Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
File: 4upZNGSFjik5UjRc9Ol3ksiBEFc.mft (raw, json)
Hash identifier: zqU0C1sMKN7n08J7IFiUH733psWICd1ZLpaEB+5riOk=
Subject key identifier: CB:E3:DD:CC:7A:C1:0A:9D:12:3E:2F:4F:0E:B1:9B:83:6C:0C:0B:2F
Authority key identifier: E2:EA:59:34:64:85:8E:29:39:52:34:5C:F4:E9:77:92:C8:81:10:57
Certificate issuer: /CN=e2ea593464858e293952345cf4e97792c8811057
Certificate serial: 019883554C4A4BB4874DB96611DB1CB186C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
Manifest number: 15B2
Signing time: Thu 07 Aug 2025 07:01:02 +0000
Manifest this update: Thu 07 Aug 2025 07:01:02 +0000
Manifest next update: Fri 08 Aug 2025 07:01:02 +0000
Files and hashes: 1: 4upZNGSFjik5UjRc9Ol3ksiBEFc.crl (hash: FrW0cUYv54NSDmNLHjareJMR2ysODPVRud5UkcexIkY=)
2: n71MSGzOhUkplgZWWIqcoN_zTeY.roa (hash: M4lvFRLACkU+Ya2mbosmCvcTtHX7Mafia2WGDrBrlJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 07:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:55:4c:4a:4b:b4:87:4d:b9:66:11:db:1c:b1:86:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2ea593464858e293952345cf4e97792c8811057
Validity
Not Before: Aug 7 07:01:02 2025 GMT
Not After : Aug 8 07:01:02 2025 GMT
Subject: CN=cbe3ddcc7ac10a9d123e2f4f0eb19b836c0c0b2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e1:f6:0d:b0:2e:1a:09:0b:4c:b2:5e:4a:fc:
1b:bd:26:d9:b7:90:e6:c5:55:22:2c:a9:01:76:a0:
2d:89:d4:c9:4a:98:81:48:3e:f0:d4:e7:51:c5:b4:
4e:da:04:2b:01:39:66:81:5f:f0:a7:ab:ac:89:8a:
98:08:9f:14:8f:92:2f:4e:64:e6:5b:de:ba:c4:d0:
76:ae:de:db:fe:9f:ce:e7:2d:84:18:1a:1e:32:6e:
95:8b:5c:96:3f:1e:71:74:f7:7b:4f:b8:e8:6a:62:
fe:d1:66:c9:0c:d2:3d:2d:a1:ad:52:5e:ec:69:c0:
22:d2:0d:ac:38:dc:1f:b5:de:2f:f7:eb:ee:b5:62:
5f:71:ac:98:db:57:57:7e:5d:73:2c:ba:2f:f6:09:
3e:12:6e:af:dc:ad:0a:e9:65:3a:2e:4e:3a:da:35:
00:23:a3:1e:b3:32:8d:c1:67:1a:99:4d:6c:dd:77:
be:d5:8b:dd:81:a5:87:e2:ea:a6:80:9c:f1:33:df:
a8:c8:1f:85:8b:c1:b1:89:aa:ea:b1:a1:e5:0e:c6:
45:ce:4a:a0:98:93:53:ae:a5:53:de:f5:5a:d5:33:
17:ea:d6:01:7c:ec:43:6a:49:19:63:15:46:07:fa:
fd:e5:6b:7c:91:a9:50:03:7e:8d:1b:00:7d:0e:db:
fc:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E3:DD:CC:7A:C1:0A:9D:12:3E:2F:4F:0E:B1:9B:83:6C:0C:0B:2F
X509v3 Authority Key Identifier:
keyid:E2:EA:59:34:64:85:8E:29:39:52:34:5C:F4:E9:77:92:C8:81:10:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:43:e1:53:60:c4:fc:90:d2:2e:77:50:14:1c:57:e4:c4:e3:
43:9c:88:6d:83:c7:96:5f:de:ed:d4:e1:37:52:c2:cb:90:48:
7f:4e:5f:df:c2:0f:81:4d:74:ac:d6:7c:f7:ac:d4:5d:8a:aa:
cb:ec:43:59:12:84:a4:6b:5e:9e:cb:50:29:43:d5:b5:2c:80:
f0:1f:2b:1b:0e:92:53:e0:06:74:4e:5c:d4:ea:6e:ab:ff:dd:
0d:a4:84:fd:11:8d:2a:62:31:47:5f:35:b6:b9:c7:eb:a1:c1:
e2:6c:03:12:8a:85:e6:98:b6:54:eb:f7:ef:91:7c:06:a1:b9:
2c:b5:77:67:fa:c1:26:93:ca:d9:92:4f:a8:2e:a8:48:a6:40:
26:68:7a:aa:44:41:9c:a6:2c:5f:a9:46:0a:9a:17:48:1e:56:
70:3f:4b:ca:d8:9e:58:0c:9e:5d:74:6d:8d:f8:b9:31:e0:98:
13:50:29:a3:6f:1b:2b:2b:8f:42:47:19:96:92:ee:02:22:56:
d9:11:2b:bb:2a:a2:b8:43:49:db:96:88:b0:aa:68:28:88:0e:
38:ed:fb:25:27:cc:4b:9e:85:a3:44:56:77:03:65:8c:1a:9f:
ca:98:fd:ff:be:fc:cd:1d:e3:a7:9b:00:17:44:41:19:29:0d:
4e:83:9d:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiDVUxKS7SHTblmEdscsYbEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZWE1OTM0NjQ4NThlMjkzOTUyMzQ1Y2Y0ZTk3NzkyYzg4
MTEwNTcwHhcNMjUwODA3MDcwMTAyWhcNMjUwODA4MDcwMTAyWjAzMTEwLwYDVQQD
EyhjYmUzZGRjYzdhYzEwYTlkMTIzZTJmNGYwZWIxOWI4MzZjMGMwYjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+H2DbAuGgkLTLJeSvwbvSbZt5Dm
xVUiLKkBdqAtidTJSpiBSD7w1OdRxbRO2gQrATlmgV/wp6usiYqYCJ8Uj5IvTmTm
W966xNB2rt7b/p/O5y2EGBoeMm6Vi1yWPx5xdPd7T7joamL+0WbJDNI9LaGtUl7s
acAi0g2sONwftd4v9+vutWJfcayY21dXfl1zLLov9gk+Em6v3K0K6WU6Lk462jUA
I6MeszKNwWcamU1s3Xe+1YvdgaWH4uqmgJzxM9+oyB+Fi8GxiarqsaHlDsZFzkqg
mJNTrqVT3vVa1TMX6tYBfOxDakkZYxVGB/r95Wt8kalQA36NGwB9Dtv8oQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMvj3cx6wQqdEj4vTw6xm4NsDAsvMB8GA1UdIwQY
MBaAFOLqWTRkhY4pOVI0XPTpd5LIgRBXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHVwWk5HU0ZqaWs1VWpSYzlPbDNrc2lCRUZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9jMzkzMmYtZjQ3Ni00ZDVjLWJiNWEt
NjJlNGJhZWU0ZmM1LzEvNHVwWk5HU0ZqaWs1VWpSYzlPbDNrc2lCRUZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9jMzkzMmYtZjQ3Ni00ZDVjLWJiNWEtNjJlNGJhZWU0ZmM1
LzEvNHVwWk5HU0ZqaWs1VWpSYzlPbDNrc2lCRUZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa0PhU2DE
/JDSLndQFBxX5MTjQ5yIbYPHll/e7dThN1LCy5BIf05f38IPgU10rNZ896zUXYqq
y+xDWRKEpGtenstQKUPVtSyA8B8rGw6SU+AGdE5c1Opuq//dDaSE/RGNKmIxR181
trnH66HB4mwDEoqF5pi2VOv375F8BqG5LLV3Z/rBJpPK2ZJPqC6oSKZAJmh6qkRB
nKYsX6lGCpoXSB5WcD9LytieWAyeXXRtjfi5MeCYE1Apo28bKyuPQkcZlpLuAiJW
2REruyqiuENJ25aIsKpoKIgOOO37JSfMS56Fo0RWdwNljBqfypj9/778zR3jp5sA
F0RBGSkNToOd+A==
-----END CERTIFICATE-----
Generated at Thu Aug 7 11:10:18 2025 by rpki-client