Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
File: 4upZNGSFjik5UjRc9Ol3ksiBEFc.mft (raw, json)
Hash identifier: Fy0Fm5SIrO32H9ichX/T7aEMa6vLBMGe9Iyt/dcD9mQ=
Subject key identifier: 80:C9:C5:6D:68:67:57:B7:DE:28:5A:44:03:82:02:21:E2:16:66:96
Authority key identifier: E2:EA:59:34:64:85:8E:29:39:52:34:5C:F4:E9:77:92:C8:81:10:57
Certificate issuer: /CN=e2ea593464858e293952345cf4e97792c8811057
Certificate serial: 0198D47305A3C1C9265BDB97ACCF35D04CE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
Manifest number: 15DC
Signing time: Sat 23 Aug 2025 01:02:44 +0000
Manifest this update: Sat 23 Aug 2025 01:02:44 +0000
Manifest next update: Sun 24 Aug 2025 01:02:44 +0000
Files and hashes: 1: 4upZNGSFjik5UjRc9Ol3ksiBEFc.crl (hash: S5lVu4UOTqgWNmnmk7+rdsjiidVAVqfg2cSSdJwaASU=)
2: n71MSGzOhUkplgZWWIqcoN_zTeY.roa (hash: M4lvFRLACkU+Ya2mbosmCvcTtHX7Mafia2WGDrBrlJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:05:a3:c1:c9:26:5b:db:97:ac:cf:35:d0:4c:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2ea593464858e293952345cf4e97792c8811057
Validity
Not Before: Aug 23 01:02:44 2025 GMT
Not After : Aug 24 01:02:44 2025 GMT
Subject: CN=80c9c56d686757b7de285a4403820221e2166696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:40:7e:82:4c:72:65:86:db:4d:90:63:f8:8c:
74:52:50:5a:fd:60:d2:d1:23:01:13:fa:e5:8d:6b:
24:37:bf:0f:77:01:76:26:5d:03:b6:6c:e2:d7:d5:
c1:71:c4:7d:49:8d:fe:69:96:ed:2f:02:e1:a2:a0:
a2:a9:1f:d1:df:10:9b:71:5b:6a:3c:2e:b7:8c:e1:
fb:ad:98:e2:4f:69:17:09:1a:a2:3c:e1:7f:f7:ff:
3f:7c:62:08:31:45:50:10:95:28:d9:1f:e1:eb:72:
eb:80:99:0b:43:26:d8:bf:b3:b1:33:98:79:c1:92:
b0:2b:6b:f9:6a:4f:45:cb:1d:5a:74:82:69:51:55:
b6:5f:be:bd:af:fa:54:68:91:fe:35:44:d5:cb:28:
a9:15:07:e4:53:a0:fc:de:c2:57:d7:83:96:56:70:
a4:a3:2c:c7:22:52:a8:6a:11:a7:b9:03:2b:17:c9:
c7:30:11:93:1b:5f:fb:14:68:43:5e:0f:8a:af:54:
66:79:be:07:43:48:cd:0e:12:7f:a8:3e:be:d0:b8:
16:17:39:01:93:27:2c:e6:24:08:f5:17:45:db:4d:
5a:ff:9d:5b:0c:a4:b5:17:76:be:44:22:36:f6:43:
61:72:ed:19:fa:4d:55:d2:42:c4:1b:d6:46:45:f4:
fd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C9:C5:6D:68:67:57:B7:DE:28:5A:44:03:82:02:21:E2:16:66:96
X509v3 Authority Key Identifier:
keyid:E2:EA:59:34:64:85:8E:29:39:52:34:5C:F4:E9:77:92:C8:81:10:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:29:c5:ce:73:ea:1e:8b:27:73:47:34:b2:20:61:e9:ea:d3:
c6:18:c5:0b:bb:f8:1a:32:3f:88:24:27:ba:c8:d0:8a:87:b1:
65:e4:1a:38:99:f1:fd:f9:2c:38:90:01:f1:10:89:a8:1d:0b:
b2:90:26:eb:02:4d:11:6b:20:5a:08:2c:b8:97:78:bc:89:0a:
59:fb:6c:33:28:4f:0b:34:6d:18:19:bc:4b:9e:9d:bd:d1:35:
c7:87:6a:a0:c2:33:1a:a7:79:0b:ec:a9:97:89:99:d9:dc:0d:
7e:64:21:6e:c6:8d:34:15:4b:f5:19:6e:e0:43:19:2d:5f:f6:
d9:ba:2c:00:cc:02:69:2c:49:f7:06:9c:ca:fd:fc:97:7a:56:
5f:37:98:e3:2c:19:e6:78:cf:03:ed:1b:53:19:b2:c2:ce:06:
c7:c5:11:e4:21:d3:13:18:37:f1:00:a6:04:8f:fe:a6:db:91:
01:d6:e7:c7:37:85:ee:c4:f4:81:4a:f2:86:ea:d7:e1:ad:1f:
01:cb:da:b0:4b:01:65:27:2c:9f:6f:d3:1f:36:a1:06:74:9f:
21:4c:54:79:67:c2:44:d6:02:46:5f:b1:b5:e0:89:7b:ca:0b:
9b:b1:57:88:ac:91:c0:49:77:6a:60:59:20:54:0e:9d:ed:ec:
2f:5a:9a:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUcwWjwckmW9uXrM810EzpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZWE1OTM0NjQ4NThlMjkzOTUyMzQ1Y2Y0ZTk3NzkyYzg4
MTEwNTcwHhcNMjUwODIzMDEwMjQ0WhcNMjUwODI0MDEwMjQ0WjAzMTEwLwYDVQQD
Eyg4MGM5YzU2ZDY4Njc1N2I3ZGUyODVhNDQwMzgyMDIyMWUyMTY2Njk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEB+gkxyZYbbTZBj+Ix0UlBa/WDS
0SMBE/rljWskN78PdwF2Jl0Dtmzi19XBccR9SY3+aZbtLwLhoqCiqR/R3xCbcVtq
PC63jOH7rZjiT2kXCRqiPOF/9/8/fGIIMUVQEJUo2R/h63LrgJkLQybYv7OxM5h5
wZKwK2v5ak9Fyx1adIJpUVW2X769r/pUaJH+NUTVyyipFQfkU6D83sJX14OWVnCk
oyzHIlKoahGnuQMrF8nHMBGTG1/7FGhDXg+Kr1Rmeb4HQ0jNDhJ/qD6+0LgWFzkB
kycs5iQI9RdF201a/51bDKS1F3a+RCI29kNhcu0Z+k1V0kLEG9ZGRfT9XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIDJxW1oZ1e33ihaRAOCAiHiFmaWMB8GA1UdIwQY
MBaAFOLqWTRkhY4pOVI0XPTpd5LIgRBXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHVwWk5HU0ZqaWs1VWpSYzlPbDNrc2lCRUZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9jMzkzMmYtZjQ3Ni00ZDVjLWJiNWEt
NjJlNGJhZWU0ZmM1LzEvNHVwWk5HU0ZqaWs1VWpSYzlPbDNrc2lCRUZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9jMzkzMmYtZjQ3Ni00ZDVjLWJiNWEtNjJlNGJhZWU0ZmM1
LzEvNHVwWk5HU0ZqaWs1VWpSYzlPbDNrc2lCRUZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMinFznPq
Hosnc0c0siBh6erTxhjFC7v4GjI/iCQnusjQioexZeQaOJnx/fksOJAB8RCJqB0L
spAm6wJNEWsgWggsuJd4vIkKWftsMyhPCzRtGBm8S56dvdE1x4dqoMIzGqd5C+yp
l4mZ2dwNfmQhbsaNNBVL9Rlu4EMZLV/22bosAMwCaSxJ9wacyv38l3pWXzeY4ywZ
5njPA+0bUxmyws4Gx8UR5CHTExg38QCmBI/+ptuRAdbnxzeF7sT0gUryhurX4a0f
AcvasEsBZScsn2/THzahBnSfIUxUeWfCRNYCRl+xteCJe8oLm7FXiKyRwEl3amBZ
IFQOne3sL1qa4w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:15:17 2025 by rpki-client