Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
File: 4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft (raw, json)
Hash identifier: HnHqRxDU1WhusnknIlnjC4zJMk6pUC6ndwHqZMz3tGs=
Subject key identifier: D4:44:90:F7:64:01:67:C1:AF:DF:EC:FC:8F:AC:E0:7E:F2:FC:8B:9F
Authority key identifier: E1:B9:A3:CE:0F:59:39:10:81:9C:32:71:E1:E8:D0:BD:13:71:A6:BE
Certificate issuer: /CN=e1b9a3ce0f593910819c3271e1e8d0bd1371a6be
Certificate serial: 0197499F591FF43A4FABFF8F6C6B0D63B9EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
Manifest number: 14BA
Signing time: Sat 07 Jun 2025 09:01:09 +0000
Manifest this update: Sat 07 Jun 2025 09:01:09 +0000
Manifest next update: Sun 08 Jun 2025 09:01:09 +0000
Files and hashes: 1: 4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl (hash: rV2/qkQAQ9F+pDrhK/Nqp/ghfnpd5pGEm1Oy4D2CpsU=)
2: a66Wq_cz1-opkUh3xxWdvnCXHIE.roa (hash: RBd7B7hKzSBV9gC+hmCCrVD1uw4jr8IoDZkTqDG8H1A=)
3: am2sy58F1CS8R1serePPA8VUSM8.roa (hash: mn9+spB9id4ITF5EVifryU58phMpNbZ14Htzb13CxjQ=)
4: mBtneH0apKymD1yidiviYwQz7bc.roa (hash: +okWaOCxw+vLPC+W7D2xJzjJ34ydGJtCuhpbcrxYg+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:59:1f:f4:3a:4f:ab:ff:8f:6c:6b:0d:63:b9:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1b9a3ce0f593910819c3271e1e8d0bd1371a6be
Validity
Not Before: Jun 7 09:01:09 2025 GMT
Not After : Jun 8 09:01:09 2025 GMT
Subject: CN=d44490f7640167c1afdfecfc8face07ef2fc8b9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7b:2c:27:26:d1:ce:75:62:1a:19:46:99:8d:
8e:b6:c5:60:ca:53:f4:6f:dc:73:a8:0d:d4:5d:09:
16:db:dd:23:15:72:db:8a:ae:98:bf:43:d0:45:37:
b1:44:3e:98:37:ad:55:f7:f2:c2:50:85:fb:3c:94:
fb:74:dc:1e:87:fc:c7:69:29:95:fe:31:22:f3:f2:
f0:c4:28:4d:47:29:f5:55:f5:37:11:13:63:f3:de:
3a:26:22:19:55:4b:93:5f:67:2e:de:cc:bd:14:a4:
eb:0e:35:44:d4:3a:8a:94:59:a3:e8:64:c1:e2:02:
e9:aa:63:f1:4f:ce:23:30:b8:fb:da:06:9a:90:b8:
f8:62:78:09:11:db:d9:38:1d:c7:3f:97:ff:71:6d:
90:1f:7c:b4:7a:51:aa:67:0b:59:e4:18:a4:4f:da:
ce:f9:38:56:00:b5:a6:e8:a8:26:ef:c8:89:6c:5e:
b0:5e:c2:af:7b:2f:83:54:7c:93:0d:bf:b6:46:5a:
91:d5:46:69:fd:c4:9d:99:61:28:83:f5:92:5b:3a:
6f:73:ef:c1:0e:4b:91:92:52:ce:9b:40:bc:8b:1f:
77:13:06:0f:f0:05:d8:2c:0e:d9:4a:f3:cb:a3:9b:
24:74:01:7f:4a:90:a5:9e:81:08:01:a6:ed:09:5b:
79:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:44:90:F7:64:01:67:C1:AF:DF:EC:FC:8F:AC:E0:7E:F2:FC:8B:9F
X509v3 Authority Key Identifier:
keyid:E1:B9:A3:CE:0F:59:39:10:81:9C:32:71:E1:E8:D0:BD:13:71:A6:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:29:b3:a2:02:c1:28:6a:f0:bf:3c:e7:72:b5:f3:b9:f1:43:
ae:4f:48:b3:96:e3:3f:08:54:5c:bd:84:85:20:ba:b9:d5:1c:
bb:b6:8f:83:34:24:e3:b5:b6:88:bc:36:ff:80:a9:c3:99:ee:
b0:6e:f8:79:63:71:66:d1:6f:c4:8a:da:7d:76:fd:73:1b:f0:
cd:ed:cb:d8:2c:62:cf:12:5c:25:ae:50:59:b2:44:12:b3:6f:
4d:23:30:08:a4:c1:1f:7e:4a:58:b9:e1:81:b2:06:7e:c1:92:
d4:b2:81:e3:18:47:10:b7:2d:69:25:57:17:95:49:c7:e1:83:
c5:1f:09:82:a0:d4:12:60:ae:0b:88:0b:9d:84:51:59:79:f5:
0d:99:d3:c5:39:80:24:f1:45:4a:9d:e2:37:7e:78:79:79:33:
35:f4:c5:e8:b8:59:5b:eb:62:4f:27:ca:cb:a8:d9:bb:45:54:
c8:b7:a2:ce:83:69:a1:6c:53:b3:be:15:9b:9a:71:50:4d:c4:
cd:a0:b2:46:eb:a2:65:3f:05:51:61:e7:da:e0:0e:cb:60:6c:
1d:57:f5:3b:fd:de:b9:61:14:48:f6:15:10:62:32:84:1e:81:
33:3e:bb:3a:2b:46:2d:6c:27:b2:39:84:ba:e1:b1:81:f5:b4:
97:18:85:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJn1kf9DpPq/+PbGsNY7nuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxYjlhM2NlMGY1OTM5MTA4MTljMzI3MWUxZThkMGJkMTM3
MWE2YmUwHhcNMjUwNjA3MDkwMTA5WhcNMjUwNjA4MDkwMTA5WjAzMTEwLwYDVQQD
EyhkNDQ0OTBmNzY0MDE2N2MxYWZkZmVjZmM4ZmFjZTA3ZWYyZmM4YjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnssJybRznViGhlGmY2OtsVgylP0
b9xzqA3UXQkW290jFXLbiq6Yv0PQRTexRD6YN61V9/LCUIX7PJT7dNweh/zHaSmV
/jEi8/LwxChNRyn1VfU3ERNj8946JiIZVUuTX2cu3sy9FKTrDjVE1DqKlFmj6GTB
4gLpqmPxT84jMLj72gaakLj4YngJEdvZOB3HP5f/cW2QH3y0elGqZwtZ5BikT9rO
+ThWALWm6Kgm78iJbF6wXsKvey+DVHyTDb+2RlqR1UZp/cSdmWEog/WSWzpvc+/B
DkuRklLOm0C8ix93EwYP8AXYLA7ZSvPLo5skdAF/SpClnoEIAabtCVt5iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNREkPdkAWfBr9/s/I+s4H7y/IufMB8GA1UdIwQY
MBaAFOG5o84PWTkQgZwyceHo0L0Tcaa+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGJtanpnOVpPUkNCbkRKeDRlalF2Uk54cHI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8wZDhiZTgtYjRiNC00MzZlLTg2ZTIt
YmE0YzU2ZDhjMGNlLzEvNGJtanpnOVpPUkNCbkRKeDRlalF2Uk54cHI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8wZDhiZTgtYjRiNC00MzZlLTg2ZTItYmE0YzU2ZDhjMGNl
LzEvNGJtanpnOVpPUkNCbkRKeDRlalF2Uk54cHI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUymzogLB
KGrwvzzncrXzufFDrk9Is5bjPwhUXL2EhSC6udUcu7aPgzQk47W2iLw2/4Cpw5nu
sG74eWNxZtFvxIrafXb9cxvwze3L2CxizxJcJa5QWbJEErNvTSMwCKTBH35KWLnh
gbIGfsGS1LKB4xhHELctaSVXF5VJx+GDxR8JgqDUEmCuC4gLnYRRWXn1DZnTxTmA
JPFFSp3iN354eXkzNfTF6LhZW+tiTyfKy6jZu0VUyLeizoNpoWxTs74Vm5pxUE3E
zaCyRuuiZT8FUWHn2uAOy2BsHVf1O/3euWEUSPYVEGIyhB6BMz67OitGLWwnsjmE
uuGxgfW0lxiFlA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:30:05 2025 by rpki-client