Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/8762f5-fae3-45f6-a79b-caedbd7140e9/1/4npTBThB5i83hzAr07PcF66DR6M.mft
File: 4npTBThB5i83hzAr07PcF66DR6M.mft (raw, json)
Hash identifier: KKPeFQ5xMrMg04ZGqYUZcVZ9q5o+KADR0F/0Fxqv3RI=
Subject key identifier: EB:A9:CD:81:2E:67:FD:4D:CE:20:DB:03:E9:20:91:71:03:37:B6:14
Authority key identifier: E2:7A:53:05:38:41:E6:2F:37:87:30:2B:D3:B3:DC:17:AE:83:47:A3
Certificate issuer: /CN=e27a53053841e62f3787302bd3b3dc17ae8347a3
Certificate serial: 0198D54EAAD9DB6990253DD24DF9609A5962
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4npTBThB5i83hzAr07PcF66DR6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/8762f5-fae3-45f6-a79b-caedbd7140e9/1/4npTBThB5i83hzAr07PcF66DR6M.mft
Manifest number: 09A9
Signing time: Sat 23 Aug 2025 05:02:39 +0000
Manifest this update: Sat 23 Aug 2025 05:02:39 +0000
Manifest next update: Sun 24 Aug 2025 05:02:39 +0000
Files and hashes: 1: 4npTBThB5i83hzAr07PcF66DR6M.crl (hash: yEQ7NFo70GrIAdeLEMnEaEEt/j9UvV7dWSbQFO9vPfc=)
2: uZUj605EbQuLLmDhIGYJBIbMOqc.roa (hash: 50VcK1tqnjE/JlOLPdg4sk24p7Wrw6D6UQSl3XM780U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/8762f5-fae3-45f6-a79b-caedbd7140e9/1/4npTBThB5i83hzAr07PcF66DR6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/8762f5-fae3-45f6-a79b-caedbd7140e9/1/4npTBThB5i83hzAr07PcF66DR6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/4npTBThB5i83hzAr07PcF66DR6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:aa:d9:db:69:90:25:3d:d2:4d:f9:60:9a:59:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e27a53053841e62f3787302bd3b3dc17ae8347a3
Validity
Not Before: Aug 23 05:02:39 2025 GMT
Not After : Aug 24 05:02:39 2025 GMT
Subject: CN=eba9cd812e67fd4dce20db03e92091710337b614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:00:d0:82:68:dd:7e:fa:45:b5:97:38:0c:dd:
20:df:52:91:82:f7:bb:d4:cc:a5:f7:a2:59:80:33:
f2:fd:72:2d:9e:cf:1c:73:d8:14:46:d8:8c:b4:5a:
5c:76:95:ee:c9:be:89:a4:75:fc:0d:ef:76:ac:57:
99:ac:6d:2e:75:50:b3:bc:93:11:c6:33:ee:45:7c:
59:ce:ec:ef:41:8c:b4:c3:a4:00:4b:b8:2a:d9:6c:
1b:90:32:ca:67:d5:30:a3:45:dd:dc:3c:4a:c3:6b:
c9:5a:d2:f4:1a:fa:d5:d0:72:e7:12:73:99:e3:6c:
13:57:d7:d7:dd:51:c2:44:f6:46:eb:99:f2:7c:56:
85:5b:a4:c4:19:ae:a5:f4:14:fb:2d:57:00:0a:cf:
1e:34:77:f4:dd:1e:1e:0d:a0:82:2e:9f:2c:0e:d5:
d1:39:b9:76:70:8d:e1:df:ac:ff:3c:6b:55:3e:12:
22:96:e9:0b:0c:45:4c:cb:fb:85:56:1b:57:e4:aa:
5e:bb:c5:b5:47:d4:37:6d:bc:fb:27:0f:6d:2f:7a:
9b:97:06:db:42:29:46:0f:12:92:c3:3c:f6:79:87:
0d:4c:31:44:8c:88:cd:16:75:9f:e2:60:4c:15:05:
28:d6:b2:dd:14:dd:a0:51:65:f6:50:4f:d4:19:f1:
a8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A9:CD:81:2E:67:FD:4D:CE:20:DB:03:E9:20:91:71:03:37:B6:14
X509v3 Authority Key Identifier:
keyid:E2:7A:53:05:38:41:E6:2F:37:87:30:2B:D3:B3:DC:17:AE:83:47:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4npTBThB5i83hzAr07PcF66DR6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8762f5-fae3-45f6-a79b-caedbd7140e9/1/4npTBThB5i83hzAr07PcF66DR6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8762f5-fae3-45f6-a79b-caedbd7140e9/1/4npTBThB5i83hzAr07PcF66DR6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:f0:d8:bc:46:d8:27:63:e9:f1:1d:11:15:f3:d4:0c:2d:c3:
38:2f:d5:aa:26:59:02:27:a0:7e:9d:21:96:ac:80:63:56:a0:
f9:66:68:4f:61:df:20:47:01:4a:86:3a:f3:9b:89:8e:5a:0d:
ca:f3:33:73:0b:9c:47:ba:d8:07:8f:b8:1a:3a:8b:a8:6a:89:
6d:14:7e:ff:cb:3e:d1:ef:32:0f:44:29:dc:df:6a:22:aa:33:
29:8c:37:d5:ef:77:eb:bc:2e:b1:a1:63:7c:9d:9d:d6:a0:52:
33:d0:48:0c:cb:46:75:9c:4a:bb:ee:3b:9f:c1:31:15:08:ac:
6a:98:e0:30:e8:03:49:39:a9:88:c8:a3:00:30:bc:b4:b6:f9:
e0:82:9d:40:bd:83:b7:36:38:bd:32:2a:e5:15:33:64:4a:49:
90:49:0b:b0:34:38:fa:01:c1:52:09:88:e1:ca:ca:7b:c6:1e:
e6:71:b9:e6:01:2d:c3:65:b2:89:47:ce:25:30:70:24:fa:a1:
9f:47:e6:d0:85:59:59:c8:76:7d:b6:d3:3d:94:b2:d3:cd:70:
37:20:91:07:67:1c:f2:6e:1b:0e:ea:c9:7b:c4:e7:92:54:bf:
d8:18:6e:83:02:39:6e:45:95:ec:9b:37:04:7e:c0:31:b9:c0:
23:78:c5:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTqrZ22mQJT3STflgmlliMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyN2E1MzA1Mzg0MWU2MmYzNzg3MzAyYmQzYjNkYzE3YWU4
MzQ3YTMwHhcNMjUwODIzMDUwMjM5WhcNMjUwODI0MDUwMjM5WjAzMTEwLwYDVQQD
EyhlYmE5Y2Q4MTJlNjdmZDRkY2UyMGRiMDNlOTIwOTE3MTAzMzdiNjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ADQgmjdfvpFtZc4DN0g31KRgve7
1Myl96JZgDPy/XItns8cc9gURtiMtFpcdpXuyb6JpHX8De92rFeZrG0udVCzvJMR
xjPuRXxZzuzvQYy0w6QAS7gq2WwbkDLKZ9Uwo0Xd3DxKw2vJWtL0GvrV0HLnEnOZ
42wTV9fX3VHCRPZG65nyfFaFW6TEGa6l9BT7LVcACs8eNHf03R4eDaCCLp8sDtXR
Obl2cI3h36z/PGtVPhIilukLDEVMy/uFVhtX5Kpeu8W1R9Q3bbz7Jw9tL3qblwbb
QilGDxKSwzz2eYcNTDFEjIjNFnWf4mBMFQUo1rLdFN2gUWX2UE/UGfGoaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOupzYEuZ/1NziDbA+kgkXEDN7YUMB8GA1UdIwQY
MBaAFOJ6UwU4QeYvN4cwK9Oz3Beug0ejMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNG5wVEJUaEI1aTgzaHpBcjA3UGNGNjZEUjZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny84NzYyZjUtZmFlMy00NWY2LWE3OWIt
Y2FlZGJkNzE0MGU5LzEvNG5wVEJUaEI1aTgzaHpBcjA3UGNGNjZEUjZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny84NzYyZjUtZmFlMy00NWY2LWE3OWItY2FlZGJkNzE0MGU5
LzEvNG5wVEJUaEI1aTgzaHpBcjA3UGNGNjZEUjZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoPDYvEbY
J2Pp8R0RFfPUDC3DOC/VqiZZAiegfp0hlqyAY1ag+WZoT2HfIEcBSoY685uJjloN
yvMzcwucR7rYB4+4GjqLqGqJbRR+/8s+0e8yD0Qp3N9qIqozKYw31e9367wusaFj
fJ2d1qBSM9BIDMtGdZxKu+47n8ExFQisapjgMOgDSTmpiMijADC8tLb54IKdQL2D
tzY4vTIq5RUzZEpJkEkLsDQ4+gHBUgmI4crKe8Ye5nG55gEtw2WyiUfOJTBwJPqh
n0fm0IVZWch2fbbTPZSy081wNyCRB2cc8m4bDurJe8TnklS/2BhugwI5bkWV7Js3
BH7AMbnAI3jFMQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:20:55 2025 by rpki-client