Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft
File: 4z5OBZxk_xm-EKehUEV1YeRV0U8.mft (raw, json)
Hash identifier: lb8Lj09WF2rrqzI7W4kojOivbPUHj3lX1pB09Adn7ps=
Subject key identifier: 65:37:DC:CE:DC:FB:B2:A4:77:C8:CF:17:C8:1A:2D:D3:AF:29:5B:D5
Authority key identifier: E3:3E:4E:05:9C:64:FF:19:BE:10:A7:A1:50:45:75:61:E4:55:D1:4F
Certificate issuer: /CN=e33e4e059c64ff19be10a7a150457561e455d14f
Certificate serial: 01976170588EE39AC0E0A38CB42E6EBB65FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4z5OBZxk_xm-EKehUEV1YeRV0U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft
Manifest number: 0691
Signing time: Thu 12 Jun 2025 00:00:42 +0000
Manifest this update: Thu 12 Jun 2025 00:00:42 +0000
Manifest next update: Fri 13 Jun 2025 00:00:42 +0000
Files and hashes: 1: 4Vx5uY-wUi0YX0Kfqz3unLfjiuA.roa (hash: CqAh2hOC6+tjEARJLtXVTVdqWTjo1Zk7c/vuGkdSa5s=)
2: 4z5OBZxk_xm-EKehUEV1YeRV0U8.crl (hash: unFApLpJlTIDJ2kHJK2BL18j6sDmp+m8kjNqOYtK9LY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4z5OBZxk_xm-EKehUEV1YeRV0U8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:61:70:58:8e:e3:9a:c0:e0:a3:8c:b4:2e:6e:bb:65:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e33e4e059c64ff19be10a7a150457561e455d14f
Validity
Not Before: Jun 12 00:00:42 2025 GMT
Not After : Jun 13 00:00:42 2025 GMT
Subject: CN=6537dccedcfbb2a477c8cf17c81a2dd3af295bd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d5:97:a9:f8:8e:6a:c1:98:e1:ad:0d:a6:2c:
3c:b3:5e:39:ac:f2:1d:e5:b7:f2:42:dc:57:81:3b:
b1:d2:59:60:8d:0d:12:db:25:ac:6c:20:02:3d:27:
bd:fa:4d:5a:8d:c6:c9:d6:2c:e5:c6:13:a5:49:63:
d4:24:62:f2:ac:a4:2a:f6:13:59:0c:4c:6b:29:86:
f5:9e:e9:30:57:77:6e:d4:83:c6:5c:7b:13:91:7c:
44:f1:71:a7:05:3c:81:b1:60:50:5f:d7:d8:8d:54:
57:73:78:c1:55:8c:47:13:94:1c:bc:0b:a8:c5:ce:
13:65:9b:72:c7:35:60:fc:db:dc:19:8f:04:9a:eb:
d6:a2:a6:c7:34:fe:d1:94:8f:01:f7:d0:a6:a3:24:
87:39:4a:47:b8:5d:b4:7a:89:3e:50:6a:ec:27:ba:
03:05:6e:d5:b2:a9:09:2f:c8:c0:70:99:37:9d:0a:
11:e2:60:5c:68:c2:6f:65:6a:7f:26:2b:f5:2f:14:
ea:92:b4:66:47:e1:99:ea:9a:ca:a8:e9:7f:be:09:
09:d1:38:a0:39:bb:96:5e:07:87:65:3a:22:e4:01:
7b:54:78:b2:f0:ae:7c:3a:99:fc:ec:e3:55:aa:58:
85:e6:19:a2:17:5f:96:a4:ee:12:1e:1a:e8:00:ad:
f8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:37:DC:CE:DC:FB:B2:A4:77:C8:CF:17:C8:1A:2D:D3:AF:29:5B:D5
X509v3 Authority Key Identifier:
keyid:E3:3E:4E:05:9C:64:FF:19:BE:10:A7:A1:50:45:75:61:E4:55:D1:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4z5OBZxk_xm-EKehUEV1YeRV0U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:2f:f2:be:11:9d:07:c2:95:8b:8c:ef:f2:7a:58:b0:d2:87:
3e:f6:2b:93:90:34:96:22:d6:60:91:97:83:24:04:12:f5:dd:
20:f4:5f:b3:bd:eb:bf:3a:ad:8f:01:a6:4a:28:9d:b3:e4:fa:
c0:2a:cc:65:8e:02:4d:65:63:2e:6f:3c:2c:2b:4e:0c:be:ad:
4b:a0:76:1c:15:3c:be:06:f6:aa:6e:40:c8:64:89:b6:0c:e0:
5b:89:bf:af:9c:a8:05:d4:bb:47:3c:d6:28:7f:66:12:49:b8:
e0:d1:b9:37:73:5d:84:a8:41:b7:84:c8:ec:0d:1a:c4:5b:2f:
1c:cc:18:29:62:15:ce:d6:ae:7b:6c:ab:8b:cf:ba:be:76:ba:
17:77:be:8e:76:a7:b1:67:e8:25:61:1f:11:d3:ff:f1:6e:8b:
2f:2a:ff:c2:05:f5:0f:2b:86:43:68:08:b8:a0:0e:ce:44:3c:
71:af:c8:a1:87:5d:d2:0b:2f:78:e7:4e:12:f2:fc:5a:7f:01:
63:7f:9b:f9:ae:44:38:9a:d6:05:24:4f:08:c3:29:03:40:70:
d7:1c:93:12:38:2e:45:b7:7e:d9:83:36:bc:c9:6b:d7:30:57:
8f:fa:f4:84:2f:c1:e6:50:a9:07:1b:07:6d:d5:68:1f:86:2c:
1d:bb:dd:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdhcFiO45rA4KOMtC5uu2X6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzM2U0ZTA1OWM2NGZmMTliZTEwYTdhMTUwNDU3NTYxZTQ1
NWQxNGYwHhcNMjUwNjEyMDAwMDQyWhcNMjUwNjEzMDAwMDQyWjAzMTEwLwYDVQQD
Eyg2NTM3ZGNjZWRjZmJiMmE0NzdjOGNmMTdjODFhMmRkM2FmMjk1YmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4NWXqfiOasGY4a0Npiw8s145rPId
5bfyQtxXgTux0llgjQ0S2yWsbCACPSe9+k1ajcbJ1izlxhOlSWPUJGLyrKQq9hNZ
DExrKYb1nukwV3du1IPGXHsTkXxE8XGnBTyBsWBQX9fYjVRXc3jBVYxHE5QcvAuo
xc4TZZtyxzVg/NvcGY8EmuvWoqbHNP7RlI8B99CmoySHOUpHuF20eok+UGrsJ7oD
BW7VsqkJL8jAcJk3nQoR4mBcaMJvZWp/Jiv1LxTqkrRmR+GZ6prKqOl/vgkJ0Tig
ObuWXgeHZToi5AF7VHiy8K58Opn87ONVqliF5hmiF1+WpO4SHhroAK34GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGU33M7c+7Kkd8jPF8gaLdOvKVvVMB8GA1UdIwQY
MBaAFOM+TgWcZP8ZvhCnoVBFdWHkVdFPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHo1T0JaeGtfeG0tRUtlaFVFVjFZZVJWMFU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8zYmJlMDEtMGExNC00MWJmLTk3ZGEt
MmIyYThiYTYxMmZkLzEvNHo1T0JaeGtfeG0tRUtlaFVFVjFZZVJWMFU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni8zYmJlMDEtMGExNC00MWJmLTk3ZGEtMmIyYThiYTYxMmZk
LzEvNHo1T0JaeGtfeG0tRUtlaFVFVjFZZVJWMFU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAay/yvhGd
B8KVi4zv8npYsNKHPvYrk5A0liLWYJGXgyQEEvXdIPRfs73rvzqtjwGmSiids+T6
wCrMZY4CTWVjLm88LCtODL6tS6B2HBU8vgb2qm5AyGSJtgzgW4m/r5yoBdS7RzzW
KH9mEkm44NG5N3NdhKhBt4TI7A0axFsvHMwYKWIVztaue2yri8+6vna6F3e+jnan
sWfoJWEfEdP/8W6LLyr/wgX1DyuGQ2gIuKAOzkQ8ca/IoYdd0gsveOdOEvL8Wn8B
Y3+b+a5EOJrWBSRPCMMpA0Bw1xyTEjguRbd+2YM2vMlr1zBXj/r0hC/B5lCpBxsH
bdVoH4YsHbvdpw==
-----END CERTIFICATE-----
Generated at Thu Jun 12 08:34:47 2025 by rpki-client