Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.mft
File: 4GiTQCg3lEieQayGqvpEFPik1r4.mft (raw, json)
Hash identifier: 5sjJPYsXx8GdwMzSFSrF3BsJAwu8G+038AP4XtJgJ1w=
Subject key identifier: 97:5E:05:34:55:65:9C:97:DB:F9:E0:C3:2C:62:03:7C:F0:41:CB:5C
Authority key identifier: E0:68:93:40:28:37:94:48:9E:41:AC:86:AA:FA:44:14:F8:A4:D6:BE
Certificate issuer: /CN=e0689340283794489e41ac86aafa4414f8a4d6be
Certificate serial: 019848533894321AE6E61576DCCF0A537F9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GiTQCg3lEieQayGqvpEFPik1r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.mft
Manifest number: 1604
Signing time: Sat 26 Jul 2025 20:01:09 +0000
Manifest this update: Sat 26 Jul 2025 20:01:09 +0000
Manifest next update: Sun 27 Jul 2025 20:01:09 +0000
Files and hashes: 1: 4GiTQCg3lEieQayGqvpEFPik1r4.crl (hash: 6fYnTPSQzf0b6NgjwyUysAL9G6na4BPMC9XBNMQnAeE=)
2: URa5fH07dVIqF3IJwFtjDdus5xo.roa (hash: bQ7L6PdzuMotAJCcbvlg+nm2FLpujqZUwsr24eILLiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GiTQCg3lEieQayGqvpEFPik1r4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:53:38:94:32:1a:e6:e6:15:76:dc:cf:0a:53:7f:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0689340283794489e41ac86aafa4414f8a4d6be
Validity
Not Before: Jul 26 20:01:09 2025 GMT
Not After : Jul 27 20:01:09 2025 GMT
Subject: CN=975e053455659c97dbf9e0c32c62037cf041cb5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:63:cd:db:43:3e:72:2e:f1:64:54:f1:a7:fd:
c3:dd:1e:61:42:42:60:5c:44:40:eb:d7:93:f5:79:
a2:0e:9f:a0:55:0e:a7:08:b7:de:99:9e:81:07:9c:
d5:73:a2:65:04:a4:53:c0:96:3c:b5:8a:64:b9:fc:
17:a1:b4:c0:41:52:f6:41:b1:8c:f6:36:a3:2f:2b:
4d:86:0e:f9:dd:78:15:97:99:05:0c:cb:d2:a9:3f:
2f:31:ae:91:f4:7a:8e:59:3b:a5:91:51:66:a0:ef:
e5:3b:a5:42:ba:69:a9:e7:9f:7f:a6:4d:f1:2a:aa:
83:3d:a6:04:36:50:1e:ff:e8:3e:1b:0c:b5:6c:d4:
92:4b:65:a4:0f:94:6c:ed:30:3c:1c:07:64:e0:cd:
2c:a0:2f:b1:77:f8:b6:77:00:1b:0b:2b:55:79:b4:
6e:99:d9:38:40:37:3f:be:6c:fd:fa:f0:b9:a8:42:
1a:57:33:49:a7:05:28:b1:e7:8c:e6:7f:1c:c3:f9:
d3:f2:2e:6b:1c:81:ec:8b:71:38:f4:47:68:8e:c7:
c6:ef:1d:2d:47:63:64:ee:62:a3:58:99:1a:6a:8a:
6b:7c:9e:19:df:d0:f7:c1:10:3d:5c:d5:33:77:45:
f4:a6:d3:24:13:b3:9e:ce:ad:81:75:87:b4:48:fc:
bb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:5E:05:34:55:65:9C:97:DB:F9:E0:C3:2C:62:03:7C:F0:41:CB:5C
X509v3 Authority Key Identifier:
keyid:E0:68:93:40:28:37:94:48:9E:41:AC:86:AA:FA:44:14:F8:A4:D6:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GiTQCg3lEieQayGqvpEFPik1r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:53:43:82:26:d1:83:fb:b3:d1:69:63:ab:bc:81:da:e5:a1:
70:99:66:1b:24:f1:22:e5:f7:cc:76:37:8e:3e:91:49:dc:e6:
55:73:72:11:71:4f:01:ab:37:28:c9:62:c7:3b:fd:dd:4f:ad:
5a:e7:28:fc:a6:66:ef:f1:47:fc:bd:35:57:52:cb:64:ca:b9:
e3:60:51:b0:34:47:42:bd:9c:5d:5e:cf:18:2e:af:28:0f:97:
68:b4:4b:d2:7f:5a:3f:7b:32:e1:45:73:a8:15:3d:e3:44:43:
c9:25:82:ad:21:68:79:e2:d4:91:30:ce:50:ed:b2:80:68:0f:
a2:83:b6:e4:2d:21:2e:e6:33:e5:a0:f9:ee:17:a2:4a:ac:d0:
8c:23:88:50:70:89:77:2b:4f:e8:4b:5a:46:d8:db:b3:9b:e7:
b9:58:26:45:56:a7:ab:16:0b:78:0c:c3:04:04:dc:df:29:b6:
5a:bb:44:ef:1e:26:6d:47:21:34:76:02:2d:97:2f:d5:64:cb:
c6:11:2b:79:1c:79:ac:90:3f:01:4a:77:fd:4b:66:92:ec:b5:
26:24:0b:c6:46:1b:e1:5a:10:cd:df:a7:73:c1:b3:44:ff:03:
fe:b8:38:6d:8e:88:d5:24:6d:85:84:df:0e:da:6d:11:8e:82:
39:8d:28:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIUziUMhrm5hV23M8KU3+cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNjg5MzQwMjgzNzk0NDg5ZTQxYWM4NmFhZmE0NDE0Zjhh
NGQ2YmUwHhcNMjUwNzI2MjAwMTA5WhcNMjUwNzI3MjAwMTA5WjAzMTEwLwYDVQQD
Eyg5NzVlMDUzNDU1NjU5Yzk3ZGJmOWUwYzMyYzYyMDM3Y2YwNDFjYjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2PN20M+ci7xZFTxp/3D3R5hQkJg
XERA69eT9XmiDp+gVQ6nCLfemZ6BB5zVc6JlBKRTwJY8tYpkufwXobTAQVL2QbGM
9jajLytNhg753XgVl5kFDMvSqT8vMa6R9HqOWTulkVFmoO/lO6VCummp559/pk3x
KqqDPaYENlAe/+g+Gwy1bNSSS2WkD5Rs7TA8HAdk4M0soC+xd/i2dwAbCytVebRu
mdk4QDc/vmz9+vC5qEIaVzNJpwUoseeM5n8cw/nT8i5rHIHsi3E49EdojsfG7x0t
R2Nk7mKjWJkaaoprfJ4Z39D3wRA9XNUzd0X0ptMkE7Oezq2BdYe0SPy7VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJdeBTRVZZyX2/ngwyxiA3zwQctcMB8GA1UdIwQY
MBaAFOBok0AoN5RInkGshqr6RBT4pNa+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEdpVFFDZzNsRWllUWF5R3F2cEVGUGlrMXI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS8wNWFiNjAtZGVhNi00M2EzLTg3ZWYt
N2JmYWViMTk1NDQ1LzEvNEdpVFFDZzNsRWllUWF5R3F2cEVGUGlrMXI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS8wNWFiNjAtZGVhNi00M2EzLTg3ZWYtN2JmYWViMTk1NDQ1
LzEvNEdpVFFDZzNsRWllUWF5R3F2cEVGUGlrMXI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPFNDgibR
g/uz0Wljq7yB2uWhcJlmGyTxIuX3zHY3jj6RSdzmVXNyEXFPAas3KMlixzv93U+t
Wuco/KZm7/FH/L01V1LLZMq542BRsDRHQr2cXV7PGC6vKA+XaLRL0n9aP3sy4UVz
qBU940RDySWCrSFoeeLUkTDOUO2ygGgPooO25C0hLuYz5aD57heiSqzQjCOIUHCJ
dytP6EtaRtjbs5vnuVgmRVanqxYLeAzDBATc3ym2WrtE7x4mbUchNHYCLZcv1WTL
xhEreRx5rJA/AUp3/Utmkuy1JiQLxkYb4VoQzd+nc8GzRP8D/rg4bY6I1SRthYTf
DtptEY6COY0ouw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 02:02:53 2025 by rpki-client