Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft
File: 4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft (raw, json)
Hash identifier: 8nwM5rvU+0ZTYMNKOyOFBUn74bH7mGasFSTuoXeXs6g=
Subject key identifier: A7:42:99:36:17:12:D4:37:FE:34:24:23:8B:CA:1C:40:BD:DD:24:0A
Authority key identifier: E1:9F:61:51:A3:47:C7:92:2A:C7:CF:46:99:25:34:43:30:D7:24:F7
Certificate issuer: /CN=e19f6151a347c7922ac7cf469925344330d724f7
Certificate serial: 0197B88EA1E4AECF4D82E30488D72D931901
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft
Manifest number: 12E6
Signing time: Sat 28 Jun 2025 22:00:44 +0000
Manifest this update: Sat 28 Jun 2025 22:00:44 +0000
Manifest next update: Sun 29 Jun 2025 22:00:44 +0000
Files and hashes: 1: 4Z9hUaNHx5Iqx89GmSU0QzDXJPc.crl (hash: YhhVqrmIr7KFAaT9uHAGVtQZFp7vCiAcPAP0O2f/lg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:a1:e4:ae:cf:4d:82:e3:04:88:d7:2d:93:19:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e19f6151a347c7922ac7cf469925344330d724f7
Validity
Not Before: Jun 28 22:00:44 2025 GMT
Not After : Jun 29 22:00:44 2025 GMT
Subject: CN=a74299361712d437fe3424238bca1c40bddd240a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e4:5a:28:f2:54:a0:23:dd:eb:90:56:68:d2:
82:cb:82:37:fc:45:9c:0a:e6:51:09:e9:a7:b1:0e:
32:47:c7:53:9f:56:1b:a5:ac:2d:53:a1:a1:42:4e:
e4:c6:23:14:e9:06:be:63:07:c7:fa:c0:16:6f:bc:
14:50:df:5f:71:6e:8f:26:ad:06:fd:bc:25:02:9d:
51:a2:ca:31:b5:e7:3b:3e:f6:d8:b6:ac:93:a2:aa:
d6:f1:35:0f:0f:46:14:31:27:b0:bf:30:3d:29:20:
5e:be:1a:47:56:b6:8c:4c:24:db:e1:9a:b6:fb:66:
97:0e:eb:fe:6e:82:cc:79:23:9f:77:4f:32:44:70:
19:16:a7:96:c3:c6:71:70:16:27:ca:5c:8a:69:45:
aa:58:6f:98:47:f1:2a:4f:40:15:c7:03:af:20:26:
bc:e7:60:25:a4:2d:78:a0:84:3a:e0:d4:56:17:1b:
e9:37:1c:fe:4c:98:b5:5b:b8:6a:14:62:a4:41:cd:
be:80:bf:16:19:1f:bc:92:97:23:52:28:16:3f:db:
46:11:ea:a7:73:bc:37:92:e8:41:95:fc:ab:09:da:
48:82:db:d9:d2:c9:38:45:bb:74:5a:67:fa:7d:86:
d1:12:57:44:ed:7f:eb:f3:73:f2:79:50:23:0d:ea:
89:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:42:99:36:17:12:D4:37:FE:34:24:23:8B:CA:1C:40:BD:DD:24:0A
X509v3 Authority Key Identifier:
keyid:E1:9F:61:51:A3:47:C7:92:2A:C7:CF:46:99:25:34:43:30:D7:24:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ba:47:cd:98:f9:2f:49:fd:b7:3e:71:fe:06:a8:ae:22:1e:
52:67:b6:9d:77:de:46:d0:45:52:fb:70:2d:5c:8e:ce:09:e4:
1f:a7:6c:c2:45:ff:5d:c7:79:3c:42:4b:45:e7:0b:cb:6f:34:
e4:df:c5:5d:1a:d5:f8:e4:da:71:44:f9:0e:c0:00:96:bd:77:
77:71:90:68:e6:64:e8:2a:56:a9:e9:44:a8:87:91:a0:19:e4:
6f:9a:0b:ba:a7:d5:8d:56:08:c6:ce:6c:a3:c0:af:40:cf:48:
d9:81:57:88:e1:b5:22:97:64:b9:6f:86:f3:b8:15:a3:25:d2:
14:96:74:58:19:23:76:41:12:24:32:4d:16:b1:d9:6d:ce:8e:
24:ae:86:81:53:4b:e5:08:bd:90:88:cf:28:ea:49:ee:e5:86:
65:d8:45:09:52:67:49:8f:02:e6:13:7c:22:3b:68:7a:8b:bf:
80:6f:8c:73:81:7d:c2:1f:7e:8d:74:bc:a5:73:0c:a3:61:b6:
bf:ca:a5:12:b1:e1:19:66:bf:4a:58:89:23:5a:69:93:0b:59:
f4:37:1e:94:48:fb:04:86:bd:86:cc:a7:0e:f2:12:d3:98:a3:
a0:bf:96:c2:83:a9:c5:0b:34:21:38:72:4e:cd:a3:33:dc:86:
98:4c:3c:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4jqHkrs9NguMEiNctkxkBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxOWY2MTUxYTM0N2M3OTIyYWM3Y2Y0Njk5MjUzNDQzMzBk
NzI0ZjcwHhcNMjUwNjI4MjIwMDQ0WhcNMjUwNjI5MjIwMDQ0WjAzMTEwLwYDVQQD
EyhhNzQyOTkzNjE3MTJkNDM3ZmUzNDI0MjM4YmNhMWM0MGJkZGQyNDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreRaKPJUoCPd65BWaNKCy4I3/EWc
CuZRCemnsQ4yR8dTn1YbpawtU6GhQk7kxiMU6Qa+YwfH+sAWb7wUUN9fcW6PJq0G
/bwlAp1Rosoxtec7PvbYtqyToqrW8TUPD0YUMSewvzA9KSBevhpHVraMTCTb4Zq2
+2aXDuv+boLMeSOfd08yRHAZFqeWw8ZxcBYnylyKaUWqWG+YR/EqT0AVxwOvICa8
52AlpC14oIQ64NRWFxvpNxz+TJi1W7hqFGKkQc2+gL8WGR+8kpcjUigWP9tGEeqn
c7w3kuhBlfyrCdpIgtvZ0sk4Rbt0Wmf6fYbREldE7X/r83PyeVAjDeqJGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKdCmTYXEtQ3/jQkI4vKHEC93SQKMB8GA1UdIwQY
MBaAFOGfYVGjR8eSKsfPRpklNEMw1yT3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFo5aFVhTkh4NUlxeDg5R21TVTBRekRYSlBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8xMTc5Y2UtMjVkOS00Zjk2LWIxMGYt
NDJkNDkzOWEwNTE5LzEvNFo5aFVhTkh4NUlxeDg5R21TVTBRekRYSlBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS8xMTc5Y2UtMjVkOS00Zjk2LWIxMGYtNDJkNDkzOWEwNTE5
LzEvNFo5aFVhTkh4NUlxeDg5R21TVTBRekRYSlBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjLpHzZj5
L0n9tz5x/gaoriIeUme2nXfeRtBFUvtwLVyOzgnkH6dswkX/Xcd5PEJLRecLy280
5N/FXRrV+OTacUT5DsAAlr13d3GQaOZk6CpWqelEqIeRoBnkb5oLuqfVjVYIxs5s
o8CvQM9I2YFXiOG1IpdkuW+G87gVoyXSFJZ0WBkjdkESJDJNFrHZbc6OJK6GgVNL
5Qi9kIjPKOpJ7uWGZdhFCVJnSY8C5hN8Ijtoeou/gG+Mc4F9wh9+jXS8pXMMo2G2
v8qlErHhGWa/SliJI1ppkwtZ9DcelEj7BIa9hsynDvIS05ijoL+WwoOpxQs0IThy
Ts2jM9yGmEw8Bw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:21:14 2025 by rpki-client