Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.mft
File: S4cDP8aofTuNDLPOGrK6u-UroxE.mft (raw, json)
Hash identifier: K5DUBbKi+mpMHglxifWW3wUZihlpPqQ8Ij5cn91k688=
Subject key identifier: 7F:31:03:D6:99:E0:A6:F5:0D:50:19:B4:64:69:D3:5E:A5:97:9F:08
Authority key identifier: 4B:87:03:3F:C6:A8:7D:3B:8D:0C:B3:CE:1A:B2:BA:BB:E5:2B:A3:11
Certificate issuer: /CN=4b87033fc6a87d3b8d0cb3ce1ab2babbe52ba311
Certificate serial: 0198451A7C695244FA6E9E4BDF728AEA5B98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4cDP8aofTuNDLPOGrK6u-UroxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.mft
Manifest number: 14DE
Signing time: Sat 26 Jul 2025 05:00:20 +0000
Manifest this update: Sat 26 Jul 2025 05:00:20 +0000
Manifest next update: Sun 27 Jul 2025 05:00:20 +0000
Files and hashes: 1: 8OZ4Eudn-Zmm9BJklLqYUOhBro8.roa (hash: nQrHTPYYHsaKcsU7K7NBUNZKUwu8kquBvMwb0t9InZk=)
2: S4cDP8aofTuNDLPOGrK6u-UroxE.crl (hash: /iXje0XXBN5I8utE1SEBbVEuQCyA7shJ0QTrVDRPbhk=)
3: rP00SjYOc7kI37LHeR0akx0WLbw.roa (hash: HwxnGSpBCBewjdHMOMeKuWHUwmAgwVnpqM4EW67Q304=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/S4cDP8aofTuNDLPOGrK6u-UroxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:1a:7c:69:52:44:fa:6e:9e:4b:df:72:8a:ea:5b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b87033fc6a87d3b8d0cb3ce1ab2babbe52ba311
Validity
Not Before: Jul 26 05:00:20 2025 GMT
Not After : Jul 27 05:00:20 2025 GMT
Subject: CN=7f3103d699e0a6f50d5019b46469d35ea5979f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:00:a2:85:bd:a8:17:8c:09:66:9f:50:65:ae:
35:64:9c:c6:40:43:6c:3f:a3:4e:04:4d:42:ac:a7:
a8:f6:13:e1:6d:cf:b7:e4:df:b9:ce:7e:8d:97:3c:
57:8c:12:0e:ac:91:e3:5e:cc:7e:8d:9f:96:a5:da:
b6:8a:30:3f:d9:91:05:30:ec:82:95:1a:20:f2:ba:
12:2d:d2:58:f8:f4:fd:e2:d4:e0:dc:5e:68:dc:67:
0f:32:5f:b3:68:0f:d3:0b:04:df:bc:0a:b7:18:7e:
ab:85:f4:e0:d2:72:af:3f:a7:ad:05:9e:6c:87:b8:
e1:e5:97:a5:e9:49:23:19:9c:d7:76:3e:de:44:57:
60:07:15:bc:d5:88:dd:e9:d0:12:59:41:70:1c:2a:
28:f9:e7:19:12:75:6b:e8:b3:82:fb:84:5c:c6:c1:
6d:df:ee:35:82:dc:df:45:f5:7c:cc:f3:98:0a:2a:
22:99:8c:27:42:49:3c:28:d2:ad:20:ee:56:e9:01:
3e:01:21:e4:c9:ef:3e:63:71:f2:d7:47:73:23:f8:
f6:19:ed:42:3b:77:ff:f1:e7:9f:cf:67:73:a0:46:
f4:c1:c9:7a:a1:4d:e0:aa:f9:3f:1b:f6:24:07:bc:
b2:2f:ef:40:96:b5:b1:79:cd:33:ff:7a:35:73:84:
3b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:31:03:D6:99:E0:A6:F5:0D:50:19:B4:64:69:D3:5E:A5:97:9F:08
X509v3 Authority Key Identifier:
keyid:4B:87:03:3F:C6:A8:7D:3B:8D:0C:B3:CE:1A:B2:BA:BB:E5:2B:A3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4cDP8aofTuNDLPOGrK6u-UroxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:43:65:6f:f7:60:33:9d:7a:3f:66:10:25:67:13:da:ea:eb:
4a:b9:7d:4a:74:9a:53:8a:68:36:a3:09:c4:f3:ce:9b:b9:b4:
e8:5e:70:26:37:c5:83:0e:91:34:1a:e6:75:aa:18:83:d2:a1:
98:1d:fc:8c:4d:29:e4:7f:ea:3a:7e:f8:bc:60:ee:d2:16:41:
bc:8b:0c:db:f2:5d:bd:19:3e:64:3e:91:75:ea:f6:d3:34:71:
3e:2c:2e:24:b9:a2:1d:87:0b:03:96:ad:45:f5:57:a5:ec:58:
3e:df:42:d6:9d:d4:c0:f7:25:ca:fa:6f:4e:f3:2a:d5:ec:4c:
50:74:8b:05:1e:4a:19:2e:98:af:91:b1:0f:ba:e4:f8:2f:4e:
a7:e6:e0:86:4d:cd:4c:d6:2c:ef:17:51:0c:b3:ec:cb:ff:db:
20:38:11:87:db:82:cc:8b:90:7a:40:f2:e0:27:3b:7b:20:a7:
0b:b2:fd:54:ef:4e:62:ed:43:cc:41:c7:46:ca:44:8c:d2:b0:
13:a6:fb:92:e2:1d:c8:08:1c:06:64:9e:a4:95:11:c7:c8:0e:
d9:19:a5:ce:0d:9b:43:36:a7:92:f4:86:2a:49:69:c1:2a:c8:
6c:79:9f:e6:c6:0f:5e:b0:df:26:ad:df:55:ef:de:22:c8:8b:
1e:39:c5:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhFGnxpUkT6bp5L33KK6luYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiODcwMzNmYzZhODdkM2I4ZDBjYjNjZTFhYjJiYWJiZTUy
YmEzMTEwHhcNMjUwNzI2MDUwMDIwWhcNMjUwNzI3MDUwMDIwWjAzMTEwLwYDVQQD
Eyg3ZjMxMDNkNjk5ZTBhNmY1MGQ1MDE5YjQ2NDY5ZDM1ZWE1OTc5ZjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wCihb2oF4wJZp9QZa41ZJzGQENs
P6NOBE1CrKeo9hPhbc+35N+5zn6NlzxXjBIOrJHjXsx+jZ+Wpdq2ijA/2ZEFMOyC
lRog8roSLdJY+PT94tTg3F5o3GcPMl+zaA/TCwTfvAq3GH6rhfTg0nKvP6etBZ5s
h7jh5Zel6UkjGZzXdj7eRFdgBxW81Yjd6dASWUFwHCoo+ecZEnVr6LOC+4RcxsFt
3+41gtzfRfV8zPOYCioimYwnQkk8KNKtIO5W6QE+ASHkye8+Y3Hy10dzI/j2Ge1C
O3f/8eefz2dzoEb0wcl6oU3gqvk/G/YkB7yyL+9AlrWxec0z/3o1c4Q7eQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH8xA9aZ4Kb1DVAZtGRp016ll58IMB8GA1UdIwQY
MBaAFEuHAz/GqH07jQyzzhqyurvlK6MRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzRjRFA4YW9mVHVORExQT0dySzZ1LVVyb3hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy82ZGZiY2YtMzEzYi00N2I5LWJmOGUt
YTc3OGEwYzE0ODU5LzEvUzRjRFA4YW9mVHVORExQT0dySzZ1LVVyb3hFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy82ZGZiY2YtMzEzYi00N2I5LWJmOGUtYTc3OGEwYzE0ODU5
LzEvUzRjRFA4YW9mVHVORExQT0dySzZ1LVVyb3hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMkNlb/dg
M516P2YQJWcT2urrSrl9SnSaU4poNqMJxPPOm7m06F5wJjfFgw6RNBrmdaoYg9Kh
mB38jE0p5H/qOn74vGDu0hZBvIsM2/JdvRk+ZD6Rder20zRxPiwuJLmiHYcLA5at
RfVXpexYPt9C1p3UwPclyvpvTvMq1exMUHSLBR5KGS6Yr5GxD7rk+C9Op+bghk3N
TNYs7xdRDLPsy//bIDgRh9uCzIuQekDy4Cc7eyCnC7L9VO9OYu1DzEHHRspEjNKw
E6b7kuIdyAgcBmSepJURx8gO2Rmlzg2bQzankvSGKklpwSrIbHmf5sYPXrDfJq3f
Ve/eIsiLHjnFhQ==
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:28:00 2025 by rpki-client