Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
File: 4_cHBvbAz72cc6fz2DAjJApC9Q0.mft (raw, json)
Hash identifier: /oM8hzo2o2prQgXx5r9Z3NrWx1uf3txp627V3jxlGjg=
Subject key identifier: BA:D1:63:74:7B:E6:E2:72:A3:72:5C:6E:7B:BE:BF:59:47:29:11:24
Authority key identifier: E3:F7:07:06:F6:C0:CF:BD:9C:73:A7:F3:D8:30:23:24:0A:42:F5:0D
Certificate issuer: /CN=e3f70706f6c0cfbd9c73a7f3d83023240a42f50d
Certificate serial: 01987450573AAE2A01C5D94ADF3178B1DE62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
Manifest number: 0D25
Signing time: Mon 04 Aug 2025 09:01:18 +0000
Manifest this update: Mon 04 Aug 2025 09:01:18 +0000
Manifest next update: Tue 05 Aug 2025 09:01:18 +0000
Files and hashes: 1: 4_cHBvbAz72cc6fz2DAjJApC9Q0.crl (hash: +dd48xhfiWwKtnMT+VjnbXY+PKafOtA0n/lePI+jJZE=)
2: JZBToS-O_vrT2aeKBSNggNB5se0.roa (hash: D8kzrex63NBxCoEgyWN4HyqVj2eRzOdT3Da1FU0u+nI=)
3: cKLdHjbMHa9DWXygLYK3fJRjYqw.roa (hash: aXunewdhx0tio/kXThZoUaubUGfQctWD4RTkIiazOVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:57:3a:ae:2a:01:c5:d9:4a:df:31:78:b1:de:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3f70706f6c0cfbd9c73a7f3d83023240a42f50d
Validity
Not Before: Aug 4 09:01:18 2025 GMT
Not After : Aug 5 09:01:18 2025 GMT
Subject: CN=bad163747be6e272a3725c6e7bbebf5947291124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b1:a6:d0:34:dc:46:9e:56:df:f1:0a:70:70:
e4:d6:16:93:c5:48:7b:7f:90:5e:de:7d:81:57:ee:
b6:7e:5d:45:c8:47:b4:28:27:b6:98:58:49:83:66:
bf:4e:b0:fa:50:73:da:e5:fa:94:7e:ae:43:17:9a:
85:70:e4:c1:3e:07:c1:7f:79:48:3a:ed:8e:c8:04:
10:b0:d1:4a:e5:a6:ad:ee:5d:29:f4:f7:7d:df:27:
4c:98:92:26:3a:5d:5b:81:25:47:78:6a:dc:2e:a2:
af:96:10:a3:f9:53:ae:86:55:1a:c8:51:0d:e9:1f:
6e:64:e5:a1:50:9d:e0:4a:7f:20:ff:a4:ec:7d:e2:
27:54:2e:81:1b:5e:af:c1:cb:3f:f3:46:26:af:b3:
5e:49:0a:e5:bf:0c:af:d1:9e:9a:81:1c:04:92:ea:
78:6e:36:bd:eb:f0:b0:49:d5:7a:05:64:93:d0:04:
5f:1b:ea:76:0b:d1:f9:4e:74:3f:6c:8b:5a:bd:3c:
18:30:29:3c:f7:69:01:33:ad:77:87:84:d5:da:b4:
59:09:db:40:60:8f:f3:1d:2c:a6:3c:0c:28:b2:ec:
3f:5b:12:d1:bb:b4:0b:68:e3:58:e3:1a:5d:30:e7:
f2:8f:2a:d2:bc:3f:34:cf:aa:ce:f9:f3:53:9d:b1:
0c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D1:63:74:7B:E6:E2:72:A3:72:5C:6E:7B:BE:BF:59:47:29:11:24
X509v3 Authority Key Identifier:
keyid:E3:F7:07:06:F6:C0:CF:BD:9C:73:A7:F3:D8:30:23:24:0A:42:F5:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:b9:53:d4:60:d0:64:40:d9:3d:44:9c:33:0c:70:de:fe:73:
43:eb:e3:cd:fd:50:5a:89:ee:56:9b:6a:ab:a0:99:07:0f:0c:
a5:56:72:02:be:f6:e9:b5:5b:f7:c1:db:10:12:1d:e0:f9:0c:
57:84:a6:05:4b:21:11:cc:35:30:3e:4c:af:59:ba:e8:a2:de:
a4:89:47:ef:45:e7:01:00:da:13:22:6d:6b:43:44:e5:c6:92:
a2:11:54:be:2d:35:6b:d9:e9:b2:27:5d:32:34:95:ae:6a:2e:
b4:11:8b:6b:3b:d0:0c:1d:a6:e8:1f:e1:de:49:58:43:d5:03:
9a:4a:0d:6c:9e:3b:3e:45:2c:66:0f:25:86:63:1a:79:11:c8:
ca:d9:9d:ff:31:e2:b8:0d:e9:9f:33:14:be:2e:c2:dc:63:fb:
57:1e:67:1c:8a:3b:6f:cd:aa:08:b7:f0:80:29:86:87:ac:84:
ec:5b:b9:f1:5a:43:0b:18:32:20:e9:7e:1e:98:ef:54:b2:61:
80:2b:42:31:62:62:b8:3c:50:5e:4a:65:80:56:d8:36:16:34:
6b:c6:43:08:cc:e7:be:f3:be:5e:46:4b:52:a8:27:d7:d6:4f:
3c:e1:56:66:5c:1d:9c:c4:ee:14:aa:9c:07:37:e1:bc:0e:99:
3d:ca:36:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0UFc6rioBxdlK3zF4sd5iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZjcwNzA2ZjZjMGNmYmQ5YzczYTdmM2Q4MzAyMzI0MGE0
MmY1MGQwHhcNMjUwODA0MDkwMTE4WhcNMjUwODA1MDkwMTE4WjAzMTEwLwYDVQQD
EyhiYWQxNjM3NDdiZTZlMjcyYTM3MjVjNmU3YmJlYmY1OTQ3MjkxMTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbGm0DTcRp5W3/EKcHDk1haTxUh7
f5Be3n2BV+62fl1FyEe0KCe2mFhJg2a/TrD6UHPa5fqUfq5DF5qFcOTBPgfBf3lI
Ou2OyAQQsNFK5aat7l0p9Pd93ydMmJImOl1bgSVHeGrcLqKvlhCj+VOuhlUayFEN
6R9uZOWhUJ3gSn8g/6TsfeInVC6BG16vwcs/80Ymr7NeSQrlvwyv0Z6agRwEkup4
bja96/CwSdV6BWST0ARfG+p2C9H5TnQ/bItavTwYMCk892kBM613h4TV2rRZCdtA
YI/zHSymPAwosuw/WxLRu7QLaONY4xpdMOfyjyrSvD80z6rO+fNTnbEMwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLrRY3R75uJyo3Jcbnu+v1lHKREkMB8GA1UdIwQY
MBaAFOP3Bwb2wM+9nHOn89gwIyQKQvUNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNF9jSEJ2YkF6NzJjYzZmejJEQWpKQXBDOVEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8yODZkNDctNjQzNC00MWJkLTlhYTIt
MDlmZjc5MzA4YmJlLzEvNF9jSEJ2YkF6NzJjYzZmejJEQWpKQXBDOVEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC8yODZkNDctNjQzNC00MWJkLTlhYTItMDlmZjc5MzA4YmJl
LzEvNF9jSEJ2YkF6NzJjYzZmejJEQWpKQXBDOVEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOblT1GDQ
ZEDZPUScMwxw3v5zQ+vjzf1QWonuVptqq6CZBw8MpVZyAr726bVb98HbEBId4PkM
V4SmBUshEcw1MD5Mr1m66KLepIlH70XnAQDaEyJta0NE5caSohFUvi01a9npsidd
MjSVrmoutBGLazvQDB2m6B/h3klYQ9UDmkoNbJ47PkUsZg8lhmMaeRHIytmd/zHi
uA3pnzMUvi7C3GP7Vx5nHIo7b82qCLfwgCmGh6yE7Fu58VpDCxgyIOl+HpjvVLJh
gCtCMWJiuDxQXkplgFbYNhY0a8ZDCMznvvO+XkZLUqgn19ZPPOFWZlwdnMTuFKqc
BzfhvA6ZPco2gQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:13:02 2025 by rpki-client