Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft
File: 4QnieMeGIlTIh1XkcXOYpVKkkEA.mft (raw, json)
Hash identifier: XQyI6MNX5r7411UyLLE4E+C52vYBBQYelrqQhtW1TVU=
Subject key identifier: 84:DF:F1:98:C6:70:26:30:C3:A5:35:CE:25:EC:62:D3:F0:48:90:EE
Authority key identifier: E1:09:E2:78:C7:86:22:54:C8:87:55:E4:71:73:98:A5:52:A4:90:40
Certificate issuer: /CN=e109e278c7862254c88755e4717398a552a49040
Certificate serial: 01988BB350603F76FC32CBD598FC75F161CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4QnieMeGIlTIh1XkcXOYpVKkkEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft
Manifest number: 03C3
Signing time: Fri 08 Aug 2025 22:00:41 +0000
Manifest this update: Fri 08 Aug 2025 22:00:41 +0000
Manifest next update: Sat 09 Aug 2025 22:00:41 +0000
Files and hashes: 1: 4QnieMeGIlTIh1XkcXOYpVKkkEA.crl (hash: H4wNtJ5fbRntvNV04QLN7Bn6dC6YGYT74iWe77KXKe8=)
2: 8a9J3an90z8mWS8TkwqA1Af6V60.roa (hash: Sfg4OixpuznuGw9qd09AY2Lx61QBeTwn9kYrisQDEss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4QnieMeGIlTIh1XkcXOYpVKkkEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:b3:50:60:3f:76:fc:32:cb:d5:98:fc:75:f1:61:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e109e278c7862254c88755e4717398a552a49040
Validity
Not Before: Aug 8 22:00:41 2025 GMT
Not After : Aug 9 22:00:41 2025 GMT
Subject: CN=84dff198c6702630c3a535ce25ec62d3f04890ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:79:60:2c:24:90:5c:98:5d:10:3c:03:a6:22:
9d:b3:fd:6d:cf:87:71:25:83:ca:56:72:05:28:c4:
0b:a0:ef:9d:f0:b9:08:17:e5:8c:a9:eb:ce:c6:f5:
b3:79:d1:ac:13:46:40:6c:78:7d:29:79:b0:63:f6:
47:48:5b:65:98:71:7a:9c:7d:ee:4a:1a:28:03:ea:
74:20:0f:4c:ad:a5:42:b4:d8:65:58:52:90:69:7f:
e4:58:93:03:c9:72:1c:bb:91:41:60:0f:56:aa:dc:
4d:38:af:38:a0:ab:1c:c8:7c:c7:20:14:f0:2e:2b:
38:5b:a7:62:b3:83:38:45:d4:a5:64:f3:56:4f:7d:
30:e4:8c:5b:7e:33:ed:7d:02:ad:7c:a8:45:45:33:
47:a6:92:8d:57:2d:69:5b:6b:ef:c3:c0:10:e7:3d:
e9:c5:ce:d9:fa:96:05:f3:61:0f:e8:15:6d:4b:02:
c3:08:5f:fd:dd:44:c8:f0:9d:3e:70:75:ed:ab:34:
33:e7:0e:d4:7a:3d:65:14:82:45:10:93:ed:99:7c:
5c:91:e3:7b:fc:fa:aa:90:ef:ab:c3:fc:fc:cf:a4:
bc:bf:aa:66:89:9c:3a:3e:8f:80:88:dd:c6:fd:e1:
41:f5:95:9b:a1:b6:bd:3c:4c:f6:b4:a7:83:b8:c7:
54:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:DF:F1:98:C6:70:26:30:C3:A5:35:CE:25:EC:62:D3:F0:48:90:EE
X509v3 Authority Key Identifier:
keyid:E1:09:E2:78:C7:86:22:54:C8:87:55:E4:71:73:98:A5:52:A4:90:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QnieMeGIlTIh1XkcXOYpVKkkEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:32:8e:66:b6:7e:72:be:ef:1e:04:4d:d7:49:7d:c1:f2:2d:
93:69:37:e5:3c:04:cd:0e:85:4e:0f:3b:dd:ea:43:81:eb:b6:
23:88:0f:1f:ec:6b:99:ed:7b:82:8d:74:87:71:a1:c0:fa:f8:
2d:15:95:fb:59:d3:2b:89:2e:fd:d3:07:2c:a2:b5:03:64:1b:
97:0a:39:32:bf:b0:fe:86:64:03:8d:82:1c:a9:c8:80:a0:44:
9c:82:f5:f4:44:f0:00:d9:fc:30:1e:d2:18:40:e3:fd:a3:b4:
46:b5:d5:bb:c1:bc:fb:0b:61:21:42:70:a0:ba:c0:28:61:31:
81:f0:5a:cf:f6:79:e6:d4:d7:37:32:cf:89:96:9e:a9:56:73:
8b:04:a5:ed:9b:26:f1:4c:2f:7a:32:da:58:b4:4e:02:da:fc:
b0:f2:1c:a9:dc:19:b9:f7:dd:23:25:ca:35:f6:3d:a6:e4:35:
4b:98:02:fd:54:a2:89:6f:06:0d:b3:54:47:a0:e7:45:a0:ac:
fc:2f:c9:b0:3b:75:36:32:fd:e6:03:99:af:e5:21:20:d9:3c:
2d:d9:93:29:0c:f7:45:ff:1b:1f:fb:27:d0:34:74:67:c9:31:
62:f8:a5:29:02:13:a6:26:0d:7f:ac:b9:02:95:f6:cb:85:e7:
f1:86:1b:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLs1BgP3b8MsvVmPx18WHPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMDllMjc4Yzc4NjIyNTRjODg3NTVlNDcxNzM5OGE1NTJh
NDkwNDAwHhcNMjUwODA4MjIwMDQxWhcNMjUwODA5MjIwMDQxWjAzMTEwLwYDVQQD
Eyg4NGRmZjE5OGM2NzAyNjMwYzNhNTM1Y2UyNWVjNjJkM2YwNDg5MGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXlgLCSQXJhdEDwDpiKds/1tz4dx
JYPKVnIFKMQLoO+d8LkIF+WMqevOxvWzedGsE0ZAbHh9KXmwY/ZHSFtlmHF6nH3u
ShooA+p0IA9MraVCtNhlWFKQaX/kWJMDyXIcu5FBYA9WqtxNOK84oKscyHzHIBTw
Lis4W6dis4M4RdSlZPNWT30w5IxbfjPtfQKtfKhFRTNHppKNVy1pW2vvw8AQ5z3p
xc7Z+pYF82EP6BVtSwLDCF/93UTI8J0+cHXtqzQz5w7Uej1lFIJFEJPtmXxckeN7
/PqqkO+rw/z8z6S8v6pmiZw6Po+AiN3G/eFB9ZWboba9PEz2tKeDuMdU6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFITf8ZjGcCYww6U1ziXsYtPwSJDuMB8GA1UdIwQY
MBaAFOEJ4njHhiJUyIdV5HFzmKVSpJBAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFFuaWVNZUdJbFRJaDFYa2NYT1lwVktra0VBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9lMDcyZDctODdjMC00YjczLTlhNGQt
MmYwM2UzMmJkMjFhLzEvNFFuaWVNZUdJbFRJaDFYa2NYT1lwVktra0VBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC9lMDcyZDctODdjMC00YjczLTlhNGQtMmYwM2UzMmJkMjFh
LzEvNFFuaWVNZUdJbFRJaDFYa2NYT1lwVktra0VBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALTKOZrZ+
cr7vHgRN10l9wfItk2k35TwEzQ6FTg873epDgeu2I4gPH+xrme17go10h3GhwPr4
LRWV+1nTK4ku/dMHLKK1A2Qblwo5Mr+w/oZkA42CHKnIgKBEnIL19ETwANn8MB7S
GEDj/aO0RrXVu8G8+wthIUJwoLrAKGExgfBaz/Z55tTXNzLPiZaeqVZziwSl7Zsm
8UwvejLaWLROAtr8sPIcqdwZuffdIyXKNfY9puQ1S5gC/VSiiW8GDbNUR6DnRaCs
/C/JsDt1NjL95gOZr+UhINk8LdmTKQz3Rf8bH/sn0DR0Z8kxYvilKQITpiYNf6y5
ApX2y4Xn8YYbiA==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:07:26 2025 by rpki-client