Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft
File: r4j95vrbtrLB22_kH4KdHyAVvgs.mft (raw, json)
Hash identifier: NoRmIM0jtL6GRwU3IbxeSS5C/4eYUcy3KmcUkMq2QsY=
Subject key identifier: 4F:E1:5D:D9:33:68:E2:58:DF:EB:BC:AD:04:C5:E3:AE:DA:8F:0C:71
Authority key identifier: AF:88:FD:E6:FA:DB:B6:B2:C1:DB:6F:E4:1F:82:9D:1F:20:15:BE:0B
Certificate issuer: /CN=af88fde6fadbb6b2c1db6fe41f829d1f2015be0b
Certificate serial: 0198D73B3E65C6E5FE78C143152D94A93E0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft
Manifest number: 0CE4
Signing time: Sat 23 Aug 2025 14:00:40 +0000
Manifest this update: Sat 23 Aug 2025 14:00:40 +0000
Manifest next update: Sun 24 Aug 2025 14:00:40 +0000
Files and hashes: 1: RHreYh0WmNugHNPOVP5GHBEiSQE.roa (hash: lDEy9crc1E/w31v0jSsa/vEhnHdpcWtnPtxtDbNUjjc=)
2: r4j95vrbtrLB22_kH4KdHyAVvgs.crl (hash: yNrDwFPn6svIy20hf58DQL0ICg8A3Okij+VbEW+LU4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:3e:65:c6:e5:fe:78:c1:43:15:2d:94:a9:3e:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af88fde6fadbb6b2c1db6fe41f829d1f2015be0b
Validity
Not Before: Aug 23 14:00:40 2025 GMT
Not After : Aug 24 14:00:40 2025 GMT
Subject: CN=4fe15dd93368e258dfebbcad04c5e3aeda8f0c71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:db:8d:08:24:1e:2f:ee:5b:c0:d3:65:3b:5b:
39:6c:8d:9a:d4:22:e2:03:76:d3:23:d4:a1:7e:ce:
ed:21:26:8c:b3:09:6a:fc:96:ac:d0:cb:4a:02:26:
87:27:2a:86:f1:de:e9:05:6f:5e:55:6e:b5:e8:dc:
e4:d2:a6:99:b6:66:00:4b:df:f4:57:34:f5:3f:02:
ed:d8:50:a1:51:ee:f7:81:60:5f:be:cb:c1:fe:29:
c1:45:73:03:80:6b:b0:07:19:b2:d2:36:71:85:43:
ab:3d:fe:96:36:51:78:71:24:1b:bc:2d:3b:df:11:
a8:1e:a9:dc:1b:b1:8c:be:dc:d6:8d:04:c4:41:c0:
18:3d:4b:36:c2:80:8b:51:99:b2:76:06:c6:32:7c:
f0:eb:50:6c:8c:51:5e:80:6b:27:b2:f0:b5:e5:52:
d0:72:fa:be:43:2e:92:cc:cd:39:a3:16:68:6b:cc:
c4:f4:11:ba:54:11:f5:30:15:41:07:4e:f0:ac:7a:
fc:c6:cd:c1:c0:4c:76:5d:bc:28:62:01:18:1d:7b:
7f:e8:7a:67:f9:87:69:47:55:12:65:ac:8d:0d:89:
71:b7:67:80:27:89:d4:98:66:11:e9:50:31:29:16:
00:63:f0:af:0b:a5:40:27:44:82:ca:cd:3d:48:52:
2d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E1:5D:D9:33:68:E2:58:DF:EB:BC:AD:04:C5:E3:AE:DA:8F:0C:71
X509v3 Authority Key Identifier:
keyid:AF:88:FD:E6:FA:DB:B6:B2:C1:DB:6F:E4:1F:82:9D:1F:20:15:BE:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:4f:75:b6:91:bd:17:56:67:34:45:14:9f:c3:53:a9:44:14:
d8:d5:d6:c2:83:6e:3c:d4:76:fa:a6:c5:87:09:ea:14:04:f1:
df:8a:ff:69:1a:83:31:c7:49:2b:13:a0:4d:ef:09:94:45:1b:
42:5c:68:f3:82:d5:72:97:71:e7:69:c8:29:1b:5e:59:c8:29:
73:b6:d5:6b:1a:b4:e8:87:eb:00:9c:98:9d:0e:ef:f9:2b:99:
3c:31:20:21:46:55:ae:f2:f3:8d:b3:8b:ea:4d:e0:03:56:8c:
b7:16:3b:ca:e0:93:8e:7c:a1:f2:7a:ef:ef:70:c5:2f:2a:27:
f7:71:54:ec:96:82:2e:4d:0e:69:b3:96:52:be:61:81:52:db:
3c:f6:d0:91:fd:b8:a2:cb:dd:d8:34:ae:e1:24:3e:76:2a:fb:
d4:fb:d3:54:f6:87:82:83:33:a0:7a:eb:60:58:0a:e6:3f:1e:
63:1a:02:12:67:eb:66:c3:60:3a:b5:58:c8:a9:f4:90:29:96:
3e:7c:05:e0:0d:fb:7b:ae:ab:7c:2d:47:5d:10:a9:20:c6:7c:
52:4e:4e:0a:16:49:00:44:10:e4:20:c4:80:9b:7e:b8:26:73:
f1:db:a8:b1:d8:da:ef:a6:f8:4e:54:2e:e3:33:6b:84:3a:2f:
5f:fe:7c:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXOz5lxuX+eMFDFS2UqT4LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmODhmZGU2ZmFkYmI2YjJjMWRiNmZlNDFmODI5ZDFmMjAx
NWJlMGIwHhcNMjUwODIzMTQwMDQwWhcNMjUwODI0MTQwMDQwWjAzMTEwLwYDVQQD
Eyg0ZmUxNWRkOTMzNjhlMjU4ZGZlYmJjYWQwNGM1ZTNhZWRhOGYwYzcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNuNCCQeL+5bwNNlO1s5bI2a1CLi
A3bTI9Shfs7tISaMswlq/Jas0MtKAiaHJyqG8d7pBW9eVW616Nzk0qaZtmYAS9/0
VzT1PwLt2FChUe73gWBfvsvB/inBRXMDgGuwBxmy0jZxhUOrPf6WNlF4cSQbvC07
3xGoHqncG7GMvtzWjQTEQcAYPUs2woCLUZmydgbGMnzw61BsjFFegGsnsvC15VLQ
cvq+Qy6SzM05oxZoa8zE9BG6VBH1MBVBB07wrHr8xs3BwEx2XbwoYgEYHXt/6Hpn
+YdpR1USZayNDYlxt2eAJ4nUmGYR6VAxKRYAY/CvC6VAJ0SCys09SFItawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE/hXdkzaOJY3+u8rQTF467ajwxxMB8GA1UdIwQY
MBaAFK+I/eb627aywdtv5B+CnR8gFb4LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjRqOTV2cmJ0ckxCMjJfa0g0S2RIeUFWdmdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9mZDU5NmEtM2Y1NC00ZTA2LTg2MjAt
NmUwZDIxM2Y0ODRhLzEvcjRqOTV2cmJ0ckxCMjJfa0g0S2RIeUFWdmdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9mZDU5NmEtM2Y1NC00ZTA2LTg2MjAtNmUwZDIxM2Y0ODRh
LzEvcjRqOTV2cmJ0ckxCMjJfa0g0S2RIeUFWdmdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn091tpG9
F1ZnNEUUn8NTqUQU2NXWwoNuPNR2+qbFhwnqFATx34r/aRqDMcdJKxOgTe8JlEUb
Qlxo84LVcpdx52nIKRteWcgpc7bVaxq06IfrAJyYnQ7v+SuZPDEgIUZVrvLzjbOL
6k3gA1aMtxY7yuCTjnyh8nrv73DFLyon93FU7JaCLk0OabOWUr5hgVLbPPbQkf24
osvd2DSu4SQ+dir71PvTVPaHgoMzoHrrYFgK5j8eYxoCEmfrZsNgOrVYyKn0kCmW
PnwF4A37e66rfC1HXRCpIMZ8Uk5OChZJAEQQ5CDEgJt+uCZz8duosdja76b4TlQu
4zNrhDovX/58Qg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:53:38 2025 by rpki-client