Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.mft
File: 4HG570GlOChYzZ7vmKf7nRJqpK4.mft (raw, json)
Hash identifier: qnj6CbiyjQyFIK1jykjdtxrAw+0RdrDJv0E/tECOpL8=
Subject key identifier: C0:0E:85:C9:94:E0:1B:9E:B4:D3:9E:75:2F:03:54:C0:12:BB:A2:BF
Authority key identifier: E0:71:B9:EF:41:A5:38:28:58:CD:9E:EF:98:A7:FB:9D:12:6A:A4:AE
Certificate issuer: /CN=e071b9ef41a5382858cd9eef98a7fb9d126aa4ae
Certificate serial: 019845897CC2011BBCB36F05AC89DAE623CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4HG570GlOChYzZ7vmKf7nRJqpK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.mft
Manifest number: 0328
Signing time: Sat 26 Jul 2025 07:01:34 +0000
Manifest this update: Sat 26 Jul 2025 07:01:34 +0000
Manifest next update: Sun 27 Jul 2025 07:01:34 +0000
Files and hashes: 1: 4HG570GlOChYzZ7vmKf7nRJqpK4.crl (hash: jtGD184qc4Aaae+GzNS4MLDe62MDvsyXYskMpDGO3uI=)
2: YBfLAkuYURNDoMTvjD2hLc0uuNc.roa (hash: gM7Y+qrK9OGNkcbA31bQAYiigRBUM5Di4cIR3nOhPM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4HG570GlOChYzZ7vmKf7nRJqpK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:89:7c:c2:01:1b:bc:b3:6f:05:ac:89:da:e6:23:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e071b9ef41a5382858cd9eef98a7fb9d126aa4ae
Validity
Not Before: Jul 26 07:01:34 2025 GMT
Not After : Jul 27 07:01:34 2025 GMT
Subject: CN=c00e85c994e01b9eb4d39e752f0354c012bba2bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:17:f2:b0:99:51:70:47:5e:d1:76:95:bb:e3:
1e:17:c8:15:97:93:46:59:a9:a9:00:71:df:4d:a5:
26:2a:f1:a0:fe:6b:f9:1a:73:cd:69:84:95:19:cd:
4e:73:c1:59:39:cb:6b:d3:9b:c2:54:78:28:b9:0d:
a9:ce:b4:c3:72:7f:28:0e:98:ea:94:52:6a:b7:b4:
52:20:33:a6:b0:a9:70:67:f8:3a:f3:9e:6d:43:40:
20:68:6a:cf:c5:27:0b:0a:eb:92:62:ad:f0:42:f8:
53:ee:f1:d1:0a:cd:9e:b6:71:0f:e2:a6:ba:f9:a6:
b5:ff:f5:82:09:31:78:ba:2c:79:b7:92:7a:74:c8:
29:f1:58:e7:3a:d1:94:8f:07:c6:b4:99:48:1d:92:
6f:b3:30:da:9b:93:fd:de:30:1f:9f:6d:be:ae:8b:
96:dd:41:05:a5:28:4f:44:1f:9f:96:64:32:55:28:
b5:56:4b:7b:f0:ed:84:fb:22:32:59:62:a3:e2:00:
ab:4f:25:6c:a8:f0:6b:26:b7:69:db:e2:8a:df:0a:
8e:3b:18:7e:1f:42:1d:25:63:76:c1:3a:2e:76:61:
88:52:1c:e5:50:d4:64:8c:5a:1e:e3:d6:23:7a:6e:
c0:2a:7d:00:f1:17:c4:06:da:e6:8c:2e:a3:2d:14:
07:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:0E:85:C9:94:E0:1B:9E:B4:D3:9E:75:2F:03:54:C0:12:BB:A2:BF
X509v3 Authority Key Identifier:
keyid:E0:71:B9:EF:41:A5:38:28:58:CD:9E:EF:98:A7:FB:9D:12:6A:A4:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4HG570GlOChYzZ7vmKf7nRJqpK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:9b:4f:d1:3a:b9:50:86:fa:cb:bc:74:c3:8f:ef:0d:af:45:
12:bb:28:71:d3:db:4f:ab:0c:bb:8a:8a:1b:47:55:64:a3:cb:
5d:33:24:3c:95:b2:da:55:05:a0:e4:27:13:3a:e3:66:c6:f4:
10:76:c1:eb:35:2d:7f:59:d5:59:7b:11:68:67:d0:90:05:3f:
45:bf:e0:60:0b:46:a1:7c:27:50:1b:0f:6a:0b:8a:fb:92:23:
a3:cb:70:04:19:d4:c7:95:2b:8d:aa:34:e2:d0:22:6d:f6:73:
e1:f1:d1:0e:e8:4c:0e:ef:c6:c8:db:97:d7:02:4c:17:03:45:
b5:04:86:c0:1f:49:5f:f6:c0:44:e4:a6:01:cf:22:58:ff:08:
f4:d8:98:3c:39:48:0b:fb:31:92:af:df:ab:f4:e5:03:58:65:
be:73:2d:4c:39:58:f0:6b:76:54:7e:c5:71:9c:28:12:d1:d4:
ee:5b:87:9c:10:04:7b:0c:62:51:c8:77:67:49:ce:e0:37:b5:
5d:0f:1e:d7:1f:06:63:6c:fc:0c:43:8e:0a:e6:ee:74:9e:e2:
6d:22:56:47:96:3c:ac:62:b6:85:5b:c9:27:71:84:f2:e4:50:
29:eb:dc:7d:db:ca:81:6a:00:1e:70:20:c5:82:27:bb:f8:7e:
73:2a:83:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhFiXzCARu8s28FrIna5iPMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNzFiOWVmNDFhNTM4Mjg1OGNkOWVlZjk4YTdmYjlkMTI2
YWE0YWUwHhcNMjUwNzI2MDcwMTM0WhcNMjUwNzI3MDcwMTM0WjAzMTEwLwYDVQQD
EyhjMDBlODVjOTk0ZTAxYjllYjRkMzllNzUyZjAzNTRjMDEyYmJhMmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRfysJlRcEde0XaVu+MeF8gVl5NG
WampAHHfTaUmKvGg/mv5GnPNaYSVGc1Oc8FZOctr05vCVHgouQ2pzrTDcn8oDpjq
lFJqt7RSIDOmsKlwZ/g6855tQ0AgaGrPxScLCuuSYq3wQvhT7vHRCs2etnEP4qa6
+aa1//WCCTF4uix5t5J6dMgp8VjnOtGUjwfGtJlIHZJvszDam5P93jAfn22+rouW
3UEFpShPRB+flmQyVSi1Vkt78O2E+yIyWWKj4gCrTyVsqPBrJrdp2+KK3wqOOxh+
H0IdJWN2wToudmGIUhzlUNRkjFoe49Yjem7AKn0A8RfEBtrmjC6jLRQHkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMAOhcmU4BuetNOedS8DVMASu6K/MB8GA1UdIwQY
MBaAFOBxue9BpTgoWM2e75in+50SaqSuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEhHNTcwR2xPQ2hZelo3dm1LZjduUkpxcEs0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9iODE0NjAtZTA2Yy00MzUyLWFiMWIt
YmIzODBiY2FiZDI4LzEvNEhHNTcwR2xPQ2hZelo3dm1LZjduUkpxcEs0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9iODE0NjAtZTA2Yy00MzUyLWFiMWItYmIzODBiY2FiZDI4
LzEvNEhHNTcwR2xPQ2hZelo3dm1LZjduUkpxcEs0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc5tP0Tq5
UIb6y7x0w4/vDa9FErsocdPbT6sMu4qKG0dVZKPLXTMkPJWy2lUFoOQnEzrjZsb0
EHbB6zUtf1nVWXsRaGfQkAU/Rb/gYAtGoXwnUBsPaguK+5Ijo8twBBnUx5Urjao0
4tAibfZz4fHRDuhMDu/GyNuX1wJMFwNFtQSGwB9JX/bAROSmAc8iWP8I9NiYPDlI
C/sxkq/fq/TlA1hlvnMtTDlY8Gt2VH7FcZwoEtHU7luHnBAEewxiUch3Z0nO4De1
XQ8e1x8GY2z8DEOOCubudJ7ibSJWR5Y8rGK2hVvJJ3GE8uRQKevcfdvKgWoAHnAg
xYInu/h+cyqDMQ==
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:36:25 2025 by rpki-client