Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
File: 4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft (raw, json)
Hash identifier: P+HWICWlhjm2rCjkqIdHEjGATiM/RbgQLuEpAes4M3E=
Subject key identifier: 94:F1:88:99:FB:EB:DB:53:FC:C2:7A:98:AF:16:28:0D:75:82:FB:E7
Authority key identifier: E2:14:EB:35:A3:5F:D4:88:86:07:03:B7:99:0B:81:70:AF:17:91:2F
Certificate issuer: /CN=e214eb35a35fd488860703b7990b8170af17912f
Certificate serial: 01989448995D7EA21E521A37563CB5B8C954
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
Manifest number: 0866
Signing time: Sun 10 Aug 2025 14:00:42 +0000
Manifest this update: Sun 10 Aug 2025 14:00:42 +0000
Manifest next update: Mon 11 Aug 2025 14:00:42 +0000
Files and hashes: 1: 4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl (hash: NKInyG5RAvEISVl/C2f5iGMDKF2qCqvzIjSz4FgDjd8=)
2: wxwsQanfQy5790A813fRANF-qCc.roa (hash: bJCA9RXeZ9EZ2+fSpx3hkdts4SbbKPXcBRLWj1SMUSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:48:99:5d:7e:a2:1e:52:1a:37:56:3c:b5:b8:c9:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e214eb35a35fd488860703b7990b8170af17912f
Validity
Not Before: Aug 10 14:00:42 2025 GMT
Not After : Aug 11 14:00:42 2025 GMT
Subject: CN=94f18899fbebdb53fcc27a98af16280d7582fbe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e4:64:81:ec:34:bc:5f:a7:c2:42:74:16:b2:
95:1a:74:d3:ac:72:d1:f3:7c:b7:2a:33:b6:37:c8:
ad:ff:3b:e6:5d:d3:b3:0b:6c:d3:f9:4f:ca:12:29:
b9:08:69:36:01:d2:6b:33:de:73:9a:b4:be:ff:33:
5b:41:e8:12:51:db:ff:98:d4:71:98:a9:3b:67:09:
7d:38:0c:eb:21:80:50:46:5b:9b:7c:ee:19:c7:e0:
d4:be:7f:fc:56:19:04:c8:78:1c:08:68:c8:58:bc:
35:c1:c1:19:e1:3f:4f:6c:0e:58:0f:48:8e:7b:24:
02:23:22:90:8d:13:24:7e:fd:ad:2b:e0:40:b7:6f:
e4:e3:3d:c8:4e:e7:83:18:0b:96:d4:7e:98:b1:bc:
4c:79:55:e4:92:33:74:40:42:3d:b4:52:06:67:8b:
bf:ff:71:8b:88:13:4a:5f:1d:88:59:cf:db:46:94:
6e:a3:74:d5:ea:70:d2:03:e6:52:bc:38:34:e5:7a:
e4:76:29:8c:4b:fe:aa:f4:df:94:33:0a:61:ad:71:
4a:c0:7f:db:55:10:4e:dc:d7:b1:7d:22:77:07:83:
d8:12:cb:da:a1:5e:27:c7:dd:3e:32:6e:91:d5:76:
f4:61:aa:96:ac:03:be:4b:fe:af:9c:f1:cd:31:78:
af:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F1:88:99:FB:EB:DB:53:FC:C2:7A:98:AF:16:28:0D:75:82:FB:E7
X509v3 Authority Key Identifier:
keyid:E2:14:EB:35:A3:5F:D4:88:86:07:03:B7:99:0B:81:70:AF:17:91:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:44:83:25:0a:81:fc:c1:19:12:04:00:f8:90:ff:9c:21:11:
e5:8d:bd:64:71:dd:55:5f:1c:95:f5:bd:13:1f:91:a9:bc:8e:
0a:97:f2:12:34:d9:aa:81:9d:51:2e:f1:0a:0d:43:b9:cc:31:
ad:92:66:28:11:d7:6a:bb:0e:de:a7:fc:00:36:1d:80:14:00:
da:89:f0:3a:03:15:27:73:e1:6c:58:43:97:4c:e7:c4:b6:44:
90:7b:46:34:c4:57:46:34:8c:22:5e:8b:63:3f:88:b3:4c:92:
2f:b9:82:41:c0:47:ab:3f:8f:fd:ee:07:97:7d:bd:05:48:d0:
f0:71:ae:ce:70:a1:e8:4e:15:43:3e:b5:bc:fe:a2:69:1c:68:
18:73:64:59:ce:32:93:68:cf:a7:61:a9:cf:41:20:e4:81:e6:
73:a7:59:41:e0:b2:77:02:5f:a8:6a:79:7c:9e:00:fb:d3:ad:
6c:12:f1:a6:e0:b9:75:a0:08:7d:3c:df:14:95:26:b3:e4:be:
1b:11:b9:e8:8f:d9:94:63:52:99:b9:ff:d7:c3:96:ec:85:44:
d9:8b:6b:23:eb:d8:55:0d:9d:45:51:92:e7:b8:1e:7b:8b:d3:
cc:b3:c9:10:03:56:41:6c:6e:df:34:b8:09:26:70:ff:be:d9:
f5:ac:f5:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiUSJldfqIeUho3Vjy1uMlUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyMTRlYjM1YTM1ZmQ0ODg4NjA3MDNiNzk5MGI4MTcwYWYx
NzkxMmYwHhcNMjUwODEwMTQwMDQyWhcNMjUwODExMTQwMDQyWjAzMTEwLwYDVQQD
Eyg5NGYxODg5OWZiZWJkYjUzZmNjMjdhOThhZjE2MjgwZDc1ODJmYmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ORkgew0vF+nwkJ0FrKVGnTTrHLR
83y3KjO2N8it/zvmXdOzC2zT+U/KEim5CGk2AdJrM95zmrS+/zNbQegSUdv/mNRx
mKk7Zwl9OAzrIYBQRlubfO4Zx+DUvn/8VhkEyHgcCGjIWLw1wcEZ4T9PbA5YD0iO
eyQCIyKQjRMkfv2tK+BAt2/k4z3ITueDGAuW1H6YsbxMeVXkkjN0QEI9tFIGZ4u/
/3GLiBNKXx2IWc/bRpRuo3TV6nDSA+ZSvDg05XrkdimMS/6q9N+UMwphrXFKwH/b
VRBO3NexfSJ3B4PYEsvaoV4nx90+Mm6R1Xb0YaqWrAO+S/6vnPHNMXivFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJTxiJn769tT/MJ6mK8WKA11gvvnMB8GA1UdIwQY
MBaAFOIU6zWjX9SIhgcDt5kLgXCvF5EvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGhUck5hTmYxSWlHQndPM21RdUJjSzhYa1M4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS81NGJlNTgtNDE3NS00MDdhLWJjMzct
Y2MyNmQ0MzE2MTQyLzEvNGhUck5hTmYxSWlHQndPM21RdUJjSzhYa1M4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS81NGJlNTgtNDE3NS00MDdhLWJjMzctY2MyNmQ0MzE2MTQy
LzEvNGhUck5hTmYxSWlHQndPM21RdUJjSzhYa1M4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF0SDJQqB
/MEZEgQA+JD/nCER5Y29ZHHdVV8clfW9Ex+RqbyOCpfyEjTZqoGdUS7xCg1Ducwx
rZJmKBHXarsO3qf8ADYdgBQA2onwOgMVJ3PhbFhDl0znxLZEkHtGNMRXRjSMIl6L
Yz+Is0ySL7mCQcBHqz+P/e4Hl329BUjQ8HGuznCh6E4VQz61vP6iaRxoGHNkWc4y
k2jPp2Gpz0Eg5IHmc6dZQeCydwJfqGp5fJ4A+9OtbBLxpuC5daAIfTzfFJUms+S+
GxG56I/ZlGNSmbn/18OW7IVE2YtrI+vYVQ2dRVGS57gee4vTzLPJEANWQWxu3zS4
CSZw/77Z9az1kA==
-----END CERTIFICATE-----
Generated at Sun Aug 10 21:11:37 2025 by rpki-client