Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
File: 4jDeX9PCRVFzumlqmUQdliDYHTg.mft (raw, json)
Hash identifier: Zca1Rs26cowm1s/ii/jEt0+i1NF2ealTg4RFW45Gm4o=
Subject key identifier: E1:E9:E3:1A:CC:C9:E6:90:2D:52:D5:42:DC:CB:39:90:B3:18:44:F4
Authority key identifier: E2:30:DE:5F:D3:C2:45:51:73:BA:69:6A:99:44:1D:96:20:D8:1D:38
Certificate issuer: /CN=e230de5fd3c2455173ba696a99441d9620d81d38
Certificate serial: 01987E2E78F3D1B64A76460E917481DF7F74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
Manifest number: 0C34
Signing time: Wed 06 Aug 2025 07:00:31 +0000
Manifest this update: Wed 06 Aug 2025 07:00:31 +0000
Manifest next update: Thu 07 Aug 2025 07:00:31 +0000
Files and hashes: 1: 4jDeX9PCRVFzumlqmUQdliDYHTg.crl (hash: 5mQ6998tEJVhDlBb/mvQTXujRowERisRVO8deRWrA/g=)
2: qADZbjUspL_WRqhq7wvNpX-fT-E.roa (hash: 8V+RbGGUYULjGMvZVkBND643qQkjbKJgabtjnmu0hrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:2e:78:f3:d1:b6:4a:76:46:0e:91:74:81:df:7f:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e230de5fd3c2455173ba696a99441d9620d81d38
Validity
Not Before: Aug 6 07:00:31 2025 GMT
Not After : Aug 7 07:00:31 2025 GMT
Subject: CN=e1e9e31accc9e6902d52d542dccb3990b31844f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:79:df:94:a5:08:23:49:13:3c:b8:82:ea:9e:
88:31:e6:dd:e3:49:c3:a3:b8:4b:93:c3:35:78:ca:
3d:05:25:03:11:8b:5d:4b:92:a9:81:79:55:b3:3e:
f9:0d:dc:65:70:81:5d:b3:81:b5:00:e6:42:b8:09:
7a:51:9a:c5:bf:99:34:a8:f7:2a:0b:47:59:19:07:
a6:1b:72:5a:9b:fc:17:db:e0:aa:be:ba:b4:a5:4c:
89:4a:1e:67:5c:2d:35:a3:77:a1:f4:7b:d7:20:82:
29:d6:37:0a:7a:1b:2a:bc:ce:67:98:ad:21:71:f3:
14:86:73:d3:76:c7:05:7f:64:2e:f5:23:9f:af:ef:
dd:46:70:75:8f:08:d2:f1:b2:41:e7:ab:b5:37:bd:
cc:7e:e6:98:8b:6e:11:82:be:a1:55:f5:ad:16:64:
36:4b:85:27:9d:a9:17:73:cc:de:70:56:33:7f:19:
4f:c9:c9:5b:4e:ba:39:f8:b5:f9:61:3f:9c:2e:75:
ee:bc:b4:e7:bc:39:0b:9e:31:56:8d:ff:b1:ae:51:
fb:85:8f:2d:c1:04:72:c9:5f:17:3a:ae:d5:b6:2d:
0d:f8:76:ed:24:30:25:85:39:ac:7d:e6:75:1d:ec:
46:49:f1:8e:66:67:80:02:27:04:bf:fa:40:a2:7b:
d1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E9:E3:1A:CC:C9:E6:90:2D:52:D5:42:DC:CB:39:90:B3:18:44:F4
X509v3 Authority Key Identifier:
keyid:E2:30:DE:5F:D3:C2:45:51:73:BA:69:6A:99:44:1D:96:20:D8:1D:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:87:06:db:b0:99:2b:2a:f3:a6:55:87:16:ef:3c:c7:db:9a:
e1:93:5e:3a:61:9f:80:7b:ea:57:18:25:32:98:34:8b:f1:a8:
7d:e8:3c:d8:18:20:69:bc:58:0d:11:25:14:9d:44:26:e6:fd:
b3:c0:3d:24:d0:9e:22:f5:20:c8:38:83:bb:bb:25:10:dd:99:
e6:2e:38:f5:d1:d7:dc:1a:73:81:45:96:7d:dc:32:28:23:b5:
5d:b8:88:22:f2:5d:95:67:ed:9a:a3:48:64:3d:29:63:73:d0:
58:f2:ef:5e:fc:b7:75:8d:a7:c3:ce:5e:3c:68:b1:ef:be:b8:
5d:8b:c3:80:ff:a4:5b:88:46:b8:25:eb:ba:62:20:ed:30:cc:
bf:73:b7:2c:39:f4:47:ad:c2:af:12:e8:63:32:4e:73:c2:19:
26:a2:c3:3f:5f:17:76:2c:92:ad:96:a0:6f:fb:f8:e4:a8:ab:
8a:19:87:01:85:e6:5f:bc:ec:19:60:0f:cd:46:1e:73:95:72:
5a:7b:9c:3e:89:bd:e7:8b:ee:53:f3:49:ef:cf:83:46:70:cd:
65:7a:0e:24:71:fe:c8:4f:6a:7e:ff:40:22:9d:a3:5f:52:3a:
5f:20:a8:9e:2d:92:eb:8d:27:22:91:a0:3f:cf:a9:68:5d:de:
e6:4e:1f:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh+Lnjz0bZKdkYOkXSB3390MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyMzBkZTVmZDNjMjQ1NTE3M2JhNjk2YTk5NDQxZDk2MjBk
ODFkMzgwHhcNMjUwODA2MDcwMDMxWhcNMjUwODA3MDcwMDMxWjAzMTEwLwYDVQQD
EyhlMWU5ZTMxYWNjYzllNjkwMmQ1MmQ1NDJkY2NiMzk5MGIzMTg0NGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXnflKUII0kTPLiC6p6IMebd40nD
o7hLk8M1eMo9BSUDEYtdS5KpgXlVsz75DdxlcIFds4G1AOZCuAl6UZrFv5k0qPcq
C0dZGQemG3Jam/wX2+Cqvrq0pUyJSh5nXC01o3eh9HvXIIIp1jcKehsqvM5nmK0h
cfMUhnPTdscFf2Qu9SOfr+/dRnB1jwjS8bJB56u1N73MfuaYi24Rgr6hVfWtFmQ2
S4UnnakXc8zecFYzfxlPyclbTro5+LX5YT+cLnXuvLTnvDkLnjFWjf+xrlH7hY8t
wQRyyV8XOq7Vti0N+HbtJDAlhTmsfeZ1HexGSfGOZmeAAicEv/pAonvR0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOHp4xrMyeaQLVLVQtzLOZCzGET0MB8GA1UdIwQY
MBaAFOIw3l/TwkVRc7ppaplEHZYg2B04MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGpEZVg5UENSVkZ6dW1scW1VUWRsaURZSFRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9mYWM3ZWQtOTAxOC00NWRiLTg5NDct
ZmI1YzU4MmU0MDk3LzEvNGpEZVg5UENSVkZ6dW1scW1VUWRsaURZSFRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9mYWM3ZWQtOTAxOC00NWRiLTg5NDctZmI1YzU4MmU0MDk3
LzEvNGpEZVg5UENSVkZ6dW1scW1VUWRsaURZSFRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe4cG27CZ
KyrzplWHFu88x9ua4ZNeOmGfgHvqVxglMpg0i/Gofeg82BggabxYDRElFJ1EJub9
s8A9JNCeIvUgyDiDu7slEN2Z5i449dHX3BpzgUWWfdwyKCO1XbiIIvJdlWftmqNI
ZD0pY3PQWPLvXvy3dY2nw85ePGix7764XYvDgP+kW4hGuCXrumIg7TDMv3O3LDn0
R63CrxLoYzJOc8IZJqLDP18XdiySrZagb/v45KirihmHAYXmX7zsGWAPzUYec5Vy
WnucPom954vuU/NJ78+DRnDNZXoOJHH+yE9qfv9AIp2jX1I6XyConi2S640nIpGg
P8+paF3e5k4fDA==
-----END CERTIFICATE-----
Generated at Wed Aug 6 09:23:27 2025 by rpki-client