Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft
File: 4iC8RpRTmhUCbsVarRmhK8IUwV8.mft (raw, json)
Hash identifier: sEF1CuH5WLBnF93my/WH3ls+f0CNxUvv80uiXQbDZXw=
Subject key identifier: 2F:3B:8E:C3:78:11:5B:7C:8A:8F:F0:65:D4:3D:7C:99:65:82:D6:B3
Authority key identifier: E2:20:BC:46:94:53:9A:15:02:6E:C5:5A:AD:19:A1:2B:C2:14:C1:5F
Certificate issuer: /CN=e220bc4694539a15026ec55aad19a12bc214c15f
Certificate serial: 0198D4043B8B3994F1EE09942D7BA8328374
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iC8RpRTmhUCbsVarRmhK8IUwV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft
Manifest number: 0239
Signing time: Fri 22 Aug 2025 23:01:43 +0000
Manifest this update: Fri 22 Aug 2025 23:01:43 +0000
Manifest next update: Sat 23 Aug 2025 23:01:43 +0000
Files and hashes: 1: 4iC8RpRTmhUCbsVarRmhK8IUwV8.crl (hash: YXa//iIAKKynmE5QWv3jKs8emnlfgUqEEczJx8sUXNQ=)
2: TMvhro726OTEJJjht0Q0a4l2Qas.roa (hash: b1YiQQq/VY4mWfbYJYUD6kOtMlV+ZtaVCwcnWoNMuUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4iC8RpRTmhUCbsVarRmhK8IUwV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:3b:8b:39:94:f1:ee:09:94:2d:7b:a8:32:83:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e220bc4694539a15026ec55aad19a12bc214c15f
Validity
Not Before: Aug 22 23:01:43 2025 GMT
Not After : Aug 23 23:01:43 2025 GMT
Subject: CN=2f3b8ec378115b7c8a8ff065d43d7c996582d6b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a0:a3:a7:3d:33:d4:60:bb:1f:f4:5c:ca:3b:
3a:36:09:ea:b2:4c:22:fe:53:01:e1:45:81:a9:fb:
ef:dc:b7:98:fb:45:18:9b:ff:ff:4b:3f:c9:51:69:
ec:75:6a:3b:83:7a:86:a3:4d:e9:42:1c:f8:f4:66:
4a:a6:c7:bb:49:8d:71:93:7a:c9:36:7d:64:a3:3e:
4e:b9:6a:a2:a3:b2:ef:73:c4:86:24:a5:3f:32:94:
50:01:7a:e8:9b:47:ae:52:91:90:da:2c:48:dd:c3:
b1:5d:58:bb:ef:8c:cf:46:2c:66:5d:31:f4:2b:01:
61:5f:b0:06:3b:12:f8:db:3b:32:3a:07:7b:6c:c5:
1b:7f:60:8a:38:bd:c7:f0:fd:a2:4d:48:6c:23:18:
03:cf:fd:00:5a:16:13:fa:a0:7c:95:26:22:b8:67:
78:3e:a3:ca:7c:8c:57:ae:21:9e:ae:3f:a8:d5:87:
67:26:fc:d7:85:c8:21:80:3a:4f:c9:9f:d7:b6:6b:
2a:88:e2:4b:59:c6:46:20:a6:2e:31:e0:d8:ed:a2:
dd:23:f5:58:38:6c:27:ad:85:34:fc:4c:d3:7a:5a:
8e:8f:82:cf:de:50:8e:af:7d:c1:ac:48:9b:8d:08:
ab:f5:f2:02:ee:21:83:eb:9f:60:1e:f8:82:fa:54:
8b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:3B:8E:C3:78:11:5B:7C:8A:8F:F0:65:D4:3D:7C:99:65:82:D6:B3
X509v3 Authority Key Identifier:
keyid:E2:20:BC:46:94:53:9A:15:02:6E:C5:5A:AD:19:A1:2B:C2:14:C1:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iC8RpRTmhUCbsVarRmhK8IUwV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:1b:72:85:a0:cd:0d:b5:c1:a1:f6:c8:fd:6d:66:1f:a5:e2:
eb:42:e1:61:2f:d8:1b:8a:e0:ce:78:98:88:4e:65:d2:19:72:
1f:cc:d1:d0:a6:92:48:54:70:3a:9d:7a:09:f0:94:76:02:89:
fa:e7:13:93:62:75:f8:f9:02:44:44:0d:c4:e2:10:de:3a:cb:
35:69:d5:d8:62:98:14:35:b3:df:a8:d5:53:68:02:14:b3:b8:
d9:8a:20:28:cc:c3:52:6b:f5:9a:78:ff:7d:46:23:00:b2:57:
ce:1d:5c:d3:95:ab:44:d0:5b:90:a7:87:63:31:7e:d8:c2:1a:
6a:2e:07:86:b6:05:90:7b:48:52:f9:35:c1:22:d5:c7:74:22:
3d:43:8d:ab:71:aa:56:58:7a:84:a5:ea:fc:6e:64:12:6b:39:
87:60:c6:3f:a0:ac:32:25:8e:36:83:cb:3b:ac:a3:7f:28:0b:
03:1d:9d:54:a0:2e:8b:39:03:f5:a4:fa:8e:b4:0c:ee:5b:3c:
a6:ac:9a:1a:5e:bc:0d:0f:f8:f2:5b:59:b6:c3:93:04:67:6a:
fd:46:19:e7:42:55:d9:ef:24:45:39:45:7c:90:87:c9:55:a9:
73:cd:9e:3f:84:5b:fa:5a:1d:12:08:8c:fb:fb:c8:71:82:25:
fb:e1:a8:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUBDuLOZTx7gmULXuoMoN0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyMjBiYzQ2OTQ1MzlhMTUwMjZlYzU1YWFkMTlhMTJiYzIx
NGMxNWYwHhcNMjUwODIyMjMwMTQzWhcNMjUwODIzMjMwMTQzWjAzMTEwLwYDVQQD
EygyZjNiOGVjMzc4MTE1YjdjOGE4ZmYwNjVkNDNkN2M5OTY1ODJkNmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1aCjpz0z1GC7H/Rcyjs6Ngnqskwi
/lMB4UWBqfvv3LeY+0UYm///Sz/JUWnsdWo7g3qGo03pQhz49GZKpse7SY1xk3rJ
Nn1koz5OuWqio7Lvc8SGJKU/MpRQAXrom0euUpGQ2ixI3cOxXVi774zPRixmXTH0
KwFhX7AGOxL42zsyOgd7bMUbf2CKOL3H8P2iTUhsIxgDz/0AWhYT+qB8lSYiuGd4
PqPKfIxXriGerj+o1YdnJvzXhcghgDpPyZ/XtmsqiOJLWcZGIKYuMeDY7aLdI/VY
OGwnrYU0/EzTelqOj4LP3lCOr33BrEibjQir9fIC7iGD659gHviC+lSLQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC87jsN4EVt8io/wZdQ9fJllgtazMB8GA1UdIwQY
MBaAFOIgvEaUU5oVAm7FWq0ZoSvCFMFfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGlDOFJwUlRtaFVDYnNWYXJSbWhLOElVd1Y4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9iZDM0M2MtYjgzOS00MDQzLTkzZTMt
ZThkNTE1ZTRjZTU2LzEvNGlDOFJwUlRtaFVDYnNWYXJSbWhLOElVd1Y4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9iZDM0M2MtYjgzOS00MDQzLTkzZTMtZThkNTE1ZTRjZTU2
LzEvNGlDOFJwUlRtaFVDYnNWYXJSbWhLOElVd1Y4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmxtyhaDN
DbXBofbI/W1mH6Xi60LhYS/YG4rgzniYiE5l0hlyH8zR0KaSSFRwOp16CfCUdgKJ
+ucTk2J1+PkCREQNxOIQ3jrLNWnV2GKYFDWz36jVU2gCFLO42YogKMzDUmv1mnj/
fUYjALJXzh1c05WrRNBbkKeHYzF+2MIaai4HhrYFkHtIUvk1wSLVx3QiPUONq3Gq
Vlh6hKXq/G5kEms5h2DGP6CsMiWONoPLO6yjfygLAx2dVKAuizkD9aT6jrQM7ls8
pqyaGl68DQ/48ltZtsOTBGdq/UYZ50JV2e8kRTlFfJCHyVWpc82eP4Rb+lodEgiM
+/vIcYIl++GoYQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:37 2025 by rpki-client