
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.mft
File: C_4rJzg320FmbWipe8esN9zJbyA.mft (raw, json)
Hash identifier: 3SzoA64jCkcMMIf6wIJCcokEY83ckf/cDh5fusfeRUk=
Subject key identifier: 55:64:47:88:BB:72:15:ED:8D:4B:D1:C2:36:67:95:9E:8A:7B:10:18
Authority key identifier: 0B:FE:2B:27:38:37:DB:41:66:6D:68:A9:7B:C7:AC:37:DC:C9:6F:20
Certificate issuer: /CN=0bfe2b273837db41666d68a97bc7ac37dcc96f20
Certificate serial: 0198D73B3D181B9B84B82636B5AB7D3EDF52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_4rJzg320FmbWipe8esN9zJbyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.mft
Manifest number: 0418
Signing time: Sat 23 Aug 2025 14:00:40 +0000
Manifest this update: Sat 23 Aug 2025 14:00:40 +0000
Manifest next update: Sun 24 Aug 2025 14:00:40 +0000
Files and hashes: 1: C_4rJzg320FmbWipe8esN9zJbyA.crl (hash: 3RrYROqaRo65r6jdl/8LvoSU6Exf/sjMRGh7r5hmkIM=)
2: GN1cEGtzhGUtNVwPMehD-Lj4N1Q.roa (hash: C8P5r4sDxFHAMG8SatPLslHel1irs4/AKLXy4El1DWk=)
3: lBowDCcGSdkP56eGU0lPL4u_SEM.roa (hash: j0fleVV6sjY4GNZzRXgYAIbJa3v2es0FQGzI6ZY2suc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_4rJzg320FmbWipe8esN9zJbyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:3d:18:1b:9b:84:b8:26:36:b5:ab:7d:3e:df:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bfe2b273837db41666d68a97bc7ac37dcc96f20
Validity
Not Before: Aug 23 14:00:40 2025 GMT
Not After : Aug 24 14:00:40 2025 GMT
Subject: CN=55644788bb7215ed8d4bd1c23667959e8a7b1018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:eb:23:8f:e8:ea:99:5b:f2:c0:0e:5a:e4:7e:
93:48:ff:81:74:a7:cb:26:07:54:f2:e8:68:3d:2d:
07:9e:f3:20:9a:68:4e:ae:e0:a4:21:bb:25:6e:c8:
f8:e5:20:5c:86:c4:e8:a9:9c:75:8f:11:12:93:b6:
11:8c:cd:50:d9:62:a0:f9:cf:9c:30:73:75:40:74:
8b:e8:e4:f8:40:5c:53:06:d4:3c:f4:84:4e:cd:5a:
8e:1d:fe:23:54:2a:6c:9e:a9:77:50:85:8b:3a:85:
20:ea:bd:c5:6f:31:3e:b3:1e:63:1b:51:06:10:03:
6a:c5:cd:97:1a:ff:fc:99:a5:6d:24:60:43:9d:b0:
3d:51:04:b1:56:05:6c:58:55:70:2a:00:80:32:62:
8a:04:1d:bf:9f:8d:b4:45:58:3f:b5:bf:1e:e8:73:
27:b5:c4:ce:2f:c0:3f:d4:4b:2f:59:61:2e:c4:26:
18:15:a7:3a:8b:00:ca:0f:ab:c0:ad:71:b2:09:c7:
64:ba:96:66:0c:7f:ce:2b:fe:8c:91:5f:b0:95:a4:
6f:e1:bb:8d:05:a3:94:ae:70:50:08:ff:cd:7d:0e:
47:7d:75:ca:5b:7f:e4:4f:32:a3:92:8c:48:3d:a5:
c4:50:6a:e4:c6:74:b0:28:f8:fe:0c:c2:92:e0:ce:
7b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:64:47:88:BB:72:15:ED:8D:4B:D1:C2:36:67:95:9E:8A:7B:10:18
X509v3 Authority Key Identifier:
keyid:0B:FE:2B:27:38:37:DB:41:66:6D:68:A9:7B:C7:AC:37:DC:C9:6F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_4rJzg320FmbWipe8esN9zJbyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:f5:e2:e5:d7:fc:94:93:66:1c:81:04:2c:1e:ee:89:0a:6e:
e4:d8:28:a6:bf:6c:96:99:23:a4:3d:6c:34:bb:32:f4:f8:b6:
46:52:00:43:b9:a4:28:40:8a:5a:1b:ed:17:50:aa:80:ab:ac:
77:ce:ea:69:cc:08:95:de:a6:f8:4f:42:c7:88:2b:03:f5:9e:
86:e4:a5:b0:82:c4:4d:4b:5d:3b:c2:bd:fc:f8:93:4e:df:16:
8f:1f:8e:d6:88:e5:a3:a7:7c:ce:70:de:cc:05:c0:68:ad:33:
8e:a4:7b:fb:41:16:de:e5:25:49:c1:7a:32:14:99:ae:41:b1:
1f:da:63:1d:43:d1:77:16:9a:31:72:c4:2a:10:a2:7e:dd:20:
e6:8e:9d:96:1e:78:99:03:58:fb:09:15:3e:39:9c:7c:75:d2:
8e:4a:0e:1e:a2:fb:31:c7:13:c9:41:04:92:5d:ff:cc:d8:05:
0e:f4:ec:bf:12:71:51:cd:d1:8b:39:97:0a:da:11:4d:44:0b:
b9:b1:5f:a3:76:84:20:aa:6e:1a:78:b2:98:18:37:cc:40:7e:
f2:0c:b7:43:05:fc:60:a2:cc:d4:04:bf:8f:df:f7:62:c4:6b:
f4:d0:1a:a5:8a:87:96:cd:0c:1b:c8:b7:91:cb:71:46:87:08:
7b:82:ff:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXOz0YG5uEuCY2tat9Pt9SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZmUyYjI3MzgzN2RiNDE2NjZkNjhhOTdiYzdhYzM3ZGNj
OTZmMjAwHhcNMjUwODIzMTQwMDQwWhcNMjUwODI0MTQwMDQwWjAzMTEwLwYDVQQD
Eyg1NTY0NDc4OGJiNzIxNWVkOGQ0YmQxYzIzNjY3OTU5ZThhN2IxMDE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvusjj+jqmVvywA5a5H6TSP+BdKfL
JgdU8uhoPS0HnvMgmmhOruCkIbslbsj45SBchsToqZx1jxESk7YRjM1Q2WKg+c+c
MHN1QHSL6OT4QFxTBtQ89IROzVqOHf4jVCpsnql3UIWLOoUg6r3FbzE+sx5jG1EG
EANqxc2XGv/8maVtJGBDnbA9UQSxVgVsWFVwKgCAMmKKBB2/n420RVg/tb8e6HMn
tcTOL8A/1EsvWWEuxCYYFac6iwDKD6vArXGyCcdkupZmDH/OK/6MkV+wlaRv4buN
BaOUrnBQCP/NfQ5HfXXKW3/kTzKjkoxIPaXEUGrkxnSwKPj+DMKS4M57fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFVkR4i7chXtjUvRwjZnlZ6KexAYMB8GA1UdIwQY
MBaAFAv+Kyc4N9tBZm1oqXvHrDfcyW8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ180ckp6ZzMyMEZtYldpcGU4ZXNOOXpKYnlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9mZWI5MjctN2E4My00MDNhLWExYzEt
ZWIxZTkxNjQ0ZjJkLzEvQ180ckp6ZzMyMEZtYldpcGU4ZXNOOXpKYnlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9mZWI5MjctN2E4My00MDNhLWExYzEtZWIxZTkxNjQ0ZjJk
LzEvQ180ckp6ZzMyMEZtYldpcGU4ZXNOOXpKYnlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb/Xi5df8
lJNmHIEELB7uiQpu5Ngopr9slpkjpD1sNLsy9Pi2RlIAQ7mkKECKWhvtF1CqgKus
d87qacwIld6m+E9Cx4grA/WehuSlsILETUtdO8K9/PiTTt8Wjx+O1ojlo6d8znDe
zAXAaK0zjqR7+0EW3uUlScF6MhSZrkGxH9pjHUPRdxaaMXLEKhCift0g5o6dlh54
mQNY+wkVPjmcfHXSjkoOHqL7MccTyUEEkl3/zNgFDvTsvxJxUc3RizmXCtoRTUQL
ubFfo3aEIKpuGniymBg3zEB+8gy3QwX8YKLM1AS/j9/3YsRr9NAapYqHls0MG8i3
kctxRocIe4L/Xw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:05:37 2025 by rpki-client