Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.mft
File: b4E3h12v_gGPo4rUPMaKH6szXvg.mft (raw, json)
Hash identifier: Mf4tOhuIyXZ9sjOBvjWZWCyHn91QAd9vH3J0BND4HJw=
Subject key identifier: 04:C0:FC:EF:6E:D4:D5:D3:64:E7:F5:37:FF:08:47:ED:F5:C3:02:1F
Authority key identifier: 6F:81:37:87:5D:AF:FE:01:8F:A3:8A:D4:3C:C6:8A:1F:AB:33:5E:F8
Certificate issuer: /CN=6f8137875daffe018fa38ad43cc68a1fab335ef8
Certificate serial: 0198D5F16DB423B9D28856E07CCE5F8D2138
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4E3h12v_gGPo4rUPMaKH6szXvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.mft
Manifest number: 0224
Signing time: Sat 23 Aug 2025 08:00:25 +0000
Manifest this update: Sat 23 Aug 2025 08:00:25 +0000
Manifest next update: Sun 24 Aug 2025 08:00:25 +0000
Files and hashes: 1: E8IBaZpVVPVTT3vcZdwsZeHwPG4.roa (hash: 0UXW9577f81NC0CmIqC0W/KDB1+9xji40a5s/Ktdi/g=)
2: b4E3h12v_gGPo4rUPMaKH6szXvg.crl (hash: lKoCtiuBlYpW5T6t7T8FI4xH9TFxZ0IBvWzyrda/CPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4E3h12v_gGPo4rUPMaKH6szXvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:6d:b4:23:b9:d2:88:56:e0:7c:ce:5f:8d:21:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f8137875daffe018fa38ad43cc68a1fab335ef8
Validity
Not Before: Aug 23 08:00:25 2025 GMT
Not After : Aug 24 08:00:25 2025 GMT
Subject: CN=04c0fcef6ed4d5d364e7f537ff0847edf5c3021f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b2:86:af:04:2d:cf:d9:5d:cb:a1:c7:40:da:
d3:e3:f7:45:63:0c:cf:dc:46:0e:4f:bb:d1:7e:2f:
30:47:b2:ea:ea:a6:e1:fe:45:3e:b6:02:f0:11:bc:
12:5e:b5:10:b6:11:ee:8a:9b:cc:9f:55:13:ce:ec:
1f:65:45:94:ea:18:a2:a5:20:d3:7a:b9:d3:f0:f7:
6f:37:e5:24:fc:a3:10:f6:63:78:fc:af:b1:dc:6c:
67:89:1a:1d:12:14:28:be:7c:4e:89:0c:36:b6:6d:
26:56:3e:bc:ec:70:c6:ff:7e:22:c2:c0:0e:63:8b:
75:6e:fb:ec:1d:84:ba:d5:f0:55:a3:ba:ad:e5:ea:
d0:df:47:93:21:2f:f4:71:56:94:91:dd:d8:8f:5b:
ad:89:df:29:ff:4c:1e:73:77:ab:bd:83:14:3d:3f:
ac:ff:5d:37:18:58:eb:2a:fa:71:58:59:80:45:16:
9f:05:2b:cc:4d:f9:96:ee:33:77:e4:9a:c6:08:96:
82:00:6a:b0:1d:0b:d0:d7:99:37:75:e5:6e:f4:23:
f1:0e:ae:91:e1:c9:3b:e0:5b:e9:a8:69:b4:12:c1:
da:f2:20:a5:b2:47:18:d0:d9:ef:18:16:e3:df:18:
57:35:cc:85:24:c2:25:5f:6e:0b:50:3f:a7:35:70:
8b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C0:FC:EF:6E:D4:D5:D3:64:E7:F5:37:FF:08:47:ED:F5:C3:02:1F
X509v3 Authority Key Identifier:
keyid:6F:81:37:87:5D:AF:FE:01:8F:A3:8A:D4:3C:C6:8A:1F:AB:33:5E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4E3h12v_gGPo4rUPMaKH6szXvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:5b:b0:e5:3d:f7:e0:a2:8f:0f:b5:68:5b:5d:94:7b:e7:33:
a1:c0:8c:2b:7c:d1:cc:51:bf:2f:e7:26:4c:65:02:67:76:60:
d4:7c:81:a8:8c:55:76:69:64:27:ee:e7:e6:77:99:19:01:ad:
2f:32:cf:14:c5:f9:ba:79:ee:6f:d9:38:1c:b2:bc:e5:2d:0f:
6b:17:29:0e:d2:f8:41:b5:2b:f7:da:c2:28:ad:9e:69:96:70:
8f:5d:dd:bf:43:ac:1a:df:48:96:e9:33:45:44:6e:a0:24:18:
99:f8:68:9f:51:81:af:fb:ff:14:ff:00:ed:6e:01:15:9a:40:
9b:57:ef:51:70:b0:45:86:fa:1d:5f:af:d8:2f:06:5f:0d:75:
24:1d:f4:3e:f8:90:06:76:56:03:c3:42:61:58:d6:e3:54:27:
74:1d:b1:c2:ee:67:52:57:0d:d4:62:21:bf:0b:b2:f6:8d:fa:
e8:31:3a:cb:80:65:fd:85:46:c8:41:3b:5e:6f:47:47:58:4f:
83:d2:dd:64:10:d9:ce:c6:a3:26:b2:f9:74:f2:e2:82:d2:09:
66:43:5c:55:7e:52:1f:d3:6e:3d:a5:2a:f2:78:30:1a:b5:9a:
36:e7:d2:40:cf:55:88:f9:09:d2:8c:ae:3a:be:ca:47:34:e7:
b3:0b:75:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8W20I7nSiFbgfM5fjSE4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODEzNzg3NWRhZmZlMDE4ZmEzOGFkNDNjYzY4YTFmYWIz
MzVlZjgwHhcNMjUwODIzMDgwMDI1WhcNMjUwODI0MDgwMDI1WjAzMTEwLwYDVQQD
EygwNGMwZmNlZjZlZDRkNWQzNjRlN2Y1MzdmZjA4NDdlZGY1YzMwMjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLKGrwQtz9ldy6HHQNrT4/dFYwzP
3EYOT7vRfi8wR7Lq6qbh/kU+tgLwEbwSXrUQthHuipvMn1UTzuwfZUWU6hiipSDT
ernT8PdvN+Uk/KMQ9mN4/K+x3GxniRodEhQovnxOiQw2tm0mVj687HDG/34iwsAO
Y4t1bvvsHYS61fBVo7qt5erQ30eTIS/0cVaUkd3Yj1utid8p/0wec3ervYMUPT+s
/103GFjrKvpxWFmARRafBSvMTfmW7jN35JrGCJaCAGqwHQvQ15k3deVu9CPxDq6R
4ck74FvpqGm0EsHa8iClskcY0NnvGBbj3xhXNcyFJMIlX24LUD+nNXCLwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFATA/O9u1NXTZOf1N/8IR+31wwIfMB8GA1UdIwQY
MBaAFG+BN4ddr/4Bj6OK1DzGih+rM174MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRFM2gxMnZfZ0dQbzRyVVBNYUtINnN6WHZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8xZWJmNTUtZTdhNC00MDI2LTlhMjIt
ODg4OWVmMTMxZDg5LzEvYjRFM2gxMnZfZ0dQbzRyVVBNYUtINnN6WHZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8xZWJmNTUtZTdhNC00MDI2LTlhMjItODg4OWVmMTMxZDg5
LzEvYjRFM2gxMnZfZ0dQbzRyVVBNYUtINnN6WHZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC1uw5T33
4KKPD7VoW12Ue+czocCMK3zRzFG/L+cmTGUCZ3Zg1HyBqIxVdmlkJ+7n5neZGQGt
LzLPFMX5unnub9k4HLK85S0PaxcpDtL4QbUr99rCKK2eaZZwj13dv0OsGt9Ilukz
RURuoCQYmfhon1GBr/v/FP8A7W4BFZpAm1fvUXCwRYb6HV+v2C8GXw11JB30PviQ
BnZWA8NCYVjW41QndB2xwu5nUlcN1GIhvwuy9o366DE6y4Bl/YVGyEE7Xm9HR1hP
g9LdZBDZzsajJrL5dPLigtIJZkNcVX5SH9NuPaUq8ngwGrWaNufSQM9ViPkJ0oyu
Or7KRzTnswt1Pw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:27:42 2025 by rpki-client