Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft
File: 704eplKHok4gxmO1FhwVE_AMio0.mft (raw, json)
Hash identifier: MnDxqpfgPRvDsSroKmgIV7N1NlCyufsx9cfeNscgWjU=
Subject key identifier: 6F:88:72:F0:B7:CB:C0:A1:EE:33:96:BC:10:FE:6C:E1:C4:81:7E:58
Authority key identifier: EF:4E:1E:A6:52:87:A2:4E:20:C6:63:B5:16:1C:15:13:F0:0C:8A:8D
Certificate issuer: /CN=ef4e1ea65287a24e20c663b5161c1513f00c8a8d
Certificate serial: 01984A0A3C8C2FA1601737ECB3B44B8F5881
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/704eplKHok4gxmO1FhwVE_AMio0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft
Manifest number: 0517
Signing time: Sun 27 Jul 2025 04:00:41 +0000
Manifest this update: Sun 27 Jul 2025 04:00:41 +0000
Manifest next update: Mon 28 Jul 2025 04:00:41 +0000
Files and hashes: 1: 1-x-3ccNzP71eAFgXPav3YRKbPc0.roa (hash: gcNVzNBHfGC67t/xgrOBlYz2dVPSnS4yGm9+O2azC54=)
2: 704eplKHok4gxmO1FhwVE_AMio0.crl (hash: OLLfejqQZE4xRqj2SR9V/cqsuQfmeQJ7QKkG4XmFzNw=)
3: J5QgCxKNKik7O15LPyeeQADYm_g.roa (hash: R0sIPZo3mElg4IM+t4du68+jxxhuTbAlvWncgQxpH3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft
rsync://rpki.ripe.net/repository/DEFAULT/704eplKHok4gxmO1FhwVE_AMio0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:3c:8c:2f:a1:60:17:37:ec:b3:b4:4b:8f:58:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef4e1ea65287a24e20c663b5161c1513f00c8a8d
Validity
Not Before: Jul 27 04:00:41 2025 GMT
Not After : Jul 28 04:00:41 2025 GMT
Subject: CN=6f8872f0b7cbc0a1ee3396bc10fe6ce1c4817e58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a1:f9:69:91:db:fb:a6:b7:0d:3e:90:33:70:
06:28:3e:6a:0e:ae:4e:4b:75:4c:3c:c7:60:1d:94:
78:73:d0:06:34:93:ba:b5:7e:03:8d:d1:40:d9:53:
c4:d1:04:a8:3c:83:57:e0:2d:1a:31:df:c5:84:5e:
d7:ad:1b:a0:d1:13:8c:ae:c0:d8:9b:2b:9a:ca:ab:
34:70:48:28:45:fa:b3:99:eb:f8:a6:78:5d:94:b5:
30:41:24:81:14:3b:d0:10:28:10:04:f4:5f:25:b5:
3e:20:41:b5:2a:78:25:b5:fa:b1:4e:41:e6:d0:0c:
ba:37:04:50:cb:cb:3d:da:37:74:f3:fe:85:80:0f:
aa:aa:92:da:46:36:0d:91:76:35:46:58:cb:07:32:
e0:db:ff:ca:1a:ef:eb:08:e7:3f:68:12:08:9f:27:
1f:1f:34:bc:10:1a:93:85:7c:d4:fc:8d:d0:6a:47:
87:68:13:68:8f:6d:2b:47:d4:ab:d1:60:57:54:1a:
e1:b1:9b:b2:4b:e4:81:c1:39:60:33:be:16:82:de:
42:e2:ee:db:6d:cd:e6:22:c7:37:16:55:9c:1f:96:
90:ce:e3:f9:68:7f:60:96:d6:71:5c:35:64:70:97:
3f:ec:39:96:16:f0:a0:d9:14:87:e2:16:8f:75:e8:
1e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:88:72:F0:B7:CB:C0:A1:EE:33:96:BC:10:FE:6C:E1:C4:81:7E:58
X509v3 Authority Key Identifier:
keyid:EF:4E:1E:A6:52:87:A2:4E:20:C6:63:B5:16:1C:15:13:F0:0C:8A:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/704eplKHok4gxmO1FhwVE_AMio0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:2b:b8:96:47:47:93:ab:78:96:81:21:81:8f:f1:f7:a1:c9:
8d:f2:7e:e9:cf:d5:f3:a9:fd:a9:4a:99:e4:48:4e:07:b3:a9:
f9:49:0b:49:bd:6c:0d:a5:f7:45:c9:e8:c4:52:3c:bb:81:f5:
db:1f:7c:91:b8:2b:52:0c:c6:d8:77:73:73:97:a0:38:d3:c0:
cb:05:7f:e0:3a:bc:c5:a4:36:2a:42:05:47:54:c7:4f:ef:dc:
b9:7f:b3:7a:c8:1d:ee:b0:a6:80:66:02:de:8c:49:2c:cb:d4:
d6:06:42:fd:4b:05:47:47:90:47:9f:fc:4d:bf:14:36:33:44:
ea:4d:8d:f8:99:90:f1:33:8b:6c:75:9e:02:01:2e:20:db:55:
5b:d7:95:78:c6:db:6f:2a:19:8c:dc:e1:a7:04:4c:c8:25:ba:
07:9e:9d:3c:92:24:b5:71:d5:e8:71:0f:bb:e3:7a:90:ba:48:
43:0b:eb:42:fd:2d:34:4d:d0:68:87:8b:26:c5:b8:70:2a:b6:
b0:7f:82:aa:20:d4:e7:b6:bf:b6:f9:1d:97:2b:f1:10:38:ec:
d1:9f:d1:ec:33:51:e5:4e:63:ea:64:f8:15:40:f3:79:60:de:
04:da:cf:61:4c:49:62:5e:45:4e:f1:f6:1c:bd:7c:63:75:20:
13:7a:14:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKCjyML6FgFzfss7RLj1iBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNGUxZWE2NTI4N2EyNGUyMGM2NjNiNTE2MWMxNTEzZjAw
YzhhOGQwHhcNMjUwNzI3MDQwMDQxWhcNMjUwNzI4MDQwMDQxWjAzMTEwLwYDVQQD
Eyg2Zjg4NzJmMGI3Y2JjMGExZWUzMzk2YmMxMGZlNmNlMWM0ODE3ZTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6H5aZHb+6a3DT6QM3AGKD5qDq5O
S3VMPMdgHZR4c9AGNJO6tX4DjdFA2VPE0QSoPINX4C0aMd/FhF7XrRug0ROMrsDY
myuayqs0cEgoRfqzmev4pnhdlLUwQSSBFDvQECgQBPRfJbU+IEG1KngltfqxTkHm
0Ay6NwRQy8s92jd08/6FgA+qqpLaRjYNkXY1RljLBzLg2//KGu/rCOc/aBIInycf
HzS8EBqThXzU/I3QakeHaBNoj20rR9Sr0WBXVBrhsZuyS+SBwTlgM74Wgt5C4u7b
bc3mIsc3FlWcH5aQzuP5aH9gltZxXDVkcJc/7DmWFvCg2RSH4haPdegeqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG+IcvC3y8Ch7jOWvBD+bOHEgX5YMB8GA1UdIwQY
MBaAFO9OHqZSh6JOIMZjtRYcFRPwDIqNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzA0ZXBsS0hvazRneG1PMUZod1ZFX0FNaW8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9hNTJjZWItYzhjOC00MjM2LWEwMzct
NjBhNTc0M2U2ZTFmLzEvNzA0ZXBsS0hvazRneG1PMUZod1ZFX0FNaW8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9hNTJjZWItYzhjOC00MjM2LWEwMzctNjBhNTc0M2U2ZTFm
LzEvNzA0ZXBsS0hvazRneG1PMUZod1ZFX0FNaW8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuiu4lkdH
k6t4loEhgY/x96HJjfJ+6c/V86n9qUqZ5EhOB7Op+UkLSb1sDaX3RcnoxFI8u4H1
2x98kbgrUgzG2Hdzc5egONPAywV/4Dq8xaQ2KkIFR1THT+/cuX+zesgd7rCmgGYC
3oxJLMvU1gZC/UsFR0eQR5/8Tb8UNjNE6k2N+JmQ8TOLbHWeAgEuINtVW9eVeMbb
byoZjNzhpwRMyCW6B56dPJIktXHV6HEPu+N6kLpIQwvrQv0tNE3QaIeLJsW4cCq2
sH+CqiDU57a/tvkdlyvxEDjs0Z/R7DNR5U5j6mT4FUDzeWDeBNrPYUxJYl5FTvH2
HL18Y3UgE3oUug==
-----END CERTIFICATE-----
Generated at Sun Jul 27 09:23:42 2025 by rpki-client