Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/415e39-6cca-44e3-bbb9-6fc9a5718706/1/RK4A_ueCEKsEi0QODLKn9AyduMw.mft
File: RK4A_ueCEKsEi0QODLKn9AyduMw.mft (raw, json)
Hash identifier: C8Vt5ILnFNcK0ghNwGTJRgRY7jS4x0987ksKi0KjlnY=
Subject key identifier: 41:14:22:07:AD:F6:10:B9:17:5D:FD:EC:97:08:37:21:F8:C6:60:19
Authority key identifier: 44:AE:00:FE:E7:82:10:AB:04:8B:44:0E:0C:B2:A7:F4:0C:9D:B8:CC
Certificate issuer: /CN=44ae00fee78210ab048b440e0cb2a7f40c9db8cc
Certificate serial: 01984AAE8B9526FC08FC234F6441C30CEE79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RK4A_ueCEKsEi0QODLKn9AyduMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/415e39-6cca-44e3-bbb9-6fc9a5718706/1/RK4A_ueCEKsEi0QODLKn9AyduMw.mft
Manifest number: 0A2B
Signing time: Sun 27 Jul 2025 07:00:09 +0000
Manifest this update: Sun 27 Jul 2025 07:00:09 +0000
Manifest next update: Mon 28 Jul 2025 07:00:09 +0000
Files and hashes: 1: RK4A_ueCEKsEi0QODLKn9AyduMw.crl (hash: wexjV0eahKxSOGbpKBJov/hBhUzRPmfvhReTIY8EVq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/415e39-6cca-44e3-bbb9-6fc9a5718706/1/RK4A_ueCEKsEi0QODLKn9AyduMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/415e39-6cca-44e3-bbb9-6fc9a5718706/1/RK4A_ueCEKsEi0QODLKn9AyduMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RK4A_ueCEKsEi0QODLKn9AyduMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:8b:95:26:fc:08:fc:23:4f:64:41:c3:0c:ee:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44ae00fee78210ab048b440e0cb2a7f40c9db8cc
Validity
Not Before: Jul 27 07:00:09 2025 GMT
Not After : Jul 28 07:00:09 2025 GMT
Subject: CN=41142207adf610b9175dfdec97083721f8c66019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:40:c5:47:63:da:55:d1:e1:25:84:41:14:ee:
8a:c1:83:84:04:23:b7:c5:ce:ce:a8:a0:bc:b0:7c:
17:9d:a4:72:48:7b:e0:63:5e:9b:e0:5b:b7:65:e0:
1a:b4:92:73:18:a0:04:06:3f:3f:9e:f5:5a:88:b8:
53:74:62:1b:df:27:7b:8c:3d:74:bd:d9:e4:8a:fb:
7e:f0:06:3b:88:fe:48:aa:ce:78:85:75:ed:09:50:
fa:01:a3:d1:d2:50:85:cd:e6:2f:df:1d:86:e5:bb:
79:75:53:b7:46:69:5c:f7:89:5f:7d:e9:a4:42:f0:
0e:47:bb:12:d6:df:f4:d8:e1:74:93:68:08:05:9d:
73:6f:71:57:dd:c7:1f:bc:4a:9d:bc:dc:0d:10:13:
63:37:b7:ae:4b:7e:96:60:e8:f5:d7:ca:cb:16:fd:
96:1e:e0:d7:07:b4:20:51:bf:a6:38:a3:78:fb:bc:
96:6a:92:40:a1:8a:ef:6e:93:0a:0f:47:1e:5c:7e:
41:9a:5b:64:48:62:dc:a2:77:ff:43:64:87:80:8d:
c5:c3:78:6d:3a:67:26:dd:be:b8:33:69:ff:80:0a:
46:ae:a9:6c:c1:ec:b1:20:26:06:ef:b5:ba:f3:15:
ad:5b:21:31:af:f7:2f:14:5e:e1:cd:05:1b:1f:7d:
ad:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:14:22:07:AD:F6:10:B9:17:5D:FD:EC:97:08:37:21:F8:C6:60:19
X509v3 Authority Key Identifier:
keyid:44:AE:00:FE:E7:82:10:AB:04:8B:44:0E:0C:B2:A7:F4:0C:9D:B8:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK4A_ueCEKsEi0QODLKn9AyduMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/415e39-6cca-44e3-bbb9-6fc9a5718706/1/RK4A_ueCEKsEi0QODLKn9AyduMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/415e39-6cca-44e3-bbb9-6fc9a5718706/1/RK4A_ueCEKsEi0QODLKn9AyduMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:96:11:5b:e8:b3:a8:44:90:af:c5:2f:29:75:bd:f2:20:ee:
2e:c6:e5:f1:f6:54:41:ac:aa:65:35:0b:3c:04:ef:fb:11:1f:
c3:57:e4:98:66:4d:a6:27:bd:3c:39:df:68:81:4a:4c:75:d8:
bc:7a:d4:05:5b:cd:a3:19:b7:7b:81:dc:45:05:ae:15:f9:45:
4d:a6:13:97:60:06:ca:52:86:d9:1c:25:77:fa:95:8c:3a:65:
3e:a2:0f:b6:6b:ce:fe:7d:71:f1:9e:85:9b:ff:77:b1:5c:1e:
30:07:b5:bc:cd:27:81:5b:14:9a:5a:89:05:c0:b8:cd:a8:65:
2a:41:71:50:1b:46:78:1a:4b:5c:05:1d:40:89:d8:42:45:50:
69:08:72:16:d0:0d:39:f5:f0:a8:48:7c:fc:c4:cb:4d:14:66:
b7:36:49:f5:c9:5b:8d:b3:64:06:10:80:22:cf:ee:de:3d:04:
f4:16:a7:9e:07:73:0f:b7:0e:85:c1:a6:72:5d:b9:5a:b1:0a:
71:5a:14:97:df:27:df:fd:32:dd:e3:fc:82:24:4c:8c:5a:56:
b7:04:ac:6a:36:1e:b3:34:23:cf:38:04:dd:1f:d1:4a:4e:f4:
96:b6:12:4f:c9:6d:cc:d5:3f:10:1c:59:84:b8:40:70:e7:ac:
e2:57:4e:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKrouVJvwI/CNPZEHDDO55MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0YWUwMGZlZTc4MjEwYWIwNDhiNDQwZTBjYjJhN2Y0MGM5
ZGI4Y2MwHhcNMjUwNzI3MDcwMDA5WhcNMjUwNzI4MDcwMDA5WjAzMTEwLwYDVQQD
Eyg0MTE0MjIwN2FkZjYxMGI5MTc1ZGZkZWM5NzA4MzcyMWY4YzY2MDE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEDFR2PaVdHhJYRBFO6KwYOEBCO3
xc7OqKC8sHwXnaRySHvgY16b4Fu3ZeAatJJzGKAEBj8/nvVaiLhTdGIb3yd7jD10
vdnkivt+8AY7iP5Iqs54hXXtCVD6AaPR0lCFzeYv3x2G5bt5dVO3Rmlc94lffemk
QvAOR7sS1t/02OF0k2gIBZ1zb3FX3ccfvEqdvNwNEBNjN7euS36WYOj118rLFv2W
HuDXB7QgUb+mOKN4+7yWapJAoYrvbpMKD0ceXH5BmltkSGLconf/Q2SHgI3Fw3ht
Omcm3b64M2n/gApGrqlsweyxICYG77W68xWtWyExr/cvFF7hzQUbH32tOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEEUIget9hC5F1397JcINyH4xmAZMB8GA1UdIwQY
MBaAFESuAP7nghCrBItEDgyyp/QMnbjMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUks0QV91ZUNFS3NFaTBRT0RMS245QXlkdU13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi80MTVlMzktNmNjYS00NGUzLWJiYjkt
NmZjOWE1NzE4NzA2LzEvUks0QV91ZUNFS3NFaTBRT0RMS245QXlkdU13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi80MTVlMzktNmNjYS00NGUzLWJiYjktNmZjOWE1NzE4NzA2
LzEvUks0QV91ZUNFS3NFaTBRT0RMS245QXlkdU13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnpYRW+iz
qESQr8UvKXW98iDuLsbl8fZUQayqZTULPATv+xEfw1fkmGZNpie9PDnfaIFKTHXY
vHrUBVvNoxm3e4HcRQWuFflFTaYTl2AGylKG2Rwld/qVjDplPqIPtmvO/n1x8Z6F
m/93sVweMAe1vM0ngVsUmlqJBcC4zahlKkFxUBtGeBpLXAUdQInYQkVQaQhyFtAN
OfXwqEh8/MTLTRRmtzZJ9clbjbNkBhCAIs/u3j0E9BanngdzD7cOhcGmcl25WrEK
cVoUl98n3/0y3eP8giRMjFpWtwSsajYeszQjzzgE3R/RSk70lrYST8ltzNU/EBxZ
hLhAcOes4ldOcg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 12:12:19 2025 by rpki-client