c7:21:9f:b7:c5:7f:0a:05:d9:2d:
bc:7b:e6:44:12:1e:16:ac:35:e8:c9:04:e7:6a:a3:cd:33:e8:
22:ea:c5:69:8b:de:63:30:b4:12:58:93:a6:ba:ab:46:df:cc:
f7:ae:09:88:c9:5e:53:60:a3:90:4b:a2:59:cb:46:5c:a7:cd:
6b:6f:cf:65:fa:2b:b5:ee:eb:fe:d2:97:e3:ac:e7:e5:cb:a5:
a8:b2:47:10:c7:55:a2:16:6b:86:38:73:65:d7:89:e8:4f:e8:
8e:70:9f:3f:cc:98:be:13:8f:f2:9e:41:68:b1:08:ca:69:5d:
46:ec:97:5a:15:e2:67:8a:9d:3f:7b:57:2b:ff:83:06:36:72:
eb:f3:1f:21:38:54:fa:52:ae:ad:db:c1:36:25:3c:52:d4:fd:
b8:ab:20:c7:75:85:bd:56:0e:32:a4:db:a2:17:c2:c8:12:e1:
c8:57:13:81:0e:ae:4a:1e:95:09:83:2b:09:92:e6:fd:20:08:
57:d5:22:da:04:6a:84:39:32:dc:bb:da:07:21:17:24:18:05:
d0:cc:e7:5c:33:9b:84:e8:b6:bc:68:aa:9a:c3:07:01:3f:15:
79:58:f6:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLU9P6G+x6n3ln/Qd8DKzVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwYzhhMzkwZGRlNWUxNTE5YTRiZDNkYTc1NGE5M2U5ODg0
OTJkNjcwHhcNMjUwNzI3MTAwMDQxWhcNMjUwNzI4MTAwMDQxWjAzMTEwLwYDVQQD
EyhiNTJlODFhZDZlZjNkOWEwZjIzNjdlNjBmZTdmZDg0NzU4NGYyOTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wTRnNpyXiZWRaeHZj7wCfxuyZLt
GEIlHyQffJ7E5wydgxeiOvTv+Cr0QHtI7GD4vxX8PvkhMLlQYZcUIwWBks1v+Ar+
WqM4WL/14RhfcjLnQyNp0hpbF8eIaFGonogZL3CJ9JAPEc21qpxep3Ekby9vy6M1
DeJnq+pdKCPHMOC08pfkQyqvE3K9wM07gAtI/tePiSl+uFt9RStRuvCnSQsGKYdN
V11eq0VXQy5XiXzLabaSTG/3Crs7xD0JRfS7a3xZgVGHmwfkdQfxCXYzmCVxKxDz
B2XV3lXgG9kWJPAkSWjT1s+ivcFcfQpugbclWq31/v9zVlUeMciPfpSZDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLUuga1u89mg8jZ+YP5/2EdYTykqMB8GA1UdIwQY
MBaAFODIo5Dd5eFRmkvT2nVKk+mISS1nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNE1pamtOM2w0VkdhUzlQYWRVcVQ2WWhKTFdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS84NjliMzAtZmNkNi00OGRmLThkMjUt
YmVmM2JhMjFjNzE1LzEvNE1pamtOM2w0VkdhUzlQYWRVcVQ2WWhKTFdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS84NjliMzAtZmNkNi00OGRmLThkMjUtYmVmM2JhMjFjNzE1
LzEvNE1pamtOM2w0VkdhUzlQYWRVcVQ2WWhKTFdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANaxyZUP/
rfBu9JD1OaTXDK4PNyO6QI1zNbXHIZ+3xX8KBdktvHvmRBIeFqw16MkE52qjzTPo
IurFaYveYzC0EliTprqrRt/M964JiMleU2CjkEuiWctGXKfNa2/PZforte7r/tKX
46zn5culqLJHEMdVohZrhjhzZdeJ6E/ojnCfP8yYvhOP8p5BaLEIymldRuyXWhXi
Z4qdP3tXK/+DBjZy6/MfIThU+lKurdvBNiU8UtT9uKsgx3WFvVYOMqTbohfCyBLh
yFcTgQ6uSh6VCYMrCZLm/SAIV9Ui2gRqhDky3LvaByEXJBgF0MznXDObhOi2vGiq
msMHAT8VeVj2qA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 13:42:35 2025 by rpki-client