
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft
File: 4z5OBZxk_xm-EKehUEV1YeRV0U8.mft (raw, json)
Hash identifier: GyyN/G8dVCsb4wzA+uz3oI4YzFhrcp/jrKrj3M1ELeA=
Subject key identifier: 43:F5:C7:3A:F3:37:AD:82:35:38:E8:C0:01:A8:C7:61:D2:A0:8E:DD
Authority key identifier: E3:3E:4E:05:9C:64:FF:19:BE:10:A7:A1:50:45:75:61:E4:55:D1:4F
Certificate issuer: /CN=e33e4e059c64ff19be10a7a150457561e455d14f
Certificate serial: 0198A04D3717F122103205BA7D5A7034F037
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4z5OBZxk_xm-EKehUEV1YeRV0U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft
Manifest number: 0736
Signing time: Tue 12 Aug 2025 22:01:11 +0000
Manifest this update: Tue 12 Aug 2025 22:01:11 +0000
Manifest next update: Wed 13 Aug 2025 22:01:11 +0000
Files and hashes: 1: 4Vx5uY-wUi0YX0Kfqz3unLfjiuA.roa (hash: CqAh2hOC6+tjEARJLtXVTVdqWTjo1Zk7c/vuGkdSa5s=)
2: 4z5OBZxk_xm-EKehUEV1YeRV0U8.crl (hash: EG4m8ljpTuNOJjUKj3JzG5cu5C0pugJ5EEJ+7+3jsWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4z5OBZxk_xm-EKehUEV1YeRV0U8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4d:37:17:f1:22:10:32:05:ba:7d:5a:70:34:f0:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e33e4e059c64ff19be10a7a150457561e455d14f
Validity
Not Before: Aug 12 22:01:11 2025 GMT
Not After : Aug 13 22:01:11 2025 GMT
Subject: CN=43f5c73af337ad823538e8c001a8c761d2a08edd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:41:3f:b3:85:43:a4:bf:95:a8:d7:6a:19:0a:
bf:8b:ad:6e:b0:d8:9e:07:d0:ec:d7:bc:53:4f:08:
bb:15:11:61:e8:10:f0:10:78:4f:f2:7b:79:74:b4:
9f:83:9c:f1:00:5b:bf:e0:c0:2d:12:f3:d5:b7:fd:
1d:5a:f2:34:48:dc:c3:ea:c9:a7:2a:04:e9:3a:a5:
46:10:70:3f:85:f3:5e:7b:d3:4a:c8:46:62:01:11:
30:95:bb:45:e6:84:69:97:b6:dd:49:00:39:2c:de:
8f:71:3f:57:df:8b:58:69:84:f3:c8:49:16:ce:e9:
8c:79:57:68:db:4b:53:41:16:11:25:89:94:22:7e:
2b:cd:22:2a:5d:2e:8e:06:8d:da:48:56:35:19:80:
df:8d:3c:bb:dd:ae:3d:f2:7b:e2:d7:7d:9d:a3:a3:
52:ac:77:ac:2f:b8:3e:b1:18:49:0b:3e:85:fe:a9:
89:30:ae:fb:2f:6d:b2:74:98:53:25:31:50:88:f9:
ec:e6:5a:f6:fb:f1:94:e9:87:8c:68:61:82:db:8d:
2d:16:bd:0a:85:cc:6b:60:29:93:c7:a5:50:50:9b:
a4:a1:ae:ed:1f:d5:30:3e:a7:fb:e1:2a:d5:69:af:
b9:62:75:87:e7:32:f9:71:48:00:3b:56:1c:2c:fc:
bb:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F5:C7:3A:F3:37:AD:82:35:38:E8:C0:01:A8:C7:61:D2:A0:8E:DD
X509v3 Authority Key Identifier:
keyid:E3:3E:4E:05:9C:64:FF:19:BE:10:A7:A1:50:45:75:61:E4:55:D1:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4z5OBZxk_xm-EKehUEV1YeRV0U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:dc:ce:a2:39:2c:22:21:d8:0f:5e:23:76:54:47:fb:f7:d7:
50:63:2d:b1:f8:b5:bf:34:52:d3:d1:d6:86:95:b1:4c:8c:ea:
fe:95:6b:1b:84:ef:a6:22:39:da:e3:bd:c5:07:2d:35:c8:b5:
54:b1:35:87:9e:3e:3e:d1:b4:1e:ea:be:95:4f:cf:ed:1d:5a:
05:b1:62:65:2b:3e:de:4d:6f:f0:ea:92:70:fd:fc:77:38:85:
20:3f:29:99:c8:31:db:dc:24:61:96:06:ee:24:1c:7d:c3:2d:
e2:bb:b6:f6:d2:c2:de:3a:53:3a:ff:41:29:3a:21:d9:f9:d0:
45:2a:c7:ac:8f:41:21:6e:2e:82:3d:9f:3f:ae:15:10:92:58:
ac:89:23:02:7f:db:94:1a:3f:36:73:e3:ee:0e:2c:2f:91:bf:
31:cb:48:5f:e3:b5:3d:a3:7c:07:66:58:98:e5:04:43:19:76:
1d:d5:bd:ee:61:72:7d:6f:1f:54:c8:27:35:92:11:bd:7e:e1:
77:9f:f0:69:5a:39:e5:65:42:05:6a:c0:29:ad:b0:fb:6f:8f:
f3:b3:7b:10:70:86:eb:64:7c:28:78:d6:ea:e2:38:d5:df:50:
e8:25:3b:d8:23:77:ff:46:91:3a:bd:34:bc:4e:a3:ef:5c:14:
a8:23:91:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZigTTcX8SIQMgW6fVpwNPA3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzM2U0ZTA1OWM2NGZmMTliZTEwYTdhMTUwNDU3NTYxZTQ1
NWQxNGYwHhcNMjUwODEyMjIwMTExWhcNMjUwODEzMjIwMTExWjAzMTEwLwYDVQQD
Eyg0M2Y1YzczYWYzMzdhZDgyMzUzOGU4YzAwMWE4Yzc2MWQyYTA4ZWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUE/s4VDpL+VqNdqGQq/i61usNie
B9Ds17xTTwi7FRFh6BDwEHhP8nt5dLSfg5zxAFu/4MAtEvPVt/0dWvI0SNzD6smn
KgTpOqVGEHA/hfNee9NKyEZiAREwlbtF5oRpl7bdSQA5LN6PcT9X34tYaYTzyEkW
zumMeVdo20tTQRYRJYmUIn4rzSIqXS6OBo3aSFY1GYDfjTy73a498nvi132do6NS
rHesL7g+sRhJCz6F/qmJMK77L22ydJhTJTFQiPns5lr2+/GU6YeMaGGC240tFr0K
hcxrYCmTx6VQUJukoa7tH9UwPqf74SrVaa+5YnWH5zL5cUgAO1YcLPy7gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEP1xzrzN62CNTjowAGox2HSoI7dMB8GA1UdIwQY
MBaAFOM+TgWcZP8ZvhCnoVBFdWHkVdFPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHo1T0JaeGtfeG0tRUtlaFVFVjFZZVJWMFU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8zYmJlMDEtMGExNC00MWJmLTk3ZGEt
MmIyYThiYTYxMmZkLzEvNHo1T0JaeGtfeG0tRUtlaFVFVjFZZVJWMFU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni8zYmJlMDEtMGExNC00MWJmLTk3ZGEtMmIyYThiYTYxMmZk
LzEvNHo1T0JaeGtfeG0tRUtlaFVFVjFZZVJWMFU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZtzOojks
IiHYD14jdlRH+/fXUGMtsfi1vzRS09HWhpWxTIzq/pVrG4TvpiI52uO9xQctNci1
VLE1h54+PtG0Huq+lU/P7R1aBbFiZSs+3k1v8OqScP38dziFID8pmcgx29wkYZYG
7iQcfcMt4ru29tLC3jpTOv9BKToh2fnQRSrHrI9BIW4ugj2fP64VEJJYrIkjAn/b
lBo/NnPj7g4sL5G/MctIX+O1PaN8B2ZYmOUEQxl2HdW97mFyfW8fVMgnNZIRvX7h
d5/waVo55WVCBWrAKa2w+2+P87N7EHCG62R8KHjW6uI41d9Q6CU72CN3/0aROr00
vE6j71wUqCORqQ==
-----END CERTIFICATE-----
Generated at Wed Aug 13 02:11:15 2025 by rpki-client