Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft
File: 4BEGBvUk26pTjmfhI8r7xt8zhsA.mft (raw, json)
Hash identifier: 3wGY+KlbVQRj9k0/i/GOqXRGUSUjPhg70noWI9XXUBk=
Subject key identifier: 6B:35:3A:0B:2C:B3:7C:21:E5:65:48:DB:94:2F:41:BB:A3:92:8C:06
Authority key identifier: E0:11:06:06:F5:24:DB:AA:53:8E:67:E1:23:CA:FB:C6:DF:33:86:C0
Certificate issuer: /CN=e0110606f524dbaa538e67e123cafbc6df3386c0
Certificate serial: 01975CEF006B8B2F470AECB4ABD4357BA9DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BEGBvUk26pTjmfhI8r7xt8zhsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft
Manifest number: 02ED
Signing time: Wed 11 Jun 2025 03:00:56 +0000
Manifest this update: Wed 11 Jun 2025 03:00:56 +0000
Manifest next update: Thu 12 Jun 2025 03:00:56 +0000
Files and hashes: 1: 4BEGBvUk26pTjmfhI8r7xt8zhsA.crl (hash: eZWccyk0zDPKpjT0uqXneqZkD071mEVkPZ9UrjWKYVc=)
2: LKg2o2zlysSfcmScabBK3xapbdE.roa (hash: 1l6VyqJgKUuQ/XvxIU6XnLgEokzCKE4ghCBRoC85WGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4BEGBvUk26pTjmfhI8r7xt8zhsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:ef:00:6b:8b:2f:47:0a:ec:b4:ab:d4:35:7b:a9:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0110606f524dbaa538e67e123cafbc6df3386c0
Validity
Not Before: Jun 11 03:00:56 2025 GMT
Not After : Jun 12 03:00:56 2025 GMT
Subject: CN=6b353a0b2cb37c21e56548db942f41bba3928c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a9:6c:4d:a1:4e:f6:a8:23:48:09:d1:1a:35:
48:f0:5c:62:a7:ef:3b:49:67:2b:a7:bf:4f:91:d7:
56:e4:c7:2c:e0:fa:7a:53:85:be:2f:ce:52:9d:ee:
2d:0d:4a:3c:49:a2:64:f1:34:58:ac:fb:b1:15:12:
e8:d4:98:0a:c9:3e:c7:10:76:c1:7c:bc:99:15:ab:
c6:29:cb:c9:ae:97:2e:16:f8:d5:a1:3b:7c:0e:e0:
7a:b6:4c:df:33:fe:14:85:d8:5e:e1:0e:3b:53:46:
6a:61:25:e3:42:b8:1a:e9:27:45:24:b0:d0:1c:85:
04:20:cf:16:80:9d:de:0f:1e:75:66:f2:35:47:6a:
d3:ed:0f:d0:48:0b:53:f1:0b:46:1e:df:ba:0a:b2:
5c:1e:63:f2:5b:7a:a1:d4:b4:96:00:d1:83:23:c6:
89:0b:e0:7e:1f:a0:f7:32:02:83:fb:83:80:36:88:
b5:e5:d0:f2:e8:29:f8:6c:6a:f4:fe:3d:77:e8:8a:
b6:5a:7c:7a:38:47:36:16:1a:a7:8a:2e:fe:1b:be:
c2:18:fb:c5:26:c9:89:84:a8:b2:4d:1d:37:13:d0:
66:58:6c:e2:b4:91:d0:88:a5:a2:68:75:08:f1:cd:
27:d8:03:b6:42:80:54:96:4f:52:a5:14:71:9e:df:
98:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:35:3A:0B:2C:B3:7C:21:E5:65:48:DB:94:2F:41:BB:A3:92:8C:06
X509v3 Authority Key Identifier:
keyid:E0:11:06:06:F5:24:DB:AA:53:8E:67:E1:23:CA:FB:C6:DF:33:86:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BEGBvUk26pTjmfhI8r7xt8zhsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:10:cd:f7:a9:7f:a5:fe:c1:af:e5:fd:05:8d:46:e9:cb:4d:
b7:1d:fd:44:16:47:a5:a2:5d:46:3b:bb:13:98:e4:f6:01:3d:
4c:a9:4e:9f:9e:94:a5:e1:8a:ba:77:c1:18:28:a4:dd:de:c8:
0d:86:20:97:dc:56:51:72:8b:90:d6:53:8e:dd:78:19:80:63:
0f:0b:5b:28:ec:e4:1f:01:ef:ae:aa:dd:06:5b:49:6f:31:ac:
e7:fd:17:cc:99:4a:26:71:32:f5:a1:21:98:51:d2:0f:62:59:
58:24:6e:11:ff:cd:de:61:bd:78:82:1d:d4:3e:2a:08:f3:23:
c7:c5:66:71:00:54:c9:1e:4d:88:0e:a3:13:43:5c:e5:71:7b:
64:7a:b2:8d:df:fc:91:67:5d:c7:00:e0:38:21:7c:53:ef:92:
5a:73:a0:d6:b3:7f:5d:55:06:b0:51:73:3f:58:e6:83:3d:80:
6f:e8:4f:5e:8e:5d:d4:04:63:af:98:3c:24:ca:2c:ad:f5:2e:
d2:49:28:34:c5:f5:36:9b:67:56:b2:18:74:57:40:c3:bd:d4:
d8:06:0f:ed:92:6a:aa:e1:cb:4f:60:e8:53:49:28:9e:31:0d:
34:0e:de:ee:1c:8c:e3:99:8a:47:33:af:14:bf:de:14:ff:65:
85:a9:19:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdc7wBriy9HCuy0q9Q1e6nfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwMTEwNjA2ZjUyNGRiYWE1MzhlNjdlMTIzY2FmYmM2ZGYz
Mzg2YzAwHhcNMjUwNjExMDMwMDU2WhcNMjUwNjEyMDMwMDU2WjAzMTEwLwYDVQQD
Eyg2YjM1M2EwYjJjYjM3YzIxZTU2NTQ4ZGI5NDJmNDFiYmEzOTI4YzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKlsTaFO9qgjSAnRGjVI8Fxip+87
SWcrp79PkddW5Mcs4Pp6U4W+L85Sne4tDUo8SaJk8TRYrPuxFRLo1JgKyT7HEHbB
fLyZFavGKcvJrpcuFvjVoTt8DuB6tkzfM/4Uhdhe4Q47U0ZqYSXjQrga6SdFJLDQ
HIUEIM8WgJ3eDx51ZvI1R2rT7Q/QSAtT8QtGHt+6CrJcHmPyW3qh1LSWANGDI8aJ
C+B+H6D3MgKD+4OANoi15dDy6Cn4bGr0/j136Iq2Wnx6OEc2Fhqnii7+G77CGPvF
JsmJhKiyTR03E9BmWGzitJHQiKWiaHUI8c0n2AO2QoBUlk9SpRRxnt+Y/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGs1Ogsss3wh5WVI25QvQbujkowGMB8GA1UdIwQY
MBaAFOARBgb1JNuqU45n4SPK+8bfM4bAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEJFR0J2VWsyNnBUam1maEk4cjd4dDh6aHNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS83M2Y3NDktNDU2MC00YWJlLThkMGIt
ZTJjMWFiYWZhYTZjLzEvNEJFR0J2VWsyNnBUam1maEk4cjd4dDh6aHNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS83M2Y3NDktNDU2MC00YWJlLThkMGItZTJjMWFiYWZhYTZj
LzEvNEJFR0J2VWsyNnBUam1maEk4cjd4dDh6aHNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKxDN96l/
pf7Br+X9BY1G6ctNtx39RBZHpaJdRju7E5jk9gE9TKlOn56UpeGKunfBGCik3d7I
DYYgl9xWUXKLkNZTjt14GYBjDwtbKOzkHwHvrqrdBltJbzGs5/0XzJlKJnEy9aEh
mFHSD2JZWCRuEf/N3mG9eIId1D4qCPMjx8VmcQBUyR5NiA6jE0Nc5XF7ZHqyjd/8
kWddxwDgOCF8U++SWnOg1rN/XVUGsFFzP1jmgz2Ab+hPXo5d1ARjr5g8JMosrfUu
0kkoNMX1NptnVrIYdFdAw73U2AYP7ZJqquHLT2DoU0konjENNA7e7hyM45mKRzOv
FL/eFP9lhakZJg==
-----END CERTIFICATE-----
Generated at Wed Jun 11 13:33:22 2025 by rpki-client