Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft
File: 4eHrAgq2pUL2C1hXaYctnwYXryY.mft (raw, json)
Hash identifier: ji6diiR2UJyvQbi2qYgGY87OzxzLbdFh8E+899r4q7o=
Subject key identifier: CB:08:0A:C7:87:BF:A2:A8:61:20:45:E4:ED:82:D9:81:D3:E1:D0:E1
Authority key identifier: E1:E1:EB:02:0A:B6:A5:42:F6:0B:58:57:69:87:2D:9F:06:17:AF:26
Certificate issuer: /CN=e1e1eb020ab6a542f60b585769872d9f0617af26
Certificate serial: 019921B10F4972138EEE8DA753DAF0DA66A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4eHrAgq2pUL2C1hXaYctnwYXryY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft
Manifest number: 0880
Signing time: Sun 07 Sep 2025 01:01:15 +0000
Manifest this update: Sun 07 Sep 2025 01:01:15 +0000
Manifest next update: Mon 08 Sep 2025 01:01:15 +0000
Files and hashes: 1: 4eHrAgq2pUL2C1hXaYctnwYXryY.crl (hash: NTgwlN1GiR3DkMPLjEJdtgmz5+BdYkpNuS1ybpqBh50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4eHrAgq2pUL2C1hXaYctnwYXryY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:0f:49:72:13:8e:ee:8d:a7:53:da:f0:da:66:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1e1eb020ab6a542f60b585769872d9f0617af26
Validity
Not Before: Sep 7 01:01:15 2025 GMT
Not After : Sep 8 01:01:15 2025 GMT
Subject: CN=cb080ac787bfa2a8612045e4ed82d981d3e1d0e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4e:c7:66:a9:56:46:77:dc:47:57:22:5c:65:
7f:10:97:f9:3c:2f:73:23:20:61:3b:7e:d7:96:94:
c4:96:4d:b6:a9:7d:24:d8:e2:95:8d:db:98:63:e2:
94:35:dd:b0:8e:41:d6:f4:38:58:0e:db:67:65:f4:
98:17:ed:f3:86:3e:13:8b:79:b3:56:63:01:64:fa:
0b:5c:71:d1:4c:bf:2d:0c:fa:3e:3f:af:f1:f5:74:
f7:e0:52:31:ec:83:8b:3a:3a:d5:38:72:fa:b0:2f:
10:57:2e:51:37:fe:19:c2:87:2e:42:7c:e5:7e:89:
23:52:e4:62:fd:0b:9b:15:4e:f6:db:39:33:b9:d9:
84:9c:6c:23:7f:8b:11:0c:80:68:0a:74:ca:08:ca:
b4:05:f6:38:28:d4:a9:10:70:31:71:c1:3a:d6:fe:
bc:a6:62:ce:f2:3f:b7:b2:75:12:70:c4:94:50:76:
7a:12:e9:9f:d7:1b:37:0d:94:5f:65:58:95:f4:60:
98:f6:5a:48:15:77:f8:fd:8f:d5:6e:35:5e:68:16:
4a:36:3c:60:a9:8d:f0:91:c2:ca:2a:61:1e:25:3f:
27:16:07:51:03:71:33:07:37:63:46:cc:28:41:f7:
a3:80:73:5b:5c:89:fa:92:c7:ff:b2:67:e7:a4:d0:
26:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:08:0A:C7:87:BF:A2:A8:61:20:45:E4:ED:82:D9:81:D3:E1:D0:E1
X509v3 Authority Key Identifier:
keyid:E1:E1:EB:02:0A:B6:A5:42:F6:0B:58:57:69:87:2D:9F:06:17:AF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4eHrAgq2pUL2C1hXaYctnwYXryY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:82:55:4d:6d:52:46:eb:23:14:9b:d9:39:4e:e9:43:c0:5f:
a9:4f:c7:01:a6:ad:8b:6c:4b:09:4a:e0:fb:6b:b9:2e:25:fb:
d9:19:59:a7:e7:57:0a:b2:4e:62:43:9e:69:5b:31:9b:12:10:
a3:7f:69:8d:3d:3e:f3:92:e4:a0:30:8c:4b:da:ec:0c:00:8c:
0c:23:54:0f:b9:71:87:d6:c7:db:6d:b0:2d:61:d3:b0:a6:69:
6f:31:c3:0e:67:7b:89:db:09:1c:63:98:ec:65:ee:f3:9f:7f:
4f:01:32:a2:fe:39:95:be:86:17:fe:75:72:5c:36:ea:14:d9:
5a:f1:c5:ec:f6:fa:86:72:77:0b:e3:ef:61:10:92:f7:a4:f8:
55:8a:1a:66:fa:50:f1:28:64:9c:08:35:ed:c1:e6:8b:66:11:
fd:27:32:b6:76:43:93:59:85:53:f6:3c:7a:57:93:6a:c5:92:
22:fd:6e:0e:68:c1:f6:63:dd:f1:ef:33:17:89:ef:7d:ca:89:
ac:a9:d0:3c:a7:61:2b:5b:6b:e7:0b:3f:bb:af:b8:0f:da:05:
29:30:cc:7c:18:f4:33:b2:f8:b4:22:06:ea:b4:92:d2:45:5c:
9e:01:ea:b3:e0:4c:8c:e6:a9:04:6f:fd:1b:09:00:6f:b7:9f:
27:a5:8c:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsQ9JchOO7o2nU9rw2manMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxZTFlYjAyMGFiNmE1NDJmNjBiNTg1NzY5ODcyZDlmMDYx
N2FmMjYwHhcNMjUwOTA3MDEwMTE1WhcNMjUwOTA4MDEwMTE1WjAzMTEwLwYDVQQD
EyhjYjA4MGFjNzg3YmZhMmE4NjEyMDQ1ZTRlZDgyZDk4MWQzZTFkMGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwU7HZqlWRnfcR1ciXGV/EJf5PC9z
IyBhO37XlpTElk22qX0k2OKVjduYY+KUNd2wjkHW9DhYDttnZfSYF+3zhj4Ti3mz
VmMBZPoLXHHRTL8tDPo+P6/x9XT34FIx7IOLOjrVOHL6sC8QVy5RN/4ZwocuQnzl
fokjUuRi/QubFU722zkzudmEnGwjf4sRDIBoCnTKCMq0BfY4KNSpEHAxccE61v68
pmLO8j+3snUScMSUUHZ6Eumf1xs3DZRfZViV9GCY9lpIFXf4/Y/VbjVeaBZKNjxg
qY3wkcLKKmEeJT8nFgdRA3EzBzdjRswoQfejgHNbXIn6ksf/smfnpNAmsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMsICseHv6KoYSBF5O2C2YHT4dDhMB8GA1UdIwQY
MBaAFOHh6wIKtqVC9gtYV2mHLZ8GF68mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGVIckFncTJwVUwyQzFoWGFZY3Rud1lYcnlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9lZWYzNjktNmIxMi00Nzg2LTk3ZTAt
YzgzNWU1ZGFhZjI0LzEvNGVIckFncTJwVUwyQzFoWGFZY3Rud1lYcnlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9lZWYzNjktNmIxMi00Nzg2LTk3ZTAtYzgzNWU1ZGFhZjI0
LzEvNGVIckFncTJwVUwyQzFoWGFZY3Rud1lYcnlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMIJVTW1S
RusjFJvZOU7pQ8BfqU/HAaati2xLCUrg+2u5LiX72RlZp+dXCrJOYkOeaVsxmxIQ
o39pjT0+85LkoDCMS9rsDACMDCNUD7lxh9bH222wLWHTsKZpbzHDDmd7idsJHGOY
7GXu859/TwEyov45lb6GF/51clw26hTZWvHF7Pb6hnJ3C+PvYRCS96T4VYoaZvpQ
8ShknAg17cHmi2YR/ScytnZDk1mFU/Y8eleTasWSIv1uDmjB9mPd8e8zF4nvfcqJ
rKnQPKdhK1tr5ws/u6+4D9oFKTDMfBj0M7L4tCIG6rSS0kVcngHqs+BMjOapBG/9
GwkAb7efJ6WMPw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:43 2025 by rpki-client