Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.mft
File: 4KACksKhBiuzKYCjxEP_84OkEAI.mft (raw, json)
Hash identifier: ZK6RFZx1FgcQl+xwueoYiXN4FG8hEmT5BLXaMT5d870=
Subject key identifier: 56:1B:21:63:51:BF:29:01:6A:C1:29:2D:C1:C1:E2:27:5A:06:19:FA
Authority key identifier: E0:A0:02:92:C2:A1:06:2B:B3:29:80:A3:C4:43:FF:F3:83:A4:10:02
Certificate issuer: /CN=e0a00292c2a1062bb32980a3c443fff383a41002
Certificate serial: 0198D7A93F039AF840AFCD1977FF51F1607E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KACksKhBiuzKYCjxEP_84OkEAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.mft
Manifest number: 0A0A
Signing time: Sat 23 Aug 2025 16:00:49 +0000
Manifest this update: Sat 23 Aug 2025 16:00:49 +0000
Manifest next update: Sun 24 Aug 2025 16:00:49 +0000
Files and hashes: 1: 4KACksKhBiuzKYCjxEP_84OkEAI.crl (hash: ODSYItEKhxYETTov/sWGy+VFqY4IaJfj0X/uYSkFJIo=)
2: mSKL5dZ-DfhQmd3vDgNujHfDeWQ.roa (hash: kM0tftmTBoswJU9/17L/nHsaIm00B47zHx/WZDRsoCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4KACksKhBiuzKYCjxEP_84OkEAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:3f:03:9a:f8:40:af:cd:19:77:ff:51:f1:60:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0a00292c2a1062bb32980a3c443fff383a41002
Validity
Not Before: Aug 23 16:00:49 2025 GMT
Not After : Aug 24 16:00:49 2025 GMT
Subject: CN=561b216351bf29016ac1292dc1c1e2275a0619fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bd:1b:64:c2:fc:35:73:00:c6:96:17:d6:1d:
b4:e6:83:68:50:4b:31:9d:8f:6f:01:07:b9:a5:86:
4b:bd:a3:0b:d8:52:9d:38:f4:75:d0:11:b5:3e:eb:
cf:3a:c6:65:b9:a1:1c:e6:92:14:be:aa:07:04:1f:
38:8a:c1:0c:91:d0:5d:06:bd:4e:62:8b:b3:f0:05:
f1:f7:7f:fa:47:a5:5b:ea:b7:97:7e:dd:54:89:af:
05:42:6c:be:29:ba:a5:b2:7f:83:47:16:1e:19:45:
bb:cf:ba:2b:1d:94:85:c0:12:4a:69:cd:79:b8:ca:
c7:c1:f3:06:d9:f7:18:cc:8a:1d:f9:0e:f8:85:ab:
7e:28:b7:05:f6:06:0b:52:10:5b:06:a8:d2:b0:ee:
8a:a5:9a:c4:dd:4d:ea:0c:b7:82:f5:9b:7b:52:e8:
7c:b1:39:3e:e6:ae:14:f2:c0:ad:1b:db:60:fa:62:
fa:de:fa:4c:8a:7c:38:50:83:1c:de:46:da:87:79:
a2:b5:4e:fb:26:a9:54:24:34:ac:6d:79:3d:e5:54:
ad:3f:05:94:7c:39:19:1d:d8:c6:a2:43:2a:1f:4f:
8e:70:59:4a:cf:ee:23:57:5a:05:1e:ce:3b:d0:41:
ed:12:ec:d7:11:9c:d6:39:66:b1:f4:65:4b:b5:a4:
61:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:1B:21:63:51:BF:29:01:6A:C1:29:2D:C1:C1:E2:27:5A:06:19:FA
X509v3 Authority Key Identifier:
keyid:E0:A0:02:92:C2:A1:06:2B:B3:29:80:A3:C4:43:FF:F3:83:A4:10:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KACksKhBiuzKYCjxEP_84OkEAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:6f:14:86:08:0b:79:ae:67:8e:d1:38:36:e6:8a:1f:92:c5:
13:5f:cd:7a:46:8a:f7:66:80:84:22:49:c9:43:be:05:74:bc:
db:93:fa:d8:cc:79:69:72:40:11:10:68:da:a7:ad:1d:05:4c:
a6:aa:a0:42:e4:e6:e5:3a:26:f5:a0:e0:7b:eb:2c:38:e8:46:
73:61:12:cf:4e:7d:eb:0a:71:c0:83:4c:00:b2:99:98:c7:ff:
8c:46:1a:c5:aa:fb:09:81:c9:60:3f:6f:ef:a2:5e:83:bb:34:
7e:c0:79:d5:8b:cf:ab:cb:a2:47:44:78:a5:2c:f7:4a:34:d0:
56:07:a7:d3:5f:82:12:9f:61:61:f3:72:ae:53:32:95:ff:10:
ea:b5:41:6e:5d:f7:e6:8a:35:1c:c6:fd:0d:34:f0:17:66:58:
0d:7a:f7:de:80:db:6d:20:a1:78:bb:1f:81:28:bb:53:0b:2d:
89:c0:7a:23:64:ea:8c:4b:64:8c:64:60:6b:98:b5:f1:86:0e:
a0:b1:a3:7c:f3:70:75:35:44:61:c7:9d:7c:ef:c4:ec:17:10:
3c:c3:8c:32:0d:37:ab:f4:b2:af:74:59:23:90:de:79:f3:fb:
0f:82:dd:df:9e:cf:a9:98:c5:a2:c3:60:1b:c3:50:76:54:d0:
64:58:d7:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXqT8DmvhAr80Zd/9R8WB+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwYTAwMjkyYzJhMTA2MmJiMzI5ODBhM2M0NDNmZmYzODNh
NDEwMDIwHhcNMjUwODIzMTYwMDQ5WhcNMjUwODI0MTYwMDQ5WjAzMTEwLwYDVQQD
Eyg1NjFiMjE2MzUxYmYyOTAxNmFjMTI5MmRjMWMxZTIyNzVhMDYxOWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt70bZML8NXMAxpYX1h205oNoUEsx
nY9vAQe5pYZLvaML2FKdOPR10BG1PuvPOsZluaEc5pIUvqoHBB84isEMkdBdBr1O
Youz8AXx93/6R6Vb6reXft1Uia8FQmy+Kbqlsn+DRxYeGUW7z7orHZSFwBJKac15
uMrHwfMG2fcYzIod+Q74hat+KLcF9gYLUhBbBqjSsO6KpZrE3U3qDLeC9Zt7Uuh8
sTk+5q4U8sCtG9tg+mL63vpMinw4UIMc3kbah3mitU77JqlUJDSsbXk95VStPwWU
fDkZHdjGokMqH0+OcFlKz+4jV1oFHs470EHtEuzXEZzWOWax9GVLtaRhwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFYbIWNRvykBasEpLcHB4idaBhn6MB8GA1UdIwQY
MBaAFOCgApLCoQYrsymAo8RD//ODpBACMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEtBQ2tzS2hCaXV6S1lDanhFUF84NE9rRUFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy82YzA1NjMtNmExYy00NDMyLWE1OGQt
M2I2NGNjMzM2Yzc5LzEvNEtBQ2tzS2hCaXV6S1lDanhFUF84NE9rRUFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy82YzA1NjMtNmExYy00NDMyLWE1OGQtM2I2NGNjMzM2Yzc5
LzEvNEtBQ2tzS2hCaXV6S1lDanhFUF84NE9rRUFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOW8UhggL
ea5njtE4NuaKH5LFE1/NekaK92aAhCJJyUO+BXS825P62Mx5aXJAERBo2qetHQVM
pqqgQuTm5Tom9aDge+ssOOhGc2ESz0596wpxwINMALKZmMf/jEYaxar7CYHJYD9v
76Jeg7s0fsB51YvPq8uiR0R4pSz3SjTQVgen01+CEp9hYfNyrlMylf8Q6rVBbl33
5oo1HMb9DTTwF2ZYDXr33oDbbSCheLsfgSi7UwsticB6I2TqjEtkjGRga5i18YYO
oLGjfPNwdTVEYcedfO/E7BcQPMOMMg03q/Syr3RZI5DeefP7D4Ld357PqZjFosNg
G8NQdlTQZFjXVw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:06:13 2025 by rpki-client