Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.mft
File: 4uQkJWNHPN8ULMt8zjwsw26j1GU.mft (raw, json)
Hash identifier: kQ4aEdVcDla6VpkM3odBW460HciLqoQ5as1llwiY2zc=
Subject key identifier: 18:2F:AF:C0:8C:61:52:AE:76:93:C5:C1:8F:4C:BE:A7:3D:2E:60:3F
Authority key identifier: E2:E4:24:25:63:47:3C:DF:14:2C:CB:7C:CE:3C:2C:C3:6E:A3:D4:65
Certificate issuer: /CN=e2e4242563473cdf142ccb7cce3c2cc36ea3d465
Certificate serial: 0198D583D19B7F0C7CDD0A44245B2A9B964E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uQkJWNHPN8ULMt8zjwsw26j1GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.mft
Manifest number: 0C48
Signing time: Sat 23 Aug 2025 06:00:42 +0000
Manifest this update: Sat 23 Aug 2025 06:00:42 +0000
Manifest next update: Sun 24 Aug 2025 06:00:42 +0000
Files and hashes: 1: 4uQkJWNHPN8ULMt8zjwsw26j1GU.crl (hash: Ha38M8sT1W/jALYjon+S6lMTf/3eZ7PZ1iyn2JOLyXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4uQkJWNHPN8ULMt8zjwsw26j1GU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:d1:9b:7f:0c:7c:dd:0a:44:24:5b:2a:9b:96:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e4242563473cdf142ccb7cce3c2cc36ea3d465
Validity
Not Before: Aug 23 06:00:42 2025 GMT
Not After : Aug 24 06:00:42 2025 GMT
Subject: CN=182fafc08c6152ae7693c5c18f4cbea73d2e603f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:90:d2:3b:70:2d:0f:a0:ce:2a:b5:be:36:2e:
a2:03:08:bd:1d:66:de:8a:96:68:a6:b5:83:23:39:
30:e8:32:32:da:94:e1:7c:fa:22:37:0b:0d:f3:a2:
95:8f:af:ca:4c:1d:96:d9:06:31:a5:e4:a0:d0:99:
7a:b2:fa:97:c9:5d:1e:5e:dc:47:ed:1d:5d:12:64:
6d:1a:c4:90:6f:3b:bb:2d:ea:f0:4e:a8:e9:d2:26:
94:dd:3d:fc:9c:b4:bd:ab:30:1d:4c:3c:48:80:9d:
ad:ea:8c:13:fc:0e:3c:4f:59:d1:4c:df:07:10:c1:
9a:33:3f:fc:85:28:8f:1b:ad:4a:79:66:b7:94:52:
7e:3e:22:e9:64:8b:2c:fb:73:28:8f:32:4c:31:65:
07:10:d5:a8:e9:c7:5a:17:c4:93:79:b0:18:da:33:
6a:05:61:56:ae:b4:c3:b9:6b:f6:2f:c9:0e:29:fb:
da:2b:54:05:ba:dc:98:52:f0:cb:66:f4:15:aa:98:
96:8b:9e:fb:c1:21:ad:85:47:a4:6b:c8:a3:85:6e:
26:93:8a:08:92:8c:15:3a:cf:b7:1f:87:9d:0e:cf:
65:cb:8c:a6:f2:3d:9c:fb:a1:5d:f0:04:bd:9c:ef:
69:6e:8c:fa:c1:51:a5:f4:fd:65:70:2d:a6:3a:b9:
1a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:2F:AF:C0:8C:61:52:AE:76:93:C5:C1:8F:4C:BE:A7:3D:2E:60:3F
X509v3 Authority Key Identifier:
keyid:E2:E4:24:25:63:47:3C:DF:14:2C:CB:7C:CE:3C:2C:C3:6E:A3:D4:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uQkJWNHPN8ULMt8zjwsw26j1GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:c5:7a:f6:d6:3b:25:f0:37:be:63:76:06:d2:80:04:67:1f:
1d:4a:58:53:08:32:df:ae:ae:51:82:ba:cb:69:01:de:76:c9:
87:c2:76:83:62:88:f3:55:cd:ce:3c:32:08:9d:1f:bf:ea:9f:
db:64:93:20:aa:17:f3:23:fb:d5:ad:55:be:c3:7e:0e:9e:9f:
a7:b0:15:14:2a:44:fa:b1:fe:f1:04:dd:7d:a8:4e:2a:50:ad:
ee:73:5a:42:4d:01:93:c6:f3:07:db:2b:af:7b:ba:e1:c6:12:
fa:84:be:3e:43:37:97:e4:0f:e2:21:f1:86:02:ca:a8:1f:26:
d7:a7:9c:c6:7b:03:05:f9:be:8b:52:50:c6:ba:a7:ac:cf:6d:
7c:f6:bb:50:7e:4f:bd:12:91:b4:8f:41:12:57:7b:16:6c:d8:
21:78:6a:9d:67:72:ce:c5:2e:ce:eb:0d:67:92:ce:20:83:70:
5a:5d:89:fb:a5:ab:c6:64:28:73:6d:d4:74:ff:37:7d:ea:7c:
c0:06:fc:93:96:2e:b8:84:b2:9e:59:e4:c9:bc:6e:b4:a9:ac:
9a:cd:82:1f:ab:c4:9e:4a:82:a9:27:7b:0f:52:5d:63:7e:0e:
08:a5:1e:24:d0:c4:8b:d0:9a:54:10:a4:37:d1:34:04:20:d6:
58:47:43:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg9Gbfwx83QpEJFsqm5ZOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZTQyNDI1NjM0NzNjZGYxNDJjY2I3Y2NlM2MyY2MzNmVh
M2Q0NjUwHhcNMjUwODIzMDYwMDQyWhcNMjUwODI0MDYwMDQyWjAzMTEwLwYDVQQD
EygxODJmYWZjMDhjNjE1MmFlNzY5M2M1YzE4ZjRjYmVhNzNkMmU2MDNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZDSO3AtD6DOKrW+Ni6iAwi9HWbe
ipZoprWDIzkw6DIy2pThfPoiNwsN86KVj6/KTB2W2QYxpeSg0Jl6svqXyV0eXtxH
7R1dEmRtGsSQbzu7LerwTqjp0iaU3T38nLS9qzAdTDxIgJ2t6owT/A48T1nRTN8H
EMGaMz/8hSiPG61KeWa3lFJ+PiLpZIss+3MojzJMMWUHENWo6cdaF8STebAY2jNq
BWFWrrTDuWv2L8kOKfvaK1QFutyYUvDLZvQVqpiWi577wSGthUeka8ijhW4mk4oI
kowVOs+3H4edDs9ly4ym8j2c+6Fd8AS9nO9pboz6wVGl9P1lcC2mOrkaPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBgvr8CMYVKudpPFwY9Mvqc9LmA/MB8GA1UdIwQY
MBaAFOLkJCVjRzzfFCzLfM48LMNuo9RlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHVRa0pXTkhQTjhVTE10OHpqd3N3MjZqMUdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80MGZiNzgtNDE4OS00OTdkLWIwNmIt
OGU3YjcwOWRhNjUzLzEvNHVRa0pXTkhQTjhVTE10OHpqd3N3MjZqMUdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80MGZiNzgtNDE4OS00OTdkLWIwNmItOGU3YjcwOWRhNjUz
LzEvNHVRa0pXTkhQTjhVTE10OHpqd3N3MjZqMUdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX8V69tY7
JfA3vmN2BtKABGcfHUpYUwgy366uUYK6y2kB3nbJh8J2g2KI81XNzjwyCJ0fv+qf
22STIKoX8yP71a1VvsN+Dp6fp7AVFCpE+rH+8QTdfahOKlCt7nNaQk0Bk8bzB9sr
r3u64cYS+oS+PkM3l+QP4iHxhgLKqB8m16ecxnsDBfm+i1JQxrqnrM9tfPa7UH5P
vRKRtI9BEld7FmzYIXhqnWdyzsUuzusNZ5LOIINwWl2J+6WrxmQoc23UdP83fep8
wAb8k5YuuISynlnkybxutKmsms2CH6vEnkqCqSd7D1JdY34OCKUeJNDEi9CaVBCk
N9E0BCDWWEdDJw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:55 2025 by rpki-client