Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
File: 4_kwa8YVwyCuQaTnJmPrupjvNXw.mft (raw, json)
Hash identifier: DBmcqaDxGqx8U7Ydfo1K1kz0qQEVxlzLo7cAacTjiK4=
Subject key identifier: BD:8A:70:22:4C:8D:67:1D:4D:3E:BE:3A:38:CF:9F:CF:D3:33:BF:B2
Authority key identifier: E3:F9:30:6B:C6:15:C3:20:AE:41:A4:E7:26:63:EB:BA:98:EF:35:7C
Certificate issuer: /CN=e3f9306bc615c320ae41a4e72663ebba98ef357c
Certificate serial: 0198D8BDBAF4C94A18BE8E6861DBDCA7ECF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
Manifest number: 0711
Signing time: Sat 23 Aug 2025 21:02:49 +0000
Manifest this update: Sat 23 Aug 2025 21:02:49 +0000
Manifest next update: Sun 24 Aug 2025 21:02:49 +0000
Files and hashes: 1: 4_kwa8YVwyCuQaTnJmPrupjvNXw.crl (hash: HWfugAlYu6D6nCcqyBgbPNE5OPgszpdveHF7zewwbK8=)
2: mi-PdoixQ3I_3wWH1iuFXc_7uM0.roa (hash: 3baxx8ZqUep3q30dtKKaBrzl+eIHjNNA1Tcak9rfOIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:bd:ba:f4:c9:4a:18:be:8e:68:61:db:dc:a7:ec:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3f9306bc615c320ae41a4e72663ebba98ef357c
Validity
Not Before: Aug 23 21:02:49 2025 GMT
Not After : Aug 24 21:02:49 2025 GMT
Subject: CN=bd8a70224c8d671d4d3ebe3a38cf9fcfd333bfb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ab:f8:cc:77:8e:07:4d:ab:62:92:bf:a9:b2:
71:21:01:ad:ce:36:d4:19:a3:55:69:90:a7:80:c1:
ed:e8:97:c9:6f:fc:a7:89:f5:ea:40:5b:8b:cd:49:
c1:fb:54:a0:5a:e8:90:43:22:0e:0f:8c:ef:70:63:
54:ee:77:e0:71:f3:32:fd:dc:22:0a:d1:e8:ba:3a:
bf:23:19:02:3d:d4:91:f5:9a:cc:37:2d:3c:fb:37:
91:39:41:2a:a3:25:f2:1d:6a:be:08:b3:1d:8a:48:
f2:4d:7f:dd:80:93:62:d1:fa:b8:0e:43:7d:7f:7c:
75:4c:45:2e:16:55:e5:d8:b4:1b:1e:b8:af:dd:f7:
3b:a7:2d:99:16:5b:f1:e9:9a:52:e1:c8:b8:70:58:
4f:46:69:56:13:2b:7d:5b:8f:55:0c:30:c8:27:9b:
cf:8e:2b:65:68:56:58:f9:b2:2b:68:05:37:b6:df:
7a:08:6a:e3:4d:d0:ba:a6:01:76:c8:ad:de:d7:4b:
4d:c3:f9:76:60:e8:23:1a:b6:39:33:57:5d:8f:ff:
5a:e8:75:ae:cb:5a:fb:d1:cb:35:6c:14:f9:71:b0:
e6:5e:d0:58:89:3e:ec:11:bd:4b:d9:74:33:21:4d:
a5:af:6f:58:b8:d4:cd:63:a5:96:18:7a:ec:72:4d:
ee:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:8A:70:22:4C:8D:67:1D:4D:3E:BE:3A:38:CF:9F:CF:D3:33:BF:B2
X509v3 Authority Key Identifier:
keyid:E3:F9:30:6B:C6:15:C3:20:AE:41:A4:E7:26:63:EB:BA:98:EF:35:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:ae:b6:6a:ea:69:52:4f:ca:d7:05:30:b7:04:c7:b0:5c:1d:
19:c1:04:2c:e9:29:f7:bd:0c:da:15:34:40:91:27:6a:c3:e9:
e9:30:d4:6e:91:97:a1:09:b3:c0:f6:89:1e:45:58:d2:f7:8c:
44:d8:79:83:74:e1:37:3a:2c:ce:f7:e6:7b:99:b9:38:0d:56:
36:7a:10:07:96:f7:48:45:14:c7:bc:96:38:2c:b7:0a:a1:2a:
5a:47:5a:72:d8:cf:a5:46:d9:45:94:94:8a:fc:31:74:6c:c1:
88:52:ba:ff:82:a9:37:16:cb:8f:cd:4e:dd:da:d3:7e:c1:0e:
7e:60:42:a0:ce:6d:41:ae:48:5d:52:5e:34:e8:ed:fc:72:20:
40:6a:1b:c2:bc:92:31:4c:b2:a0:e5:8f:82:47:d3:9b:6e:09:
02:5b:15:14:c0:43:3c:88:67:ef:68:fa:35:17:0f:12:24:10:
02:32:64:2b:d8:e5:82:bc:df:a1:49:49:af:5f:da:72:6f:47:
89:b8:7a:24:4d:01:84:0a:9c:88:1a:e4:71:44:8a:ae:1b:2c:
df:ff:4b:26:95:5c:a6:88:8d:21:de:30:b9:9c:c3:5e:15:a5:
29:d2:9e:1e:5b:b6:be:1b:ef:d6:fb:71:9c:1d:54:60:c1:ef:
30:30:f0:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjYvbr0yUoYvo5oYdvcp+zyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZjkzMDZiYzYxNWMzMjBhZTQxYTRlNzI2NjNlYmJhOThl
ZjM1N2MwHhcNMjUwODIzMjEwMjQ5WhcNMjUwODI0MjEwMjQ5WjAzMTEwLwYDVQQD
EyhiZDhhNzAyMjRjOGQ2NzFkNGQzZWJlM2EzOGNmOWZjZmQzMzNiZmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6v4zHeOB02rYpK/qbJxIQGtzjbU
GaNVaZCngMHt6JfJb/ynifXqQFuLzUnB+1SgWuiQQyIOD4zvcGNU7nfgcfMy/dwi
CtHoujq/IxkCPdSR9ZrMNy08+zeROUEqoyXyHWq+CLMdikjyTX/dgJNi0fq4DkN9
f3x1TEUuFlXl2LQbHriv3fc7py2ZFlvx6ZpS4ci4cFhPRmlWEyt9W49VDDDIJ5vP
jitlaFZY+bIraAU3tt96CGrjTdC6pgF2yK3e10tNw/l2YOgjGrY5M1ddj/9a6HWu
y1r70cs1bBT5cbDmXtBYiT7sEb1L2XQzIU2lr29YuNTNY6WWGHrsck3uFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL2KcCJMjWcdTT6+OjjPn8/TM7+yMB8GA1UdIwQY
MBaAFOP5MGvGFcMgrkGk5yZj67qY7zV8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNF9rd2E4WVZ3eUN1UWFUbkptUHJ1cGp2Tlh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC82YzQ4ZjEtMjAzNy00MGEwLWIyZTEt
M2NkMzNmZjMyNzQzLzEvNF9rd2E4WVZ3eUN1UWFUbkptUHJ1cGp2Tlh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC82YzQ4ZjEtMjAzNy00MGEwLWIyZTEtM2NkMzNmZjMyNzQz
LzEvNF9rd2E4WVZ3eUN1UWFUbkptUHJ1cGp2Tlh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIK62aupp
Uk/K1wUwtwTHsFwdGcEELOkp970M2hU0QJEnasPp6TDUbpGXoQmzwPaJHkVY0veM
RNh5g3ThNzoszvfme5m5OA1WNnoQB5b3SEUUx7yWOCy3CqEqWkdactjPpUbZRZSU
ivwxdGzBiFK6/4KpNxbLj81O3drTfsEOfmBCoM5tQa5IXVJeNOjt/HIgQGobwryS
MUyyoOWPgkfTm24JAlsVFMBDPIhn72j6NRcPEiQQAjJkK9jlgrzfoUlJr1/acm9H
ibh6JE0BhAqciBrkcUSKrhss3/9LJpVcpoiNId4wuZzDXhWlKdKeHlu2vhvv1vtx
nB1UYMHvMDDwIg==
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:08:27 2025 by rpki-client