Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
File: 4iqTzrgrZ1qEsNeOea5KeXypgjE.mft (raw, json)
Hash identifier: CkNQ4aA8uF28hVjHN1hO7aZawBIaHG9lGX8HxHYaDMk=
Subject key identifier: 9D:81:25:00:34:77:B5:F7:E2:11:22:80:9A:AE:8E:EB:08:99:36:BC
Authority key identifier: E2:2A:93:CE:B8:2B:67:5A:84:B0:D7:8E:79:AE:4A:79:7C:A9:82:31
Certificate issuer: /CN=e22a93ceb82b675a84b0d78e79ae4a797ca98231
Certificate serial: 01984B53A8ECC453D36DA6061F46088EC11D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
Manifest number: 1199
Signing time: Sun 27 Jul 2025 10:00:30 +0000
Manifest this update: Sun 27 Jul 2025 10:00:30 +0000
Manifest next update: Mon 28 Jul 2025 10:00:30 +0000
Files and hashes: 1: 4iqTzrgrZ1qEsNeOea5KeXypgjE.crl (hash: y8hr3oSa5Ec6U3XBTGCseTuyQKvbHzHVTcSvQGhZarM=)
2: yB2qv2hArqh8Rg0DZ4yGfxQJ57I.roa (hash: b+3wO516colETH6Q8Hnf3dC3oM2heED/4qOLBklRlP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:a8:ec:c4:53:d3:6d:a6:06:1f:46:08:8e:c1:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e22a93ceb82b675a84b0d78e79ae4a797ca98231
Validity
Not Before: Jul 27 10:00:30 2025 GMT
Not After : Jul 28 10:00:30 2025 GMT
Subject: CN=9d8125003477b5f7e21122809aae8eeb089936bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:68:98:f2:6f:f4:cc:77:61:2d:bc:b7:6a:9c:
7a:59:7d:1f:43:ee:eb:de:2c:22:b5:86:a6:33:61:
3d:6d:97:a1:38:ef:82:e3:ba:5c:e4:aa:bc:9e:5b:
11:18:41:e2:cb:99:2b:38:ab:5f:43:d9:52:a6:60:
22:dd:69:49:1f:6e:01:77:9f:5f:c0:bf:95:6f:cc:
45:79:b0:be:46:96:fe:ea:0a:71:aa:14:c1:bc:80:
e3:40:4e:df:3c:9c:b4:0f:15:42:f5:d3:9d:8d:1b:
15:62:c8:fa:63:46:81:1b:0d:55:85:09:8a:33:51:
b2:2c:df:7e:e4:b2:61:f9:84:13:92:7e:80:11:1b:
00:08:cd:1d:28:08:63:c6:99:5d:81:18:a2:02:ef:
8d:bf:8e:54:4a:64:7f:00:d1:c6:c8:4d:0c:9e:42:
b9:ab:56:01:cc:56:c8:ee:b0:63:41:5d:49:44:df:
2e:25:da:eb:28:15:91:e3:76:af:5e:67:aa:c4:e1:
a8:63:67:0d:c9:90:02:4e:37:d0:d8:1e:c4:b5:50:
a7:1b:9d:05:f8:b4:12:6c:bf:f3:d2:48:f5:f3:49:
a6:12:f9:fa:64:28:96:3c:7d:62:db:34:22:55:e9:
f2:fb:24:d4:6b:11:cd:63:d0:04:60:f6:3d:86:01:
33:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:81:25:00:34:77:B5:F7:E2:11:22:80:9A:AE:8E:EB:08:99:36:BC
X509v3 Authority Key Identifier:
keyid:E2:2A:93:CE:B8:2B:67:5A:84:B0:D7:8E:79:AE:4A:79:7C:A9:82:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:f5:2f:a3:a4:53:73:cf:a7:62:94:3e:15:9f:99:14:e2:25:
a0:3f:41:7c:4f:18:6c:7e:73:8d:6f:73:12:c8:96:e6:a3:a5:
40:a2:9e:1e:4a:84:48:ed:bc:e5:88:f2:da:cf:f7:0d:d2:47:
71:70:7e:4e:5f:a9:07:f7:1c:82:90:73:e7:a1:28:ee:aa:0b:
d9:4d:9b:d4:81:38:c5:f2:b7:d3:7e:33:1e:4a:33:f5:e8:5d:
52:13:bb:7b:b7:fb:79:3b:7b:36:ac:3a:0a:49:55:c6:a6:33:
fe:dc:9b:ee:0a:bb:a8:b5:7a:0b:99:91:db:24:cb:9d:39:6b:
13:d0:72:92:56:70:71:80:f9:de:15:f8:3c:e4:33:74:f5:68:
41:88:87:95:16:a4:96:9f:34:13:9e:43:00:9c:56:03:f6:84:
59:ba:3b:38:8f:cc:b7:bb:0a:7a:28:31:05:28:17:63:2e:4e:
4d:3e:4f:48:04:48:15:aa:f9:85:8e:8e:4a:fd:10:ae:e0:d6:
9b:22:98:06:f9:f5:3b:b6:ec:36:da:42:a6:71:85:65:71:9f:
d9:b5:bf:a5:fa:d5:2b:c3:9b:45:93:4b:e5:fc:4e:a4:56:c8:
62:79:67:15:86:a3:76:07:7c:bb:2a:a8:46:32:22:4b:cc:f3:
7f:8a:c7:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLU6jsxFPTbaYGH0YIjsEdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyMmE5M2NlYjgyYjY3NWE4NGIwZDc4ZTc5YWU0YTc5N2Nh
OTgyMzEwHhcNMjUwNzI3MTAwMDMwWhcNMjUwNzI4MTAwMDMwWjAzMTEwLwYDVQQD
Eyg5ZDgxMjUwMDM0NzdiNWY3ZTIxMTIyODA5YWFlOGVlYjA4OTkzNmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmiY8m/0zHdhLby3apx6WX0fQ+7r
3iwitYamM2E9bZehOO+C47pc5Kq8nlsRGEHiy5krOKtfQ9lSpmAi3WlJH24Bd59f
wL+Vb8xFebC+Rpb+6gpxqhTBvIDjQE7fPJy0DxVC9dOdjRsVYsj6Y0aBGw1VhQmK
M1GyLN9+5LJh+YQTkn6AERsACM0dKAhjxpldgRiiAu+Nv45USmR/ANHGyE0MnkK5
q1YBzFbI7rBjQV1JRN8uJdrrKBWR43avXmeqxOGoY2cNyZACTjfQ2B7EtVCnG50F
+LQSbL/z0kj180mmEvn6ZCiWPH1i2zQiVeny+yTUaxHNY9AEYPY9hgEzkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ2BJQA0d7X34hEigJqujusImTa8MB8GA1UdIwQY
MBaAFOIqk864K2dahLDXjnmuSnl8qYIxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGlxVHpyZ3JaMXFFc05lT2VhNUtlWHlwZ2pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8yZTgyY2ItNGE2ZS00MDhmLWFmMjAt
ODQzMTU0YTgwYjcyLzEvNGlxVHpyZ3JaMXFFc05lT2VhNUtlWHlwZ2pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi8yZTgyY2ItNGE2ZS00MDhmLWFmMjAtODQzMTU0YTgwYjcy
LzEvNGlxVHpyZ3JaMXFFc05lT2VhNUtlWHlwZ2pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhPUvo6RT
c8+nYpQ+FZ+ZFOIloD9BfE8YbH5zjW9zEsiW5qOlQKKeHkqESO285Yjy2s/3DdJH
cXB+Tl+pB/ccgpBz56Eo7qoL2U2b1IE4xfK3034zHkoz9ehdUhO7e7f7eTt7Nqw6
CklVxqYz/tyb7gq7qLV6C5mR2yTLnTlrE9ByklZwcYD53hX4POQzdPVoQYiHlRak
lp80E55DAJxWA/aEWbo7OI/Mt7sKeigxBSgXYy5OTT5PSARIFar5hY6OSv0QruDW
myKYBvn1O7bsNtpCpnGFZXGf2bW/pfrVK8ObRZNL5fxOpFbIYnlnFYajdgd8uyqo
RjIiS8zzf4rHtQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 14:30:29 2025 by rpki-client