Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
File: 4bpLKGfa04tzpGkYJB78cqISYvc.mft (raw, json)
Hash identifier: 3B26x0HEcq69QR1GwIwZj1n+qknBdiQOqDorKA1vybg=
Subject key identifier: 9B:F8:BD:02:4C:F3:5F:01:D7:B7:43:20:71:31:9F:EE:16:C2:94:D5
Authority key identifier: E1:BA:4B:28:67:DA:D3:8B:73:A4:69:18:24:1E:FC:72:A2:12:62:F7
Certificate issuer: /CN=e1ba4b2867dad38b73a46918241efc72a21262f7
Certificate serial: 0198D84F84DF3EFB922B78FC8781ABF98728
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 19:02:26 +0000
Manifest this update: Sat 23 Aug 2025 19:02:26 +0000
Manifest next update: Sun 24 Aug 2025 19:02:26 +0000
Files and hashes: 1: 4bpLKGfa04tzpGkYJB78cqISYvc.crl (hash: sN4oHwcLoxRaoFwGMuJ4moma73XYowg7tzsMRAlz2cM=)
2: MccPojCQ_5aiRX4Myokyw6v--7c.roa (hash: 6zT3oaRUJKtce125U7+EL/be9RKqr09GLQyUToqdrbc=)
3: UJACc2s1J5BaMpYznoUagPO6cuI.roa (hash: 5ImyJpj69YHNVaFZ4EKvt0GWM6aecM/AkpksMF5YZpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:4f:84:df:3e:fb:92:2b:78:fc:87:81:ab:f9:87:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ba4b2867dad38b73a46918241efc72a21262f7
Validity
Not Before: Aug 23 19:02:26 2025 GMT
Not After : Aug 24 19:02:26 2025 GMT
Subject: CN=9bf8bd024cf35f01d7b7432071319fee16c294d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:34:11:45:da:78:db:b9:f4:c8:2c:fe:ef:d0:
fc:5c:c4:91:f9:c1:6f:b1:df:4f:9b:42:0a:ba:d0:
58:a5:a7:35:58:07:bd:93:80:af:a1:5d:68:0a:95:
ba:a2:4f:bd:b3:34:69:fd:b1:42:4d:aa:23:00:91:
8c:33:ed:07:26:75:43:2d:21:99:8a:e7:68:80:c6:
df:71:40:c8:47:2f:9b:a5:cf:5a:53:d9:ed:2f:a4:
09:fe:d8:fa:98:4f:76:a5:60:f8:0c:1b:e1:bb:8e:
3c:59:b3:88:f5:93:52:13:bb:3c:9b:bb:fb:b4:3d:
2b:db:e8:41:4e:ad:f6:15:9d:c1:69:34:43:57:b8:
5d:c7:92:ef:0f:10:c7:a7:40:8c:71:97:22:f0:f3:
a7:90:73:49:ce:44:91:63:05:ff:81:d0:93:7f:af:
d8:8e:4f:47:cf:67:ba:b4:cc:80:d6:20:49:c0:8e:
00:47:31:46:12:15:d9:a4:aa:8b:c3:8b:48:99:16:
d4:31:6d:c1:61:00:96:78:aa:ed:e0:31:a1:09:2e:
28:cb:bc:38:03:06:79:81:cb:6b:fb:aa:af:db:d8:
16:b0:51:fe:e3:54:fd:60:92:8a:44:e1:d5:b8:0a:
fb:84:49:ce:e3:87:39:10:55:64:51:9d:d9:7f:be:
76:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F8:BD:02:4C:F3:5F:01:D7:B7:43:20:71:31:9F:EE:16:C2:94:D5
X509v3 Authority Key Identifier:
keyid:E1:BA:4B:28:67:DA:D3:8B:73:A4:69:18:24:1E:FC:72:A2:12:62:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:c6:df:11:b6:2d:29:d9:e6:52:46:e9:5d:60:fd:dc:ac:df:
92:9b:5c:dd:43:6d:a3:c4:00:83:d6:1d:20:6b:1e:95:9e:fd:
68:64:30:f9:b4:5a:b6:65:75:b1:b1:d0:62:96:5f:17:e9:29:
e2:c2:12:da:42:ca:e7:d3:9d:f9:46:d8:cb:f3:f3:78:ff:81:
31:75:38:ce:f6:43:31:dd:ba:20:b4:53:bc:ce:b5:0d:d1:12:
b3:8b:47:c2:7b:b4:78:f5:0e:92:99:81:58:86:27:6f:05:48:
60:f6:34:fc:17:b3:2f:d1:f5:98:4b:6e:b7:fc:bd:ca:7d:7c:
83:77:4e:bc:2e:c1:47:25:09:6c:6d:ac:d3:7d:97:55:59:7f:
e5:04:ff:d1:ae:75:b5:8e:19:c7:17:7f:37:84:64:18:73:32:
32:57:ab:cd:40:fd:40:f9:ab:9f:38:7c:70:2d:20:c8:ca:c8:
e3:47:84:8a:29:db:9d:a7:d6:21:5b:7f:07:9e:a4:7d:41:57:
15:bc:d0:9e:27:13:d8:d3:49:f6:1a:32:b9:12:84:09:f2:d8:
54:03:b9:8e:af:12:16:99:c5:ed:13:7d:ce:dd:76:56:01:d2:
09:55:83:c4:23:e6:94:79:e4:32:2f:aa:21:a0:07:e9:91:48:
19:50:f6:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjYT4TfPvuSK3j8h4Gr+YcoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxYmE0YjI4NjdkYWQzOGI3M2E0NjkxODI0MWVmYzcyYTIx
MjYyZjcwHhcNMjUwODIzMTkwMjI2WhcNMjUwODI0MTkwMjI2WjAzMTEwLwYDVQQD
Eyg5YmY4YmQwMjRjZjM1ZjAxZDdiNzQzMjA3MTMxOWZlZTE2YzI5NGQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTQRRdp427n0yCz+79D8XMSR+cFv
sd9Pm0IKutBYpac1WAe9k4CvoV1oCpW6ok+9szRp/bFCTaojAJGMM+0HJnVDLSGZ
iudogMbfcUDIRy+bpc9aU9ntL6QJ/tj6mE92pWD4DBvhu448WbOI9ZNSE7s8m7v7
tD0r2+hBTq32FZ3BaTRDV7hdx5LvDxDHp0CMcZci8POnkHNJzkSRYwX/gdCTf6/Y
jk9Hz2e6tMyA1iBJwI4ARzFGEhXZpKqLw4tImRbUMW3BYQCWeKrt4DGhCS4oy7w4
AwZ5gctr+6qv29gWsFH+41T9YJKKROHVuAr7hEnO44c5EFVkUZ3Zf7520wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJv4vQJM818B17dDIHExn+4WwpTVMB8GA1UdIwQY
MBaAFOG6Syhn2tOLc6RpGCQe/HKiEmL3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGJwTEtHZmEwNHR6cEdrWUpCNzhjcUlTWXZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC82ODkxMDktMTcyMy00YmYxLWI2M2Et
ZGM2NGFlNzI1NzhlLzEvNGJwTEtHZmEwNHR6cEdrWUpCNzhjcUlTWXZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC82ODkxMDktMTcyMy00YmYxLWI2M2EtZGM2NGFlNzI1Nzhl
LzEvNGJwTEtHZmEwNHR6cEdrWUpCNzhjcUlTWXZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArcbfEbYt
KdnmUkbpXWD93Kzfkptc3UNto8QAg9YdIGselZ79aGQw+bRatmV1sbHQYpZfF+kp
4sIS2kLK59Od+UbYy/PzeP+BMXU4zvZDMd26ILRTvM61DdESs4tHwnu0ePUOkpmB
WIYnbwVIYPY0/BezL9H1mEtut/y9yn18g3dOvC7BRyUJbG2s032XVVl/5QT/0a51
tY4Zxxd/N4RkGHMyMlerzUD9QPmrnzh8cC0gyMrI40eEiinbnafWIVt/B56kfUFX
FbzQnicT2NNJ9hoyuRKECfLYVAO5jq8SFpnF7RN9zt12VgHSCVWDxCPmlHnkMi+q
IaAH6ZFIGVD2oA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 23:37:43 2025 by rpki-client