Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/de37fa-1bd2-47f5-9e2b-ac4c8f19876d/1/4TcnopRRvk3Zkitg0cWW6Aaplfs.mft
File: 4TcnopRRvk3Zkitg0cWW6Aaplfs.mft (raw, json)
Hash identifier: ovE4YeEAgZ3WSh/+GvRTNFQZ8dNmepEagl4EMFMcnCU=
Subject key identifier: 0E:B1:6A:81:09:2A:12:40:28:FB:36:D4:BA:C7:D9:EA:A3:5A:E2:85
Authority key identifier: E1:37:27:A2:94:51:BE:4D:D9:92:2B:60:D1:C5:96:E8:06:A9:95:FB
Certificate issuer: /CN=e13727a29451be4dd9922b60d1c596e806a995fb
Certificate serial: 019858D91F5C97DA7E43D91EF3316E11AB04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4TcnopRRvk3Zkitg0cWW6Aaplfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/de37fa-1bd2-47f5-9e2b-ac4c8f19876d/1/4TcnopRRvk3Zkitg0cWW6Aaplfs.mft
Manifest number: 1605
Signing time: Wed 30 Jul 2025 01:01:21 +0000
Manifest this update: Wed 30 Jul 2025 01:01:21 +0000
Manifest next update: Thu 31 Jul 2025 01:01:21 +0000
Files and hashes: 1: 4TcnopRRvk3Zkitg0cWW6Aaplfs.crl (hash: EBzz+Un+oEVn9pJ4uh0V2TBLxYlSmrm8OYZAE5SkILo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/de37fa-1bd2-47f5-9e2b-ac4c8f19876d/1/4TcnopRRvk3Zkitg0cWW6Aaplfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/de37fa-1bd2-47f5-9e2b-ac4c8f19876d/1/4TcnopRRvk3Zkitg0cWW6Aaplfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/4TcnopRRvk3Zkitg0cWW6Aaplfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:58:d9:1f:5c:97:da:7e:43:d9:1e:f3:31:6e:11:ab:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e13727a29451be4dd9922b60d1c596e806a995fb
Validity
Not Before: Jul 30 01:01:21 2025 GMT
Not After : Jul 31 01:01:21 2025 GMT
Subject: CN=0eb16a81092a124028fb36d4bac7d9eaa35ae285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9e:8c:75:d8:4c:4c:b0:f0:f8:63:8f:9e:ab:
01:6d:77:14:c6:dd:fc:6b:6f:3c:f5:a1:1f:88:d8:
88:00:12:66:8b:2f:aa:6c:bb:73:4d:1b:87:ab:73:
72:5d:5b:f2:d5:ae:36:9d:a6:65:33:65:8a:b1:87:
df:13:6b:90:6f:93:02:27:41:f8:47:64:2e:b1:05:
67:92:b7:40:d9:5d:2a:09:ce:81:77:5b:8e:8d:0a:
76:24:0f:34:28:e1:32:3e:da:8a:98:f8:ca:8b:dc:
cf:4a:fa:38:8c:7d:72:60:2a:3a:bd:4f:3c:7e:bf:
59:9e:ea:3e:c2:5c:d7:11:db:81:88:fb:6d:d6:a8:
f5:6b:2e:97:8d:f6:64:a8:1b:19:11:23:8a:ae:c9:
b5:6c:be:ba:53:70:31:2d:ef:24:d4:22:5a:e6:fb:
65:e7:88:e1:91:02:42:64:52:e2:1e:51:21:b2:9d:
d6:b9:96:73:94:f4:67:2c:c7:bd:76:04:a7:32:84:
1a:be:42:58:62:bb:a9:fa:10:8e:c8:35:f9:d3:a3:
5a:17:5c:7a:f3:40:db:07:4b:e8:3f:79:ed:42:b4:
20:2e:53:30:f8:08:18:8f:ab:de:81:35:00:40:a6:
ad:0b:59:48:64:a8:32:34:97:90:91:ab:58:c7:5f:
f1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B1:6A:81:09:2A:12:40:28:FB:36:D4:BA:C7:D9:EA:A3:5A:E2:85
X509v3 Authority Key Identifier:
keyid:E1:37:27:A2:94:51:BE:4D:D9:92:2B:60:D1:C5:96:E8:06:A9:95:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TcnopRRvk3Zkitg0cWW6Aaplfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/de37fa-1bd2-47f5-9e2b-ac4c8f19876d/1/4TcnopRRvk3Zkitg0cWW6Aaplfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/de37fa-1bd2-47f5-9e2b-ac4c8f19876d/1/4TcnopRRvk3Zkitg0cWW6Aaplfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:16:92:ab:3a:11:70:d2:bb:52:fb:dc:28:54:90:b3:7f:5a:
24:11:1f:34:50:4a:2d:6c:67:79:42:68:fe:65:15:44:39:19:
fa:3e:45:97:93:60:71:d1:96:47:24:ff:ce:3c:22:93:15:ed:
43:74:e4:14:42:7e:60:7d:22:6a:99:2f:e1:20:05:26:6d:97:
b2:66:9a:72:d3:a0:d5:5f:57:ef:7c:11:b5:a8:c3:68:58:81:
cb:80:52:7e:70:27:f9:fc:23:0a:34:75:5e:66:54:d2:04:bc:
4d:d9:9c:c5:ae:f5:52:4f:dc:23:cd:56:26:83:2e:2e:d7:5c:
12:8d:21:ec:39:58:64:ad:05:bc:08:72:5c:d8:96:f3:f8:76:
14:f2:e2:11:e0:5a:8d:30:ac:28:9e:12:68:53:bd:d1:ae:98:
27:28:d5:30:7b:d6:bf:43:a6:4f:23:6c:e2:17:7e:6d:b8:a9:
b3:3c:02:f4:70:0d:ab:e0:bc:d8:01:e9:b8:74:69:25:ee:f7:
fa:38:5a:78:67:04:06:55:0e:91:b0:c5:d1:14:2f:33:d8:3a:
39:33:33:09:f7:40:70:1d:1e:71:85:6f:dc:cd:55:b1:3e:dd:
a1:28:87:e5:68:67:f2:39:6c:e8:b6:43:59:4a:21:04:13:24:
55:38:ed:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhY2R9cl9p+Q9ke8zFuEasEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMzcyN2EyOTQ1MWJlNGRkOTkyMmI2MGQxYzU5NmU4MDZh
OTk1ZmIwHhcNMjUwNzMwMDEwMTIxWhcNMjUwNzMxMDEwMTIxWjAzMTEwLwYDVQQD
EygwZWIxNmE4MTA5MmExMjQwMjhmYjM2ZDRiYWM3ZDllYWEzNWFlMjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3J6MddhMTLDw+GOPnqsBbXcUxt38
a2889aEfiNiIABJmiy+qbLtzTRuHq3NyXVvy1a42naZlM2WKsYffE2uQb5MCJ0H4
R2QusQVnkrdA2V0qCc6Bd1uOjQp2JA80KOEyPtqKmPjKi9zPSvo4jH1yYCo6vU88
fr9Znuo+wlzXEduBiPtt1qj1ay6XjfZkqBsZESOKrsm1bL66U3AxLe8k1CJa5vtl
54jhkQJCZFLiHlEhsp3WuZZzlPRnLMe9dgSnMoQavkJYYrup+hCOyDX506NaF1x6
80DbB0voP3ntQrQgLlMw+AgYj6vegTUAQKatC1lIZKgyNJeQkatYx1/xRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA6xaoEJKhJAKPs21LrH2eqjWuKFMB8GA1UdIwQY
MBaAFOE3J6KUUb5N2ZIrYNHFlugGqZX7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFRjbm9wUlJ2azNaa2l0ZzBjV1c2QWFwbGZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9kZTM3ZmEtMWJkMi00N2Y1LTllMmIt
YWM0YzhmMTk4NzZkLzEvNFRjbm9wUlJ2azNaa2l0ZzBjV1c2QWFwbGZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9kZTM3ZmEtMWJkMi00N2Y1LTllMmItYWM0YzhmMTk4NzZk
LzEvNFRjbm9wUlJ2azNaa2l0ZzBjV1c2QWFwbGZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlhaSqzoR
cNK7UvvcKFSQs39aJBEfNFBKLWxneUJo/mUVRDkZ+j5Fl5NgcdGWRyT/zjwikxXt
Q3TkFEJ+YH0iapkv4SAFJm2XsmaactOg1V9X73wRtajDaFiBy4BSfnAn+fwjCjR1
XmZU0gS8Tdmcxa71Uk/cI81WJoMuLtdcEo0h7DlYZK0FvAhyXNiW8/h2FPLiEeBa
jTCsKJ4SaFO90a6YJyjVMHvWv0OmTyNs4hd+bbipszwC9HANq+C82AHpuHRpJe73
+jhaeGcEBlUOkbDF0RQvM9g6OTMzCfdAcB0ecYVv3M1VsT7doSiH5Whn8jls6LZD
WUohBBMkVTjtrw==
-----END CERTIFICATE-----
Generated at Wed Jul 30 05:16:57 2025 by rpki-client