Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.mft
File: C_4rJzg320FmbWipe8esN9zJbyA.mft (raw, json)
Hash identifier: Cj0d+40WECSyXORTAOAyx8p+OuRZfgLIGQQiFIGeuoQ=
Subject key identifier: 93:2F:B8:DD:FE:82:7D:0B:38:50:1A:85:CF:F7:A7:8A:9C:20:2B:96
Authority key identifier: 0B:FE:2B:27:38:37:DB:41:66:6D:68:A9:7B:C7:AC:37:DC:C9:6F:20
Certificate issuer: /CN=0bfe2b273837db41666d68a97bc7ac37dcc96f20
Certificate serial: 01988FC72A3E05C485934559FFACB140E5FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_4rJzg320FmbWipe8esN9zJbyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.mft
Manifest number: 03F3
Signing time: Sat 09 Aug 2025 17:00:50 +0000
Manifest this update: Sat 09 Aug 2025 17:00:50 +0000
Manifest next update: Sun 10 Aug 2025 17:00:50 +0000
Files and hashes: 1: C_4rJzg320FmbWipe8esN9zJbyA.crl (hash: RV2+6C6hRUiArSRzhWd3m9h6zr76aZxBDXt6PU/3cMc=)
2: GN1cEGtzhGUtNVwPMehD-Lj4N1Q.roa (hash: C8P5r4sDxFHAMG8SatPLslHel1irs4/AKLXy4El1DWk=)
3: lBowDCcGSdkP56eGU0lPL4u_SEM.roa (hash: j0fleVV6sjY4GNZzRXgYAIbJa3v2es0FQGzI6ZY2suc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_4rJzg320FmbWipe8esN9zJbyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 17:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:c7:2a:3e:05:c4:85:93:45:59:ff:ac:b1:40:e5:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bfe2b273837db41666d68a97bc7ac37dcc96f20
Validity
Not Before: Aug 9 17:00:50 2025 GMT
Not After : Aug 10 17:00:50 2025 GMT
Subject: CN=932fb8ddfe827d0b38501a85cff7a78a9c202b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:95:e9:35:6c:ea:5e:9a:98:21:ec:a1:a0:72:
0c:ed:9d:0d:13:74:34:0c:78:8c:7e:9c:f4:fe:23:
b8:d2:d7:f8:06:3b:6b:f1:38:b0:6b:d2:92:72:1a:
f3:82:30:19:5f:ce:9f:fe:0f:2e:25:5b:dc:ec:ef:
c6:d0:37:3d:ce:9b:66:24:ee:7c:4d:f4:da:13:a9:
f7:61:c6:5f:c8:5c:59:d1:c3:4e:22:0b:71:df:c7:
6a:fa:58:58:87:6c:40:97:8c:60:1f:33:73:68:3f:
86:9a:81:d6:60:b2:b0:04:74:96:e3:8c:ed:c6:03:
ee:1e:d1:d7:50:33:d0:87:54:dc:4a:bb:eb:a2:05:
fc:26:f1:c9:ad:ef:d9:0b:e7:4e:71:33:21:1d:07:
77:09:e6:6d:d3:48:5c:76:6f:22:90:1b:5e:ad:09:
a5:0c:93:29:41:c0:37:38:a3:2b:ed:98:de:35:11:
79:89:8a:1a:b7:00:24:01:ae:88:d8:6f:e0:5c:8d:
fa:74:83:00:ad:5a:c4:46:f9:be:80:3d:ae:44:06:
0c:83:f6:1a:50:0c:eb:c7:b9:bf:d4:bf:e8:98:64:
69:e6:ed:e5:e1:b4:29:ac:1e:44:17:e0:17:77:fc:
bd:5f:ae:b7:84:e1:0d:ef:20:1c:39:0d:f2:a9:21:
78:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:2F:B8:DD:FE:82:7D:0B:38:50:1A:85:CF:F7:A7:8A:9C:20:2B:96
X509v3 Authority Key Identifier:
keyid:0B:FE:2B:27:38:37:DB:41:66:6D:68:A9:7B:C7:AC:37:DC:C9:6F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_4rJzg320FmbWipe8esN9zJbyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:68:90:07:f0:d4:7a:55:58:0b:8b:d6:81:96:73:33:cf:03:
c1:be:b6:d2:72:b9:49:2f:30:3b:39:91:29:27:7b:d1:40:2a:
fc:e0:33:0a:65:00:6a:f9:ec:4f:c3:bb:59:e7:bc:92:18:8c:
24:b7:62:08:fa:fe:44:74:a6:46:83:d6:d8:85:64:44:23:1b:
78:0b:f8:ab:17:9c:85:86:7b:e8:ba:53:15:7b:8f:9c:90:92:
ae:9e:a4:a5:0b:61:59:32:62:c6:63:44:0b:59:16:24:22:7c:
2c:4f:04:c4:b3:e8:46:86:52:ab:57:85:95:42:e1:ec:03:bf:
c0:0b:b7:89:04:a1:24:ab:3a:67:76:b1:fd:fd:73:73:f7:fa:
fb:51:e8:ed:d4:77:b5:72:3b:d3:28:53:6c:2f:16:3f:cc:f5:
c6:4d:47:b2:ad:64:ec:17:25:67:9f:08:86:89:9c:89:01:e2:
29:0b:24:6d:0b:d5:60:32:71:01:b1:70:01:cc:39:0c:b2:0e:
8e:bd:11:c4:24:6e:d7:1d:41:86:1b:99:af:17:35:e6:fb:be:
ee:13:d7:27:ea:ee:cb:3b:79:32:a4:72:3f:ff:b7:43:ba:60:
68:4b:c0:04:cf:a8:8c:92:4f:d9:e3:15:71:85:f3:0e:08:37:
0d:50:10:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiPxyo+BcSFk0VZ/6yxQOX8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZmUyYjI3MzgzN2RiNDE2NjZkNjhhOTdiYzdhYzM3ZGNj
OTZmMjAwHhcNMjUwODA5MTcwMDUwWhcNMjUwODEwMTcwMDUwWjAzMTEwLwYDVQQD
Eyg5MzJmYjhkZGZlODI3ZDBiMzg1MDFhODVjZmY3YTc4YTljMjAyYjk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJXpNWzqXpqYIeyhoHIM7Z0NE3Q0
DHiMfpz0/iO40tf4Bjtr8Tiwa9KSchrzgjAZX86f/g8uJVvc7O/G0Dc9zptmJO58
TfTaE6n3YcZfyFxZ0cNOIgtx38dq+lhYh2xAl4xgHzNzaD+GmoHWYLKwBHSW44zt
xgPuHtHXUDPQh1TcSrvrogX8JvHJre/ZC+dOcTMhHQd3CeZt00hcdm8ikBterQml
DJMpQcA3OKMr7ZjeNRF5iYoatwAkAa6I2G/gXI36dIMArVrERvm+gD2uRAYMg/Ya
UAzrx7m/1L/omGRp5u3l4bQprB5EF+AXd/y9X663hOEN7yAcOQ3yqSF4MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJMvuN3+gn0LOFAahc/3p4qcICuWMB8GA1UdIwQY
MBaAFAv+Kyc4N9tBZm1oqXvHrDfcyW8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ180ckp6ZzMyMEZtYldpcGU4ZXNOOXpKYnlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9mZWI5MjctN2E4My00MDNhLWExYzEt
ZWIxZTkxNjQ0ZjJkLzEvQ180ckp6ZzMyMEZtYldpcGU4ZXNOOXpKYnlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9mZWI5MjctN2E4My00MDNhLWExYzEtZWIxZTkxNjQ0ZjJk
LzEvQ180ckp6ZzMyMEZtYldpcGU4ZXNOOXpKYnlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJGiQB/DU
elVYC4vWgZZzM88Dwb620nK5SS8wOzmRKSd70UAq/OAzCmUAavnsT8O7Wee8khiM
JLdiCPr+RHSmRoPW2IVkRCMbeAv4qxechYZ76LpTFXuPnJCSrp6kpQthWTJixmNE
C1kWJCJ8LE8ExLPoRoZSq1eFlULh7AO/wAu3iQShJKs6Z3ax/f1zc/f6+1Ho7dR3
tXI70yhTbC8WP8z1xk1Hsq1k7BclZ58IhomciQHiKQskbQvVYDJxAbFwAcw5DLIO
jr0RxCRu1x1BhhuZrxc15vu+7hPXJ+ruyzt5MqRyP/+3Q7pgaEvABM+ojJJP2eMV
cYXzDgg3DVAQZg==
-----END CERTIFICATE-----
Generated at Sun Aug 10 03:44:48 2025 by rpki-client