Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft
File: 4iC8RpRTmhUCbsVarRmhK8IUwV8.mft (raw, json)
Hash identifier: mfcGoQM7S7ZlSBdK3a1ZONfBu98VokoWhTVFYXjD/1Q=
Subject key identifier: ED:8F:BE:24:55:29:82:6A:B2:BC:AF:90:13:B2:25:E3:8D:CC:AC:08
Authority key identifier: E2:20:BC:46:94:53:9A:15:02:6E:C5:5A:AD:19:A1:2B:C2:14:C1:5F
Certificate issuer: /CN=e220bc4694539a15026ec55aad19a12bc214c15f
Certificate serial: 0197B820FCA33AF10E78712C44660C14CF25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iC8RpRTmhUCbsVarRmhK8IUwV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft
Manifest number: 01A6
Signing time: Sat 28 Jun 2025 20:00:58 +0000
Manifest this update: Sat 28 Jun 2025 20:00:58 +0000
Manifest next update: Sun 29 Jun 2025 20:00:58 +0000
Files and hashes: 1: 4iC8RpRTmhUCbsVarRmhK8IUwV8.crl (hash: tAo4MKYxwWWitQsRMM5G+ThC/0oFS9yv10OiyPLCjc8=)
2: TMvhro726OTEJJjht0Q0a4l2Qas.roa (hash: b1YiQQq/VY4mWfbYJYUD6kOtMlV+ZtaVCwcnWoNMuUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4iC8RpRTmhUCbsVarRmhK8IUwV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:fc:a3:3a:f1:0e:78:71:2c:44:66:0c:14:cf:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e220bc4694539a15026ec55aad19a12bc214c15f
Validity
Not Before: Jun 28 20:00:58 2025 GMT
Not After : Jun 29 20:00:58 2025 GMT
Subject: CN=ed8fbe245529826ab2bcaf9013b225e38dccac08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5a:77:0c:32:38:a7:52:55:10:88:95:32:7b:
1e:96:8b:b3:39:2b:52:64:19:f3:a4:99:24:2a:64:
09:5a:72:79:dd:38:52:df:e5:27:39:a7:7e:9d:c4:
93:7d:88:2f:db:87:25:9a:9c:e9:4a:74:29:94:0b:
f3:7a:79:2a:ca:6e:84:80:fe:ef:93:14:d7:ae:e2:
e6:81:d4:cd:1e:1f:ae:58:d6:06:ac:f1:0c:f0:82:
7d:00:e9:d6:84:ad:9c:0a:d8:0a:46:0d:54:0e:3c:
f1:fd:92:b1:bb:1c:83:bd:0e:2a:8e:ab:19:b8:6a:
c7:bb:e5:3b:59:e4:3a:22:d3:5e:1a:13:c3:8a:a2:
e2:ae:8b:ec:3a:11:89:fb:cc:a6:77:14:ba:2f:3b:
f9:45:0a:79:ae:81:84:bc:79:31:66:d5:c8:65:0f:
28:39:ab:18:06:5c:88:71:70:82:f8:0b:75:c0:6e:
49:8a:f8:6f:c5:c8:47:32:25:86:83:87:8a:d2:9f:
b7:50:88:5b:08:0f:b2:db:1d:0f:91:5f:62:80:cb:
af:94:3e:1e:1a:ce:a3:a6:f0:d2:61:28:0c:f1:dc:
fa:9f:c9:28:fd:df:a2:1f:3a:fa:64:ca:12:58:24:
c2:2c:03:20:b9:1f:6c:55:57:7d:89:2c:41:3b:f9:
b9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:8F:BE:24:55:29:82:6A:B2:BC:AF:90:13:B2:25:E3:8D:CC:AC:08
X509v3 Authority Key Identifier:
keyid:E2:20:BC:46:94:53:9A:15:02:6E:C5:5A:AD:19:A1:2B:C2:14:C1:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iC8RpRTmhUCbsVarRmhK8IUwV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:ee:e0:33:86:21:82:93:a9:35:b4:68:03:88:f8:9b:f3:00:
9d:2c:04:c8:c7:ea:11:f0:c4:88:21:ba:d7:1c:50:21:d0:8c:
47:86:ca:65:fc:fd:52:c7:a5:98:29:f9:78:da:01:67:25:a6:
f7:aa:3f:e7:45:4e:c0:60:e0:a3:c2:ac:61:9e:e1:76:7a:cd:
07:63:bc:6b:9e:36:e7:81:0f:42:22:46:80:7c:97:84:b8:2c:
fd:4f:1b:b0:5c:47:a6:a2:09:68:cc:2e:d3:a5:ed:07:95:63:
55:1f:d9:96:1f:ff:bf:c5:1e:ac:b8:22:bb:d8:35:3c:02:3f:
91:09:14:1e:1f:a7:c4:a1:73:f9:01:25:df:c5:7e:56:37:8c:
0c:97:a7:d5:21:8b:c2:2c:6f:61:c1:29:b8:d3:cc:3d:93:62:
29:e0:8d:2e:3d:d5:bd:37:b1:2b:e8:32:d6:12:c1:f7:83:cf:
57:bd:0c:e2:97:0f:1e:20:ef:f7:05:8c:ae:f0:7c:f8:21:a6:
a7:d7:91:1c:e8:45:24:b8:1f:ea:2c:8c:82:ee:a2:16:12:ac:
68:26:fe:09:63:e3:0f:bf:3f:a6:e0:a7:d3:d2:c8:97:cf:bc:
92:5e:69:67:9b:8c:36:89:ae:97:63:b7:78:d5:1a:ab:d5:ca:
72:29:9d:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4IPyjOvEOeHEsRGYMFM8lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyMjBiYzQ2OTQ1MzlhMTUwMjZlYzU1YWFkMTlhMTJiYzIx
NGMxNWYwHhcNMjUwNjI4MjAwMDU4WhcNMjUwNjI5MjAwMDU4WjAzMTEwLwYDVQQD
EyhlZDhmYmUyNDU1Mjk4MjZhYjJiY2FmOTAxM2IyMjVlMzhkY2NhYzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVp3DDI4p1JVEIiVMnselouzOStS
ZBnzpJkkKmQJWnJ53ThS3+UnOad+ncSTfYgv24clmpzpSnQplAvzenkqym6EgP7v
kxTXruLmgdTNHh+uWNYGrPEM8IJ9AOnWhK2cCtgKRg1UDjzx/ZKxuxyDvQ4qjqsZ
uGrHu+U7WeQ6ItNeGhPDiqLirovsOhGJ+8ymdxS6Lzv5RQp5roGEvHkxZtXIZQ8o
OasYBlyIcXCC+At1wG5JivhvxchHMiWGg4eK0p+3UIhbCA+y2x0PkV9igMuvlD4e
Gs6jpvDSYSgM8dz6n8ko/d+iHzr6ZMoSWCTCLAMguR9sVVd9iSxBO/m5XQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO2PviRVKYJqsryvkBOyJeONzKwIMB8GA1UdIwQY
MBaAFOIgvEaUU5oVAm7FWq0ZoSvCFMFfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGlDOFJwUlRtaFVDYnNWYXJSbWhLOElVd1Y4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9iZDM0M2MtYjgzOS00MDQzLTkzZTMt
ZThkNTE1ZTRjZTU2LzEvNGlDOFJwUlRtaFVDYnNWYXJSbWhLOElVd1Y4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9iZDM0M2MtYjgzOS00MDQzLTkzZTMtZThkNTE1ZTRjZTU2
LzEvNGlDOFJwUlRtaFVDYnNWYXJSbWhLOElVd1Y4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARu7gM4Yh
gpOpNbRoA4j4m/MAnSwEyMfqEfDEiCG61xxQIdCMR4bKZfz9UselmCn5eNoBZyWm
96o/50VOwGDgo8KsYZ7hdnrNB2O8a54254EPQiJGgHyXhLgs/U8bsFxHpqIJaMwu
06XtB5VjVR/Zlh//v8UerLgiu9g1PAI/kQkUHh+nxKFz+QEl38V+VjeMDJen1SGL
wixvYcEpuNPMPZNiKeCNLj3VvTexK+gy1hLB94PPV70M4pcPHiDv9wWMrvB8+CGm
p9eRHOhFJLgf6iyMgu6iFhKsaCb+CWPjD78/puCn09LIl8+8kl5pZ5uMNomul2O3
eNUaq9XKcimdjQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:16:37 2025 by rpki-client