
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
File: 4YDru8oPiQ3jU4kUIag91bZT2UA.mft (raw, json)
Hash identifier: LZJPO81bDF3pMWSmhvfPMAbJz9BwWBxWM3Sh9R9vYpg=
Subject key identifier: 1E:CC:99:C0:08:34:51:9C:24:13:94:17:CC:FB:13:0A:18:8D:9A:94
Authority key identifier: E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40
Certificate issuer: /CN=e180ebbbca0f890de353891421a83dd5b653d940
Certificate serial: 0198451A437B2248D6CD05F0C5F186AD4662
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
Manifest number: 1608
Signing time: Sat 26 Jul 2025 05:00:05 +0000
Manifest this update: Sat 26 Jul 2025 05:00:05 +0000
Manifest next update: Sun 27 Jul 2025 05:00:05 +0000
Files and hashes: 1: 3FLOlTCLI1G1gTETun5ejoasBuA.roa (hash: ZqTUajmkPh8jnrRO1gF7H9NNj5iQ+rkTS+4qDwUhPQw=)
2: 4YDru8oPiQ3jU4kUIag91bZT2UA.crl (hash: n+vgQTRpunqYaOWnqhYFt0vaaH6oeJauq/MZrHRGpdo=)
3: CMHg46_N_Yzu5cDNrodsWcXH1qs.roa (hash: 9+kqVKjcfEEoN1RX5aOJP2hJFs9a0+X0ktGFEifqfTA=)
4: ccRftpql5fjXlNV0NylDd4KOG5c.roa (hash: kdsSlrhnC//Y+wGXnH9Z3RLM6M+rlU4Fjt+Q8g1QTKU=)
5: iGsK_B5kc7f5LtdtrLxtSL9ku54.roa (hash: raQtWkSW1CK//C2quX0UqsJsM/839tIzJbksWP0Gq+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:1a:43:7b:22:48:d6:cd:05:f0:c5:f1:86:ad:46:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e180ebbbca0f890de353891421a83dd5b653d940
Validity
Not Before: Jul 26 05:00:05 2025 GMT
Not After : Jul 27 05:00:05 2025 GMT
Subject: CN=1ecc99c00834519c24139417ccfb130a188d9a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f5:82:f4:fd:73:0a:2c:67:86:36:c9:1d:af:
8c:d9:fd:da:e7:fa:dc:51:e7:68:28:a7:37:1d:af:
87:53:26:65:85:da:46:8b:db:cd:b6:90:6f:a3:3a:
d1:62:38:35:3d:c1:5b:c4:eb:50:15:50:e4:ce:66:
5e:6b:4f:35:8b:2e:82:dc:ed:6c:4c:d5:09:2f:5c:
9e:e6:1e:3b:78:7b:cd:a6:b9:4a:87:2f:c5:88:3c:
86:56:9a:7d:0a:2d:c8:1f:73:02:f5:a2:75:c1:1b:
54:8b:4e:51:99:b3:35:4a:82:74:d0:4b:8d:61:d7:
b1:57:f3:df:58:8d:7a:06:e7:82:d2:7c:3b:1a:a0:
65:b1:fd:33:ff:ff:bd:97:ef:1c:7f:87:b1:26:13:
51:93:96:b1:e6:4b:82:dd:76:ed:cd:49:67:c6:bd:
ed:af:d8:f5:ad:b4:3d:37:65:fd:8d:c9:d9:32:99:
8d:a5:47:b4:40:79:1c:19:0e:2f:30:60:1e:53:7a:
1a:d3:e9:03:50:47:26:10:e8:7c:eb:25:a7:88:95:
14:36:4e:d8:4c:0e:8e:e7:fc:c0:21:a1:92:c8:7d:
61:5f:0b:ad:44:ee:6c:48:02:8d:ab:cb:3d:64:07:
a2:20:d2:ff:0d:01:b4:2c:e4:2f:d8:de:d6:0f:f4:
1e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:CC:99:C0:08:34:51:9C:24:13:94:17:CC:FB:13:0A:18:8D:9A:94
X509v3 Authority Key Identifier:
keyid:E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:f9:09:d4:02:5b:ea:a6:79:7d:70:27:a9:a2:94:54:34:cf:
38:11:71:56:fd:1f:f8:5c:98:4d:2b:f7:06:9c:c2:92:b9:53:
f6:fc:c5:d5:b9:38:34:60:57:d1:42:58:0b:0c:28:34:e7:1c:
b4:a8:94:6b:71:8e:95:52:af:33:11:45:4b:9c:dc:9e:95:de:
11:76:1d:cc:7b:f8:2a:8d:3f:90:38:04:35:7e:89:04:ae:fd:
1a:0e:ce:90:9b:55:63:db:bc:f8:e0:17:97:45:1d:ac:72:38:
f7:d7:3c:69:1c:4c:90:49:04:76:60:3c:3a:0a:3f:9e:4d:f6:
10:aa:8d:ea:1b:fd:a8:68:b8:e3:97:bb:78:85:2d:3e:f8:6c:
a4:26:52:38:5c:49:64:15:ea:e3:a5:a9:38:6b:37:e1:b2:29:
bf:df:21:61:77:bc:74:5f:32:67:cc:5d:4f:53:10:83:fc:23:
79:fb:73:72:98:3e:fc:6d:69:e8:78:86:e5:d2:10:86:27:25:
50:c7:36:8e:8a:38:52:58:23:4b:ef:f6:2d:7c:e2:c2:b7:ca:
44:91:7c:58:02:e7:00:ed:6c:af:54:6b:ed:13:4b:07:c8:9c:
c9:7b:33:1a:0e:8d:2c:23:10:cc:c6:6d:a9:db:f9:cf:a0:8a:
b1:ab:4d:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhFGkN7IkjWzQXwxfGGrUZiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxODBlYmJiY2EwZjg5MGRlMzUzODkxNDIxYTgzZGQ1YjY1
M2Q5NDAwHhcNMjUwNzI2MDUwMDA1WhcNMjUwNzI3MDUwMDA1WjAzMTEwLwYDVQQD
EygxZWNjOTljMDA4MzQ1MTljMjQxMzk0MTdjY2ZiMTMwYTE4OGQ5YTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfWC9P1zCixnhjbJHa+M2f3a5/rc
UedoKKc3Ha+HUyZlhdpGi9vNtpBvozrRYjg1PcFbxOtQFVDkzmZea081iy6C3O1s
TNUJL1ye5h47eHvNprlKhy/FiDyGVpp9Ci3IH3MC9aJ1wRtUi05RmbM1SoJ00EuN
YdexV/PfWI16BueC0nw7GqBlsf0z//+9l+8cf4exJhNRk5ax5kuC3XbtzUlnxr3t
r9j1rbQ9N2X9jcnZMpmNpUe0QHkcGQ4vMGAeU3oa0+kDUEcmEOh86yWniJUUNk7Y
TA6O5/zAIaGSyH1hXwutRO5sSAKNq8s9ZAeiINL/DQG0LOQv2N7WD/QePwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB7MmcAINFGcJBOUF8z7EwoYjZqUMB8GA1UdIwQY
MBaAFOGA67vKD4kN41OJFCGoPdW2U9lAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFlEcnU4b1BpUTNqVTRrVUlhZzkxYlpUMlVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9hMThjZjEtYTA4MC00OTQ1LThiMjEt
MDU1NTY5NTljNDU1LzEvNFlEcnU4b1BpUTNqVTRrVUlhZzkxYlpUMlVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9hMThjZjEtYTA4MC00OTQ1LThiMjEtMDU1NTY5NTljNDU1
LzEvNFlEcnU4b1BpUTNqVTRrVUlhZzkxYlpUMlVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACvkJ1AJb
6qZ5fXAnqaKUVDTPOBFxVv0f+FyYTSv3BpzCkrlT9vzF1bk4NGBX0UJYCwwoNOcc
tKiUa3GOlVKvMxFFS5zcnpXeEXYdzHv4Ko0/kDgENX6JBK79Gg7OkJtVY9u8+OAX
l0UdrHI499c8aRxMkEkEdmA8Ogo/nk32EKqN6hv9qGi445e7eIUtPvhspCZSOFxJ
ZBXq46WpOGs34bIpv98hYXe8dF8yZ8xdT1MQg/wjeftzcpg+/G1p6HiG5dIQhicl
UMc2joo4UlgjS+/2LXziwrfKRJF8WALnAO1sr1Rr7RNLB8icyXszGg6NLCMQzMZt
qdv5z6CKsatNJQ==
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:46:18 2025 by rpki-client