Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
File: 4_kwa8YVwyCuQaTnJmPrupjvNXw.mft (raw, json)
Hash identifier: yd64l0bO3DE+Fc6Evm8NYw//mziwQ7Wnp6Ug0QIrlLo=
Subject key identifier: 86:BD:0C:E2:12:0D:A8:5B:E2:4A:1D:81:B1:B7:63:03:8F:54:B3:9E
Authority key identifier: E3:F9:30:6B:C6:15:C3:20:AE:41:A4:E7:26:63:EB:BA:98:EF:35:7C
Certificate issuer: /CN=e3f9306bc615c320ae41a4e72663ebba98ef357c
Certificate serial: 019891484474A5503B744D0B61B46F7E34FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
Manifest number: 06EC
Signing time: Sun 10 Aug 2025 00:01:29 +0000
Manifest this update: Sun 10 Aug 2025 00:01:29 +0000
Manifest next update: Mon 11 Aug 2025 00:01:29 +0000
Files and hashes: 1: 4_kwa8YVwyCuQaTnJmPrupjvNXw.crl (hash: IXNLgkVG9L3WrzNtIW83NwVgKHzI9c04ra9VXG8o2Hc=)
2: mi-PdoixQ3I_3wWH1iuFXc_7uM0.roa (hash: 3baxx8ZqUep3q30dtKKaBrzl+eIHjNNA1Tcak9rfOIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 00:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:48:44:74:a5:50:3b:74:4d:0b:61:b4:6f:7e:34:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3f9306bc615c320ae41a4e72663ebba98ef357c
Validity
Not Before: Aug 10 00:01:29 2025 GMT
Not After : Aug 11 00:01:29 2025 GMT
Subject: CN=86bd0ce2120da85be24a1d81b1b763038f54b39e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9e:67:39:c5:f0:be:1a:0a:e8:be:41:54:fa:
20:18:81:cb:24:53:62:2b:58:15:39:1f:6f:52:38:
78:b4:99:a3:c8:ad:fc:b4:bd:c7:af:ef:c2:01:da:
a6:0e:8b:13:6f:f7:37:83:f3:93:30:3d:38:9d:62:
fe:f2:b5:25:a2:e7:bf:d8:9a:b4:e4:61:3a:97:ca:
d0:6e:f7:04:67:f5:de:8d:07:4a:fe:66:c8:db:dc:
e3:ef:5d:1a:f4:b7:5b:03:d6:f0:37:da:5e:e1:41:
76:f5:51:14:f2:52:9d:a3:91:a4:d0:90:0c:ba:cf:
6a:d0:82:f4:44:4a:9f:aa:86:9f:dc:cb:ab:91:23:
00:16:1d:65:f0:76:ce:3d:94:6a:27:73:1e:f5:54:
e6:17:5b:bd:3e:cf:b1:c1:ef:75:a8:96:1a:78:0b:
75:0c:f0:78:2d:7e:8b:3d:8d:c5:40:29:03:5f:d9:
b8:34:ef:d0:27:29:05:29:aa:1a:e0:7b:1e:2b:d1:
01:62:6f:2f:0c:b3:df:6b:a2:89:90:ab:93:fe:41:
b2:1b:09:dc:d8:92:34:d7:af:e3:55:c8:39:49:2c:
27:9a:4f:67:22:9b:4d:b2:90:7b:b6:c1:3c:6f:9b:
11:7e:80:cb:fb:4b:dc:1d:63:2c:03:46:30:a5:33:
f8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:BD:0C:E2:12:0D:A8:5B:E2:4A:1D:81:B1:B7:63:03:8F:54:B3:9E
X509v3 Authority Key Identifier:
keyid:E3:F9:30:6B:C6:15:C3:20:AE:41:A4:E7:26:63:EB:BA:98:EF:35:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:3c:73:bf:38:a9:4e:9f:e6:d1:46:9d:2f:06:11:9a:6b:1e:
b9:a7:02:4e:66:d3:16:4f:f6:6c:5e:38:0b:41:0a:72:61:0f:
b3:ab:19:7a:b8:16:32:0a:ad:c0:f6:cd:a0:10:2a:e2:a7:6c:
59:dd:a3:15:ef:38:ce:86:a3:a1:f0:fa:f4:a0:84:0a:00:ea:
40:e5:4b:c6:72:da:c6:ba:ad:44:b5:9b:33:62:56:d2:b4:7d:
cf:c4:61:ac:e0:62:ff:ab:cb:62:6e:0d:2d:5a:26:c0:28:e2:
18:4d:e1:d3:c1:1f:78:19:99:02:b7:f4:e0:00:84:4d:c3:9d:
69:2f:9c:3e:ed:33:63:d6:78:bc:e0:c8:90:f7:05:bd:d6:c1:
6d:97:87:21:1c:e0:4b:2c:49:55:6f:85:cd:9a:12:3e:7d:ec:
72:a8:39:94:a4:ec:6a:7b:d3:f8:44:29:66:42:13:33:96:79:
eb:60:b1:08:d5:30:7a:ff:64:31:5c:66:17:7f:5d:93:fd:e7:
94:6f:7b:8a:d6:6f:ed:89:27:8e:0f:96:e5:9d:03:4e:09:94:
f6:ce:0f:17:cc:3b:b9:bc:52:86:db:80:4f:15:0c:48:4c:2a:
5b:4f:ee:c1:74:5d:ea:3a:0c:06:2c:d2:83:0c:7d:df:bc:86:
f1:1e:1b:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiRSER0pVA7dE0LYbRvfjT6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZjkzMDZiYzYxNWMzMjBhZTQxYTRlNzI2NjNlYmJhOThl
ZjM1N2MwHhcNMjUwODEwMDAwMTI5WhcNMjUwODExMDAwMTI5WjAzMTEwLwYDVQQD
Eyg4NmJkMGNlMjEyMGRhODViZTI0YTFkODFiMWI3NjMwMzhmNTRiMzllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtp5nOcXwvhoK6L5BVPogGIHLJFNi
K1gVOR9vUjh4tJmjyK38tL3Hr+/CAdqmDosTb/c3g/OTMD04nWL+8rUloue/2Jq0
5GE6l8rQbvcEZ/XejQdK/mbI29zj710a9LdbA9bwN9pe4UF29VEU8lKdo5Gk0JAM
us9q0IL0REqfqoaf3MurkSMAFh1l8HbOPZRqJ3Me9VTmF1u9Ps+xwe91qJYaeAt1
DPB4LX6LPY3FQCkDX9m4NO/QJykFKaoa4HseK9EBYm8vDLPfa6KJkKuT/kGyGwnc
2JI016/jVcg5SSwnmk9nIptNspB7tsE8b5sRfoDL+0vcHWMsA0YwpTP4MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIa9DOISDahb4kodgbG3YwOPVLOeMB8GA1UdIwQY
MBaAFOP5MGvGFcMgrkGk5yZj67qY7zV8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNF9rd2E4WVZ3eUN1UWFUbkptUHJ1cGp2Tlh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC82YzQ4ZjEtMjAzNy00MGEwLWIyZTEt
M2NkMzNmZjMyNzQzLzEvNF9rd2E4WVZ3eUN1UWFUbkptUHJ1cGp2Tlh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC82YzQ4ZjEtMjAzNy00MGEwLWIyZTEtM2NkMzNmZjMyNzQz
LzEvNF9rd2E4WVZ3eUN1UWFUbkptUHJ1cGp2Tlh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFzxzvzip
Tp/m0UadLwYRmmseuacCTmbTFk/2bF44C0EKcmEPs6sZergWMgqtwPbNoBAq4qds
Wd2jFe84zoajofD69KCECgDqQOVLxnLaxrqtRLWbM2JW0rR9z8RhrOBi/6vLYm4N
LVomwCjiGE3h08EfeBmZArf04ACETcOdaS+cPu0zY9Z4vODIkPcFvdbBbZeHIRzg
SyxJVW+FzZoSPn3scqg5lKTsanvT+EQpZkITM5Z562CxCNUwev9kMVxmF39dk/3n
lG97itZv7Yknjg+W5Z0DTgmU9s4PF8w7ubxShtuATxUMSEwqW0/uwXRd6joMBizS
gwx937yG8R4bLQ==
-----END CERTIFICATE-----
Generated at Sun Aug 10 10:45:43 2025 by rpki-client