Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/474059-adb8-4e69-9180-5c857af19188/1/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.mft
File: 4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.mft (raw, json)
Hash identifier: f6WybgYQKmyhfC/rL6XbHbq0RSB3VcG/fHN2LkADC44=
Subject key identifier: B2:D0:A7:3A:36:2D:9B:09:A0:77:97:8D:51:10:8B:35:14:D1:C9:1E
Authority key identifier: E0:1B:C8:74:AF:C2:99:CF:10:E5:B1:7D:C8:A4:3A:24:FB:9C:4A:E6
Certificate issuer: /CN=e01bc874afc299cf10e5b17dc8a43a24fb9c4ae6
Certificate serial: 0197662948167A3A210DC45D373787DDC206
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/474059-adb8-4e69-9180-5c857af19188/1/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.mft
Manifest number: 2A
Signing time: Thu 12 Jun 2025 22:01:10 +0000
Manifest this update: Thu 12 Jun 2025 22:01:10 +0000
Manifest next update: Fri 13 Jun 2025 22:01:10 +0000
Files and hashes: 1: 4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.crl (hash: hyef0oxSE+kWc/+2rEQ/+5W8AF8nJnvT7QAxqouccK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/474059-adb8-4e69-9180-5c857af19188/1/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/474059-adb8-4e69-9180-5c857af19188/1/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:66:29:48:16:7a:3a:21:0d:c4:5d:37:37:87:dd:c2:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e01bc874afc299cf10e5b17dc8a43a24fb9c4ae6
Validity
Not Before: Jun 12 22:01:10 2025 GMT
Not After : Jun 13 22:01:10 2025 GMT
Subject: CN=b2d0a73a362d9b09a077978d51108b3514d1c91e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ad:ca:b2:e3:92:00:e9:96:67:fa:88:56:fc:
4a:8f:39:3e:c9:aa:1a:66:11:c1:51:e9:27:25:0d:
83:7f:cd:09:7c:15:9f:fc:5d:2f:02:9b:cf:68:ab:
c2:a7:0e:7b:a2:5c:37:91:86:7e:a6:4f:d0:eb:c6:
39:0e:ec:95:ad:8a:b9:5f:99:d8:14:29:d5:65:8f:
10:f7:8a:f5:ed:0c:a2:de:95:24:8e:81:dd:3a:d5:
89:0e:6d:e6:2c:30:30:c1:c9:65:0e:89:59:e4:a5:
fc:72:44:08:86:09:96:8c:49:99:a0:29:05:71:27:
88:1d:82:72:91:ee:d7:23:d7:a5:c0:9d:4e:51:ca:
06:b0:8e:09:5d:f5:b4:75:0f:14:ea:bd:cb:d1:f4:
37:8f:27:c6:a7:d7:7e:c8:1c:1f:18:d5:99:70:74:
f8:f5:bf:71:02:8e:fd:56:28:f0:54:b5:70:23:1a:
91:4c:6a:3a:6c:b9:f2:5c:80:34:18:64:9b:a3:2d:
64:30:08:5e:39:17:0c:f5:77:df:a9:fc:1e:84:36:
94:65:1b:40:d5:e5:02:d5:83:4a:64:da:4b:d1:f4:
ef:13:1e:b5:b1:81:6e:5b:6f:9e:ab:10:b0:5c:27:
94:de:be:b7:3b:7d:e8:37:5d:94:37:b9:ff:ba:59:
c5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D0:A7:3A:36:2D:9B:09:A0:77:97:8D:51:10:8B:35:14:D1:C9:1E
X509v3 Authority Key Identifier:
keyid:E0:1B:C8:74:AF:C2:99:CF:10:E5:B1:7D:C8:A4:3A:24:FB:9C:4A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/474059-adb8-4e69-9180-5c857af19188/1/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/474059-adb8-4e69-9180-5c857af19188/1/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:42:e4:26:77:eb:f8:cb:30:c9:17:d7:f4:74:36:60:a0:51:
8c:7e:1d:b4:bd:7c:f0:0e:6d:6d:02:2a:4f:75:1a:50:bb:ce:
e3:95:df:e7:0c:b6:c6:ce:89:6a:d1:0d:05:5c:b2:14:07:4a:
46:67:75:92:b0:37:06:d6:57:fd:42:f1:4c:d0:5c:5e:53:21:
51:3f:89:74:3c:68:26:1f:12:26:c6:52:54:69:02:04:67:99:
5c:d1:e6:52:04:8d:2b:06:ad:e5:13:ff:8d:67:e0:0a:fa:d0:
aa:df:ef:c5:f9:e4:ab:a5:9a:dd:b9:8d:9d:b4:a7:a9:a1:92:
eb:35:46:de:a3:3e:56:99:a5:bc:9a:57:3a:06:83:75:c7:fc:
11:29:0e:7b:08:d2:cd:91:a0:98:7e:29:09:72:6f:cd:d2:ee:
5a:d0:bd:8f:ba:99:11:c7:18:d2:57:77:d7:d7:70:e4:31:79:
8f:38:14:e7:49:fc:46:2f:0d:f9:26:49:2e:93:21:d1:95:d5:
67:66:c8:6e:1a:a5:d8:9d:d3:3c:01:29:1a:29:24:c0:6d:e4:
34:af:73:64:cd:b5:78:0a:30:b0:8a:3d:57:16:a0:7e:46:08:
56:34:ab:0f:bd:32:e4:f4:10:9e:a3:af:45:c7:c8:52:be:46:
4f:c4:3a:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdmKUgWejohDcRdNzeH3cIGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwMWJjODc0YWZjMjk5Y2YxMGU1YjE3ZGM4YTQzYTI0ZmI5
YzRhZTYwHhcNMjUwNjEyMjIwMTEwWhcNMjUwNjEzMjIwMTEwWjAzMTEwLwYDVQQD
EyhiMmQwYTczYTM2MmQ5YjA5YTA3Nzk3OGQ1MTEwOGIzNTE0ZDFjOTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5a3KsuOSAOmWZ/qIVvxKjzk+yaoa
ZhHBUeknJQ2Df80JfBWf/F0vApvPaKvCpw57olw3kYZ+pk/Q68Y5DuyVrYq5X5nY
FCnVZY8Q94r17Qyi3pUkjoHdOtWJDm3mLDAwwcllDolZ5KX8ckQIhgmWjEmZoCkF
cSeIHYJyke7XI9elwJ1OUcoGsI4JXfW0dQ8U6r3L0fQ3jyfGp9d+yBwfGNWZcHT4
9b9xAo79VijwVLVwIxqRTGo6bLnyXIA0GGSboy1kMAheORcM9XffqfwehDaUZRtA
1eUC1YNKZNpL0fTvEx61sYFuW2+eqxCwXCeU3r63O33oN12UN7n/ulnFOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLLQpzo2LZsJoHeXjVEQizUU0ckeMB8GA1UdIwQY
MBaAFOAbyHSvwpnPEOWxfcikOiT7nErmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEJ2SWRLX0NtYzhRNWJGOXlLUTZKUHVjU3VZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My80NzQwNTktYWRiOC00ZTY5LTkxODAt
NWM4NTdhZjE5MTg4LzEvNEJ2SWRLX0NtYzhRNWJGOXlLUTZKUHVjU3VZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My80NzQwNTktYWRiOC00ZTY5LTkxODAtNWM4NTdhZjE5MTg4
LzEvNEJ2SWRLX0NtYzhRNWJGOXlLUTZKUHVjU3VZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJkLkJnfr
+MswyRfX9HQ2YKBRjH4dtL188A5tbQIqT3UaULvO45Xf5wy2xs6JatENBVyyFAdK
Rmd1krA3BtZX/ULxTNBcXlMhUT+JdDxoJh8SJsZSVGkCBGeZXNHmUgSNKwat5RP/
jWfgCvrQqt/vxfnkq6Wa3bmNnbSnqaGS6zVG3qM+VpmlvJpXOgaDdcf8ESkOewjS
zZGgmH4pCXJvzdLuWtC9j7qZEccY0ld319dw5DF5jzgU50n8Ri8N+SZJLpMh0ZXV
Z2bIbhql2J3TPAEpGikkwG3kNK9zZM21eAowsIo9VxagfkYIVjSrD70y5PQQnqOv
RcfIUr5GT8Q6ig==
-----END CERTIFICATE-----
Generated at Fri Jun 13 05:04:30 2025 by rpki-client