Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
File: 4S9k9_aXqptumYLAt2u3hCEzh2o.mft (raw, json)
Hash identifier: s8gKbDhQePtInXU8ewANmiXscBoetjRWJrcN9MbMsqM=
Subject key identifier: 97:63:54:A6:DA:37:86:35:AB:22:F9:65:3A:93:75:37:E7:AB:65:C0
Authority key identifier: E1:2F:64:F7:F6:97:AA:9B:6E:99:82:C0:B7:6B:B7:84:21:33:87:6A
Certificate issuer: /CN=e12f64f7f697aa9b6e9982c0b76bb7842133876a
Certificate serial: 0198D515FBD4631D878A6E8DF84A0544A485
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
Manifest number: 09A4
Signing time: Sat 23 Aug 2025 04:00:44 +0000
Manifest this update: Sat 23 Aug 2025 04:00:44 +0000
Manifest next update: Sun 24 Aug 2025 04:00:44 +0000
Files and hashes: 1: 4S9k9_aXqptumYLAt2u3hCEzh2o.crl (hash: XKZyXr+elTrRrJ5jpp1H0d0wm7BELCIpJ4w1wptKYng=)
2: mhXII1TmoI3urvchZmrd238HnqI.roa (hash: ymkQlbzHXOVaEGzGKdRpU2whYkKkdIgkhGPuabVJPyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:fb:d4:63:1d:87:8a:6e:8d:f8:4a:05:44:a4:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e12f64f7f697aa9b6e9982c0b76bb7842133876a
Validity
Not Before: Aug 23 04:00:44 2025 GMT
Not After : Aug 24 04:00:44 2025 GMT
Subject: CN=976354a6da378635ab22f9653a937537e7ab65c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1a:db:f6:7d:58:c2:c2:24:08:9d:22:6f:51:
3f:8c:05:67:3f:6b:c8:3e:74:ec:f4:8a:98:45:41:
25:1d:ea:e0:c6:bc:db:20:78:27:d3:f0:40:bc:0a:
1e:c4:f8:8e:79:a5:50:4b:4e:4f:ae:f4:ac:42:6a:
2b:e0:9e:8a:ce:0d:d7:8f:8c:9c:7f:64:d8:d2:18:
a8:1a:e9:12:6b:1f:a1:24:fb:71:3f:c2:0e:80:1c:
ac:52:a8:ba:e9:21:f0:23:53:0b:1a:8a:8e:50:ce:
34:8f:22:e0:02:7e:8c:b7:57:4b:15:4e:e9:90:96:
96:b6:da:9c:7f:e7:84:13:83:92:57:91:01:03:e1:
3e:c8:49:0c:5f:bb:3d:88:ce:0e:72:eb:79:59:63:
da:87:5d:16:36:2f:f2:59:f7:61:32:74:94:ea:e4:
03:b0:a9:fa:12:3d:74:d7:64:a3:c0:3c:42:4b:15:
ec:73:f0:1f:e1:a3:5b:ac:cb:90:be:ff:e4:c2:cd:
62:14:b5:80:a1:a4:80:8f:6a:6b:58:a5:77:e3:ab:
96:60:af:37:ea:fa:3b:db:7a:e7:22:6f:74:64:f5:
70:d2:67:f5:0a:f6:04:15:b5:be:ec:0d:fc:21:23:
7c:cf:9c:ea:e9:a4:c3:23:7f:b4:d4:c9:6b:26:39:
9c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:63:54:A6:DA:37:86:35:AB:22:F9:65:3A:93:75:37:E7:AB:65:C0
X509v3 Authority Key Identifier:
keyid:E1:2F:64:F7:F6:97:AA:9B:6E:99:82:C0:B7:6B:B7:84:21:33:87:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:f3:ea:4c:dd:0f:65:0e:71:2d:16:8a:58:e4:4b:57:f5:55:
9b:72:85:1d:11:20:d1:28:76:51:51:54:7a:62:cb:0c:de:51:
9b:73:34:23:92:15:7f:e6:e9:99:9f:9a:97:0c:a5:b1:45:f7:
50:88:6f:53:80:5b:73:74:f3:ef:ef:53:7d:76:be:cd:29:0a:
16:bb:ab:be:65:cd:bc:c9:4d:97:8d:d5:da:4a:61:ca:82:46:
15:42:b4:b9:03:29:0c:70:46:07:3a:cd:d9:92:f9:68:bb:f7:
d1:4a:92:4d:ee:d2:d1:6f:d7:64:af:36:b2:69:d8:46:37:4e:
dd:e5:87:1a:a4:2a:06:bf:67:6f:06:d5:f1:1a:86:cd:6e:e1:
fe:07:65:33:97:69:b3:f3:db:bf:78:4c:a0:8e:7c:3a:8a:69:
1b:54:95:19:0a:b4:e5:65:4c:55:58:5b:38:54:77:35:d2:b9:
5b:08:4b:a3:e5:5b:90:33:e2:59:bc:6f:6f:8f:f9:68:7c:cb:
6c:5e:ef:5f:0f:a6:6a:46:d8:ff:c4:98:d8:52:39:d6:e0:6c:
fb:e7:60:f4:28:e9:11:39:44:43:9b:8c:75:f0:ba:5e:bf:8f:
78:9c:65:be:13:8e:28:4e:53:db:f6:6c:4d:d1:bb:ac:a8:97:
f1:d4:27:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFfvUYx2Him6N+EoFRKSFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMmY2NGY3ZjY5N2FhOWI2ZTk5ODJjMGI3NmJiNzg0MjEz
Mzg3NmEwHhcNMjUwODIzMDQwMDQ0WhcNMjUwODI0MDQwMDQ0WjAzMTEwLwYDVQQD
Eyg5NzYzNTRhNmRhMzc4NjM1YWIyMmY5NjUzYTkzNzUzN2U3YWI2NWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhrb9n1YwsIkCJ0ib1E/jAVnP2vI
PnTs9IqYRUElHergxrzbIHgn0/BAvAoexPiOeaVQS05PrvSsQmor4J6Kzg3Xj4yc
f2TY0hioGukSax+hJPtxP8IOgBysUqi66SHwI1MLGoqOUM40jyLgAn6Mt1dLFU7p
kJaWttqcf+eEE4OSV5EBA+E+yEkMX7s9iM4Ocut5WWPah10WNi/yWfdhMnSU6uQD
sKn6Ej1012SjwDxCSxXsc/Af4aNbrMuQvv/kws1iFLWAoaSAj2prWKV346uWYK83
6vo723rnIm90ZPVw0mf1CvYEFbW+7A38ISN8z5zq6aTDI3+01MlrJjmcCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJdjVKbaN4Y1qyL5ZTqTdTfnq2XAMB8GA1UdIwQY
MBaAFOEvZPf2l6qbbpmCwLdrt4QhM4dqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFM5azlfYVhxcHR1bVlMQXQydTNoQ0V6aDJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9lN2QxYTktYWM3Ni00YTlmLWIxNzUt
NDdjMTBhNWNlNTM0LzEvNFM5azlfYVhxcHR1bVlMQXQydTNoQ0V6aDJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9lN2QxYTktYWM3Ni00YTlmLWIxNzUtNDdjMTBhNWNlNTM0
LzEvNFM5azlfYVhxcHR1bVlMQXQydTNoQ0V6aDJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcPPqTN0P
ZQ5xLRaKWORLV/VVm3KFHREg0Sh2UVFUemLLDN5Rm3M0I5IVf+bpmZ+alwylsUX3
UIhvU4Bbc3Tz7+9TfXa+zSkKFrurvmXNvMlNl43V2kphyoJGFUK0uQMpDHBGBzrN
2ZL5aLv30UqSTe7S0W/XZK82smnYRjdO3eWHGqQqBr9nbwbV8RqGzW7h/gdlM5dp
s/Pbv3hMoI58OoppG1SVGQq05WVMVVhbOFR3NdK5WwhLo+VbkDPiWbxvb4/5aHzL
bF7vXw+makbY/8SY2FI51uBs++dg9CjpETlEQ5uMdfC6Xr+PeJxlvhOOKE5T2/Zs
TdG7rKiX8dQnhw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:11 2025 by rpki-client