Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/bdbee9-5eee-4561-a523-9435159c93eb/1/4CzXYQ92Hg7SUq57ufMPHisXtec.mft
File: 4CzXYQ92Hg7SUq57ufMPHisXtec.mft (raw, json)
Hash identifier: RmKCQgsKBf1DbBfB539hDKUVMKnaGdkiRjaImPPX7zY=
Subject key identifier: 20:B6:0F:FE:9B:04:0E:F4:B0:97:F1:FC:D7:DA:C3:8E:75:C3:A4:8F
Authority key identifier: E0:2C:D7:61:0F:76:1E:0E:D2:52:AE:7B:B9:F3:0F:1E:2B:17:B5:E7
Certificate issuer: /CN=e02cd7610f761e0ed252ae7bb9f30f1e2b17b5e7
Certificate serial: 019847E53342985478A9990552446C293B23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4CzXYQ92Hg7SUq57ufMPHisXtec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/bdbee9-5eee-4561-a523-9435159c93eb/1/4CzXYQ92Hg7SUq57ufMPHisXtec.mft
Manifest number: 1291
Signing time: Sat 26 Jul 2025 18:00:59 +0000
Manifest this update: Sat 26 Jul 2025 18:00:59 +0000
Manifest next update: Sun 27 Jul 2025 18:00:59 +0000
Files and hashes: 1: 4CzXYQ92Hg7SUq57ufMPHisXtec.crl (hash: 9Wy4OhDxbHUxOOMbm+20Vx4IFPJuitcdKCS4Bwy7MGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/bdbee9-5eee-4561-a523-9435159c93eb/1/4CzXYQ92Hg7SUq57ufMPHisXtec.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/bdbee9-5eee-4561-a523-9435159c93eb/1/4CzXYQ92Hg7SUq57ufMPHisXtec.mft
rsync://rpki.ripe.net/repository/DEFAULT/4CzXYQ92Hg7SUq57ufMPHisXtec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e5:33:42:98:54:78:a9:99:05:52:44:6c:29:3b:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e02cd7610f761e0ed252ae7bb9f30f1e2b17b5e7
Validity
Not Before: Jul 26 18:00:59 2025 GMT
Not After : Jul 27 18:00:59 2025 GMT
Subject: CN=20b60ffe9b040ef4b097f1fcd7dac38e75c3a48f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e9:f1:51:73:ed:95:e4:75:ba:5b:77:10:4d:
33:b2:25:53:93:1d:3e:ce:85:af:71:cf:cc:03:d7:
0d:d1:1c:c0:c7:b9:7a:0e:97:9e:f9:f9:6f:52:fd:
4d:d0:58:0e:0d:62:73:cf:d9:62:c1:f5:3d:c5:8f:
65:06:ba:90:39:49:e8:df:bb:0c:79:50:5e:a6:63:
69:79:00:90:a3:fc:5d:7a:52:03:43:16:39:18:04:
d5:3c:7c:ba:d5:6b:56:fb:e5:31:0f:99:b8:dd:db:
8f:c3:dd:5c:61:62:a5:af:6f:6d:1f:f9:66:76:49:
9d:b8:eb:ef:bf:17:98:2f:f1:7d:79:fc:c3:c0:0a:
c6:22:b1:2b:fb:a5:9d:66:cf:51:5a:c9:ab:ad:39:
f7:ae:bb:d6:1d:53:51:55:c9:90:71:48:21:d6:c6:
d9:96:81:88:7d:65:4c:4f:69:92:a4:22:c2:ff:2f:
ff:2b:af:76:a1:26:cc:3e:33:90:3a:fc:d6:4d:13:
95:56:aa:85:8e:30:75:72:15:1e:55:31:04:d3:a1:
c9:19:5a:76:dc:8f:83:54:2e:d0:e0:74:c0:63:de:
73:05:5e:3c:4a:d8:90:91:c0:43:1a:9e:4a:c2:03:
72:ce:a2:88:c6:ca:67:ef:33:51:ed:78:49:29:4f:
00:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B6:0F:FE:9B:04:0E:F4:B0:97:F1:FC:D7:DA:C3:8E:75:C3:A4:8F
X509v3 Authority Key Identifier:
keyid:E0:2C:D7:61:0F:76:1E:0E:D2:52:AE:7B:B9:F3:0F:1E:2B:17:B5:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4CzXYQ92Hg7SUq57ufMPHisXtec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bdbee9-5eee-4561-a523-9435159c93eb/1/4CzXYQ92Hg7SUq57ufMPHisXtec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bdbee9-5eee-4561-a523-9435159c93eb/1/4CzXYQ92Hg7SUq57ufMPHisXtec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:6b:79:90:df:30:87:cb:7e:65:72:3e:d1:77:cb:7a:80:f7:
7a:19:66:f2:3b:4f:86:33:3b:b5:54:6f:5e:8a:77:84:e9:0a:
22:28:c0:80:40:7b:8f:47:5d:e4:1a:1c:5e:c7:65:14:4b:43:
1c:c3:0b:df:e3:3e:00:be:c8:5a:47:5e:4f:a1:56:3c:f5:7c:
63:3a:40:fc:53:b0:9e:5f:e4:aa:dc:b0:91:31:30:82:fe:e8:
70:3a:be:76:a9:a1:99:c6:18:e3:67:6a:0f:84:f4:ad:18:6c:
be:d2:15:d1:ba:fa:93:1d:a9:0a:c8:9f:c3:57:31:52:20:9c:
78:02:95:ba:b0:81:b1:aa:de:5c:7e:44:0b:b9:fd:a2:72:3e:
8b:80:5e:1f:35:f2:4e:9d:fb:b0:c8:df:41:cb:fd:33:cb:13:
4d:87:03:dd:29:80:d7:8f:bc:41:fd:6d:55:ac:33:2f:26:93:
b3:d5:63:5b:e8:c0:79:37:9e:2a:ad:2e:ac:f8:68:63:06:6a:
d7:c1:f5:11:58:08:81:48:be:cd:ab:23:a8:2b:fb:b4:9c:7a:
d2:bf:3e:be:f6:1a:40:48:8c:a1:43:3d:e7:ae:6e:98:8d:f9:
5d:06:04:73:5c:cd:7c:3f:71:7e:ef:ec:33:f0:b9:6c:52:ac:
36:22:57:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhH5TNCmFR4qZkFUkRsKTsjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwMmNkNzYxMGY3NjFlMGVkMjUyYWU3YmI5ZjMwZjFlMmIx
N2I1ZTcwHhcNMjUwNzI2MTgwMDU5WhcNMjUwNzI3MTgwMDU5WjAzMTEwLwYDVQQD
EygyMGI2MGZmZTliMDQwZWY0YjA5N2YxZmNkN2RhYzM4ZTc1YzNhNDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+nxUXPtleR1ult3EE0zsiVTkx0+
zoWvcc/MA9cN0RzAx7l6Dpee+flvUv1N0FgODWJzz9liwfU9xY9lBrqQOUno37sM
eVBepmNpeQCQo/xdelIDQxY5GATVPHy61WtW++UxD5m43duPw91cYWKlr29tH/lm
dkmduOvvvxeYL/F9efzDwArGIrEr+6WdZs9RWsmrrTn3rrvWHVNRVcmQcUgh1sbZ
loGIfWVMT2mSpCLC/y//K692oSbMPjOQOvzWTROVVqqFjjB1chUeVTEE06HJGVp2
3I+DVC7Q4HTAY95zBV48StiQkcBDGp5KwgNyzqKIxspn7zNR7XhJKU8A9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCC2D/6bBA70sJfx/Nfaw451w6SPMB8GA1UdIwQY
MBaAFOAs12EPdh4O0lKue7nzDx4rF7XnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEN6WFlROTJIZzdTVXE1N3VmTVBIaXNYdGVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9iZGJlZTktNWVlZS00NTYxLWE1MjMt
OTQzNTE1OWM5M2ViLzEvNEN6WFlROTJIZzdTVXE1N3VmTVBIaXNYdGVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9iZGJlZTktNWVlZS00NTYxLWE1MjMtOTQzNTE1OWM5M2Vi
LzEvNEN6WFlROTJIZzdTVXE1N3VmTVBIaXNYdGVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADmt5kN8w
h8t+ZXI+0XfLeoD3ehlm8jtPhjM7tVRvXop3hOkKIijAgEB7j0dd5BocXsdlFEtD
HMML3+M+AL7IWkdeT6FWPPV8YzpA/FOwnl/kqtywkTEwgv7ocDq+dqmhmcYY42dq
D4T0rRhsvtIV0br6kx2pCsifw1cxUiCceAKVurCBsareXH5EC7n9onI+i4BeHzXy
Tp37sMjfQcv9M8sTTYcD3SmA14+8Qf1tVawzLyaTs9VjW+jAeTeeKq0urPhoYwZq
18H1EVgIgUi+zasjqCv7tJx60r8+vvYaQEiMoUM9565umI35XQYEc1zNfD9xfu/s
M/C5bFKsNiJXxg==
-----END CERTIFICATE-----
Generated at Sat Jul 26 21:01:00 2025 by rpki-client