Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft
File: 4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft (raw, json)
Hash identifier: vPrHKZ/tOQ9xW+bhQ433kp6InG5i9uJ4U6syxmqxY1A=
Subject key identifier: 1B:41:C7:98:04:7D:11:75:EE:47:53:0A:F9:EE:C4:09:20:55:E4:5B
Authority key identifier: E0:5D:28:F1:49:79:3A:3D:72:E8:EF:04:1E:9C:9E:0D:9A:66:B2:1E
Certificate issuer: /CN=e05d28f149793a3d72e8ef041e9c9e0d9a66b21e
Certificate serial: 0198D73B6520FC0390E1F55E88BED7B4B278
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft
Manifest number: 0BFC
Signing time: Sat 23 Aug 2025 14:00:50 +0000
Manifest this update: Sat 23 Aug 2025 14:00:50 +0000
Manifest next update: Sun 24 Aug 2025 14:00:50 +0000
Files and hashes: 1: 4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.crl (hash: tcvE3r9c9pMH3akfdzkEJQwFWqd0ASKpl4qvbR3njyo=)
2: 8bvtISuekSRpBrLsSpaV6rAQww8.roa (hash: aP0bCcp5CUzuOtRFBu3Cv7XlqsZIi2ySA9u8hp6h1oU=)
3: HbFrbBDigmkbyhupjsQvR2G2rcg.roa (hash: DeaPvaz1CarpC6mp6iOUrw4n3hX9gcQTUiHE5Oraa94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:65:20:fc:03:90:e1:f5:5e:88:be:d7:b4:b2:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e05d28f149793a3d72e8ef041e9c9e0d9a66b21e
Validity
Not Before: Aug 23 14:00:50 2025 GMT
Not After : Aug 24 14:00:50 2025 GMT
Subject: CN=1b41c798047d1175ee47530af9eec4092055e45b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cb:46:27:e2:1f:60:cd:20:5b:ec:50:d8:b5:
6c:d4:94:71:aa:9c:0a:66:68:08:8c:b0:2c:b6:1c:
47:56:5d:c9:f4:c9:68:ca:68:37:28:23:26:7d:4b:
a4:9a:65:ff:8c:1f:25:06:ea:14:77:3b:86:49:04:
c8:68:1c:73:ea:58:7e:6f:9a:f1:6f:59:50:45:ba:
fe:6f:56:a1:8e:72:82:82:5f:1a:d3:36:38:a1:ac:
0b:4f:a6:93:13:31:65:66:28:64:d6:89:ef:a1:b0:
47:ce:88:83:dc:8d:2e:c9:94:fa:1d:32:52:2b:98:
fe:f7:c9:94:e0:a6:0b:ff:db:c0:b9:89:e6:6c:d4:
96:db:19:45:39:9a:fe:8e:60:6c:6c:c1:d8:6b:3b:
d9:c9:62:01:b9:b9:c0:bb:1d:34:7b:28:30:87:c6:
1e:01:84:f1:f7:15:b7:88:81:e7:f0:fd:6a:70:27:
d7:80:c7:57:08:de:61:a3:e4:10:9b:e1:05:de:e2:
93:73:e8:be:4d:6d:38:15:11:90:71:34:1e:53:5c:
71:72:87:22:7b:a1:da:f6:2c:76:c1:a8:2b:a7:f0:
db:bf:26:4d:50:98:17:1a:41:26:67:56:0c:7a:27:
99:8e:d0:0a:dd:ee:83:63:56:12:62:c0:ac:67:80:
06:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:41:C7:98:04:7D:11:75:EE:47:53:0A:F9:EE:C4:09:20:55:E4:5B
X509v3 Authority Key Identifier:
keyid:E0:5D:28:F1:49:79:3A:3D:72:E8:EF:04:1E:9C:9E:0D:9A:66:B2:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:79:fb:bb:57:0c:b3:4e:62:81:4c:3e:82:cf:ed:23:44:69:
5f:62:aa:a5:ec:cf:ff:05:5a:87:72:c8:a6:3d:17:ce:4b:bb:
d7:37:24:ad:35:5a:67:b9:e7:43:a8:3d:d9:64:11:61:22:fb:
c7:a5:76:f1:cb:b5:da:83:23:7e:eb:9e:a2:9a:b9:ec:bd:c0:
0f:54:9b:fd:d0:7f:55:b6:1c:5c:be:26:75:30:fb:0f:6d:ff:
3f:ef:0a:fd:0c:d2:82:48:c1:6b:01:85:12:c6:3e:89:76:e1:
6c:af:c4:64:15:03:c9:35:87:2b:86:d3:0f:56:0a:1e:64:8b:
4f:e5:af:ed:01:09:4c:99:2a:65:79:f4:cb:51:86:d1:6a:ff:
3b:20:1c:20:cf:25:bc:7f:59:4b:59:62:35:52:32:97:b3:cf:
4b:37:bc:8c:3c:3f:3c:2e:a1:9a:ca:e4:46:36:0e:e3:00:23:
52:19:09:d6:2a:02:72:2d:62:5d:0b:9b:74:b8:0e:03:28:3e:
a9:3b:23:b2:0d:4e:79:8c:87:35:24:fc:2e:8a:64:57:7c:f8:
52:53:42:2e:62:95:9c:e7:12:0e:58:0f:fb:2b:eb:47:5e:12:
50:d3:56:83:75:ee:c0:c1:06:98:38:74:48:4b:14:cc:4e:85:
cc:bf:93:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXO2Ug/AOQ4fVeiL7XtLJ4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNWQyOGYxNDk3OTNhM2Q3MmU4ZWYwNDFlOWM5ZTBkOWE2
NmIyMWUwHhcNMjUwODIzMTQwMDUwWhcNMjUwODI0MTQwMDUwWjAzMTEwLwYDVQQD
EygxYjQxYzc5ODA0N2QxMTc1ZWU0NzUzMGFmOWVlYzQwOTIwNTVlNDViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMtGJ+IfYM0gW+xQ2LVs1JRxqpwK
ZmgIjLAsthxHVl3J9Mloymg3KCMmfUukmmX/jB8lBuoUdzuGSQTIaBxz6lh+b5rx
b1lQRbr+b1ahjnKCgl8a0zY4oawLT6aTEzFlZihk1onvobBHzoiD3I0uyZT6HTJS
K5j+98mU4KYL/9vAuYnmbNSW2xlFOZr+jmBsbMHYazvZyWIBubnAux00eygwh8Ye
AYTx9xW3iIHn8P1qcCfXgMdXCN5ho+QQm+EF3uKTc+i+TW04FRGQcTQeU1xxcoci
e6Ha9ix2wagrp/DbvyZNUJgXGkEmZ1YMeieZjtAK3e6DY1YSYsCsZ4AG1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBtBx5gEfRF17kdTCvnuxAkgVeRbMB8GA1UdIwQY
MBaAFOBdKPFJeTo9cujvBB6cng2aZrIeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEYwbzhVbDVPajF5Nk84RUhweWVEWnBtc2g0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9iNGM5N2ItZTAwNS00Y2Q2LTgzMzUt
ODA5MWViY2UzYmJmLzEvNEYwbzhVbDVPajF5Nk84RUhweWVEWnBtc2g0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9iNGM5N2ItZTAwNS00Y2Q2LTgzMzUtODA5MWViY2UzYmJm
LzEvNEYwbzhVbDVPajF5Nk84RUhweWVEWnBtc2g0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAonn7u1cM
s05igUw+gs/tI0RpX2KqpezP/wVah3LIpj0Xzku71zckrTVaZ7nnQ6g92WQRYSL7
x6V28cu12oMjfuueopq57L3AD1Sb/dB/VbYcXL4mdTD7D23/P+8K/QzSgkjBawGF
EsY+iXbhbK/EZBUDyTWHK4bTD1YKHmSLT+Wv7QEJTJkqZXn0y1GG0Wr/OyAcIM8l
vH9ZS1liNVIyl7PPSze8jDw/PC6hmsrkRjYO4wAjUhkJ1ioCci1iXQubdLgOAyg+
qTsjsg1OeYyHNST8LopkV3z4UlNCLmKVnOcSDlgP+yvrR14SUNNWg3XuwMEGmDh0
SEsUzE6FzL+TpA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:19:38 2025 by rpki-client