Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.mft
File: 4Rzmt92aasCzJLpa2HOwr0ajktQ.mft (raw, json)
Hash identifier: lkSBnLJ/jFndod/WyVRM2u9r7dcW3H5uoV2aiXTWS9k=
Subject key identifier: AB:B0:30:65:8D:28:18:F6:81:6C:D8:2E:4C:80:E8:E8:2D:D0:C4:81
Authority key identifier: E1:1C:E6:B7:DD:9A:6A:C0:B3:24:BA:5A:D8:73:B0:AF:46:A3:92:D4
Certificate issuer: /CN=e11ce6b7dd9a6ac0b324ba5ad873b0af46a392d4
Certificate serial: 0198D6298919549BBA332D448FC9CE722E69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Rzmt92aasCzJLpa2HOwr0ajktQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.mft
Manifest number: 5A
Signing time: Sat 23 Aug 2025 09:01:42 +0000
Manifest this update: Sat 23 Aug 2025 09:01:42 +0000
Manifest next update: Sun 24 Aug 2025 09:01:42 +0000
Files and hashes: 1: 4Rzmt92aasCzJLpa2HOwr0ajktQ.crl (hash: umHZACSSw36mg230ALwjdzHAqoP0wLAAuXWa8NI5TFM=)
2: OcyVVi-jBM0G3opoob8aVpqeL7k.roa (hash: Lmj/ERqEQsOvuljDrquPNBuk7nAamhzs4Ctv+M+OeMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Rzmt92aasCzJLpa2HOwr0ajktQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:29:89:19:54:9b:ba:33:2d:44:8f:c9:ce:72:2e:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e11ce6b7dd9a6ac0b324ba5ad873b0af46a392d4
Validity
Not Before: Aug 23 09:01:42 2025 GMT
Not After : Aug 24 09:01:42 2025 GMT
Subject: CN=abb030658d2818f6816cd82e4c80e8e82dd0c481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:74:e2:11:4c:f8:03:21:b8:e9:2e:a8:9e:c8:
90:c1:bd:72:41:3f:b4:05:96:d0:e3:8c:fe:56:dd:
83:90:d4:30:23:6c:10:ae:8d:a8:11:bc:6e:71:a4:
37:95:b3:51:b2:06:85:67:f5:af:eb:92:16:78:f3:
fd:af:5f:54:2e:f7:27:6b:fe:d8:e2:06:e9:ef:1e:
d3:4b:ce:0e:06:df:19:3a:20:2c:26:94:16:46:62:
80:32:6c:c9:2e:75:72:8f:b1:71:90:e9:6e:96:22:
bd:28:86:07:ba:b4:8b:52:80:91:ff:bd:84:4b:55:
50:a6:06:8a:03:92:be:b8:6a:f8:6c:d2:50:85:07:
95:2e:58:28:31:4d:12:a1:f2:a8:98:d0:e2:7b:a7:
24:4e:d6:d3:e2:d4:da:f8:f8:2a:2e:c7:cf:3d:de:
1f:09:0b:64:4b:80:d6:bd:06:3c:5b:3e:4c:90:da:
3a:3d:cc:b2:d7:f5:25:7b:21:3d:6f:33:36:7a:a0:
9d:23:d6:50:16:6d:93:dd:02:f2:1b:ad:20:c2:36:
cb:26:13:56:a1:e9:e6:31:7a:78:99:8b:aa:d5:eb:
4e:7b:e1:1a:a0:c3:1b:e8:ba:e0:f0:b9:3e:a7:02:
fa:f9:30:e0:45:a6:7b:fb:4a:38:30:60:63:17:8a:
32:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:B0:30:65:8D:28:18:F6:81:6C:D8:2E:4C:80:E8:E8:2D:D0:C4:81
X509v3 Authority Key Identifier:
keyid:E1:1C:E6:B7:DD:9A:6A:C0:B3:24:BA:5A:D8:73:B0:AF:46:A3:92:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Rzmt92aasCzJLpa2HOwr0ajktQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:a2:28:f5:2d:df:14:5f:ba:bd:a3:ef:5f:65:b1:0d:e5:37:
24:87:37:10:ad:b3:f5:bf:67:a9:91:8a:77:94:44:ad:14:7b:
de:fc:79:16:c6:04:d2:80:d2:4f:54:c9:2e:27:da:0f:07:b2:
0f:c6:29:1e:a9:42:8d:53:e2:a5:74:22:e8:3e:d6:13:d7:55:
16:c4:d2:ed:b7:b1:7f:49:da:6d:b4:33:24:ff:08:fb:1a:94:
df:f5:39:18:df:7b:12:41:6c:b4:b6:9e:fd:65:cf:fe:f0:2a:
2e:14:20:23:86:d5:37:fe:bc:d1:9e:6c:c8:16:86:70:57:91:
80:e1:78:d4:b1:91:ff:37:e6:f5:8e:9d:7e:c2:9e:e4:e7:6a:
4a:0e:9f:dd:4e:cf:a9:9b:71:cb:e5:03:30:0e:31:d2:b0:66:
b0:7c:74:3d:60:bb:f1:74:2f:6d:3e:24:b2:2b:83:55:8a:b1:
89:6b:d3:ce:c2:a0:ba:28:ab:a1:b9:12:22:45:bd:59:7c:84:
76:ee:63:5c:99:d7:c4:50:c9:68:e4:fc:62:39:fd:3c:2d:3b:
62:c6:ba:c7:21:20:44:f4:e8:01:9b:63:4d:fb:52:81:f1:bf:
e3:bb:c7:ad:2e:2b:12:3c:53:52:45:9f:01:ac:19:35:63:9e:
2c:33:72:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWKYkZVJu6My1Ej8nOci5pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMWNlNmI3ZGQ5YTZhYzBiMzI0YmE1YWQ4NzNiMGFmNDZh
MzkyZDQwHhcNMjUwODIzMDkwMTQyWhcNMjUwODI0MDkwMTQyWjAzMTEwLwYDVQQD
EyhhYmIwMzA2NThkMjgxOGY2ODE2Y2Q4MmU0YzgwZThlODJkZDBjNDgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7nTiEUz4AyG46S6onsiQwb1yQT+0
BZbQ44z+Vt2DkNQwI2wQro2oEbxucaQ3lbNRsgaFZ/Wv65IWePP9r19ULvcna/7Y
4gbp7x7TS84OBt8ZOiAsJpQWRmKAMmzJLnVyj7FxkOluliK9KIYHurSLUoCR/72E
S1VQpgaKA5K+uGr4bNJQhQeVLlgoMU0SofKomNDie6ckTtbT4tTa+PgqLsfPPd4f
CQtkS4DWvQY8Wz5MkNo6Pcyy1/UleyE9bzM2eqCdI9ZQFm2T3QLyG60gwjbLJhNW
oenmMXp4mYuq1etOe+EaoMMb6Lrg8Lk+pwL6+TDgRaZ7+0o4MGBjF4oyHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKuwMGWNKBj2gWzYLkyA6Ogt0MSBMB8GA1UdIwQY
MBaAFOEc5rfdmmrAsyS6WthzsK9Go5LUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFJ6bXQ5MmFhc0N6SkxwYTJIT3dyMGFqa3RRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy82MWRiNGUtM2VmYy00NjJkLWFiMWYt
ZTU5MGU2YjRjZDBlLzEvNFJ6bXQ5MmFhc0N6SkxwYTJIT3dyMGFqa3RRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy82MWRiNGUtM2VmYy00NjJkLWFiMWYtZTU5MGU2YjRjZDBl
LzEvNFJ6bXQ5MmFhc0N6SkxwYTJIT3dyMGFqa3RRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANqIo9S3f
FF+6vaPvX2WxDeU3JIc3EK2z9b9nqZGKd5RErRR73vx5FsYE0oDST1TJLifaDwey
D8YpHqlCjVPipXQi6D7WE9dVFsTS7bexf0nabbQzJP8I+xqU3/U5GN97EkFstLae
/WXP/vAqLhQgI4bVN/680Z5syBaGcFeRgOF41LGR/zfm9Y6dfsKe5OdqSg6f3U7P
qZtxy+UDMA4x0rBmsHx0PWC78XQvbT4ksiuDVYqxiWvTzsKguiirobkSIkW9WXyE
du5jXJnXxFDJaOT8Yjn9PC07Ysa6xyEgRPToAZtjTftSgfG/47vHrS4rEjxTUkWf
AawZNWOeLDNy5A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:15:34 2025 by rpki-client