Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft
File: 4NQ1eE2owhjg_xB83P4kykVpyUk.mft (raw, json)
Hash identifier: GYY68wLGSkZr0zXuHwhQnhRdV91ng05tZyrzebuZJeM=
Subject key identifier: CC:F1:81:E7:35:51:04:62:88:28:C7:71:90:4F:5D:BC:8E:28:42:73
Authority key identifier: E0:D4:35:78:4D:A8:C2:18:E0:FF:10:7C:DC:FE:24:CA:45:69:C9:49
Certificate issuer: /CN=e0d435784da8c218e0ff107cdcfe24ca4569c949
Certificate serial: 019749318EF2DA3C1F1ECBDE4AA0A8719A0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 07:01:14 +0000
Manifest this update: Sat 07 Jun 2025 07:01:14 +0000
Manifest next update: Sun 08 Jun 2025 07:01:14 +0000
Files and hashes: 1: 4NQ1eE2owhjg_xB83P4kykVpyUk.crl (hash: UtNHIqLDutQ62kJo1uDjsmEhQ+vuLuaUt7fReuTr3Io=)
2: PCU_z8etHMahQn2RAV03QXEYQNY.roa (hash: u3wh2VwTq9MZxicFM5jtw2aPgJCWNRgfQ4wq8HW2GwA=)
3: dzbMTYGCieBVBPgENTHt9L5KJ8M.roa (hash: ujry7yejU+h1f7YJVtPloSSU466DjjsHF906b9LbjBg=)
4: iFRT7pIErYyjSrvBoxfFD5pxtGQ.roa (hash: 5ByeZ/21OPrr4ys4yOkH+9BugOf167l7MKLoGEfw+nA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:8e:f2:da:3c:1f:1e:cb:de:4a:a0:a8:71:9a:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0d435784da8c218e0ff107cdcfe24ca4569c949
Validity
Not Before: Jun 7 07:01:14 2025 GMT
Not After : Jun 8 07:01:14 2025 GMT
Subject: CN=ccf181e7355104628828c771904f5dbc8e284273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:15:31:b8:9e:26:61:d4:7c:cf:90:25:41:35:
41:b2:c4:f6:df:1a:5a:54:12:60:20:c1:70:68:50:
8e:27:3b:fa:95:83:50:15:92:8d:fe:cc:e3:80:79:
8b:c2:0f:06:82:bc:c6:45:d0:6e:ba:fd:fc:33:26:
3f:6f:52:ac:f9:0d:87:e7:1d:ac:28:73:bd:1a:fc:
58:c4:f7:df:6b:4e:12:95:56:3d:ad:a3:d5:f6:22:
2d:93:64:c9:55:cb:bf:09:33:7b:dd:de:8b:d6:d7:
9b:6c:ce:33:97:8c:f0:26:89:da:6e:cf:09:b1:55:
24:2d:3e:2f:74:1a:cf:6f:27:5c:a1:1a:51:01:1f:
62:62:2e:4d:48:35:25:f9:24:a9:60:34:f9:5e:f4:
aa:62:35:32:b5:bf:6e:d7:1f:23:bf:1d:3b:83:4e:
8b:f8:71:22:2a:c5:f6:08:1f:16:ec:ca:18:07:49:
a3:45:13:c7:80:fb:f1:2d:71:c8:dd:3f:5e:9f:b8:
c3:5f:06:56:34:a8:95:ec:a5:e2:12:e5:b4:26:fd:
64:43:0b:f1:1e:3b:0e:59:81:d6:a8:8b:63:9a:5e:
40:e2:5c:f1:b9:e5:62:3f:65:6c:cc:47:a5:8f:bd:
cc:1b:51:65:ee:ad:12:48:26:99:6d:f4:2a:b9:c4:
ac:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F1:81:E7:35:51:04:62:88:28:C7:71:90:4F:5D:BC:8E:28:42:73
X509v3 Authority Key Identifier:
keyid:E0:D4:35:78:4D:A8:C2:18:E0:FF:10:7C:DC:FE:24:CA:45:69:C9:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:b3:3c:e3:40:2d:f3:78:0b:fd:71:dd:a0:29:0f:c0:45:aa:
7a:4b:3c:4e:53:67:1e:93:bb:4e:95:18:9d:f1:0d:9f:2f:b9:
83:6e:5b:83:99:52:7c:61:02:06:59:0e:60:ac:71:2b:f9:2c:
b6:8f:36:f2:69:71:ee:38:79:65:f6:b4:3b:36:99:d2:9e:88:
4a:a0:9d:41:f1:da:a8:db:17:ce:58:72:60:ed:ae:bc:29:d5:
b5:50:be:c3:62:a9:49:00:d1:f0:66:aa:e7:84:e8:6c:3d:4a:
12:03:f7:96:ad:6d:6d:bd:a2:99:c7:7f:b4:67:41:a6:72:3d:
bb:49:93:a5:4b:8b:19:1e:81:b7:98:6b:72:24:5f:b4:d0:22:
ad:b8:98:50:99:2f:79:8b:22:e8:83:cc:24:d4:5a:ba:cb:61:
80:1a:44:d0:0c:54:c9:83:a8:0e:67:01:65:ff:07:4c:3e:74:
74:2a:d5:3a:ed:69:42:71:cb:1d:6e:6b:89:90:9d:3d:c9:96:
b1:cd:c5:1c:75:9b:c2:d2:eb:2c:79:e5:34:0f:0b:70:5f:18:
f4:97:c5:60:5e:39:6d:7d:95:1d:2e:ff:b3:48:eb:2b:ef:3c:
7d:8f:03:3b:df:34:6b:6c:8e:38:b4:43:c6:cd:bd:6c:d7:7c:
47:4c:b0:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJMY7y2jwfHsveSqCocZoKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwZDQzNTc4NGRhOGMyMThlMGZmMTA3Y2RjZmUyNGNhNDU2
OWM5NDkwHhcNMjUwNjA3MDcwMTE0WhcNMjUwNjA4MDcwMTE0WjAzMTEwLwYDVQQD
EyhjY2YxODFlNzM1NTEwNDYyODgyOGM3NzE5MDRmNWRiYzhlMjg0MjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxUxuJ4mYdR8z5AlQTVBssT23xpa
VBJgIMFwaFCOJzv6lYNQFZKN/szjgHmLwg8GgrzGRdBuuv38MyY/b1Ks+Q2H5x2s
KHO9GvxYxPffa04SlVY9raPV9iItk2TJVcu/CTN73d6L1tebbM4zl4zwJonabs8J
sVUkLT4vdBrPbydcoRpRAR9iYi5NSDUl+SSpYDT5XvSqYjUytb9u1x8jvx07g06L
+HEiKsX2CB8W7MoYB0mjRRPHgPvxLXHI3T9en7jDXwZWNKiV7KXiEuW0Jv1kQwvx
HjsOWYHWqItjml5A4lzxueViP2VszEelj73MG1Fl7q0SSCaZbfQqucSs9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMzxgec1UQRiiCjHcZBPXbyOKEJzMB8GA1UdIwQY
MBaAFODUNXhNqMIY4P8QfNz+JMpFaclJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNE5RMWVFMm93aGpnX3hCODNQNGt5a1ZweVVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hMDVlYmEtOWQ4NS00ODliLWFlYzct
ZWQ0MmQzYTYyNWE0LzEvNE5RMWVFMm93aGpnX3hCODNQNGt5a1ZweVVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9hMDVlYmEtOWQ4NS00ODliLWFlYzctZWQ0MmQzYTYyNWE0
LzEvNE5RMWVFMm93aGpnX3hCODNQNGt5a1ZweVVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGrM840At
83gL/XHdoCkPwEWqeks8TlNnHpO7TpUYnfENny+5g25bg5lSfGECBlkOYKxxK/ks
to828mlx7jh5Zfa0OzaZ0p6ISqCdQfHaqNsXzlhyYO2uvCnVtVC+w2KpSQDR8Gaq
54TobD1KEgP3lq1tbb2imcd/tGdBpnI9u0mTpUuLGR6Bt5hrciRftNAirbiYUJkv
eYsi6IPMJNRausthgBpE0AxUyYOoDmcBZf8HTD50dCrVOu1pQnHLHW5riZCdPcmW
sc3FHHWbwtLrLHnlNA8LcF8Y9JfFYF45bX2VHS7/s0jrK+88fY8DO980a2yOOLRD
xs29bNd8R0ywJw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:02:13 2025 by rpki-client