Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
File: 4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft (raw, json)
Hash identifier: 6m8ezgt/bkWosTDDAFS6Y881oCvyezGOdvtHl3Kim64=
Subject key identifier: F0:E8:E2:E2:11:05:19:0F:C1:EE:81:30:2E:FB:6C:8C:B4:76:DD:CB
Authority key identifier: E2:D1:7A:DA:64:39:28:8C:29:70:3C:F7:05:EF:64:AF:B3:82:0A:D9
Certificate issuer: /CN=e2d17ada6439288c29703cf705ef64afb3820ad9
Certificate serial: 0198D6618D1EF1A60AC3950AAC817A615C34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
Manifest number: 06B0
Signing time: Sat 23 Aug 2025 10:02:53 +0000
Manifest this update: Sat 23 Aug 2025 10:02:53 +0000
Manifest next update: Sun 24 Aug 2025 10:02:53 +0000
Files and hashes: 1: 4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl (hash: hN/NMlW+oSBIVYl9yk+Rjh4qhIFyCt2Wdrqk3UiPfCQ=)
2: 6yVMq5BTt8MOOejBYcSjDgADz6M.roa (hash: +lA9zA3W3Yg9Ww1/RHvP0oevwKXOFVEKE6vwlBI3GS8=)
3: r7S4PGOtYK_PBp7kgURvb3XFM1M.roa (hash: oYqwnDt8x2Fy139phL6QrAYp1Cw9URTCQ1HjbcPByVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:8d:1e:f1:a6:0a:c3:95:0a:ac:81:7a:61:5c:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d17ada6439288c29703cf705ef64afb3820ad9
Validity
Not Before: Aug 23 10:02:53 2025 GMT
Not After : Aug 24 10:02:53 2025 GMT
Subject: CN=f0e8e2e21105190fc1ee81302efb6c8cb476ddcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d2:c7:5f:9e:97:31:7c:e8:f2:ac:24:a0:2b:
3a:b2:ca:99:bf:6b:bf:39:57:20:f7:9e:bf:02:75:
58:a3:14:81:3f:d7:61:74:2e:df:f1:98:74:38:f5:
82:6e:7c:f2:eb:33:9f:d3:6e:c9:ba:d3:16:c0:09:
45:ee:10:25:45:ef:f8:ad:39:a1:5b:5f:a6:e5:71:
bd:ab:88:0f:44:a6:e0:3d:15:73:56:c3:e2:3d:68:
b7:49:d5:15:6c:f6:d3:dd:e4:ca:f1:0d:42:0d:02:
88:63:c7:fe:d0:7f:ce:f8:f6:d2:91:e4:12:0e:7a:
08:ed:37:5a:21:cf:0d:49:1e:0a:61:1a:42:07:9d:
5f:c2:4d:53:3c:cb:3e:ab:d9:96:e6:87:58:1c:9d:
7b:0a:db:dd:2e:19:aa:e0:00:d8:45:8b:97:8b:0c:
a8:eb:b1:c9:10:70:9d:5a:5c:43:35:fb:4f:be:f0:
1f:92:5e:ce:ae:3a:d4:f2:95:77:97:92:b3:9b:f3:
0b:35:c6:72:3d:8d:c5:96:a0:5d:eb:f5:5a:d2:62:
ae:f6:6a:41:04:37:03:d0:08:e1:4b:ce:86:a9:8a:
c2:ea:8c:06:99:db:95:81:76:9c:bf:ef:9c:2d:e0:
fa:7b:34:54:3d:4a:83:78:d7:2d:a8:3c:4b:28:41:
07:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E8:E2:E2:11:05:19:0F:C1:EE:81:30:2E:FB:6C:8C:B4:76:DD:CB
X509v3 Authority Key Identifier:
keyid:E2:D1:7A:DA:64:39:28:8C:29:70:3C:F7:05:EF:64:AF:B3:82:0A:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:c2:94:d8:05:51:fa:6a:4c:ac:bf:95:51:6d:f9:c1:bd:ad:
4b:68:23:99:02:96:89:ba:a5:31:0e:09:6c:3f:12:a7:c4:e6:
56:ff:25:5a:35:1d:2a:16:bd:8d:60:72:ed:90:9f:68:3f:c1:
4d:e8:cf:8e:b1:f9:9d:7b:7a:49:84:38:0a:cd:1a:79:22:98:
8b:f5:7b:2a:c6:75:7e:6a:b5:f1:1b:69:fa:5a:57:7e:a1:d1:
55:aa:2b:1a:2c:7f:a7:b7:de:ca:ff:a3:cf:8c:ff:01:af:ef:
83:17:4a:77:14:42:63:7d:75:9f:11:4d:ac:b9:a1:e7:b3:b2:
34:24:86:1b:47:16:a6:11:fa:bd:55:f9:3c:75:68:65:86:48:
f2:ad:37:64:22:53:14:e8:d7:44:a0:3b:27:64:5d:a9:73:87:
fb:9f:c4:32:12:a2:9b:17:5c:e2:7c:d7:8f:ab:84:a0:56:4f:
a8:8b:f5:8e:3a:0d:5e:a5:66:36:29:3a:5e:51:b4:fc:c8:b6:
15:df:73:ac:48:f3:f8:18:8f:b6:33:84:9f:9e:9e:41:17:71:
b4:95:a8:0d:1e:e5:77:d7:6a:27:f9:08:b8:60:b2:34:47:05:
1a:28:d8:9e:10:63:35:5b:e5:69:59:d4:65:3b:17:da:30:ac:
ab:38:5d:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYY0e8aYKw5UKrIF6YVw0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZDE3YWRhNjQzOTI4OGMyOTcwM2NmNzA1ZWY2NGFmYjM4
MjBhZDkwHhcNMjUwODIzMTAwMjUzWhcNMjUwODI0MTAwMjUzWjAzMTEwLwYDVQQD
EyhmMGU4ZTJlMjExMDUxOTBmYzFlZTgxMzAyZWZiNmM4Y2I0NzZkZGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdLHX56XMXzo8qwkoCs6ssqZv2u/
OVcg956/AnVYoxSBP9dhdC7f8Zh0OPWCbnzy6zOf027JutMWwAlF7hAlRe/4rTmh
W1+m5XG9q4gPRKbgPRVzVsPiPWi3SdUVbPbT3eTK8Q1CDQKIY8f+0H/O+PbSkeQS
DnoI7TdaIc8NSR4KYRpCB51fwk1TPMs+q9mW5odYHJ17CtvdLhmq4ADYRYuXiwyo
67HJEHCdWlxDNftPvvAfkl7OrjrU8pV3l5Kzm/MLNcZyPY3FlqBd6/Va0mKu9mpB
BDcD0AjhS86GqYrC6owGmduVgXacv++cLeD6ezRUPUqDeNctqDxLKEEHRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPDo4uIRBRkPwe6BMC77bIy0dt3LMB8GA1UdIwQY
MBaAFOLRetpkOSiMKXA89wXvZK+zggrZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHRGNjJtUTVLSXdwY0R6M0JlOWtyN09DQ3RrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mMTJiYTEtZDgyNi00NjYyLWJlZDkt
Yzk5N2I4N2I0YjVmLzEvNHRGNjJtUTVLSXdwY0R6M0JlOWtyN09DQ3RrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9mMTJiYTEtZDgyNi00NjYyLWJlZDktYzk5N2I4N2I0YjVm
LzEvNHRGNjJtUTVLSXdwY0R6M0JlOWtyN09DQ3RrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMsKU2AVR
+mpMrL+VUW35wb2tS2gjmQKWibqlMQ4JbD8Sp8TmVv8lWjUdKha9jWBy7ZCfaD/B
TejPjrH5nXt6SYQ4Cs0aeSKYi/V7KsZ1fmq18Rtp+lpXfqHRVaorGix/p7feyv+j
z4z/Aa/vgxdKdxRCY311nxFNrLmh57OyNCSGG0cWphH6vVX5PHVoZYZI8q03ZCJT
FOjXRKA7J2RdqXOH+5/EMhKimxdc4nzXj6uEoFZPqIv1jjoNXqVmNik6XlG0/Mi2
Fd9zrEjz+BiPtjOEn56eQRdxtJWoDR7ld9dqJ/kIuGCyNEcFGijYnhBjNVvlaVnU
ZTsX2jCsqzhdYA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:42:16 2025 by rpki-client