Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.mft
File: 4uevc8B6V4KvJINOvdt0qciXxP8.mft (raw, json)
Hash identifier: owPDgZUFMFsYvuSGLgLoBud23QutxQGAtKsM4v0U4JY=
Subject key identifier: 22:C6:3F:33:6D:03:4D:22:D5:CF:9F:FD:49:3C:9F:FE:C4:AF:B7:A8
Authority key identifier: E2:E7:AF:73:C0:7A:57:82:AF:24:83:4E:BD:DB:74:A9:C8:97:C4:FF
Certificate issuer: /CN=e2e7af73c07a5782af24834ebddb74a9c897c4ff
Certificate serial: 0198D515728EEBA12D95D2107E96F339FF51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uevc8B6V4KvJINOvdt0qciXxP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.mft
Manifest number: 02A4
Signing time: Sat 23 Aug 2025 04:00:09 +0000
Manifest this update: Sat 23 Aug 2025 04:00:09 +0000
Manifest next update: Sun 24 Aug 2025 04:00:09 +0000
Files and hashes: 1: 4uevc8B6V4KvJINOvdt0qciXxP8.crl (hash: kbyUUVgVyLUNwVTb0FWK1Fv4QhXKxMEbJIzu4W0YLzM=)
2: k33f_PMIoHn5FXjWs9o_hAagQPU.roa (hash: CQN6YPAgrfc6UnCswx4tiN7JfnanWIcuyP1dM7rzekg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4uevc8B6V4KvJINOvdt0qciXxP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:72:8e:eb:a1:2d:95:d2:10:7e:96:f3:39:ff:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e7af73c07a5782af24834ebddb74a9c897c4ff
Validity
Not Before: Aug 23 04:00:09 2025 GMT
Not After : Aug 24 04:00:09 2025 GMT
Subject: CN=22c63f336d034d22d5cf9ffd493c9ffec4afb7a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d4:fb:b3:d7:fb:0d:03:af:bd:bc:f3:5c:4f:
38:01:aa:8b:dd:0b:a9:23:8e:75:18:06:18:ee:71:
c0:81:d6:16:46:be:0e:37:50:30:b4:81:84:d7:16:
16:b0:11:6f:fc:ad:db:7e:a0:fb:a5:65:d0:f2:5e:
88:05:d4:04:47:14:c4:45:ef:92:8a:bc:95:3a:66:
05:dc:39:ff:3e:19:1e:3e:7b:d5:0e:a7:9b:20:fd:
49:5a:4f:ae:f4:2e:06:4b:dc:2d:97:4a:93:7b:a3:
6a:d5:5f:c5:68:ca:c5:60:a1:0d:bb:9b:42:db:67:
9e:0c:4c:c4:25:bd:90:58:a9:a6:85:bc:bb:d0:76:
77:77:ea:a2:d6:89:20:d9:62:7e:b1:61:42:64:af:
e2:37:e0:0d:85:f9:c8:56:ac:9d:21:24:c6:88:67:
1f:00:d4:7c:a9:17:b2:eb:f7:44:a0:31:ee:cc:2f:
ea:d5:1a:fb:36:5b:9f:18:cf:69:ba:53:e5:9d:74:
54:83:18:a3:6d:1c:24:cc:09:b8:17:cb:aa:19:d6:
e8:d1:82:d8:32:6a:52:6d:59:39:e0:5c:1d:33:8e:
d9:33:52:62:c4:7b:1c:60:ad:bb:a0:07:72:37:53:
3a:fd:5c:ca:c0:6e:e2:9c:e6:9b:9b:d4:56:53:0a:
05:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C6:3F:33:6D:03:4D:22:D5:CF:9F:FD:49:3C:9F:FE:C4:AF:B7:A8
X509v3 Authority Key Identifier:
keyid:E2:E7:AF:73:C0:7A:57:82:AF:24:83:4E:BD:DB:74:A9:C8:97:C4:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uevc8B6V4KvJINOvdt0qciXxP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:1b:8d:fc:c9:4b:65:d9:97:2c:8f:3e:eb:f8:d9:86:23:54:
76:29:f8:99:de:b8:7d:a3:c0:68:34:ae:16:cc:e8:5c:e8:ab:
09:1e:03:70:26:de:63:16:bc:1c:da:90:4a:13:12:72:c7:e2:
47:16:48:a1:cc:5e:0b:4b:bc:e3:7a:c0:8e:24:fe:97:4f:17:
6e:68:14:54:83:59:8a:08:f7:5a:94:87:6e:54:4a:40:ae:ef:
d1:2e:b3:56:24:1b:2d:31:f1:30:b7:4c:25:5b:99:44:41:6c:
14:49:db:c8:6c:32:09:30:be:18:34:15:a1:39:84:63:16:5a:
d9:97:80:b0:5f:bf:be:8d:89:2c:c2:f9:44:05:b8:28:ea:7f:
e5:cf:1b:51:84:28:6a:ec:07:cb:87:81:0c:5f:0c:e5:82:2b:
74:6f:56:8f:24:99:8d:52:61:32:a4:30:0d:36:a4:43:90:45:
8f:9d:57:a6:1f:c6:f9:da:6e:e4:c3:e9:37:41:1b:37:5e:72:
8c:23:c6:f5:c3:94:60:c3:c6:63:13:18:63:49:e6:9c:ec:75:
3a:ed:30:df:ab:4a:bc:42:0f:53:a3:bb:48:34:5f:87:59:f9:
94:a0:1b:b7:01:bb:5a:9e:4b:c8:40:d0:fa:d8:2e:f7:1b:a3:
92:cf:e6:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFXKO66EtldIQfpbzOf9RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZTdhZjczYzA3YTU3ODJhZjI0ODM0ZWJkZGI3NGE5Yzg5
N2M0ZmYwHhcNMjUwODIzMDQwMDA5WhcNMjUwODI0MDQwMDA5WjAzMTEwLwYDVQQD
EygyMmM2M2YzMzZkMDM0ZDIyZDVjZjlmZmQ0OTNjOWZmZWM0YWZiN2E4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9T7s9f7DQOvvbzzXE84AaqL3Qup
I451GAYY7nHAgdYWRr4ON1AwtIGE1xYWsBFv/K3bfqD7pWXQ8l6IBdQERxTERe+S
iryVOmYF3Dn/PhkePnvVDqebIP1JWk+u9C4GS9wtl0qTe6Nq1V/FaMrFYKENu5tC
22eeDEzEJb2QWKmmhby70HZ3d+qi1okg2WJ+sWFCZK/iN+ANhfnIVqydISTGiGcf
ANR8qRey6/dEoDHuzC/q1Rr7NlufGM9pulPlnXRUgxijbRwkzAm4F8uqGdbo0YLY
MmpSbVk54FwdM47ZM1JixHscYK27oAdyN1M6/VzKwG7inOabm9RWUwoFNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCLGPzNtA00i1c+f/Uk8n/7Er7eoMB8GA1UdIwQY
MBaAFOLnr3PAeleCrySDTr3bdKnIl8T/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHVldmM4QjZWNEt2SklOT3ZkdDBxY2lYeFA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS82NTM5OGEtMGZhYS00YjY0LWJkMDkt
MDk4ODZjMGM0NmEwLzEvNHVldmM4QjZWNEt2SklOT3ZkdDBxY2lYeFA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS82NTM5OGEtMGZhYS00YjY0LWJkMDktMDk4ODZjMGM0NmEw
LzEvNHVldmM4QjZWNEt2SklOT3ZkdDBxY2lYeFA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKBuN/MlL
ZdmXLI8+6/jZhiNUdin4md64faPAaDSuFszoXOirCR4DcCbeYxa8HNqQShMScsfi
RxZIocxeC0u843rAjiT+l08XbmgUVINZigj3WpSHblRKQK7v0S6zViQbLTHxMLdM
JVuZREFsFEnbyGwyCTC+GDQVoTmEYxZa2ZeAsF+/vo2JLML5RAW4KOp/5c8bUYQo
auwHy4eBDF8M5YIrdG9WjySZjVJhMqQwDTakQ5BFj51Xph/G+dpu5MPpN0EbN15y
jCPG9cOUYMPGYxMYY0nmnOx1Ou0w36tKvEIPU6O7SDRfh1n5lKAbtwG7Wp5LyEDQ
+tgu9xujks/mFg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:13:47 2025 by rpki-client