Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft
File: 4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft (raw, json)
Hash identifier: LSRkYlagSWhrwGGb1x6TTuxcfooZLT6bZenMXXQfD7g=
Subject key identifier: B8:43:25:E6:06:14:A5:71:AB:28:8A:9C:B1:C8:48:59:D6:16:F0:3B
Authority key identifier: E1:47:70:72:B9:1A:F5:C3:F3:BF:E6:97:43:24:3E:7C:DA:3A:E8:79
Certificate issuer: /CN=e1477072b91af5c3f3bfe69743243e7cda3ae879
Certificate serial: 019746D503CDF2F5F618C32460AD34CE906B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Udwcrka9cPzv-aXQyQ-fNo66Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft
Manifest number: 0536
Signing time: Fri 06 Jun 2025 20:00:54 +0000
Manifest this update: Fri 06 Jun 2025 20:00:54 +0000
Manifest next update: Sat 07 Jun 2025 20:00:54 +0000
Files and hashes: 1: 4Udwcrka9cPzv-aXQyQ-fNo66Hk.crl (hash: hbpIpsVHtv8CFNHmeb69MDBE1WOtA9GbssxZBS7LRXI=)
2: tCDe7wPjFadsHNNfvUOgDucY0uQ.roa (hash: BMf/pb8712weiBqMIzsz+9w0GyVgsUYRF3OPa//jU1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Udwcrka9cPzv-aXQyQ-fNo66Hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:d5:03:cd:f2:f5:f6:18:c3:24:60:ad:34:ce:90:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1477072b91af5c3f3bfe69743243e7cda3ae879
Validity
Not Before: Jun 6 20:00:54 2025 GMT
Not After : Jun 7 20:00:54 2025 GMT
Subject: CN=b84325e60614a571ab288a9cb1c84859d616f03b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e4:9f:58:77:fa:ec:1a:e7:80:d6:a7:21:2a:
ff:db:57:06:a0:47:1b:6f:45:cc:e7:ea:41:ab:a1:
a4:c2:9e:8e:c2:1e:61:fa:d2:91:af:7b:32:e3:65:
dc:dc:7c:c1:3c:04:61:96:47:f7:2a:f9:7a:e9:83:
dd:94:c7:ef:e8:4e:5e:82:51:8c:17:0f:f2:ef:d2:
9d:5e:e0:0e:ce:9f:46:42:fb:91:64:d5:74:f9:c1:
4a:57:7a:4d:29:81:2d:2e:b2:84:93:24:5b:22:61:
38:d2:41:6a:77:5a:2a:a7:61:31:f2:60:19:23:fa:
3d:bd:50:ad:33:4c:f1:31:20:53:be:46:f4:66:be:
b0:8b:b5:13:da:b4:08:2a:76:6e:54:5e:31:35:7f:
16:3a:ab:86:f1:72:02:27:9c:43:47:c9:37:d2:4b:
8f:2e:2b:54:a5:3a:e7:8e:92:45:36:09:49:bb:c3:
2d:b8:e8:db:35:ba:f7:d8:ea:0c:9a:2b:8e:e5:d2:
87:b7:ef:66:e0:84:6c:3b:9a:bc:b5:f3:b7:04:ab:
a3:f1:f4:0d:92:53:e1:db:a8:6a:9d:aa:11:70:e9:
e9:35:8f:67:4d:d8:ba:64:25:de:2a:09:1d:50:09:
50:e2:d2:63:7e:f7:a5:f2:c2:05:65:4a:5a:ad:d8:
64:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:43:25:E6:06:14:A5:71:AB:28:8A:9C:B1:C8:48:59:D6:16:F0:3B
X509v3 Authority Key Identifier:
keyid:E1:47:70:72:B9:1A:F5:C3:F3:BF:E6:97:43:24:3E:7C:DA:3A:E8:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Udwcrka9cPzv-aXQyQ-fNo66Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:3f:e6:52:81:f6:29:26:27:ca:7d:3f:65:cc:c8:ee:cb:bd:
d1:07:61:70:c9:83:3e:79:46:59:a6:5c:8d:3c:42:ba:0b:4d:
ff:e6:5f:a2:66:71:66:5e:71:19:5f:88:51:76:c7:9a:b0:19:
4d:3e:5a:ef:6d:ba:18:d1:3b:82:ef:f9:86:37:04:8a:14:98:
10:a0:05:1a:0c:02:a4:04:41:65:2c:e4:be:ca:31:73:58:72:
a8:aa:46:61:d9:b7:6c:40:42:29:01:ae:33:1c:1e:b6:98:c3:
e4:1d:99:02:12:bb:0d:e7:d5:93:d5:ab:ae:ae:70:10:e6:b8:
4c:57:7c:49:00:28:9f:82:c0:f2:8f:a1:dd:43:11:7f:76:e3:
48:29:fb:60:0d:30:e9:38:73:10:d1:ee:86:2f:2d:4f:87:04:
10:1e:a1:45:89:4e:4b:28:9e:78:d6:43:f9:aa:71:3d:2f:07:
2e:ad:b4:89:fd:5d:86:83:ba:e4:b9:3a:e5:d9:ba:4e:45:59:
67:3c:7b:0c:cb:21:52:22:3f:42:88:a6:5a:d2:c8:ab:c1:12:
ee:db:e2:ec:1c:f4:02:a8:5f:5c:38:bc:1b:05:34:de:94:aa:
22:66:2b:f1:5c:48:ba:3c:09:17:f5:f7:92:32:fa:3c:cd:27:
bb:b6:08:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdG1QPN8vX2GMMkYK00zpBrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNDc3MDcyYjkxYWY1YzNmM2JmZTY5NzQzMjQzZTdjZGEz
YWU4NzkwHhcNMjUwNjA2MjAwMDU0WhcNMjUwNjA3MjAwMDU0WjAzMTEwLwYDVQQD
EyhiODQzMjVlNjA2MTRhNTcxYWIyODhhOWNiMWM4NDg1OWQ2MTZmMDNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+SfWHf67BrngNanISr/21cGoEcb
b0XM5+pBq6Gkwp6Owh5h+tKRr3sy42Xc3HzBPARhlkf3Kvl66YPdlMfv6E5eglGM
Fw/y79KdXuAOzp9GQvuRZNV0+cFKV3pNKYEtLrKEkyRbImE40kFqd1oqp2Ex8mAZ
I/o9vVCtM0zxMSBTvkb0Zr6wi7UT2rQIKnZuVF4xNX8WOquG8XICJ5xDR8k30kuP
LitUpTrnjpJFNglJu8MtuOjbNbr32OoMmiuO5dKHt+9m4IRsO5q8tfO3BKuj8fQN
klPh26hqnaoRcOnpNY9nTdi6ZCXeKgkdUAlQ4tJjfvel8sIFZUpardhkWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLhDJeYGFKVxqyiKnLHISFnWFvA7MB8GA1UdIwQY
MBaAFOFHcHK5GvXD87/ml0MkPnzaOuh5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFVkd2Nya2E5Y1B6di1hWFF5US1mTm82NkhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy83NDk0YmYtOGFjZC00ZTQzLTg2Y2Ut
ZTdjOGNmM2FmNWRlLzEvNFVkd2Nya2E5Y1B6di1hWFF5US1mTm82NkhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy83NDk0YmYtOGFjZC00ZTQzLTg2Y2UtZTdjOGNmM2FmNWRl
LzEvNFVkd2Nya2E5Y1B6di1hWFF5US1mTm82NkhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASj/mUoH2
KSYnyn0/ZczI7su90QdhcMmDPnlGWaZcjTxCugtN/+ZfomZxZl5xGV+IUXbHmrAZ
TT5a7226GNE7gu/5hjcEihSYEKAFGgwCpARBZSzkvsoxc1hyqKpGYdm3bEBCKQGu
MxwetpjD5B2ZAhK7DefVk9Wrrq5wEOa4TFd8SQAon4LA8o+h3UMRf3bjSCn7YA0w
6ThzENHuhi8tT4cEEB6hRYlOSyieeNZD+apxPS8HLq20if1dhoO65Lk65dm6TkVZ
Zzx7DMshUiI/QoimWtLIq8ES7tvi7Bz0AqhfXDi8GwU03pSqImYr8VxIujwJF/X3
kjL6PM0nu7YIlw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:25:24 2025 by rpki-client