Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.mft
File: 4qhjHttIETIyWh0Yb73gH6FXeRA.mft (raw, json)
Hash identifier: uc0XLz3idHuDc4kaZgEWcIKKsABUDLYR9BUvSu7JDRw=
Subject key identifier: 72:2F:6E:FE:92:50:64:5D:11:E4:FE:D9:35:16:EF:EA:8F:9A:72:61
Authority key identifier: E2:A8:63:1E:DB:48:11:32:32:5A:1D:18:6F:BD:E0:1F:A1:57:79:10
Certificate issuer: /CN=e2a8631edb481132325a1d186fbde01fa1577910
Certificate serial: 01974EC55D3EAD3B2181E74D17C41A11CE3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4qhjHttIETIyWh0Yb73gH6FXeRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.mft
Manifest number: 0502
Signing time: Sun 08 Jun 2025 09:00:46 +0000
Manifest this update: Sun 08 Jun 2025 09:00:46 +0000
Manifest next update: Mon 09 Jun 2025 09:00:46 +0000
Files and hashes: 1: 4qhjHttIETIyWh0Yb73gH6FXeRA.crl (hash: GrADCc91BBFU7h1m7NVnGiI4I8MXroZivroFhoRq4G4=)
2: h3E6-zfi_xyDMKZ-mjqCgktKu5o.roa (hash: jFGY2eFUS/f/RiSzQYMsT/EoV/0tdGrsjyAMY/vYpEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4qhjHttIETIyWh0Yb73gH6FXeRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 09:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:5d:3e:ad:3b:21:81:e7:4d:17:c4:1a:11:ce:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2a8631edb481132325a1d186fbde01fa1577910
Validity
Not Before: Jun 8 09:00:46 2025 GMT
Not After : Jun 9 09:00:46 2025 GMT
Subject: CN=722f6efe9250645d11e4fed93516efea8f9a7261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9d:92:50:ae:5a:a9:e8:20:12:3c:8b:03:58:
28:df:f3:c5:89:a4:ce:ae:24:1f:53:f2:27:36:b2:
be:f8:0c:af:1f:a5:6c:38:bd:c9:13:33:d0:03:eb:
42:a6:ce:ed:b8:19:bc:e7:56:45:88:d0:58:56:52:
47:9f:42:73:e1:7a:20:c8:7c:33:d5:25:2f:84:f0:
83:46:a1:2c:95:c4:12:ec:af:1b:d8:a0:44:3c:c5:
49:fb:5e:f4:33:9d:a5:01:89:b2:5b:b7:b0:9c:71:
95:4e:6e:90:e7:73:3b:06:a5:f0:10:aa:53:a5:4b:
64:72:0e:9d:de:0e:f3:fa:26:52:06:0d:ec:99:9a:
35:a9:d3:7a:2a:d6:54:74:16:a7:19:0d:fa:e9:34:
ff:ef:2d:96:71:8d:81:ae:ec:e8:ea:68:b3:ff:85:
d5:98:3d:6f:62:3b:02:46:62:a1:ec:5e:9d:2c:6c:
a6:95:74:b6:34:16:b2:10:92:e8:23:99:61:26:4f:
8a:fb:c0:96:dd:a9:f2:f7:23:23:02:24:ba:fb:28:
d7:f8:b6:b0:2c:ba:44:20:1a:b0:5d:11:aa:af:9d:
fb:ff:96:3f:26:ab:c3:39:00:c3:fa:6e:c0:8a:c5:
37:cf:b4:6e:33:ca:b0:0b:35:86:cd:4e:cc:56:5a:
87:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:2F:6E:FE:92:50:64:5D:11:E4:FE:D9:35:16:EF:EA:8F:9A:72:61
X509v3 Authority Key Identifier:
keyid:E2:A8:63:1E:DB:48:11:32:32:5A:1D:18:6F:BD:E0:1F:A1:57:79:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qhjHttIETIyWh0Yb73gH6FXeRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:1c:00:d2:4f:43:40:5b:99:6d:b5:87:44:e4:53:f2:cf:dd:
0b:7a:a2:25:fe:d2:bc:a3:d2:af:3b:d3:fa:93:46:f1:14:7a:
4d:26:01:ac:94:e3:af:94:52:b8:3e:3a:21:77:6f:bc:84:a8:
b5:a9:8a:38:49:b5:74:7e:22:f1:a3:66:c8:6a:87:5c:8c:b0:
1a:dd:48:13:e8:01:78:26:6e:5c:3e:76:20:bf:35:51:6e:e8:
c6:6c:ee:61:c3:ae:ae:0d:0d:57:18:4f:6b:19:f6:23:51:91:
87:43:d3:15:37:0d:6a:b6:d9:9a:aa:44:92:fa:43:b9:0f:59:
de:02:ab:7c:84:06:80:d8:df:8f:06:f1:13:78:d2:d3:39:e4:
b6:8f:cf:39:7a:6e:ad:8e:d4:78:36:47:83:45:c6:a7:15:05:
63:d3:46:c5:d4:ee:fd:b9:b6:0a:06:49:71:81:7c:a1:3a:de:
72:ad:5e:ad:04:ed:60:3f:13:81:20:67:07:f9:c5:90:c4:cd:
ef:3b:43:9c:1e:6f:75:34:55:af:41:59:34:53:1b:2f:fc:a6:
51:d3:69:b1:23:5c:c0:cf:b2:0f:06:e0:37:0b:6f:2b:12:ef:
f9:93:a0:be:db:5a:ae:5e:92:93:77:b7:e0:98:96:1a:dd:5d:
70:c9:c2:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOxV0+rTshgedNF8QaEc48MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYTg2MzFlZGI0ODExMzIzMjVhMWQxODZmYmRlMDFmYTE1
Nzc5MTAwHhcNMjUwNjA4MDkwMDQ2WhcNMjUwNjA5MDkwMDQ2WjAzMTEwLwYDVQQD
Eyg3MjJmNmVmZTkyNTA2NDVkMTFlNGZlZDkzNTE2ZWZlYThmOWE3MjYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZ2SUK5aqeggEjyLA1go3/PFiaTO
riQfU/InNrK++AyvH6VsOL3JEzPQA+tCps7tuBm851ZFiNBYVlJHn0Jz4XogyHwz
1SUvhPCDRqEslcQS7K8b2KBEPMVJ+170M52lAYmyW7ewnHGVTm6Q53M7BqXwEKpT
pUtkcg6d3g7z+iZSBg3smZo1qdN6KtZUdBanGQ366TT/7y2WcY2Bruzo6miz/4XV
mD1vYjsCRmKh7F6dLGymlXS2NBayEJLoI5lhJk+K+8CW3any9yMjAiS6+yjX+Law
LLpEIBqwXRGqr537/5Y/JqvDOQDD+m7AisU3z7RuM8qwCzWGzU7MVlqHbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHIvbv6SUGRdEeT+2TUW7+qPmnJhMB8GA1UdIwQY
MBaAFOKoYx7bSBEyMlodGG+94B+hV3kQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHFoakh0dElFVEl5V2gwWWI3M2dINkZYZVJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS82YWMwNTYtYmFhNC00YzcxLWI5NDAt
NDZkNmJhZWZkYWIxLzEvNHFoakh0dElFVEl5V2gwWWI3M2dINkZYZVJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS82YWMwNTYtYmFhNC00YzcxLWI5NDAtNDZkNmJhZWZkYWIx
LzEvNHFoakh0dElFVEl5V2gwWWI3M2dINkZYZVJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASxwA0k9D
QFuZbbWHRORT8s/dC3qiJf7SvKPSrzvT+pNG8RR6TSYBrJTjr5RSuD46IXdvvISo
tamKOEm1dH4i8aNmyGqHXIywGt1IE+gBeCZuXD52IL81UW7oxmzuYcOurg0NVxhP
axn2I1GRh0PTFTcNarbZmqpEkvpDuQ9Z3gKrfIQGgNjfjwbxE3jS0znkto/POXpu
rY7UeDZHg0XGpxUFY9NGxdTu/bm2CgZJcYF8oTrecq1erQTtYD8TgSBnB/nFkMTN
7ztDnB5vdTRVr0FZNFMbL/ymUdNpsSNcwM+yDwbgNwtvKxLv+ZOgvttarl6Sk3e3
4JiWGt1dcMnCRg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 18:39:45 2025 by rpki-client