Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
File: 4p9JZACcdLuBrtnGcHgBPcho7xc.mft (raw, json)
Hash identifier: brT+fR4YHi7PHP4ekdtCAQzbO7CPAvGJcfmOXmbCa/0=
Subject key identifier: EF:1B:0C:31:0A:8A:00:E5:60:EF:B0:5B:5F:3C:75:D5:62:4E:6B:27
Authority key identifier: E2:9F:49:64:00:9C:74:BB:81:AE:D9:C6:70:78:01:3D:C8:68:EF:17
Certificate issuer: /CN=e29f4964009c74bb81aed9c67078013dc868ef17
Certificate serial: 01974DB2F7D1550C1E4C96A2A96FC36C6E4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
Manifest number: 1580
Signing time: Sun 08 Jun 2025 04:01:03 +0000
Manifest this update: Sun 08 Jun 2025 04:01:03 +0000
Manifest next update: Mon 09 Jun 2025 04:01:03 +0000
Files and hashes: 1: 1KTjmYkB3cj_19bwNwOyE5tGxCk.roa (hash: H8xeX/8Uyv31FbjznlcJqitCSYJrp0RSe/v1PmExVLA=)
2: 4p9JZACcdLuBrtnGcHgBPcho7xc.crl (hash: vCW74xzpy1IrzP/yFQ/UBcTl64JhYslXKmtIcYmIYgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 04:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:f7:d1:55:0c:1e:4c:96:a2:a9:6f:c3:6c:6e:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e29f4964009c74bb81aed9c67078013dc868ef17
Validity
Not Before: Jun 8 04:01:03 2025 GMT
Not After : Jun 9 04:01:03 2025 GMT
Subject: CN=ef1b0c310a8a00e560efb05b5f3c75d5624e6b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ff:b4:0d:7e:de:44:5a:e6:79:ee:81:e3:00:
5a:41:94:86:81:d3:1f:8f:b7:da:e3:88:51:00:db:
18:f7:87:20:16:7a:1e:5e:b8:33:7d:a9:ff:06:1e:
4f:bd:77:ad:c2:f9:3c:23:fc:71:56:dd:77:1f:d3:
03:be:9b:d2:08:8b:a9:0a:a8:a0:a1:31:81:4c:8f:
22:3e:9b:02:e7:39:19:67:5c:03:55:54:ea:00:ab:
2c:9f:15:a9:20:74:4d:19:99:12:86:2e:8c:62:bd:
c5:65:64:91:ae:15:83:a5:19:e5:dc:28:ed:31:65:
a1:44:a9:9f:90:ee:75:f2:06:19:a4:10:35:e0:12:
eb:26:e9:22:a3:65:a7:e1:79:e5:c5:cd:5c:fd:22:
c2:87:bb:bd:d9:37:b6:c5:a6:af:73:dc:8d:29:52:
2b:b6:75:90:23:49:8c:4b:5f:ea:0e:99:44:ed:0f:
c1:3e:77:14:5f:1b:96:af:40:76:c6:ce:c9:d4:90:
89:4f:b9:c4:3c:9b:37:34:2a:aa:b1:8e:32:09:98:
07:0d:86:c8:37:14:d9:b4:3f:a6:58:cb:21:96:ff:
b9:20:be:90:42:61:0c:9a:a4:fb:44:b2:2e:89:db:
12:a0:dc:46:f9:1e:3f:82:be:ee:58:b1:e6:e9:d6:
79:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:1B:0C:31:0A:8A:00:E5:60:EF:B0:5B:5F:3C:75:D5:62:4E:6B:27
X509v3 Authority Key Identifier:
keyid:E2:9F:49:64:00:9C:74:BB:81:AE:D9:C6:70:78:01:3D:C8:68:EF:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:15:09:b8:c4:fb:35:60:5c:71:73:ef:23:31:6a:62:d4:7a:
cb:84:25:d3:2a:e9:a5:68:95:38:2c:c0:22:3f:2f:05:90:21:
2e:98:8d:a7:bd:6f:93:a0:db:b1:42:89:dc:90:db:ba:f3:17:
a2:ce:46:3b:e4:a5:0b:af:d9:f2:ed:a6:20:1e:30:f6:0c:a5:
ee:54:a5:5a:7e:fb:ae:96:9b:88:8e:bb:36:c5:c9:38:0b:9b:
93:09:b6:4a:41:60:15:40:6d:a2:4d:e5:c0:b0:ab:b4:d9:4f:
ac:b6:53:9c:1e:b9:cf:2c:4d:8f:31:23:f0:43:a4:01:99:81:
1b:4d:94:4f:78:64:2d:3e:35:33:b1:89:f8:09:b8:87:ea:45:
60:08:a7:fe:c1:da:60:00:22:b1:ab:80:0f:15:de:ca:c6:4b:
21:4b:7b:9d:8c:99:03:3b:d1:79:f7:e2:bc:57:b0:be:16:85:
e6:2a:41:79:28:44:b8:e7:87:03:9a:4c:c6:ad:ac:8e:9a:73:
ad:9d:06:3d:b5:06:94:f4:ca:83:03:0a:75:8a:15:46:f3:79:
cf:08:da:d8:f2:93:cf:16:dc:ad:6a:f7:57:5d:1c:15:1b:1c:
37:e9:ce:59:0b:1b:19:42:73:54:a5:42:3e:75:66:c8:df:5b:
d6:f0:1c:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNsvfRVQweTJaiqW/DbG5LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyOWY0OTY0MDA5Yzc0YmI4MWFlZDljNjcwNzgwMTNkYzg2
OGVmMTcwHhcNMjUwNjA4MDQwMTAzWhcNMjUwNjA5MDQwMTAzWjAzMTEwLwYDVQQD
EyhlZjFiMGMzMTBhOGEwMGU1NjBlZmIwNWI1ZjNjNzVkNTYyNGU2YjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqv+0DX7eRFrmee6B4wBaQZSGgdMf
j7fa44hRANsY94cgFnoeXrgzfan/Bh5PvXetwvk8I/xxVt13H9MDvpvSCIupCqig
oTGBTI8iPpsC5zkZZ1wDVVTqAKssnxWpIHRNGZkShi6MYr3FZWSRrhWDpRnl3Cjt
MWWhRKmfkO518gYZpBA14BLrJukio2Wn4Xnlxc1c/SLCh7u92Te2xaavc9yNKVIr
tnWQI0mMS1/qDplE7Q/BPncUXxuWr0B2xs7J1JCJT7nEPJs3NCqqsY4yCZgHDYbI
NxTZtD+mWMshlv+5IL6QQmEMmqT7RLIuidsSoNxG+R4/gr7uWLHm6dZ5zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO8bDDEKigDlYO+wW188ddViTmsnMB8GA1UdIwQY
MBaAFOKfSWQAnHS7ga7ZxnB4AT3IaO8XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHA5SlpBQ2NkTHVCcnRuR2NIZ0JQY2hvN3hjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS82NTVhMWMtYmFmNS00NzVmLWEzMDgt
OTMyYWIzNDFhMzY3LzEvNHA5SlpBQ2NkTHVCcnRuR2NIZ0JQY2hvN3hjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS82NTVhMWMtYmFmNS00NzVmLWEzMDgtOTMyYWIzNDFhMzY3
LzEvNHA5SlpBQ2NkTHVCcnRuR2NIZ0JQY2hvN3hjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQRUJuMT7
NWBccXPvIzFqYtR6y4Ql0yrppWiVOCzAIj8vBZAhLpiNp71vk6DbsUKJ3JDbuvMX
os5GO+SlC6/Z8u2mIB4w9gyl7lSlWn77rpabiI67NsXJOAubkwm2SkFgFUBtok3l
wLCrtNlPrLZTnB65zyxNjzEj8EOkAZmBG02UT3hkLT41M7GJ+Am4h+pFYAin/sHa
YAAisauADxXeysZLIUt7nYyZAzvReffivFewvhaF5ipBeShEuOeHA5pMxq2sjppz
rZ0GPbUGlPTKgwMKdYoVRvN5zwja2PKTzxbcrWr3V10cFRscN+nOWQsbGUJzVKVC
PnVmyN9b1vAcTw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 14:46:57 2025 by rpki-client