Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.mft
File: 4koyJ4zntMsgXfzK14YBSjsK4yM.mft (raw, json)
Hash identifier: lzaT3HD1pjlpzKZDCptBQW4V45RlK3xgjEg3s7EtHws=
Subject key identifier: 09:F5:AD:42:49:AC:86:7D:C3:18:1B:3B:26:05:42:CB:F5:A6:A3:A7
Authority key identifier: E2:4A:32:27:8C:E7:B4:CB:20:5D:FC:CA:D7:86:01:4A:3B:0A:E3:23
Certificate issuer: /CN=e24a32278ce7b4cb205dfccad786014a3b0ae323
Certificate serial: 0198D73B6690DA04D8D15499CC874654C5CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4koyJ4zntMsgXfzK14YBSjsK4yM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.mft
Manifest number: 0DE3
Signing time: Sat 23 Aug 2025 14:00:50 +0000
Manifest this update: Sat 23 Aug 2025 14:00:50 +0000
Manifest next update: Sun 24 Aug 2025 14:00:50 +0000
Files and hashes: 1: 4koyJ4zntMsgXfzK14YBSjsK4yM.crl (hash: JHDpfR/XtbvJTRWiLrROiyjTS1kBKHW20qjVvJoHQxM=)
2: Fl9jCud-UU_nsltrgxF4woEzDPA.roa (hash: t0KQ+pJmnr1NHNCgrJUYJH3j4t5bgDietQ+c+4tjYIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4koyJ4zntMsgXfzK14YBSjsK4yM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:66:90:da:04:d8:d1:54:99:cc:87:46:54:c5:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e24a32278ce7b4cb205dfccad786014a3b0ae323
Validity
Not Before: Aug 23 14:00:50 2025 GMT
Not After : Aug 24 14:00:50 2025 GMT
Subject: CN=09f5ad4249ac867dc3181b3b260542cbf5a6a3a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a2:55:30:c9:16:b7:34:12:e7:cb:fc:ce:bd:
07:be:f8:d8:1c:c2:72:d9:be:ff:5e:71:fe:90:09:
a1:26:4a:7b:64:25:54:d0:16:0b:65:db:b1:0e:05:
d8:7a:ae:34:c3:39:06:73:43:76:eb:f6:2d:de:e4:
e2:5a:94:d6:fd:1c:a8:36:27:87:51:fd:3f:0d:d2:
fd:1d:98:3a:7c:97:35:b2:e9:86:7c:e5:1d:31:dd:
aa:35:c8:c4:5a:a9:ce:6b:da:4a:bb:8f:dc:f4:58:
0d:b2:1c:9e:a9:3b:22:82:61:12:68:62:00:c1:95:
96:d2:97:03:3a:de:f0:1f:60:68:71:ab:a4:06:cc:
f2:a3:e0:cb:65:be:17:14:43:b0:8b:ba:2c:89:c6:
bd:29:3b:82:a4:d3:ca:76:9a:2c:12:70:06:dd:a5:
99:b9:6f:1f:b0:66:dc:60:cc:e6:18:59:53:6c:dd:
b6:a3:69:6d:c9:e8:c8:53:05:e2:38:89:7b:db:7b:
ec:15:1d:47:da:bb:bc:61:c4:26:eb:a8:23:87:3b:
fd:30:48:e4:75:8a:a9:6a:d6:cd:02:cf:d0:db:02:
a5:65:1a:8a:ff:b3:dd:b5:a8:1e:35:a1:f7:a6:74:
f3:f7:d1:a4:fd:ff:4c:01:c0:e7:a1:b1:de:62:e2:
35:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F5:AD:42:49:AC:86:7D:C3:18:1B:3B:26:05:42:CB:F5:A6:A3:A7
X509v3 Authority Key Identifier:
keyid:E2:4A:32:27:8C:E7:B4:CB:20:5D:FC:CA:D7:86:01:4A:3B:0A:E3:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4koyJ4zntMsgXfzK14YBSjsK4yM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:c6:9f:a3:0e:c6:68:e4:a0:42:fb:28:7f:92:21:83:c4:ac:
55:61:8a:10:bc:36:5d:07:ec:a2:1d:dc:6b:b5:b9:5b:fc:c7:
f6:b9:8d:64:bb:b9:04:ce:85:79:8b:0f:ad:75:4c:40:a2:c1:
a5:4a:5e:45:62:9d:72:fb:71:b6:a0:e0:32:3a:e9:81:07:88:
07:49:3b:c5:4d:a9:1b:42:63:46:3a:1d:d2:e7:86:00:f3:53:
c2:22:83:f0:b4:73:58:e1:50:e8:42:76:74:fd:02:fb:00:55:
22:17:92:41:79:87:03:d1:51:df:4c:7a:32:56:0e:5d:17:d4:
ce:cb:00:45:08:e0:c7:b2:7e:57:a4:d5:bc:04:99:32:37:ab:
e2:ab:75:05:af:0e:0b:7b:c1:75:77:68:8a:0d:4c:99:00:dc:
52:a0:74:7f:b2:25:80:b1:7e:61:e3:33:3a:0b:ae:47:b8:42:
40:bb:5f:2c:fb:80:38:17:13:75:a8:bf:5a:a4:1c:0e:dc:0a:
50:d5:c6:ab:7b:26:da:c6:f7:45:74:28:a6:ed:43:cd:4f:cf:
31:fe:83:59:93:b4:19:e0:19:ab:67:b1:64:28:52:78:91:9c:
23:37:72:83:c8:9b:77:51:3e:b6:8d:48:4f:c1:64:04:38:a8:
fd:f4:57:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXO2aQ2gTY0VSZzIdGVMXMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyNGEzMjI3OGNlN2I0Y2IyMDVkZmNjYWQ3ODYwMTRhM2Iw
YWUzMjMwHhcNMjUwODIzMTQwMDUwWhcNMjUwODI0MTQwMDUwWjAzMTEwLwYDVQQD
EygwOWY1YWQ0MjQ5YWM4NjdkYzMxODFiM2IyNjA1NDJjYmY1YTZhM2E3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqJVMMkWtzQS58v8zr0HvvjYHMJy
2b7/XnH+kAmhJkp7ZCVU0BYLZduxDgXYeq40wzkGc0N26/Yt3uTiWpTW/RyoNieH
Uf0/DdL9HZg6fJc1sumGfOUdMd2qNcjEWqnOa9pKu4/c9FgNshyeqTsigmESaGIA
wZWW0pcDOt7wH2BocaukBszyo+DLZb4XFEOwi7osica9KTuCpNPKdposEnAG3aWZ
uW8fsGbcYMzmGFlTbN22o2ltyejIUwXiOIl723vsFR1H2ru8YcQm66gjhzv9MEjk
dYqpatbNAs/Q2wKlZRqK/7PdtageNaH3pnTz99Gk/f9MAcDnobHeYuI10wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAn1rUJJrIZ9wxgbOyYFQsv1pqOnMB8GA1UdIwQY
MBaAFOJKMieM57TLIF38yteGAUo7CuMjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGtveUo0em50TXNnWGZ6SzE0WUJTanNLNHlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8zNjQ4NmItYjdiNy00M2EyLWJiMjct
NzdhYjA1ZTBjZjYyLzEvNGtveUo0em50TXNnWGZ6SzE0WUJTanNLNHlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8zNjQ4NmItYjdiNy00M2EyLWJiMjctNzdhYjA1ZTBjZjYy
LzEvNGtveUo0em50TXNnWGZ6SzE0WUJTanNLNHlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL8afow7G
aOSgQvsof5Ihg8SsVWGKELw2XQfsoh3ca7W5W/zH9rmNZLu5BM6FeYsPrXVMQKLB
pUpeRWKdcvtxtqDgMjrpgQeIB0k7xU2pG0JjRjod0ueGAPNTwiKD8LRzWOFQ6EJ2
dP0C+wBVIheSQXmHA9FR30x6MlYOXRfUzssARQjgx7J+V6TVvASZMjer4qt1Ba8O
C3vBdXdoig1MmQDcUqB0f7IlgLF+YeMzOguuR7hCQLtfLPuAOBcTdai/WqQcDtwK
UNXGq3sm2sb3RXQopu1DzU/PMf6DWZO0GeAZq2exZChSeJGcIzdyg8ibd1E+to1I
T8FkBDio/fRXAg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:35:05 2025 by rpki-client