Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.mft
File: 4trBUISDJfD3JYcGT4q6N8X_N5A.mft (raw, json)
Hash identifier: pPcEwQeZFDl78G+HzrAPxbDoK2dJerhke0AqaPCwlfQ=
Subject key identifier: 8D:C9:EF:4B:11:0F:D9:8F:84:7B:26:D7:1C:E0:62:2F:AF:B6:56:B9
Authority key identifier: E2:DA:C1:50:84:83:25:F0:F7:25:87:06:4F:8A:BA:37:C5:FF:37:90
Certificate issuer: /CN=e2dac150848325f0f72587064f8aba37c5ff3790
Certificate serial: 0198D4E09E0B96F422D8FD633E5B143E9CB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4trBUISDJfD3JYcGT4q6N8X_N5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.mft
Manifest number: 1230
Signing time: Sat 23 Aug 2025 03:02:26 +0000
Manifest this update: Sat 23 Aug 2025 03:02:26 +0000
Manifest next update: Sun 24 Aug 2025 03:02:26 +0000
Files and hashes: 1: 1tSvH4RNSu7UD2qtT1EWm04Zry4.roa (hash: q0ebmJQY13NuleI4G7DugHjqGoG1SUVW7Ik+sEsmL8w=)
2: 4trBUISDJfD3JYcGT4q6N8X_N5A.crl (hash: /y7hWGhUAgHHlHAIZVthOfQRg59TGYb076QNb7KpjY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/4trBUISDJfD3JYcGT4q6N8X_N5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:9e:0b:96:f4:22:d8:fd:63:3e:5b:14:3e:9c:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2dac150848325f0f72587064f8aba37c5ff3790
Validity
Not Before: Aug 23 03:02:26 2025 GMT
Not After : Aug 24 03:02:26 2025 GMT
Subject: CN=8dc9ef4b110fd98f847b26d71ce0622fafb656b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:dd:b9:f5:93:8a:5b:30:57:06:9d:63:fe:d8:
8e:b5:87:d9:98:32:84:44:fc:92:b3:e0:d2:f1:de:
d2:13:1f:1a:50:dc:09:d4:60:97:60:f6:03:21:b4:
4e:bb:8e:0b:f1:3c:a0:53:09:eb:c2:7a:78:80:ee:
0d:1c:4b:5f:bd:33:1c:b7:38:e6:f3:e0:7e:32:8d:
af:e9:4e:9d:69:a7:83:cb:a4:85:d1:11:0f:03:6f:
a4:ac:17:eb:22:b1:da:e6:5d:94:51:f9:ef:15:ad:
7a:17:b6:64:38:af:ea:9c:b3:88:fb:d8:89:0e:ab:
ab:b5:5e:42:3c:b7:1b:ff:a3:c4:f1:8b:fd:c1:61:
65:3d:a3:41:2c:d8:33:96:1f:fc:75:29:bc:ee:6c:
05:fc:d5:20:06:6d:e0:26:fd:dd:39:d3:f8:bd:3b:
f3:cf:2d:df:ed:74:21:72:67:b8:50:4b:05:3b:d5:
23:d4:ef:b6:a6:68:11:f3:b4:71:ab:c7:9a:f1:4b:
60:ba:35:d7:4e:10:2c:b3:b6:34:3b:0d:60:1d:69:
b1:42:8f:b1:da:11:1a:0b:4b:84:aa:bb:11:85:d5:
77:54:eb:50:f8:c7:6a:a1:4e:c0:f5:1c:13:20:3a:
9f:79:90:51:c5:f5:58:f5:3b:8c:73:22:17:86:72:
cb:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C9:EF:4B:11:0F:D9:8F:84:7B:26:D7:1C:E0:62:2F:AF:B6:56:B9
X509v3 Authority Key Identifier:
keyid:E2:DA:C1:50:84:83:25:F0:F7:25:87:06:4F:8A:BA:37:C5:FF:37:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4trBUISDJfD3JYcGT4q6N8X_N5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:52:44:ff:8a:ae:46:dc:e2:8b:94:a4:e2:b4:bd:f4:fa:c5:
c1:84:d9:ef:13:3f:0e:98:6b:e2:5d:a0:66:16:8e:12:97:e7:
04:cc:a5:bc:c8:4b:80:30:2a:cd:82:fc:bb:87:1a:b0:54:08:
4a:9a:98:c6:33:d2:07:44:11:54:5d:fc:4f:83:7b:75:14:5c:
aa:75:25:de:27:8a:ad:ea:2e:2f:97:9d:3a:d4:68:7c:ee:b8:
10:0f:fb:ba:87:9d:da:b2:3d:8e:1d:5d:58:3c:3f:bc:60:78:
21:9d:16:70:47:46:5a:2a:ad:86:a1:6a:97:34:ff:1c:b8:50:
c8:b4:a5:fc:9e:32:86:9f:91:b1:64:13:16:c6:94:12:bc:c2:
44:f6:9b:99:65:1f:11:f1:8e:fe:f6:ab:d8:7b:fb:11:68:8d:
8c:f7:84:ce:61:db:9f:77:f6:2f:43:f7:97:d7:48:8f:35:57:
14:bd:5a:f0:f3:33:80:4d:bf:14:40:58:1e:38:6b:cd:25:68:
81:bf:50:a5:7f:ca:4b:10:c2:42:f6:4c:aa:dc:88:cd:57:d8:
dd:89:c8:16:2e:30:17:35:99:98:59:0a:23:39:ee:fb:11:50:
e8:83:d2:b4:34:a7:6c:b1:74:a4:e8:ca:00:ad:ad:cc:f4:67:
cc:2c:58:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4J4LlvQi2P1jPlsUPpy2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZGFjMTUwODQ4MzI1ZjBmNzI1ODcwNjRmOGFiYTM3YzVm
ZjM3OTAwHhcNMjUwODIzMDMwMjI2WhcNMjUwODI0MDMwMjI2WjAzMTEwLwYDVQQD
Eyg4ZGM5ZWY0YjExMGZkOThmODQ3YjI2ZDcxY2UwNjIyZmFmYjY1NmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9259ZOKWzBXBp1j/tiOtYfZmDKE
RPySs+DS8d7SEx8aUNwJ1GCXYPYDIbROu44L8TygUwnrwnp4gO4NHEtfvTMctzjm
8+B+Mo2v6U6daaeDy6SF0REPA2+krBfrIrHa5l2UUfnvFa16F7ZkOK/qnLOI+9iJ
DqurtV5CPLcb/6PE8Yv9wWFlPaNBLNgzlh/8dSm87mwF/NUgBm3gJv3dOdP4vTvz
zy3f7XQhcme4UEsFO9Uj1O+2pmgR87Rxq8ea8UtgujXXThAss7Y0Ow1gHWmxQo+x
2hEaC0uEqrsRhdV3VOtQ+MdqoU7A9RwTIDqfeZBRxfVY9TuMcyIXhnLLfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI3J70sRD9mPhHsm1xzgYi+vtla5MB8GA1UdIwQY
MBaAFOLawVCEgyXw9yWHBk+KujfF/zeQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHRyQlVJU0RKZkQzSlljR1Q0cTZOOFhfTjVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9mMDk3NTktNmNlYi00NzU0LWJiZTUt
M2I5ZTNjNTNiYWIwLzEvNHRyQlVJU0RKZkQzSlljR1Q0cTZOOFhfTjVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9mMDk3NTktNmNlYi00NzU0LWJiZTUtM2I5ZTNjNTNiYWIw
LzEvNHRyQlVJU0RKZkQzSlljR1Q0cTZOOFhfTjVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZVJE/4qu
Rtzii5Sk4rS99PrFwYTZ7xM/Dphr4l2gZhaOEpfnBMylvMhLgDAqzYL8u4casFQI
SpqYxjPSB0QRVF38T4N7dRRcqnUl3ieKreouL5edOtRofO64EA/7uoed2rI9jh1d
WDw/vGB4IZ0WcEdGWiqthqFqlzT/HLhQyLSl/J4yhp+RsWQTFsaUErzCRPabmWUf
EfGO/var2Hv7EWiNjPeEzmHbn3f2L0P3l9dIjzVXFL1a8PMzgE2/FEBYHjhrzSVo
gb9QpX/KSxDCQvZMqtyIzVfY3YnIFi4wFzWZmFkKIznu+xFQ6IPStDSnbLF0pOjK
AK2tzPRnzCxYyQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:31 2025 by rpki-client