Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.mft
File: 4sFE7jL911AT5_G4wtgH09rti74.mft (raw, json)
Hash identifier: wB4QQJgStFEZyWImoLaXCF8zKl2lCfWEwWyItkVNYbE=
Subject key identifier: C3:D6:12:E6:D3:36:A2:F3:A7:B9:09:4A:1B:D5:08:54:FD:0E:7B:E0
Authority key identifier: E2:C1:44:EE:32:FD:D7:50:13:E7:F1:B8:C2:D8:07:D3:DA:ED:8B:BE
Certificate issuer: /CN=e2c144ee32fdd75013e7f1b8c2d807d3daed8bbe
Certificate serial: 01984A4172B31E06B097AC6205E3BF03EF05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sFE7jL911AT5_G4wtgH09rti74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 05:00:59 +0000
Manifest this update: Sun 27 Jul 2025 05:00:59 +0000
Manifest next update: Mon 28 Jul 2025 05:00:59 +0000
Files and hashes: 1: 4sFE7jL911AT5_G4wtgH09rti74.crl (hash: xufSGlJbul1jfNc1OW5MibRBDsTL1/4XRRvw+H7QWOU=)
2: at7Oxyqw1YSxEoUOaW5RKvIjf0s.roa (hash: yOhpw2razZhrT29WlGA/CY3Yi3Lil58jkjnW17t8rig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sFE7jL911AT5_G4wtgH09rti74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:72:b3:1e:06:b0:97:ac:62:05:e3:bf:03:ef:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c144ee32fdd75013e7f1b8c2d807d3daed8bbe
Validity
Not Before: Jul 27 05:00:59 2025 GMT
Not After : Jul 28 05:00:59 2025 GMT
Subject: CN=c3d612e6d336a2f3a7b9094a1bd50854fd0e7be0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:15:49:3d:10:c6:2e:cf:92:38:fc:a6:d4:34:
0b:e4:5b:77:6c:d2:32:47:b7:25:42:d7:8a:de:cf:
0f:30:61:e3:03:54:84:61:e8:41:6a:be:bb:bb:74:
4b:cd:2f:54:43:d9:da:14:4d:98:88:6b:87:d9:09:
d0:ca:b2:86:e0:85:3f:74:b1:7a:8b:ca:fe:a0:cc:
e0:5d:3d:51:2f:1d:28:92:65:1a:f9:a1:f3:ec:81:
41:6c:ce:97:7f:0b:06:35:f3:ec:f1:df:8a:ad:44:
04:4b:34:72:d1:70:0e:3a:ad:c9:38:5a:2b:28:e1:
ff:95:fb:5c:b5:73:cc:53:ad:06:c2:d0:6a:7b:0c:
3f:fc:72:3d:83:b8:89:2f:6c:fc:b6:ec:69:0f:df:
e0:c5:2a:f2:b1:1e:60:b6:bb:d2:72:f8:55:d9:3d:
f1:8b:4d:09:af:52:66:c0:b5:a4:85:1b:7d:28:cb:
96:94:06:35:85:d2:4e:0e:18:6e:56:7d:6c:c5:45:
39:36:85:60:09:44:bc:8a:9e:ef:e1:ab:44:61:14:
19:be:6d:0a:36:3e:02:6b:38:82:3d:b4:98:4b:4f:
f2:1e:a8:7d:8b:e4:43:60:af:9f:0c:b8:6c:7d:c6:
ab:68:60:ba:6d:55:3d:0d:ef:70:73:3e:b5:98:69:
a1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D6:12:E6:D3:36:A2:F3:A7:B9:09:4A:1B:D5:08:54:FD:0E:7B:E0
X509v3 Authority Key Identifier:
keyid:E2:C1:44:EE:32:FD:D7:50:13:E7:F1:B8:C2:D8:07:D3:DA:ED:8B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sFE7jL911AT5_G4wtgH09rti74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:aa:2c:02:2c:93:1a:94:75:2c:37:70:6f:cb:9d:70:a1:43:
65:a6:c3:1a:f7:e6:38:3a:ef:69:76:c1:e1:20:40:02:1a:3c:
ab:9d:e8:8b:56:98:48:18:6b:74:70:8f:3d:ed:92:ed:4a:14:
8d:dc:7a:f9:b8:05:e1:2c:4c:6b:9e:a7:3b:f7:0e:e7:0b:ed:
da:09:1b:b7:69:24:bc:2f:06:f2:1d:8e:ff:ac:69:48:14:68:
ae:d1:48:10:dd:f4:2e:a0:e0:58:20:66:c6:f7:3b:1d:12:5d:
f2:94:c6:aa:ca:99:a0:a9:28:8e:5d:9c:4d:17:b0:a6:1f:a1:
92:ab:0a:8c:c6:8b:01:e9:9e:dc:1f:81:03:41:d5:30:91:48:
3b:26:1a:db:df:3c:7d:8e:93:b6:39:95:b2:b4:e9:08:c6:3f:
6a:d7:60:d3:2c:c9:6a:a2:64:8c:72:95:77:6d:b2:2b:ff:e2:
63:02:b6:da:1a:9b:4f:45:f8:36:09:3a:20:b6:1d:0f:a3:da:
9c:8c:7b:ef:46:08:4a:af:89:20:83:e6:8e:6c:f3:cd:ba:7c:
09:68:20:4c:c4:eb:87:17:c5:9d:f9:42:66:c6:d4:5f:21:33:
c5:b5:0d:4e:be:e9:b1:45:74:2c:5a:39:b1:5d:34:b8:56:b9:
ca:6c:84:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKQXKzHgawl6xiBeO/A+8FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYzE0NGVlMzJmZGQ3NTAxM2U3ZjFiOGMyZDgwN2QzZGFl
ZDhiYmUwHhcNMjUwNzI3MDUwMDU5WhcNMjUwNzI4MDUwMDU5WjAzMTEwLwYDVQQD
EyhjM2Q2MTJlNmQzMzZhMmYzYTdiOTA5NGExYmQ1MDg1NGZkMGU3YmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxVJPRDGLs+SOPym1DQL5Ft3bNIy
R7clQteK3s8PMGHjA1SEYehBar67u3RLzS9UQ9naFE2YiGuH2QnQyrKG4IU/dLF6
i8r+oMzgXT1RLx0okmUa+aHz7IFBbM6XfwsGNfPs8d+KrUQESzRy0XAOOq3JOFor
KOH/lftctXPMU60GwtBqeww//HI9g7iJL2z8tuxpD9/gxSrysR5gtrvScvhV2T3x
i00Jr1JmwLWkhRt9KMuWlAY1hdJODhhuVn1sxUU5NoVgCUS8ip7v4atEYRQZvm0K
Nj4CaziCPbSYS0/yHqh9i+RDYK+fDLhsfcaraGC6bVU9De9wcz61mGmhrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMPWEubTNqLzp7kJShvVCFT9DnvgMB8GA1UdIwQY
MBaAFOLBRO4y/ddQE+fxuMLYB9Pa7Yu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHNGRTdqTDkxMUFUNV9HNHd0Z0gwOXJ0aTc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC81OWUxNGUtNDE1Zi00MDFhLWFkY2Ut
ZTFkZjQ1OTgwYzc4LzEvNHNGRTdqTDkxMUFUNV9HNHd0Z0gwOXJ0aTc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC81OWUxNGUtNDE1Zi00MDFhLWFkY2UtZTFkZjQ1OTgwYzc4
LzEvNHNGRTdqTDkxMUFUNV9HNHd0Z0gwOXJ0aTc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf6osAiyT
GpR1LDdwb8udcKFDZabDGvfmODrvaXbB4SBAAho8q53oi1aYSBhrdHCPPe2S7UoU
jdx6+bgF4SxMa56nO/cO5wvt2gkbt2kkvC8G8h2O/6xpSBRortFIEN30LqDgWCBm
xvc7HRJd8pTGqsqZoKkojl2cTRewph+hkqsKjMaLAeme3B+BA0HVMJFIOyYa2988
fY6TtjmVsrTpCMY/atdg0yzJaqJkjHKVd22yK//iYwK22hqbT0X4Ngk6ILYdD6Pa
nIx770YISq+JIIPmjmzzzbp8CWggTMTrhxfFnflCZsbUXyEzxbUNTr7psUV0LFo5
sV00uFa5ymyEUQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 13:19:02 2025 by rpki-client