Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.mft
File: 04m0GNo0qjk07N4rcx3x1O1-yA4.mft (raw, json)
Hash identifier: 7LjTfa50N44RdfAQMbiR4RX2hdXMOZDEnE0X287FNn4=
Subject key identifier: AA:9E:CB:E5:FE:59:51:D4:8A:1F:09:A6:BC:C1:97:42:74:3E:52:CD
Authority key identifier: D3:89:B4:18:DA:34:AA:39:34:EC:DE:2B:73:1D:F1:D4:ED:7E:C8:0E
Certificate issuer: /CN=d389b418da34aa3934ecde2b731df1d4ed7ec80e
Certificate serial: 01984852CE133FC354B504A0A7D4A3E83D39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04m0GNo0qjk07N4rcx3x1O1-yA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.mft
Manifest number: 1312
Signing time: Sat 26 Jul 2025 20:00:42 +0000
Manifest this update: Sat 26 Jul 2025 20:00:42 +0000
Manifest next update: Sun 27 Jul 2025 20:00:42 +0000
Files and hashes: 1: 04m0GNo0qjk07N4rcx3x1O1-yA4.crl (hash: FzM5n+9GgbsGpQYXbdGgOPaiaGizHr6Gy9hNJkGUuRQ=)
2: cWwT1szK5NdnVm06LjbXvG6eYg4.roa (hash: W4zwG2oQXcpZIEG+6MYSyZ5G6TI/ulbfB+7HQbWQK/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/04m0GNo0qjk07N4rcx3x1O1-yA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:ce:13:3f:c3:54:b5:04:a0:a7:d4:a3:e8:3d:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d389b418da34aa3934ecde2b731df1d4ed7ec80e
Validity
Not Before: Jul 26 20:00:42 2025 GMT
Not After : Jul 27 20:00:42 2025 GMT
Subject: CN=aa9ecbe5fe5951d48a1f09a6bcc19742743e52cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8b:d6:bc:7d:4a:31:d3:26:f8:0c:54:0b:4b:
a6:47:f4:7e:69:a4:13:51:ca:aa:54:1f:b8:84:a3:
56:bc:e6:eb:eb:b8:45:69:da:fa:a3:f6:74:65:59:
ea:01:fa:df:02:08:f9:ba:16:e1:fd:4a:3f:44:1d:
7a:cd:58:72:57:f9:3b:7f:9f:79:0b:f0:d0:26:dc:
d2:e3:38:cb:d9:68:de:5d:7a:14:82:b9:06:6c:9c:
e4:e6:3c:ef:a0:a0:8c:c1:c5:ac:27:c1:26:a1:78:
79:db:46:2a:a7:e1:ab:45:62:e1:9a:43:71:bc:37:
94:18:ce:9b:d8:04:1a:2c:3e:10:84:94:7d:06:57:
ff:7f:94:7b:17:c4:9b:5d:58:a1:f3:2a:0a:da:97:
a4:be:5d:99:5f:cb:1f:17:81:cc:80:5f:e9:1d:8d:
a2:cb:4d:5f:46:97:56:1a:e2:aa:95:99:cc:31:77:
b1:ae:ed:80:4a:6b:1a:59:ee:db:7b:8f:71:bc:0f:
26:da:5b:ac:40:66:73:f5:56:5c:8e:7d:b9:37:e8:
a0:67:49:8f:0a:d7:49:d1:d6:56:a7:a5:13:69:9d:
26:f6:76:5a:1f:3a:8b:06:a4:a8:70:05:5e:23:14:
a0:58:34:d5:db:86:e2:fb:b8:d0:4e:13:cc:7d:34:
2a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:9E:CB:E5:FE:59:51:D4:8A:1F:09:A6:BC:C1:97:42:74:3E:52:CD
X509v3 Authority Key Identifier:
keyid:D3:89:B4:18:DA:34:AA:39:34:EC:DE:2B:73:1D:F1:D4:ED:7E:C8:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04m0GNo0qjk07N4rcx3x1O1-yA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:37:a5:4c:fb:84:55:d2:d7:7f:4b:2d:21:94:92:d0:68:29:
31:0d:d3:0a:ec:b4:0d:bf:d6:b5:19:29:63:bf:11:2d:ce:14:
07:74:e9:5a:15:3e:66:c8:4c:04:57:00:72:db:29:7d:b0:ca:
ba:e5:4d:bb:11:1f:37:03:2f:13:37:81:cb:41:6c:b9:47:9e:
3e:a2:6f:de:a7:33:38:26:d4:52:09:89:3e:69:1b:47:3d:f9:
98:52:f8:0d:63:b8:c6:50:56:b4:20:49:52:5d:4d:96:f7:2e:
22:28:9a:b6:86:b1:be:fa:d7:a8:ab:55:5a:89:02:f9:42:7a:
23:94:1a:37:2f:c4:aa:23:07:8b:8f:94:3a:a6:21:d4:35:29:
d3:a5:80:f3:d8:a0:25:db:ab:e2:91:33:80:1d:e5:0f:c2:92:
52:8d:79:fc:b4:26:6f:37:47:da:e3:47:91:c6:1b:db:84:c2:
4c:49:20:cf:f5:95:41:6b:63:c0:28:3d:21:38:00:70:26:2f:
0f:b3:6f:9d:3c:a6:bd:c8:b1:94:31:4e:07:26:ba:98:c8:21:
1d:c7:8f:ef:d8:54:31:eb:bf:d8:59:01:2b:b8:76:0f:e7:e2:
98:18:3c:84:d4:71:5f:56:eb:a6:9d:4c:4b:4e:20:04:7d:b3:
f8:3d:70:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIUs4TP8NUtQSgp9Sj6D05MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzODliNDE4ZGEzNGFhMzkzNGVjZGUyYjczMWRmMWQ0ZWQ3
ZWM4MGUwHhcNMjUwNzI2MjAwMDQyWhcNMjUwNzI3MjAwMDQyWjAzMTEwLwYDVQQD
EyhhYTllY2JlNWZlNTk1MWQ0OGExZjA5YTZiY2MxOTc0Mjc0M2U1MmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIvWvH1KMdMm+AxUC0umR/R+aaQT
UcqqVB+4hKNWvObr67hFadr6o/Z0ZVnqAfrfAgj5uhbh/Uo/RB16zVhyV/k7f595
C/DQJtzS4zjL2WjeXXoUgrkGbJzk5jzvoKCMwcWsJ8EmoXh520Yqp+GrRWLhmkNx
vDeUGM6b2AQaLD4QhJR9Blf/f5R7F8SbXVih8yoK2pekvl2ZX8sfF4HMgF/pHY2i
y01fRpdWGuKqlZnMMXexru2ASmsaWe7be49xvA8m2lusQGZz9VZcjn25N+igZ0mP
CtdJ0dZWp6UTaZ0m9nZaHzqLBqSocAVeIxSgWDTV24bi+7jQThPMfTQqKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKqey+X+WVHUih8JprzBl0J0PlLNMB8GA1UdIwQY
MBaAFNOJtBjaNKo5NOzeK3Md8dTtfsgOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDRtMEdObzBxamswN040cmN4M3gxTzEteUE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9kNDcxNjMtODBlYS00NDRhLWE3OWYt
MDNhYTI5YjZhNzZhLzEvMDRtMEdObzBxamswN040cmN4M3gxTzEteUE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9kNDcxNjMtODBlYS00NDRhLWE3OWYtMDNhYTI5YjZhNzZh
LzEvMDRtMEdObzBxamswN040cmN4M3gxTzEteUE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbDelTPuE
VdLXf0stIZSS0GgpMQ3TCuy0Db/WtRkpY78RLc4UB3TpWhU+ZshMBFcActspfbDK
uuVNuxEfNwMvEzeBy0FsuUeePqJv3qczOCbUUgmJPmkbRz35mFL4DWO4xlBWtCBJ
Ul1NlvcuIiiatoaxvvrXqKtVWokC+UJ6I5QaNy/EqiMHi4+UOqYh1DUp06WA89ig
Jdur4pEzgB3lD8KSUo15/LQmbzdH2uNHkcYb24TCTEkgz/WVQWtjwCg9ITgAcCYv
D7NvnTymvcixlDFOBya6mMghHceP79hUMeu/2FkBK7h2D+fimBg8hNRxX1brpp1M
S04gBH2z+D1wAg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 00:59:54 2025 by rpki-client