Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.mft
File: 4ygMY1Kgv7t50knIh17RhuzOioY.mft (raw, json)
Hash identifier: cAAk+VQdjRcmSKVsac4Oo46OzYK53cIawVhD92+5KGA=
Subject key identifier: 41:4F:13:CC:DF:20:18:16:BC:8D:49:FC:65:DC:A1:A4:7E:4D:DE:0E
Authority key identifier: E3:28:0C:63:52:A0:BF:BB:79:D2:49:C8:87:5E:D1:86:EC:CE:8A:86
Certificate issuer: /CN=e3280c6352a0bfbb79d249c8875ed186ecce8a86
Certificate serial: 019896008E25AC2BCDAB3883FCDAFE8DB6CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ygMY1Kgv7t50knIh17RhuzOioY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.mft
Manifest number: 162F
Signing time: Sun 10 Aug 2025 22:01:15 +0000
Manifest this update: Sun 10 Aug 2025 22:01:15 +0000
Manifest next update: Mon 11 Aug 2025 22:01:15 +0000
Files and hashes: 1: 4ygMY1Kgv7t50knIh17RhuzOioY.crl (hash: c2L2mDydhiu3rd4DQyOXzBq2qq8HEx46MIy4xl5RH2M=)
2: LKQwgiepoVu5_u8taIAcRutuJ-s.roa (hash: g/2UuKpKO1KSqMbVUrFxetjbdTbJKbXQ9uje0qgEhYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ygMY1Kgv7t50knIh17RhuzOioY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 22:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:00:8e:25:ac:2b:cd:ab:38:83:fc:da:fe:8d:b6:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3280c6352a0bfbb79d249c8875ed186ecce8a86
Validity
Not Before: Aug 10 22:01:15 2025 GMT
Not After : Aug 11 22:01:15 2025 GMT
Subject: CN=414f13ccdf201816bc8d49fc65dca1a47e4dde0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f2:33:43:02:94:65:1e:bb:9e:39:47:ed:0a:
0b:3a:3c:69:03:bc:70:6b:57:ed:3b:97:87:a2:42:
0f:ae:3e:06:1a:e4:a7:cc:c7:d6:cb:f8:6d:2f:ef:
f9:82:c7:a2:ad:0d:10:1b:44:cd:c5:fa:f4:4e:13:
fd:db:af:6e:b0:a8:86:88:53:79:b8:77:de:cd:d6:
05:74:da:97:d5:78:39:f4:f1:08:df:2e:b7:45:7b:
bd:a2:0d:76:e8:77:46:d6:cc:24:55:71:77:6c:6f:
3b:ba:c5:71:a0:9b:c3:01:07:3e:0e:e9:59:c7:68:
51:72:02:65:b8:e1:2f:f5:75:c0:8d:ea:7e:91:9e:
b6:46:48:7f:88:11:44:53:f6:c9:d0:71:e9:ff:70:
d5:f7:d9:0b:0b:e8:9d:93:b9:ac:1a:ed:a9:09:93:
2c:93:88:8a:37:02:aa:5d:1d:35:40:fc:f6:c3:32:
d8:00:8e:ce:e8:b4:41:70:f7:29:3e:8e:6f:21:0b:
62:b9:44:cd:0c:3d:b1:d4:db:6c:ba:ee:d4:57:9d:
a9:22:93:d3:71:49:50:ad:9c:d3:56:24:3c:a7:e5:
de:07:fd:c6:84:17:97:74:6e:66:6e:2c:67:31:8e:
08:da:74:b7:f8:8b:b0:86:dc:ea:41:a3:e4:1e:2e:
89:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:4F:13:CC:DF:20:18:16:BC:8D:49:FC:65:DC:A1:A4:7E:4D:DE:0E
X509v3 Authority Key Identifier:
keyid:E3:28:0C:63:52:A0:BF:BB:79:D2:49:C8:87:5E:D1:86:EC:CE:8A:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ygMY1Kgv7t50knIh17RhuzOioY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:fa:ef:fe:c0:e2:c2:2a:8c:7e:f3:6e:97:72:4d:bd:03:de:
2b:ad:03:5d:a0:24:eb:06:b7:11:ae:c2:b9:0b:ff:7d:86:d9:
0f:a5:e5:d8:2e:ac:77:0c:c8:72:56:f7:e5:f0:eb:a2:0d:87:
49:38:2d:8c:3a:a0:75:29:90:85:fc:77:86:66:71:6d:14:7f:
51:9f:eb:9e:23:77:62:b4:d0:66:ce:53:f0:81:9c:ab:6a:7f:
f6:bb:78:67:97:88:47:47:4d:53:b4:bb:de:ab:4d:2c:57:c0:
94:16:8b:d6:6d:d5:4b:89:81:da:30:4e:a3:55:4f:b0:d9:bc:
d4:67:41:a3:7e:4c:d4:92:9c:89:fc:59:58:30:d5:20:13:59:
2a:2d:64:ac:40:35:f7:57:4d:c2:79:16:4d:75:45:dd:7b:65:
ab:e9:7c:02:bd:4d:ac:54:e6:b4:2a:4c:b0:29:ef:f8:3c:cd:
fa:d5:77:34:9c:7e:45:21:f3:b3:78:ee:3b:3e:70:93:0a:42:
ad:00:46:a8:c7:d4:1c:41:32:44:f5:ac:88:89:58:11:f8:9e:
d0:84:35:a4:2a:98:0e:e6:5e:e8:4a:0a:50:21:0f:96:f3:59:
c7:58:d7:41:ed:a3:07:26:c1:b7:7c:22:19:49:db:4c:84:86:
47:88:76:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiWAI4lrCvNqziD/Nr+jbbOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMjgwYzYzNTJhMGJmYmI3OWQyNDljODg3NWVkMTg2ZWNj
ZThhODYwHhcNMjUwODEwMjIwMTE1WhcNMjUwODExMjIwMTE1WjAzMTEwLwYDVQQD
Eyg0MTRmMTNjY2RmMjAxODE2YmM4ZDQ5ZmM2NWRjYTFhNDdlNGRkZTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfIzQwKUZR67njlH7QoLOjxpA7xw
a1ftO5eHokIPrj4GGuSnzMfWy/htL+/5gseirQ0QG0TNxfr0ThP9269usKiGiFN5
uHfezdYFdNqX1Xg59PEI3y63RXu9og126HdG1swkVXF3bG87usVxoJvDAQc+DulZ
x2hRcgJluOEv9XXAjep+kZ62Rkh/iBFEU/bJ0HHp/3DV99kLC+idk7msGu2pCZMs
k4iKNwKqXR01QPz2wzLYAI7O6LRBcPcpPo5vIQtiuUTNDD2x1Ntsuu7UV52pIpPT
cUlQrZzTViQ8p+XeB/3GhBeXdG5mbixnMY4I2nS3+IuwhtzqQaPkHi6JPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEFPE8zfIBgWvI1J/GXcoaR+Td4OMB8GA1UdIwQY
MBaAFOMoDGNSoL+7edJJyIde0YbszoqGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHlnTVkxS2d2N3Q1MGtuSWgxN1JodXpPaW9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC81OWEwMzItYzM4NC00M2RmLThjOWQt
ZWYwYjgyMTg5NDQ0LzEvNHlnTVkxS2d2N3Q1MGtuSWgxN1JodXpPaW9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC81OWEwMzItYzM4NC00M2RmLThjOWQtZWYwYjgyMTg5NDQ0
LzEvNHlnTVkxS2d2N3Q1MGtuSWgxN1JodXpPaW9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf/rv/sDi
wiqMfvNul3JNvQPeK60DXaAk6wa3Ea7CuQv/fYbZD6Xl2C6sdwzIclb35fDrog2H
STgtjDqgdSmQhfx3hmZxbRR/UZ/rniN3YrTQZs5T8IGcq2p/9rt4Z5eIR0dNU7S7
3qtNLFfAlBaL1m3VS4mB2jBOo1VPsNm81GdBo35M1JKcifxZWDDVIBNZKi1krEA1
91dNwnkWTXVF3Xtlq+l8Ar1NrFTmtCpMsCnv+DzN+tV3NJx+RSHzs3juOz5wkwpC
rQBGqMfUHEEyRPWsiIlYEfie0IQ1pCqYDuZe6EoKUCEPlvNZx1jXQe2jBybBt3wi
GUnbTISGR4h25A==
-----END CERTIFICATE-----
Generated at Mon Aug 11 04:27:11 2025 by rpki-client