Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0b0d82-fa60-44cb-b83f-6a34e46aaa56/1/m4aKdvW0dI4eS7qDRwGmhXfGNGI.mft
File: m4aKdvW0dI4eS7qDRwGmhXfGNGI.mft (raw, json)
Hash identifier: fZkigtsTWD7CNiHSV/On03jpAtHSubWgCWKMVK8vY10=
Subject key identifier: DE:C3:83:80:46:17:3F:3D:AD:75:F3:12:83:10:16:44:46:2C:86:E7
Authority key identifier: 9B:86:8A:76:F5:B4:74:8E:1E:4B:BA:83:47:01:A6:85:77:C6:34:62
Certificate issuer: /CN=9b868a76f5b4748e1e4bba834701a68577c63462
Certificate serial: 01974BFB53ACC39039FB23AF802AE45C3A60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4aKdvW0dI4eS7qDRwGmhXfGNGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0b0d82-fa60-44cb-b83f-6a34e46aaa56/1/m4aKdvW0dI4eS7qDRwGmhXfGNGI.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 20:00:51 +0000
Manifest this update: Sat 07 Jun 2025 20:00:51 +0000
Manifest next update: Sun 08 Jun 2025 20:00:51 +0000
Files and hashes: 1: El3AzP_du9cgKwe4cAMY6ohro7o.roa (hash: unokVLZGXnsuik1b2lzzTnShCOzK3B+jbNl72+ddVqo=)
2: m4aKdvW0dI4eS7qDRwGmhXfGNGI.crl (hash: LmrsYA8z9l+PG+YCF2v5ewhI0wea5sufE0qoJi5+2bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/0b0d82-fa60-44cb-b83f-6a34e46aaa56/1/m4aKdvW0dI4eS7qDRwGmhXfGNGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/0b0d82-fa60-44cb-b83f-6a34e46aaa56/1/m4aKdvW0dI4eS7qDRwGmhXfGNGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/m4aKdvW0dI4eS7qDRwGmhXfGNGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:53:ac:c3:90:39:fb:23:af:80:2a:e4:5c:3a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b868a76f5b4748e1e4bba834701a68577c63462
Validity
Not Before: Jun 7 20:00:51 2025 GMT
Not After : Jun 8 20:00:51 2025 GMT
Subject: CN=dec3838046173f3dad75f31283101644462c86e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:07:cb:02:6a:28:fe:79:6e:b5:e0:a0:c8:5c:
4a:a7:8f:a7:a6:6f:3c:43:0a:c1:f9:b2:ba:8a:a5:
ee:db:d8:55:25:13:aa:73:ab:92:17:ca:d3:9d:6e:
4e:ac:0e:ec:2c:14:3d:79:9e:a8:66:5f:6e:1e:3e:
30:52:af:57:94:77:35:fd:9f:7b:0a:da:f6:bc:c4:
e1:33:fa:2b:ab:28:46:58:25:00:26:42:b8:19:03:
80:d1:41:45:06:12:d2:e5:75:cd:ea:c4:81:7e:7a:
7b:c6:64:8e:29:dc:4d:96:6f:00:0b:3f:19:f7:5e:
16:45:53:16:b3:cb:14:35:6e:f1:a6:9e:a0:f0:92:
38:50:8c:b9:08:f6:69:45:5d:5d:f6:b4:f5:46:54:
6e:5d:4b:04:69:ad:8c:4d:bd:c5:86:97:b7:34:db:
55:53:13:34:0e:56:7b:87:46:23:bf:ab:1f:30:81:
c4:a9:b9:63:54:cd:6c:62:60:f5:9a:17:c0:03:16:
91:4c:9f:9d:ed:fc:8f:95:19:9e:77:e5:b7:d9:ad:
8b:ae:d6:e6:ff:31:fe:9e:a0:0d:0b:c4:ae:2e:4e:
65:ee:fd:66:cd:b1:c3:7d:67:86:32:59:e4:18:65:
56:a6:dc:b2:be:c8:89:26:47:22:de:ca:75:cf:4a:
8b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C3:83:80:46:17:3F:3D:AD:75:F3:12:83:10:16:44:46:2C:86:E7
X509v3 Authority Key Identifier:
keyid:9B:86:8A:76:F5:B4:74:8E:1E:4B:BA:83:47:01:A6:85:77:C6:34:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4aKdvW0dI4eS7qDRwGmhXfGNGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0b0d82-fa60-44cb-b83f-6a34e46aaa56/1/m4aKdvW0dI4eS7qDRwGmhXfGNGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0b0d82-fa60-44cb-b83f-6a34e46aaa56/1/m4aKdvW0dI4eS7qDRwGmhXfGNGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:81:68:db:93:e6:ca:19:6a:c5:7c:b1:30:c2:11:e6:2c:6d:
78:bc:fa:e4:7d:cb:a1:27:f3:4b:80:18:cd:7f:91:9e:3f:e8:
72:7b:5c:c9:4d:ed:3a:f4:ff:bb:22:85:90:88:2b:5b:cb:a0:
a2:bc:21:b8:b9:b1:30:b2:54:90:1a:56:d3:26:b4:b7:34:43:
5d:a4:a4:72:79:97:f7:dc:bf:9a:a4:45:89:60:08:48:28:51:
69:a4:39:e0:31:ee:03:d8:5c:0c:3f:d1:af:8d:87:e8:83:60:
13:54:22:88:9f:10:d0:13:af:53:c2:22:5d:07:05:f6:48:33:
e5:51:b9:55:fe:2c:0e:53:53:9a:f2:8b:75:23:ae:fe:ae:ee:
f9:0a:64:00:67:ae:77:93:bd:2e:b3:cd:dd:7d:b1:eb:2f:68:
13:8c:13:c0:61:30:07:16:50:27:91:d2:9b:6d:31:f7:55:28:
8b:89:79:00:9b:41:03:1f:7f:18:01:db:5f:1e:37:8a:f3:53:
78:f7:f9:00:1a:56:a1:8d:d5:3f:c3:cb:0a:9f:57:4e:57:4a:
af:33:25:c4:0a:27:1a:02:0b:84:6e:4d:4b:fe:5b:e8:d6:0e:
49:f9:62:97:e8:70:74:63:bd:1a:0e:9b:35:74:14:fb:ef:70:
49:3e:1f:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdL+1Osw5A5+yOvgCrkXDpgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliODY4YTc2ZjViNDc0OGUxZTRiYmE4MzQ3MDFhNjg1Nzdj
NjM0NjIwHhcNMjUwNjA3MjAwMDUxWhcNMjUwNjA4MjAwMDUxWjAzMTEwLwYDVQQD
EyhkZWMzODM4MDQ2MTczZjNkYWQ3NWYzMTI4MzEwMTY0NDQ2MmM4NmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwfLAmoo/nluteCgyFxKp4+npm88
QwrB+bK6iqXu29hVJROqc6uSF8rTnW5OrA7sLBQ9eZ6oZl9uHj4wUq9XlHc1/Z97
Ctr2vMThM/orqyhGWCUAJkK4GQOA0UFFBhLS5XXN6sSBfnp7xmSOKdxNlm8ACz8Z
914WRVMWs8sUNW7xpp6g8JI4UIy5CPZpRV1d9rT1RlRuXUsEaa2MTb3Fhpe3NNtV
UxM0DlZ7h0Yjv6sfMIHEqbljVM1sYmD1mhfAAxaRTJ+d7fyPlRmed+W32a2Lrtbm
/zH+nqANC8SuLk5l7v1mzbHDfWeGMlnkGGVWptyyvsiJJkci3sp1z0qLzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN7Dg4BGFz89rXXzEoMQFkRGLIbnMB8GA1UdIwQY
MBaAFJuGinb1tHSOHku6g0cBpoV3xjRiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTRhS2R2VzBkSTRlUzdxRFJ3R21oWGZHTkdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8wYjBkODItZmE2MC00NGNiLWI4M2Yt
NmEzNGU0NmFhYTU2LzEvbTRhS2R2VzBkSTRlUzdxRFJ3R21oWGZHTkdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS8wYjBkODItZmE2MC00NGNiLWI4M2YtNmEzNGU0NmFhYTU2
LzEvbTRhS2R2VzBkSTRlUzdxRFJ3R21oWGZHTkdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYoFo25Pm
yhlqxXyxMMIR5ixteLz65H3LoSfzS4AYzX+Rnj/ocntcyU3tOvT/uyKFkIgrW8ug
orwhuLmxMLJUkBpW0ya0tzRDXaSkcnmX99y/mqRFiWAISChRaaQ54DHuA9hcDD/R
r42H6INgE1QiiJ8Q0BOvU8IiXQcF9kgz5VG5Vf4sDlNTmvKLdSOu/q7u+QpkAGeu
d5O9LrPN3X2x6y9oE4wTwGEwBxZQJ5HSm20x91Uoi4l5AJtBAx9/GAHbXx43ivNT
ePf5ABpWoY3VP8PLCp9XTldKrzMlxAonGgILhG5NS/5b6NYOSflil+hwdGO9Gg6b
NXQU++9wST4fjg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:01:30 2025 by rpki-client