Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft
File: 4aWhf1DBNbGFHOwsdrD9cPncx54.mft (raw, json)
Hash identifier: OCOGOBM0ERlbIlozPhu18HNoU4Hpoxe5H3eZQYLZTYk=
Subject key identifier: A1:C9:7E:C6:B3:61:26:8D:E2:C2:A3:9B:BE:04:D9:26:E7:EE:C6:27
Authority key identifier: E1:A5:A1:7F:50:C1:35:B1:85:1C:EC:2C:76:B0:FD:70:F9:DC:C7:9E
Certificate issuer: /CN=e1a5a17f50c135b1851cec2c76b0fd70f9dcc79e
Certificate serial: 0197B6A14090981EBE4DFBF46DD8A2A9FD5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4aWhf1DBNbGFHOwsdrD9cPncx54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft
Manifest number: 042F
Signing time: Sat 28 Jun 2025 13:01:50 +0000
Manifest this update: Sat 28 Jun 2025 13:01:50 +0000
Manifest next update: Sun 29 Jun 2025 13:01:50 +0000
Files and hashes: 1: 4aWhf1DBNbGFHOwsdrD9cPncx54.crl (hash: vWnlaScf6YI9YJQ+2w1jIlKRohXUhV3K2Q+LdLYADww=)
2: hfRFZKITz5hu-gPvGNJloOjkOMc.roa (hash: D3UvYF9mG8nUIanHUFk48MzJyJwGvptN1rrytDvh8Eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft
rsync://rpki.ripe.net/repository/DEFAULT/4aWhf1DBNbGFHOwsdrD9cPncx54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:40:90:98:1e:be:4d:fb:f4:6d:d8:a2:a9:fd:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1a5a17f50c135b1851cec2c76b0fd70f9dcc79e
Validity
Not Before: Jun 28 13:01:50 2025 GMT
Not After : Jun 29 13:01:50 2025 GMT
Subject: CN=a1c97ec6b361268de2c2a39bbe04d926e7eec627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:65:97:1e:8c:e9:5e:92:01:26:5b:a9:76:30:
64:fb:24:9a:8c:c0:13:3f:cc:9a:bd:46:6e:c1:3b:
b1:b7:97:13:ad:41:21:e7:97:46:d8:88:32:7a:76:
0d:dc:db:74:af:7b:7b:0a:3f:bb:38:fb:65:5b:6c:
2d:14:50:b0:b8:92:34:c7:c6:f0:c8:74:67:60:04:
e3:ab:f7:4e:c1:56:cd:01:86:45:d7:80:3a:07:2c:
0d:30:c1:d8:df:57:35:54:03:fc:e2:06:d5:56:86:
3d:e9:19:1a:b3:b7:67:79:d9:00:7e:99:aa:46:5c:
b4:74:cb:c5:b0:c5:10:a6:60:f4:e5:68:41:f2:24:
11:f6:20:dc:9d:f0:34:e4:5b:07:97:e8:b9:82:f1:
bc:cc:c9:e5:e2:14:13:e1:d4:a7:6e:cb:6d:f2:98:
79:38:23:28:bd:b9:40:c3:2a:70:36:5c:0c:2c:e3:
70:8e:73:0c:73:50:14:71:86:21:22:c2:14:3c:9d:
8b:fe:e8:0c:8e:f2:11:d6:79:fd:2e:c8:ec:04:cc:
9d:48:ba:2c:c1:b4:02:34:bb:35:28:dd:03:ed:52:
b0:ab:ac:6a:00:d5:5b:bc:19:cb:b7:41:74:e6:23:
cf:11:d7:ce:5d:36:79:d8:58:8d:80:98:64:f5:dc:
47:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C9:7E:C6:B3:61:26:8D:E2:C2:A3:9B:BE:04:D9:26:E7:EE:C6:27
X509v3 Authority Key Identifier:
keyid:E1:A5:A1:7F:50:C1:35:B1:85:1C:EC:2C:76:B0:FD:70:F9:DC:C7:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4aWhf1DBNbGFHOwsdrD9cPncx54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:be:84:13:b0:5c:e6:27:c9:62:32:40:af:42:a5:21:14:d4:
95:67:6f:22:dc:22:96:5e:9c:e5:a8:cd:0c:6e:85:1a:30:04:
a4:39:ea:23:f9:a7:97:47:0f:7b:c0:9d:34:11:dd:f2:dd:7b:
af:0d:c5:ef:b9:c2:fc:e7:0c:85:cd:c9:74:d2:1b:b3:89:db:
07:4e:cd:d4:7f:30:54:b8:fa:86:05:62:fe:98:23:ca:7a:91:
6d:34:6d:90:42:ee:8c:77:a6:b2:ba:22:38:c8:f5:63:b2:fc:
51:67:a2:19:5b:14:8d:c1:2c:02:c7:ed:bf:43:0c:7d:7b:06:
5d:69:d8:e3:92:09:71:4c:16:9a:20:0f:15:83:70:64:33:77:
c0:df:dc:4c:80:ec:0a:81:0c:00:54:90:ff:85:8f:d1:cc:9c:
e7:73:4b:9e:c9:57:f9:14:85:ca:49:ab:51:72:20:42:fe:df:
43:18:a1:2d:64:49:9a:c5:27:7a:60:87:de:c0:3a:77:ac:75:
e0:2d:24:1b:e8:a1:45:4e:04:8a:52:1c:5a:1b:ea:e9:0f:5b:
a4:dd:8b:39:02:b2:ff:03:19:76:1d:40:20:8c:d9:63:b9:a7:
ab:6a:7b:65:66:14:b6:bd:32:85:93:f1:8a:57:52:19:e5:9f:
e3:26:1d:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oUCQmB6+Tfv0bdiiqf1dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxYTVhMTdmNTBjMTM1YjE4NTFjZWMyYzc2YjBmZDcwZjlk
Y2M3OWUwHhcNMjUwNjI4MTMwMTUwWhcNMjUwNjI5MTMwMTUwWjAzMTEwLwYDVQQD
EyhhMWM5N2VjNmIzNjEyNjhkZTJjMmEzOWJiZTA0ZDkyNmU3ZWVjNjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGWXHozpXpIBJlupdjBk+ySajMAT
P8yavUZuwTuxt5cTrUEh55dG2IgyenYN3Nt0r3t7Cj+7OPtlW2wtFFCwuJI0x8bw
yHRnYATjq/dOwVbNAYZF14A6BywNMMHY31c1VAP84gbVVoY96Rkas7dnedkAfpmq
Rly0dMvFsMUQpmD05WhB8iQR9iDcnfA05FsHl+i5gvG8zMnl4hQT4dSnbstt8ph5
OCMovblAwypwNlwMLONwjnMMc1AUcYYhIsIUPJ2L/ugMjvIR1nn9LsjsBMydSLos
wbQCNLs1KN0D7VKwq6xqANVbvBnLt0F05iPPEdfOXTZ52FiNgJhk9dxHjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKHJfsazYSaN4sKjm74E2Sbn7sYnMB8GA1UdIwQY
MBaAFOGloX9QwTWxhRzsLHaw/XD53MeeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGFXaGYxREJOYkdGSE93c2RyRDljUG5jeDU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9mOWY4ZmEtMjk4OC00NDVjLWJlOTQt
OTEzNTc1YzU4ZjRhLzEvNGFXaGYxREJOYkdGSE93c2RyRDljUG5jeDU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9mOWY4ZmEtMjk4OC00NDVjLWJlOTQtOTEzNTc1YzU4ZjRh
LzEvNGFXaGYxREJOYkdGSE93c2RyRDljUG5jeDU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQb6EE7Bc
5ifJYjJAr0KlIRTUlWdvItwill6c5ajNDG6FGjAEpDnqI/mnl0cPe8CdNBHd8t17
rw3F77nC/OcMhc3JdNIbs4nbB07N1H8wVLj6hgVi/pgjynqRbTRtkELujHemsroi
OMj1Y7L8UWeiGVsUjcEsAsftv0MMfXsGXWnY45IJcUwWmiAPFYNwZDN3wN/cTIDs
CoEMAFSQ/4WP0cyc53NLnslX+RSFykmrUXIgQv7fQxihLWRJmsUnemCH3sA6d6x1
4C0kG+ihRU4EilIcWhvq6Q9bpN2LOQKy/wMZdh1AIIzZY7mnq2p7ZWYUtr0yhZPx
ildSGeWf4yYd6w==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:27:33 2025 by rpki-client