Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.mft
File: 4ygMY1Kgv7t50knIh17RhuzOioY.mft (raw, json)
Hash identifier: y83Xpn2G9q40mLmzzygtfQjNXM2zOr8LK0TYr4/dkM8=
Subject key identifier: 20:F0:BF:6E:E6:97:ED:DF:2A:2B:00:2E:DF:68:2D:AD:91:73:23:ED
Authority key identifier: E3:28:0C:63:52:A0:BF:BB:79:D2:49:C8:87:5E:D1:86:EC:CE:8A:86
Certificate issuer: /CN=e3280c6352a0bfbb79d249c8875ed186ecce8a86
Certificate serial: 0198D5BBC686FC793564902095F99BDDABD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ygMY1Kgv7t50knIh17RhuzOioY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.mft
Manifest number: 1650
Signing time: Sat 23 Aug 2025 07:01:49 +0000
Manifest this update: Sat 23 Aug 2025 07:01:49 +0000
Manifest next update: Sun 24 Aug 2025 07:01:49 +0000
Files and hashes: 1: 4ygMY1Kgv7t50knIh17RhuzOioY.crl (hash: vSnVjg04pujld6SC8sWgMEYMhr8bV9w0OPm85ydUfcw=)
2: LKQwgiepoVu5_u8taIAcRutuJ-s.roa (hash: g/2UuKpKO1KSqMbVUrFxetjbdTbJKbXQ9uje0qgEhYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ygMY1Kgv7t50knIh17RhuzOioY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:c6:86:fc:79:35:64:90:20:95:f9:9b:dd:ab:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3280c6352a0bfbb79d249c8875ed186ecce8a86
Validity
Not Before: Aug 23 07:01:49 2025 GMT
Not After : Aug 24 07:01:49 2025 GMT
Subject: CN=20f0bf6ee697eddf2a2b002edf682dad917323ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5a:f2:51:03:53:11:fb:b5:c7:72:1c:3a:db:
ea:a6:a9:43:5f:74:05:5a:20:3d:06:ba:9e:1e:6f:
d7:e4:18:1e:13:ac:26:b9:48:af:b4:7d:cb:dd:c7:
c0:b6:7e:31:db:e2:ee:b7:53:ec:93:a4:4d:de:67:
3b:25:24:1a:41:2e:b6:6d:f6:11:45:6a:ef:39:21:
95:77:a6:01:ee:cd:01:a8:bc:30:1a:27:fa:4c:67:
4f:44:1f:e2:e1:e2:01:1d:73:e5:9d:90:d6:8e:a4:
5d:78:60:a2:95:c0:37:d7:fb:29:ca:dc:98:0c:50:
c5:ab:ec:01:e3:bd:4b:24:df:3f:88:b5:5a:5b:58:
56:c7:a3:b6:01:51:8f:f6:ae:d5:24:be:3e:20:81:
a2:06:bb:2a:21:6b:bc:32:12:cd:fb:d0:36:13:76:
5a:69:59:7f:71:45:b0:3c:bf:7c:0a:c0:ac:d4:b5:
7f:d6:77:32:bb:b3:a7:e0:1a:c3:dd:5c:30:35:0c:
7f:70:b6:eb:b0:87:5c:cf:cd:e8:cd:3f:e9:89:eb:
f2:65:38:06:83:59:26:41:94:9d:27:59:50:c1:8e:
95:57:4c:21:65:c4:d3:be:24:11:2d:0c:b2:70:5a:
fa:8b:aa:5b:37:19:5a:62:22:5c:1c:a6:cd:77:68:
eb:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F0:BF:6E:E6:97:ED:DF:2A:2B:00:2E:DF:68:2D:AD:91:73:23:ED
X509v3 Authority Key Identifier:
keyid:E3:28:0C:63:52:A0:BF:BB:79:D2:49:C8:87:5E:D1:86:EC:CE:8A:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ygMY1Kgv7t50knIh17RhuzOioY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:c2:c1:f7:25:49:d4:6a:dc:49:7a:5e:42:7b:30:98:d6:fd:
c0:bb:df:6f:10:a1:74:a3:8a:70:a5:c7:1d:db:78:5a:a4:f3:
c8:8a:df:0c:9a:cf:a3:d3:77:40:20:84:9e:8c:db:7c:a1:7f:
00:fc:44:bb:f2:ce:6b:f4:15:1c:22:f3:f0:d4:c4:88:70:ff:
82:88:65:fa:8f:da:a6:4a:6d:51:97:dd:15:d2:66:14:06:9e:
fa:d6:c8:1d:60:cd:5c:35:68:cd:e5:8c:92:a5:10:e5:75:ee:
84:3e:57:fb:85:99:17:e1:b5:fa:fa:af:c3:cd:99:2d:75:a3:
a0:3a:63:c3:ee:97:7f:ed:78:d0:3c:1b:eb:f1:c1:e0:14:dc:
81:ff:4c:4d:40:79:c5:ef:bd:64:d5:e9:c1:67:ba:88:73:b0:
b6:e3:d8:ee:c0:b5:83:4e:3b:ce:07:dd:af:04:d7:64:b2:29:
f9:86:a1:ab:56:15:f9:61:3f:8c:70:71:39:09:1b:ce:2e:25:
e3:04:de:08:9c:20:0a:cd:6f:be:e0:f3:0a:fe:cc:81:3d:03:
e9:c2:2d:c4:81:aa:b7:c9:4d:5e:bd:fc:10:8c:1b:42:21:7a:
f2:37:eb:c7:fd:a5:ef:ab:aa:eb:f7:43:7d:6f:04:fe:53:eb:
9c:68:3b:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu8aG/Hk1ZJAglfmb3avZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMjgwYzYzNTJhMGJmYmI3OWQyNDljODg3NWVkMTg2ZWNj
ZThhODYwHhcNMjUwODIzMDcwMTQ5WhcNMjUwODI0MDcwMTQ5WjAzMTEwLwYDVQQD
EygyMGYwYmY2ZWU2OTdlZGRmMmEyYjAwMmVkZjY4MmRhZDkxNzMyM2VkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlryUQNTEfu1x3IcOtvqpqlDX3QF
WiA9BrqeHm/X5BgeE6wmuUivtH3L3cfAtn4x2+Lut1Psk6RN3mc7JSQaQS62bfYR
RWrvOSGVd6YB7s0BqLwwGif6TGdPRB/i4eIBHXPlnZDWjqRdeGCilcA31/spytyY
DFDFq+wB471LJN8/iLVaW1hWx6O2AVGP9q7VJL4+IIGiBrsqIWu8MhLN+9A2E3Za
aVl/cUWwPL98CsCs1LV/1ncyu7On4BrD3VwwNQx/cLbrsIdcz83ozT/pievyZTgG
g1kmQZSdJ1lQwY6VV0whZcTTviQRLQyycFr6i6pbNxlaYiJcHKbNd2jrxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCDwv27ml+3fKisALt9oLa2RcyPtMB8GA1UdIwQY
MBaAFOMoDGNSoL+7edJJyIde0YbszoqGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHlnTVkxS2d2N3Q1MGtuSWgxN1JodXpPaW9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC81OWEwMzItYzM4NC00M2RmLThjOWQt
ZWYwYjgyMTg5NDQ0LzEvNHlnTVkxS2d2N3Q1MGtuSWgxN1JodXpPaW9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC81OWEwMzItYzM4NC00M2RmLThjOWQtZWYwYjgyMTg5NDQ0
LzEvNHlnTVkxS2d2N3Q1MGtuSWgxN1JodXpPaW9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALsLB9yVJ
1GrcSXpeQnswmNb9wLvfbxChdKOKcKXHHdt4WqTzyIrfDJrPo9N3QCCEnozbfKF/
APxEu/LOa/QVHCLz8NTEiHD/gohl+o/apkptUZfdFdJmFAae+tbIHWDNXDVozeWM
kqUQ5XXuhD5X+4WZF+G1+vqvw82ZLXWjoDpjw+6Xf+140Dwb6/HB4BTcgf9MTUB5
xe+9ZNXpwWe6iHOwtuPY7sC1g047zgfdrwTXZLIp+Yahq1YV+WE/jHBxOQkbzi4l
4wTeCJwgCs1vvuDzCv7MgT0D6cItxIGqt8lNXr38EIwbQiF68jfrx/2l76uq6/dD
fW8E/lPrnGg72w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:54:42 2025 by rpki-client