Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.mft
File: 4njEqqAhvti5JuNZH99QyN9rwXI.mft (raw, json)
Hash identifier: m4DeW1uFQEcm2YVlOyNkuffAA0b40VkeHC7gqnSm4NE=
Subject key identifier: 1E:B4:DC:3C:69:2B:35:E4:09:68:23:A1:DD:34:6E:EB:E6:FA:2F:7E
Authority key identifier: E2:78:C4:AA:A0:21:BE:D8:B9:26:E3:59:1F:DF:50:C8:DF:6B:C1:72
Certificate issuer: /CN=e278c4aaa021bed8b926e3591fdf50c8df6bc172
Certificate serial: 01975459A1F13EC5F0E5E8D110CA9EF9E128
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4njEqqAhvti5JuNZH99QyN9rwXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.mft
Manifest number: 07F7
Signing time: Mon 09 Jun 2025 11:00:49 +0000
Manifest this update: Mon 09 Jun 2025 11:00:49 +0000
Manifest next update: Tue 10 Jun 2025 11:00:49 +0000
Files and hashes: 1: 1ypxGUz02dU-GrVHnawwOGAtbp8.roa (hash: s/FzoESG6FigLmQ9qVLEYvChgXRxC5KQ8IrkGKlYCxY=)
2: 4njEqqAhvti5JuNZH99QyN9rwXI.crl (hash: khZzxvxClNfYLiNitZdNL2vRQY139LoHJWGj4DpGpaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4njEqqAhvti5JuNZH99QyN9rwXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 11:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:59:a1:f1:3e:c5:f0:e5:e8:d1:10:ca:9e:f9:e1:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e278c4aaa021bed8b926e3591fdf50c8df6bc172
Validity
Not Before: Jun 9 11:00:49 2025 GMT
Not After : Jun 10 11:00:49 2025 GMT
Subject: CN=1eb4dc3c692b35e4096823a1dd346eebe6fa2f7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4b:36:de:31:c0:4a:b0:d7:f0:1b:ce:a0:23:
b5:73:f1:1c:9e:4b:70:8e:22:39:28:a0:4e:3e:21:
28:b9:ec:92:a0:d4:62:f5:50:2c:71:d8:06:e4:ca:
2d:d8:e9:97:39:98:d2:03:61:9b:ea:1a:5d:28:47:
3d:56:76:f0:58:d7:87:40:43:8e:0a:17:67:b8:c4:
eb:35:b1:69:3b:63:c8:40:ca:9a:2e:49:b1:69:d1:
01:01:56:0c:7f:8b:6e:e0:65:59:b1:02:70:b2:d1:
10:84:4a:e7:76:ef:30:4a:40:4c:cb:c0:da:5e:b2:
83:8a:c9:61:65:55:d2:18:c5:3b:e4:18:71:66:05:
1f:d7:24:a7:ad:e0:1b:94:99:6d:e3:cd:bd:bf:ab:
e7:e0:93:c8:97:3b:f1:4c:c1:8b:06:d5:ff:2e:e1:
f1:3e:01:3f:8d:d8:78:fa:a7:ab:08:69:07:fe:95:
d9:94:68:23:03:a4:22:af:14:e2:bc:51:5d:38:5a:
83:80:bc:08:ba:c4:c3:8a:b4:60:00:6a:6f:36:8d:
d1:aa:09:e9:a9:46:04:e5:0d:49:34:8a:1d:25:99:
a1:6b:1b:c1:a8:a9:b1:74:05:52:4b:2e:59:88:e7:
2e:a3:6e:e4:d8:45:f8:b6:a6:72:95:d6:3b:6e:bb:
24:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B4:DC:3C:69:2B:35:E4:09:68:23:A1:DD:34:6E:EB:E6:FA:2F:7E
X509v3 Authority Key Identifier:
keyid:E2:78:C4:AA:A0:21:BE:D8:B9:26:E3:59:1F:DF:50:C8:DF:6B:C1:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4njEqqAhvti5JuNZH99QyN9rwXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:da:8d:78:3b:1a:62:af:5c:58:44:34:b1:20:04:6a:9a:4a:
9a:6f:80:7b:8e:90:e4:35:d7:38:c3:ac:9b:71:bc:7a:ca:71:
39:28:09:30:33:b1:18:15:25:fa:38:b2:7d:12:44:4c:61:ca:
36:83:0e:63:70:32:96:b9:24:75:a1:46:97:4d:49:d7:ca:1b:
c7:02:67:f3:6f:3a:8d:98:ef:5f:37:37:60:fd:c9:d0:f7:16:
55:b9:3b:3e:7c:dc:f1:c2:a7:04:c8:60:87:e1:68:40:c4:fb:
7e:b7:3f:06:d0:19:b3:56:ee:6a:16:8d:c8:36:00:1f:49:ce:
cb:ae:bc:dc:ca:4d:8d:38:6b:d2:e8:08:85:23:ac:42:86:2f:
56:3e:b1:de:37:54:94:74:7d:db:24:08:4c:64:48:15:bf:13:
a8:e1:cb:0d:c5:95:11:e8:ca:db:23:2f:d1:ff:2d:68:3b:62:
52:55:da:68:5c:85:e8:be:d7:00:07:96:0c:60:fb:cf:f9:7f:
5b:c2:74:f7:16:21:c9:ef:d7:dc:8d:a1:87:24:41:f8:48:ff:
d4:fa:3a:9f:95:5a:40:00:ed:fe:22:1a:79:29:ce:24:ac:88:
2a:62:07:49:e1:dc:99:4d:15:7d:87:44:93:86:5a:1b:52:5f:
84:7d:4f:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdUWaHxPsXw5ejREMqe+eEoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyNzhjNGFhYTAyMWJlZDhiOTI2ZTM1OTFmZGY1MGM4ZGY2
YmMxNzIwHhcNMjUwNjA5MTEwMDQ5WhcNMjUwNjEwMTEwMDQ5WjAzMTEwLwYDVQQD
EygxZWI0ZGMzYzY5MmIzNWU0MDk2ODIzYTFkZDM0NmVlYmU2ZmEyZjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzks23jHASrDX8BvOoCO1c/Ecnktw
jiI5KKBOPiEoueySoNRi9VAscdgG5Mot2OmXOZjSA2Gb6hpdKEc9VnbwWNeHQEOO
ChdnuMTrNbFpO2PIQMqaLkmxadEBAVYMf4tu4GVZsQJwstEQhErndu8wSkBMy8Da
XrKDislhZVXSGMU75BhxZgUf1ySnreAblJlt4829v6vn4JPIlzvxTMGLBtX/LuHx
PgE/jdh4+qerCGkH/pXZlGgjA6QirxTivFFdOFqDgLwIusTDirRgAGpvNo3Rqgnp
qUYE5Q1JNIodJZmhaxvBqKmxdAVSSy5ZiOcuo27k2EX4tqZyldY7brsknQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB603DxpKzXkCWgjod00buvm+i9+MB8GA1UdIwQY
MBaAFOJ4xKqgIb7YuSbjWR/fUMjfa8FyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNG5qRXFxQWh2dGk1SnVOWkg5OVF5Tjlyd1hJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jMDY5MzctOTNiMy00NDJlLTg2NzYt
ZmM0MzM5MTk4OGY3LzEvNG5qRXFxQWh2dGk1SnVOWkg5OVF5Tjlyd1hJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9jMDY5MzctOTNiMy00NDJlLTg2NzYtZmM0MzM5MTk4OGY3
LzEvNG5qRXFxQWh2dGk1SnVOWkg5OVF5Tjlyd1hJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjtqNeDsa
Yq9cWEQ0sSAEappKmm+Ae46Q5DXXOMOsm3G8espxOSgJMDOxGBUl+jiyfRJETGHK
NoMOY3AylrkkdaFGl01J18obxwJn8286jZjvXzc3YP3J0PcWVbk7Pnzc8cKnBMhg
h+FoQMT7frc/BtAZs1buahaNyDYAH0nOy6683MpNjThr0ugIhSOsQoYvVj6x3jdU
lHR92yQITGRIFb8TqOHLDcWVEejK2yMv0f8taDtiUlXaaFyF6L7XAAeWDGD7z/l/
W8J09xYhye/X3I2hhyRB+Ej/1Po6n5VaQADt/iIaeSnOJKyIKmIHSeHcmU0VfYdE
k4ZaG1JfhH1PYQ==
-----END CERTIFICATE-----
Generated at Mon Jun 9 17:51:24 2025 by rpki-client