Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.mft
File: 4cg4iRtR4GfqLr-aRNloAUhWLpY.mft (raw, json)
Hash identifier: splyLU66gE+41mAv7lEbdM3A7IHlBKjrr4QkQh/gPcc=
Subject key identifier: 9C:1A:DC:97:0F:33:C8:5A:30:A9:AD:1F:7B:A3:17:7E:84:42:57:D7
Authority key identifier: E1:C8:38:89:1B:51:E0:67:EA:2E:BF:9A:44:D9:68:01:48:56:2E:96
Certificate issuer: /CN=e1c838891b51e067ea2ebf9a44d9680148562e96
Certificate serial: 0197499F0A8DAC39E215D934D5822A86E034
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4cg4iRtR4GfqLr-aRNloAUhWLpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.mft
Manifest number: 0EA4
Signing time: Sat 07 Jun 2025 09:00:48 +0000
Manifest this update: Sat 07 Jun 2025 09:00:48 +0000
Manifest next update: Sun 08 Jun 2025 09:00:48 +0000
Files and hashes: 1: 4cg4iRtR4GfqLr-aRNloAUhWLpY.crl (hash: 99GOXD0uIBFcs2OapmDJr6FmMFD1YC6o8TyiZllcJm0=)
2: bmdi-xlLqO-hV5jpMLaaLmUh0MY.roa (hash: fx7rUOLjdEuqg3ZsveozXFH6Izun+R1RWfyBZEftQT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4cg4iRtR4GfqLr-aRNloAUhWLpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:0a:8d:ac:39:e2:15:d9:34:d5:82:2a:86:e0:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1c838891b51e067ea2ebf9a44d9680148562e96
Validity
Not Before: Jun 7 09:00:48 2025 GMT
Not After : Jun 8 09:00:48 2025 GMT
Subject: CN=9c1adc970f33c85a30a9ad1f7ba3177e844257d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b5:b8:b2:57:96:8d:aa:e0:02:0f:e1:93:55:
35:b2:ac:45:e3:f9:53:f8:97:70:d3:ca:d1:f9:61:
f1:da:5e:dd:8e:3d:40:d8:cc:96:a7:2c:b1:0e:ae:
1c:4b:4b:fc:f2:18:e4:8e:3d:c4:91:e6:85:3a:87:
75:0b:bc:d5:31:fd:2d:f8:14:eb:df:3f:e5:17:3c:
c2:c3:5c:ec:25:d5:88:59:a1:04:83:53:e6:e0:be:
ca:39:da:a0:33:54:35:7a:58:8d:78:b9:90:03:e7:
d6:db:67:5b:55:d8:55:94:06:eb:e2:86:cb:39:b3:
e9:6c:f9:dc:0d:3e:84:36:f6:25:29:41:bc:43:ac:
ec:d8:7d:d4:7c:46:b3:3c:50:31:c4:77:99:91:12:
87:77:5d:77:9f:95:43:2d:b4:8a:51:9f:c8:87:bb:
9b:d1:3e:6f:d1:26:d7:f6:54:9c:bb:0e:48:c6:a5:
b0:6f:30:0f:cb:5c:ac:1b:5e:ef:3a:ed:e0:e9:19:
a7:11:5a:f4:7c:29:34:90:8a:d6:3b:17:8a:b7:4b:
e7:78:49:f1:0d:ac:bc:3b:99:dc:fc:60:57:57:b7:
77:94:12:9d:58:f9:fa:44:bd:61:2e:7c:18:3b:73:
0c:08:57:2a:66:3f:cc:23:1d:c9:6b:72:f8:fc:ae:
28:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:1A:DC:97:0F:33:C8:5A:30:A9:AD:1F:7B:A3:17:7E:84:42:57:D7
X509v3 Authority Key Identifier:
keyid:E1:C8:38:89:1B:51:E0:67:EA:2E:BF:9A:44:D9:68:01:48:56:2E:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4cg4iRtR4GfqLr-aRNloAUhWLpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:1b:a9:b5:e3:ad:79:dc:cf:9b:71:17:8f:82:c0:98:12:12:
36:69:91:88:76:d4:00:92:52:26:36:35:d6:19:29:c5:11:74:
7e:98:8a:94:0a:97:b8:41:81:d8:a8:82:99:22:bc:be:60:82:
0e:54:6c:05:ec:98:28:27:7c:e7:e5:ee:90:b5:09:6b:75:c9:
e6:c8:17:7e:54:6d:24:8e:2d:f7:a7:1b:cf:2d:79:e8:31:77:
16:c3:8b:4f:66:a3:da:00:15:16:e2:c2:14:01:f4:79:37:95:
5d:94:41:63:fc:1b:c1:6d:99:12:49:6c:5f:a9:80:b0:72:f5:
7c:a4:2f:27:80:05:5a:24:24:0b:05:e0:a5:18:0e:b7:0a:b7:
ec:8e:e8:eb:0c:d5:fa:32:1d:66:28:68:7e:e6:e0:9a:64:e8:
29:8f:40:4f:26:0d:96:b6:89:0f:ec:c6:02:4f:8a:93:2f:c1:
c2:e2:ee:a1:aa:70:dc:38:b6:d9:46:67:7d:db:57:3e:44:b3:
e4:97:a7:82:eb:d8:b6:55:86:b1:d4:01:a0:0c:37:3f:9b:4f:
c2:76:47:07:ec:f1:b2:1e:55:3d:a3:5d:f3:ca:1c:08:2c:2a:
64:d1:df:be:f7:b0:36:90:a6:ab:9e:01:6b:f5:e9:9a:df:be:
ea:23:78:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJnwqNrDniFdk01YIqhuA0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxYzgzODg5MWI1MWUwNjdlYTJlYmY5YTQ0ZDk2ODAxNDg1
NjJlOTYwHhcNMjUwNjA3MDkwMDQ4WhcNMjUwNjA4MDkwMDQ4WjAzMTEwLwYDVQQD
Eyg5YzFhZGM5NzBmMzNjODVhMzBhOWFkMWY3YmEzMTc3ZTg0NDI1N2Q3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4LW4sleWjargAg/hk1U1sqxF4/lT
+Jdw08rR+WHx2l7djj1A2MyWpyyxDq4cS0v88hjkjj3EkeaFOod1C7zVMf0t+BTr
3z/lFzzCw1zsJdWIWaEEg1Pm4L7KOdqgM1Q1eliNeLmQA+fW22dbVdhVlAbr4obL
ObPpbPncDT6ENvYlKUG8Q6zs2H3UfEazPFAxxHeZkRKHd113n5VDLbSKUZ/Ih7ub
0T5v0SbX9lScuw5IxqWwbzAPy1ysG17vOu3g6RmnEVr0fCk0kIrWOxeKt0vneEnx
Day8O5nc/GBXV7d3lBKdWPn6RL1hLnwYO3MMCFcqZj/MIx3Ja3L4/K4o5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJwa3JcPM8haMKmtH3ujF36EQlfXMB8GA1UdIwQY
MBaAFOHIOIkbUeBn6i6/mkTZaAFIVi6WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGNnNGlSdFI0R2ZxTHItYVJObG9BVWhXTHBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80NWQzZjMtN2VjYS00YzE0LWFhZjct
MTViMzkxMzRjNDFlLzEvNGNnNGlSdFI0R2ZxTHItYVJObG9BVWhXTHBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS80NWQzZjMtN2VjYS00YzE0LWFhZjctMTViMzkxMzRjNDFl
LzEvNGNnNGlSdFI0R2ZxTHItYVJObG9BVWhXTHBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1xupteOt
edzPm3EXj4LAmBISNmmRiHbUAJJSJjY11hkpxRF0fpiKlAqXuEGB2KiCmSK8vmCC
DlRsBeyYKCd85+XukLUJa3XJ5sgXflRtJI4t96cbzy156DF3FsOLT2aj2gAVFuLC
FAH0eTeVXZRBY/wbwW2ZEklsX6mAsHL1fKQvJ4AFWiQkCwXgpRgOtwq37I7o6wzV
+jIdZihofubgmmToKY9ATyYNlraJD+zGAk+Kky/BwuLuoapw3Di22UZnfdtXPkSz
5JenguvYtlWGsdQBoAw3P5tPwnZHB+zxsh5VPaNd88ocCCwqZNHfvvewNpCmq54B
a/Xpmt++6iN4Hg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 16:02:25 2025 by rpki-client