
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.mft
File: 4-d1gqvilic_V6RVSq2m-lwf6bA.mft (raw, json)
Hash identifier: b7VncfsRYAWRqEof0YHUP6EKzblLP11xhuQ9zifd6Sc=
Subject key identifier: F9:46:0B:6A:8D:29:66:BC:EE:8E:5A:4E:D8:FA:B6:82:68:CE:66:06
Authority key identifier: E3:E7:75:82:AB:E2:96:27:3F:57:A4:55:4A:AD:A6:FA:5C:1F:E9:B0
Certificate issuer: /CN=e3e77582abe296273f57a4554aada6fa5c1fe9b0
Certificate serial: 0198D773A0221CAFE3ADB255D0A8382466A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4-d1gqvilic_V6RVSq2m-lwf6bA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.mft
Manifest number: 0511
Signing time: Sat 23 Aug 2025 15:02:15 +0000
Manifest this update: Sat 23 Aug 2025 15:02:15 +0000
Manifest next update: Sun 24 Aug 2025 15:02:15 +0000
Files and hashes: 1: 4-d1gqvilic_V6RVSq2m-lwf6bA.crl (hash: c9G+on0gtfHSGgCYs0oc1OjE0Nm+7WDhy//EsgQiu6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4-d1gqvilic_V6RVSq2m-lwf6bA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:a0:22:1c:af:e3:ad:b2:55:d0:a8:38:24:66:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3e77582abe296273f57a4554aada6fa5c1fe9b0
Validity
Not Before: Aug 23 15:02:15 2025 GMT
Not After : Aug 24 15:02:15 2025 GMT
Subject: CN=f9460b6a8d2966bcee8e5a4ed8fab68268ce6606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5f:1d:ac:7a:a5:51:09:45:b1:41:29:8c:75:
a1:3f:fd:47:ca:e4:84:f2:9e:19:ce:f3:26:a3:7d:
8a:87:c9:47:a4:f5:2a:84:a6:51:d5:28:b9:31:00:
f8:d4:d6:d4:9d:d1:c1:43:22:cb:76:bc:71:37:0e:
d7:79:a0:f8:12:ff:c3:0f:87:81:01:64:8d:b8:46:
31:17:97:ec:20:f8:3d:d5:79:43:ce:b2:b6:b4:34:
9c:71:74:68:0b:86:01:78:ec:34:c1:04:71:39:5d:
51:32:3b:71:e8:3b:3d:f4:d7:b6:fc:95:cc:28:4d:
83:f6:da:4f:17:30:66:0f:33:e5:54:01:03:b2:e9:
2d:29:9f:a0:f5:da:93:46:f4:7d:63:a9:4b:5f:01:
00:5b:ea:dd:f2:17:45:8d:41:8f:43:dc:6b:5c:77:
df:aa:8b:bf:c9:59:18:86:ae:b4:92:63:57:61:8b:
d8:7f:6e:1f:b0:d8:a7:f0:18:1d:59:fb:af:35:63:
9f:16:73:e1:05:b0:98:cf:59:cc:1f:e7:d8:d3:4b:
fe:ea:66:55:e8:f2:bf:8c:49:2d:99:90:ac:9b:30:
6f:85:e3:3a:50:9f:ba:f0:7a:b1:b4:c4:d5:df:2e:
ee:11:e2:93:b7:f3:6c:3c:ec:b6:5e:77:5e:1f:0f:
bd:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:46:0B:6A:8D:29:66:BC:EE:8E:5A:4E:D8:FA:B6:82:68:CE:66:06
X509v3 Authority Key Identifier:
keyid:E3:E7:75:82:AB:E2:96:27:3F:57:A4:55:4A:AD:A6:FA:5C:1F:E9:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-d1gqvilic_V6RVSq2m-lwf6bA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:32:85:0d:a2:e5:c0:28:b1:25:bf:20:61:ef:11:15:8b:56:
b9:48:ab:58:ac:c0:38:39:34:53:1e:62:88:64:e6:9f:e6:fd:
a4:69:22:c3:df:df:21:68:9c:22:c4:ef:df:6d:65:24:ac:2d:
7c:34:7c:72:03:88:9b:c0:4f:b9:19:ee:10:c6:cc:ca:a6:d6:
d2:fd:44:a0:be:be:a5:05:36:d7:3c:ef:0c:66:9e:8d:33:56:
4c:dc:c1:f6:90:b5:0e:40:5e:8e:66:70:67:62:68:39:26:53:
f3:3d:4b:af:1a:11:3e:3e:2a:f2:10:13:29:e2:86:a7:78:45:
5a:83:86:67:0e:7e:77:46:fe:4d:19:b8:3a:21:c5:1a:2a:02:
14:df:31:47:d2:a2:6d:e8:4d:da:70:17:62:a2:42:bd:82:18:
49:fd:96:cd:c8:55:3a:d8:5f:fb:71:f6:4c:ae:81:23:5a:b5:
78:1d:3d:2e:fb:7b:e9:88:19:bc:99:7f:05:21:81:d5:77:82:
31:69:8a:66:4c:68:29:54:94:74:b6:7d:f8:96:18:1c:27:26:
9d:07:95:2b:de:09:bd:5c:e8:ad:24:c3:d4:07:5d:d2:0d:5e:
ca:49:77:f4:e8:7c:88:f6:eb:40:98:55:8d:23:05:84:a1:30:
4d:56:b2:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXc6AiHK/jrbJV0Kg4JGalMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZTc3NTgyYWJlMjk2MjczZjU3YTQ1NTRhYWRhNmZhNWMx
ZmU5YjAwHhcNMjUwODIzMTUwMjE1WhcNMjUwODI0MTUwMjE1WjAzMTEwLwYDVQQD
EyhmOTQ2MGI2YThkMjk2NmJjZWU4ZTVhNGVkOGZhYjY4MjY4Y2U2NjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4V8drHqlUQlFsUEpjHWhP/1HyuSE
8p4ZzvMmo32Kh8lHpPUqhKZR1Si5MQD41NbUndHBQyLLdrxxNw7XeaD4Ev/DD4eB
AWSNuEYxF5fsIPg91XlDzrK2tDSccXRoC4YBeOw0wQRxOV1RMjtx6Ds99Ne2/JXM
KE2D9tpPFzBmDzPlVAEDsuktKZ+g9dqTRvR9Y6lLXwEAW+rd8hdFjUGPQ9xrXHff
qou/yVkYhq60kmNXYYvYf24fsNin8BgdWfuvNWOfFnPhBbCYz1nMH+fY00v+6mZV
6PK/jEktmZCsmzBvheM6UJ+68HqxtMTV3y7uEeKTt/NsPOy2XndeHw+9PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPlGC2qNKWa87o5aTtj6toJozmYGMB8GA1UdIwQY
MBaAFOPndYKr4pYnP1ekVUqtpvpcH+mwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNC1kMWdxdmlsaWNfVjZSVlNxMm0tbHdmNmJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8xNjgwOTYtYzg4Ny00NzZmLWIzMzUt
MTE4OTYwZWY2MmM2LzEvNC1kMWdxdmlsaWNfVjZSVlNxMm0tbHdmNmJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny8xNjgwOTYtYzg4Ny00NzZmLWIzMzUtMTE4OTYwZWY2MmM2
LzEvNC1kMWdxdmlsaWNfVjZSVlNxMm0tbHdmNmJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIDKFDaLl
wCixJb8gYe8RFYtWuUirWKzAODk0Ux5iiGTmn+b9pGkiw9/fIWicIsTv321lJKwt
fDR8cgOIm8BPuRnuEMbMyqbW0v1EoL6+pQU21zzvDGaejTNWTNzB9pC1DkBejmZw
Z2JoOSZT8z1LrxoRPj4q8hATKeKGp3hFWoOGZw5+d0b+TRm4OiHFGioCFN8xR9Ki
behN2nAXYqJCvYIYSf2WzchVOthf+3H2TK6BI1q1eB09Lvt76YgZvJl/BSGB1XeC
MWmKZkxoKVSUdLZ9+JYYHCcmnQeVK94JvVzorSTD1Add0g1eykl39Oh8iPbrQJhV
jSMFhKEwTVaybA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:27:26 2025 by rpki-client