Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft
File: 4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft (raw, json)
Hash identifier: t6Tp82ec9kiy8ce2Pzj6y3YTN3upouxxXz8J5Rk9JsM=
Subject key identifier: 44:99:4C:24:F8:E6:4D:C3:74:C8:40:44:02:C6:75:B8:3D:A1:F6:E0
Authority key identifier: E2:60:B0:A5:5A:87:A6:6E:90:A7:46:3A:01:DA:64:14:FC:03:4D:3D
Certificate issuer: /CN=e260b0a55a87a66e90a7463a01da6414fc034d3d
Certificate serial: 0198D65F3AF930B1C716B3AEA39DFFAF8D6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft
Manifest number: 034D
Signing time: Sat 23 Aug 2025 10:00:21 +0000
Manifest this update: Sat 23 Aug 2025 10:00:21 +0000
Manifest next update: Sun 24 Aug 2025 10:00:21 +0000
Files and hashes: 1: 4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.crl (hash: rXiawrh/VtjEmuTAO+CXU1Xy3A5xekKPlxsbFWHys9M=)
2: H7jD667ua1MTRSgNeUALgotBmYc.roa (hash: DYMDYLZ2zWAIEYH23OdxIBtMbFHxghghtjADwNcrKf0=)
3: b9-JZ3RdF7ZemK1dm7cPMRh2l58.roa (hash: oUjihEIhXb/rvj31i27jlX3Sh4tmRUO23s5LKuEs2r0=)
4: lchTEZvN-6afhfJLiZL0vloeA9I.roa (hash: ralvdBvuAobYP/kvHgUFvqB6/N94B6BhMEuSMEPEay0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:3a:f9:30:b1:c7:16:b3:ae:a3:9d:ff:af:8d:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e260b0a55a87a66e90a7463a01da6414fc034d3d
Validity
Not Before: Aug 23 10:00:21 2025 GMT
Not After : Aug 24 10:00:21 2025 GMT
Subject: CN=44994c24f8e64dc374c8404402c675b83da1f6e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:27:b7:3f:65:ef:60:ff:99:fe:46:07:d0:fc:
23:9f:7a:b3:1a:2a:90:e1:ac:8e:88:e0:52:4d:9f:
18:bb:0b:78:3c:6c:0c:71:5f:97:1e:56:0b:54:30:
35:b7:d1:9a:1b:bd:44:69:88:59:64:0f:a2:43:93:
9b:61:33:09:b0:ad:cd:f5:55:56:13:ac:22:c0:ce:
a8:3e:72:50:29:f8:ed:2b:f1:73:82:52:a0:16:38:
72:98:7a:52:a9:c1:7c:42:8c:1f:f7:dc:67:d8:3e:
21:a1:72:14:80:41:a0:9a:41:72:78:5f:1b:69:cd:
d1:1c:19:f2:10:93:48:0f:8b:b4:e5:51:28:a7:49:
7a:a8:2d:0f:a4:80:ad:b6:f8:ea:26:c6:ef:b0:a5:
72:ef:72:06:e5:9d:ee:28:54:b4:eb:17:83:35:47:
8d:48:d9:21:83:6c:dc:9b:96:e3:1a:45:11:e2:76:
0b:7d:b0:fb:42:e7:32:9a:ad:94:12:e0:8e:77:37:
ee:fe:f6:30:72:37:24:d8:5d:66:4b:54:2f:df:cd:
c1:e0:6e:72:cb:80:c7:af:57:df:64:0d:fc:a4:5c:
01:46:d1:f3:83:7d:5b:a1:63:b0:0a:fb:f4:b5:2c:
b8:83:27:9d:c7:f1:dd:5b:33:22:09:6c:f5:8e:3d:
f5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:99:4C:24:F8:E6:4D:C3:74:C8:40:44:02:C6:75:B8:3D:A1:F6:E0
X509v3 Authority Key Identifier:
keyid:E2:60:B0:A5:5A:87:A6:6E:90:A7:46:3A:01:DA:64:14:FC:03:4D:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:be:6c:8d:65:da:18:ad:4d:44:28:ac:92:66:40:86:ef:49:
41:4d:7a:8a:7f:86:0a:c8:da:20:bb:d5:e8:80:43:92:36:44:
cb:14:b0:78:8e:c4:2b:48:5d:d7:0a:48:13:71:6b:9a:6d:a2:
0c:52:97:08:6c:6f:36:fd:6b:34:d2:a1:2e:80:fd:63:55:6d:
25:d0:b4:fd:3f:95:51:07:73:31:ad:4f:4d:ee:ec:35:29:be:
e9:a0:6a:e6:ef:6c:94:80:c6:a3:50:74:6d:1b:43:ee:06:89:
2e:b4:11:30:8b:e0:ba:a0:b4:8d:ff:c2:77:11:a3:ae:ec:4b:
c6:8b:20:5e:48:e8:d1:e2:64:8b:5a:5b:15:f0:39:8f:8e:f4:
69:3a:c9:c3:8d:5a:4d:d9:b4:70:f6:d7:11:d6:76:7f:7b:53:
87:83:ec:d4:da:3f:35:8b:00:e0:b2:ce:80:fe:75:c4:1a:29:
dd:9f:fb:79:d6:15:10:c9:9e:cc:81:73:38:60:13:b3:5d:d2:
08:bc:12:48:5f:47:38:1b:8f:f6:73:c9:56:51:b4:87:91:e9:
1e:cd:e3:21:50:7f:84:13:9b:e0:3e:65:34:58:1a:ca:1b:ee:
40:67:91:c0:d2:62:69:26:72:d6:8d:66:65:eb:65:9e:82:76:
4c:6c:8d:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWXzr5MLHHFrOuo53/r41rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyNjBiMGE1NWE4N2E2NmU5MGE3NDYzYTAxZGE2NDE0ZmMw
MzRkM2QwHhcNMjUwODIzMTAwMDIxWhcNMjUwODI0MTAwMDIxWjAzMTEwLwYDVQQD
Eyg0NDk5NGMyNGY4ZTY0ZGMzNzRjODQwNDQwMmM2NzViODNkYTFmNmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtie3P2XvYP+Z/kYH0Pwjn3qzGiqQ
4ayOiOBSTZ8Yuwt4PGwMcV+XHlYLVDA1t9GaG71EaYhZZA+iQ5ObYTMJsK3N9VVW
E6wiwM6oPnJQKfjtK/FzglKgFjhymHpSqcF8Qowf99xn2D4hoXIUgEGgmkFyeF8b
ac3RHBnyEJNID4u05VEop0l6qC0PpICttvjqJsbvsKVy73IG5Z3uKFS06xeDNUeN
SNkhg2zcm5bjGkUR4nYLfbD7Qucymq2UEuCOdzfu/vYwcjck2F1mS1Qv383B4G5y
y4DHr1ffZA38pFwBRtHzg31boWOwCvv0tSy4gyedx/HdWzMiCWz1jj31MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFESZTCT45k3DdMhARALGdbg9ofbgMB8GA1UdIwQY
MBaAFOJgsKVah6ZukKdGOgHaZBT8A009MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNG1Dd3BWcUhwbTZRcDBZNkFkcGtGUHdEVFQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8xYmNiMTEtMzQxZC00YWRlLTk2YjEt
ZDIyNjlmNDBmM2QzLzEvNG1Dd3BWcUhwbTZRcDBZNkFkcGtGUHdEVFQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8xYmNiMTEtMzQxZC00YWRlLTk2YjEtZDIyNjlmNDBmM2Qz
LzEvNG1Dd3BWcUhwbTZRcDBZNkFkcGtGUHdEVFQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALr5sjWXa
GK1NRCiskmZAhu9JQU16in+GCsjaILvV6IBDkjZEyxSweI7EK0hd1wpIE3Frmm2i
DFKXCGxvNv1rNNKhLoD9Y1VtJdC0/T+VUQdzMa1PTe7sNSm+6aBq5u9slIDGo1B0
bRtD7gaJLrQRMIvguqC0jf/CdxGjruxLxosgXkjo0eJki1pbFfA5j470aTrJw41a
Tdm0cPbXEdZ2f3tTh4Ps1No/NYsA4LLOgP51xBop3Z/7edYVEMmezIFzOGATs13S
CLwSSF9HOBuP9nPJVlG0h5HpHs3jIVB/hBOb4D5lNFgayhvuQGeRwNJiaSZy1o1m
ZetlnoJ2TGyNyw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:48:09 2025 by rpki-client