Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/39a47f-1bfd-440e-b4ef-b0701b8b40c7/1/4z5VR668F6SCuM0e6BfdjO_2o68.mft
File: 4z5VR668F6SCuM0e6BfdjO_2o68.mft (raw, json)
Hash identifier: k9ArLvuVBtwWQkC2bppGQnH1nblL2VktxwU6KnpPYIM=
Subject key identifier: BC:8E:4F:9A:09:46:AE:C8:9C:68:A7:18:E6:59:0C:0C:B8:92:EE:B6
Authority key identifier: E3:3E:55:47:AE:BC:17:A4:82:B8:CD:1E:E8:17:DD:8C:EF:F6:A3:AF
Certificate issuer: /CN=e33e5547aebc17a482b8cd1ee817dd8ceff6a3af
Certificate serial: 0198D4E01458B611E265F4243CDFA4AC08BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4z5VR668F6SCuM0e6BfdjO_2o68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/39a47f-1bfd-440e-b4ef-b0701b8b40c7/1/4z5VR668F6SCuM0e6BfdjO_2o68.mft
Manifest number: 0E2A
Signing time: Sat 23 Aug 2025 03:01:51 +0000
Manifest this update: Sat 23 Aug 2025 03:01:51 +0000
Manifest next update: Sun 24 Aug 2025 03:01:51 +0000
Files and hashes: 1: 4z5VR668F6SCuM0e6BfdjO_2o68.crl (hash: dHBb03jJi3bHfjd7BjwTxg2Nd5FV1RH6ZbQpgd8IlCI=)
2: nlxhNU09PYV8ICYRds67uFQ8SD4.roa (hash: 5Mkpw05F7xKd7rn+KAmOk8IiGnvRNLjGed3AF2L+Quk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/39a47f-1bfd-440e-b4ef-b0701b8b40c7/1/4z5VR668F6SCuM0e6BfdjO_2o68.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/39a47f-1bfd-440e-b4ef-b0701b8b40c7/1/4z5VR668F6SCuM0e6BfdjO_2o68.mft
rsync://rpki.ripe.net/repository/DEFAULT/4z5VR668F6SCuM0e6BfdjO_2o68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:14:58:b6:11:e2:65:f4:24:3c:df:a4:ac:08:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e33e5547aebc17a482b8cd1ee817dd8ceff6a3af
Validity
Not Before: Aug 23 03:01:51 2025 GMT
Not After : Aug 24 03:01:51 2025 GMT
Subject: CN=bc8e4f9a0946aec89c68a718e6590c0cb892eeb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:b3:69:72:46:c2:34:9c:a2:10:49:fc:9f:f0:
96:db:fe:50:ff:80:56:b4:65:94:f4:f8:40:49:63:
78:95:1c:2b:f4:29:e9:6d:2a:6f:45:c2:89:cf:f1:
0e:31:a0:fa:71:86:94:28:1a:b4:bb:5f:6f:d9:67:
9a:b8:d4:7f:55:59:c8:e5:0a:ab:3b:74:09:ec:04:
8d:a9:e3:2e:aa:96:c4:e5:29:33:61:03:04:ec:9f:
d5:e7:b6:8a:60:69:26:a8:5e:19:d6:52:d8:bb:4a:
1d:50:5b:b0:97:8a:85:09:40:0d:52:fd:e6:44:98:
c8:e2:3e:ba:5f:c3:ff:32:2c:96:9d:d3:87:02:3b:
aa:79:a4:11:94:86:33:86:bc:ea:be:3c:f7:e2:43:
a5:c1:8a:e4:30:c0:8a:a0:8a:f3:71:9b:66:d3:2b:
7e:ac:68:33:ff:4b:13:89:03:34:de:af:37:49:a5:
b1:09:91:8b:5c:63:cf:2b:14:50:50:e8:8e:66:6a:
17:dc:46:fe:2b:a1:4d:82:32:01:e7:34:da:83:41:
6f:ee:aa:91:c3:62:56:a1:06:91:6c:a3:53:ce:74:
9e:2c:be:4d:a3:11:0c:39:0f:12:00:69:69:0d:02:
67:57:f2:9a:f8:b1:2a:62:1c:04:f7:63:7d:be:b2:
d6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:8E:4F:9A:09:46:AE:C8:9C:68:A7:18:E6:59:0C:0C:B8:92:EE:B6
X509v3 Authority Key Identifier:
keyid:E3:3E:55:47:AE:BC:17:A4:82:B8:CD:1E:E8:17:DD:8C:EF:F6:A3:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4z5VR668F6SCuM0e6BfdjO_2o68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/39a47f-1bfd-440e-b4ef-b0701b8b40c7/1/4z5VR668F6SCuM0e6BfdjO_2o68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/39a47f-1bfd-440e-b4ef-b0701b8b40c7/1/4z5VR668F6SCuM0e6BfdjO_2o68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:61:4b:a7:b2:da:bd:c9:f3:2e:c5:63:5e:50:46:7b:5a:a8:
a6:bb:66:73:be:04:41:b3:66:c1:24:35:fb:4e:a3:9c:c8:c3:
bf:a2:53:f3:50:d9:90:92:13:c1:53:c2:19:67:2e:80:10:08:
fc:e6:e1:62:ed:b0:36:d4:7f:3f:10:6c:a0:21:f7:80:24:1c:
36:06:f8:69:ca:72:6f:84:96:0f:38:66:09:22:fd:dc:0d:85:
fa:40:58:b2:46:d7:33:7a:74:79:c5:da:3b:ca:5e:17:a9:72:
97:9d:3a:38:7d:dd:b1:2c:7c:ca:ee:02:4c:fb:a3:76:02:1a:
8f:82:f6:64:57:f5:bd:cb:fe:bb:d4:3f:38:99:47:79:47:48:
60:d2:1e:6f:be:9e:cd:86:66:a5:75:83:6f:31:42:e9:f5:8b:
61:b8:39:07:99:db:13:28:de:b8:97:31:c3:2c:81:d1:d0:bf:
d4:b9:de:7c:ba:2e:4f:7a:aa:a7:fa:49:a5:bd:48:6b:fe:7c:
30:01:f3:e8:1d:ef:0b:e1:9f:dd:0d:94:1a:47:bc:97:73:7b:
5a:99:21:7e:e0:a2:9f:29:52:e3:aa:96:0a:7c:2a:56:e0:3c:
20:80:37:89:2b:49:c4:dc:b1:e9:ae:53:e3:97:9e:3e:ab:d8:
0f:90:82:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4BRYthHiZfQkPN+krAi/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzM2U1NTQ3YWViYzE3YTQ4MmI4Y2QxZWU4MTdkZDhjZWZm
NmEzYWYwHhcNMjUwODIzMDMwMTUxWhcNMjUwODI0MDMwMTUxWjAzMTEwLwYDVQQD
EyhiYzhlNGY5YTA5NDZhZWM4OWM2OGE3MThlNjU5MGMwY2I4OTJlZWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+bNpckbCNJyiEEn8n/CW2/5Q/4BW
tGWU9PhASWN4lRwr9CnpbSpvRcKJz/EOMaD6cYaUKBq0u19v2WeauNR/VVnI5Qqr
O3QJ7ASNqeMuqpbE5SkzYQME7J/V57aKYGkmqF4Z1lLYu0odUFuwl4qFCUANUv3m
RJjI4j66X8P/MiyWndOHAjuqeaQRlIYzhrzqvjz34kOlwYrkMMCKoIrzcZtm0yt+
rGgz/0sTiQM03q83SaWxCZGLXGPPKxRQUOiOZmoX3Eb+K6FNgjIB5zTag0Fv7qqR
w2JWoQaRbKNTznSeLL5NoxEMOQ8SAGlpDQJnV/Ka+LEqYhwE92N9vrLWLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLyOT5oJRq7InGinGOZZDAy4ku62MB8GA1UdIwQY
MBaAFOM+VUeuvBekgrjNHugX3Yzv9qOvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHo1VlI2NjhGNlNDdU0wZTZCZmRqT18ybzY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8zOWE0N2YtMWJmZC00NDBlLWI0ZWYt
YjA3MDFiOGI0MGM3LzEvNHo1VlI2NjhGNlNDdU0wZTZCZmRqT18ybzY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS8zOWE0N2YtMWJmZC00NDBlLWI0ZWYtYjA3MDFiOGI0MGM3
LzEvNHo1VlI2NjhGNlNDdU0wZTZCZmRqT18ybzY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtmFLp7La
vcnzLsVjXlBGe1qoprtmc74EQbNmwSQ1+06jnMjDv6JT81DZkJITwVPCGWcugBAI
/ObhYu2wNtR/PxBsoCH3gCQcNgb4acpyb4SWDzhmCSL93A2F+kBYskbXM3p0ecXa
O8peF6lyl506OH3dsSx8yu4CTPujdgIaj4L2ZFf1vcv+u9Q/OJlHeUdIYNIeb76e
zYZmpXWDbzFC6fWLYbg5B5nbEyjeuJcxwyyB0dC/1LnefLouT3qqp/pJpb1Ia/58
MAHz6B3vC+Gf3Q2UGke8l3N7WpkhfuCinylS46qWCnwqVuA8IIA3iStJxNyx6a5T
45eePqvYD5CC3A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:22 2025 by rpki-client