Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
File: 4q7DyKsR_AWMmo70AO8cPRRKe6g.mft (raw, json)
Hash identifier: b3kY2/rmE3AeIrn5KKo2MMJKmzrvTYBWz00hdsDDeEk=
Subject key identifier: 2C:95:2B:F3:E6:97:E2:E5:87:0E:14:5A:01:48:06:7F:31:C0:EC:50
Authority key identifier: E2:AE:C3:C8:AB:11:FC:05:8C:9A:8E:F4:00:EF:1C:3D:14:4A:7B:A8
Certificate issuer: /CN=e2aec3c8ab11fc058c9a8ef400ef1c3d144a7ba8
Certificate serial: 0197B5C49E578478290543A6C33ABE9A640F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
Manifest number: 083A
Signing time: Sat 28 Jun 2025 09:00:51 +0000
Manifest this update: Sat 28 Jun 2025 09:00:51 +0000
Manifest next update: Sun 29 Jun 2025 09:00:51 +0000
Files and hashes: 1: 1qu70rxHLlsLAV5g5Efa66s6iag.roa (hash: YmJJTTwGISEG6l96iV4cbfKm+Xa4J2z07ynSRxjgi3U=)
2: 4q7DyKsR_AWMmo70AO8cPRRKe6g.crl (hash: +Jw+8GEdMzCEQ7vtRzKZPgTc9jxgfY/2xMk7ApZLWPA=)
3: q1pnCW-BLUiZBZvb23K3UxB_wVE.roa (hash: pCVPRKxVl5EU92p/4v7xk8uVkYaxmpQbOuLsACDt2jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:9e:57:84:78:29:05:43:a6:c3:3a:be:9a:64:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2aec3c8ab11fc058c9a8ef400ef1c3d144a7ba8
Validity
Not Before: Jun 28 09:00:51 2025 GMT
Not After : Jun 29 09:00:51 2025 GMT
Subject: CN=2c952bf3e697e2e5870e145a0148067f31c0ec50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a5:d0:0d:6f:9b:77:f4:5d:08:e9:a7:8f:71:
7e:1b:3a:27:44:76:12:bc:46:55:6c:47:93:b1:3e:
65:33:dc:bb:77:7f:ce:9e:55:19:62:f0:89:54:0a:
5b:1d:ba:58:3f:31:e4:71:06:7c:24:9d:86:d4:a9:
7b:99:c6:69:e3:93:cd:11:00:79:63:5f:29:bf:d3:
9b:0c:64:76:83:94:ae:a5:88:0b:cd:72:13:2f:55:
90:82:0c:19:38:a4:4e:9a:16:f8:4d:a8:b8:31:d3:
32:f9:3f:6f:68:84:c1:5a:97:47:01:9e:47:91:e9:
b3:8c:be:0c:25:2a:e4:d4:1b:a7:df:2b:aa:4a:6e:
d5:39:66:8e:76:c8:b4:cd:86:a5:ee:ae:fb:98:ff:
ea:fd:43:2f:10:7a:f0:fa:0e:83:4f:f1:2e:18:33:
35:a7:73:ca:5f:aa:29:25:db:0f:71:7f:aa:56:e1:
b6:57:65:6f:60:8b:d1:dc:25:33:d1:35:ac:6f:de:
b6:33:e9:62:61:c5:13:ae:44:68:13:59:8f:82:88:
6f:39:9c:fc:9f:39:d6:48:bc:43:f5:f3:78:78:78:
1e:a4:ea:9f:89:45:b2:74:86:15:b5:8b:84:cd:c8:
64:37:9b:49:99:8d:4f:4e:28:91:95:9a:4c:ae:27:
fc:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:95:2B:F3:E6:97:E2:E5:87:0E:14:5A:01:48:06:7F:31:C0:EC:50
X509v3 Authority Key Identifier:
keyid:E2:AE:C3:C8:AB:11:FC:05:8C:9A:8E:F4:00:EF:1C:3D:14:4A:7B:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:c7:6a:cd:19:f5:2c:03:61:ca:a7:2e:b5:77:fa:1b:61:de:
7f:01:a7:7e:44:b0:4e:14:da:df:74:bb:a5:f8:b1:96:8b:bc:
17:1b:59:80:d3:12:22:3e:75:91:12:d1:d9:19:a9:00:38:ca:
2a:8f:a5:0e:8c:f8:84:be:b4:35:2f:8e:ec:bb:0d:bf:8a:cb:
11:b8:34:d8:fe:13:71:0f:dd:9b:51:23:63:cd:60:d6:31:46:
2d:59:6b:19:8b:c9:6d:2f:1e:9b:a5:b8:50:d1:e3:aa:f0:cb:
12:60:f3:6b:8d:2a:fe:63:0d:50:4d:90:08:b4:15:6e:02:f8:
4f:44:5b:1b:91:1b:d5:99:76:1f:1f:b9:43:f1:02:18:86:f6:
bc:bc:f3:df:43:3d:95:bf:0b:4f:d7:8c:0b:a4:71:ee:14:e5:
b1:ce:5d:14:4f:1c:b2:1d:56:74:c2:6c:ea:8b:e0:34:21:90:
f5:14:62:7e:d4:45:ef:07:76:69:ba:1d:43:a8:30:26:b6:ac:
a3:29:0c:83:92:83:3c:4c:2f:10:e8:e3:28:70:e5:2a:5b:8e:
d2:26:f2:f9:80:0f:9c:2a:de:63:5d:69:23:18:da:87:b9:5f:
aa:f3:2f:cd:0e:ce:b4:5e:f0:79:c9:c5:0b:59:ed:e1:3a:d7:
04:96:52:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1xJ5XhHgpBUOmwzq+mmQPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYWVjM2M4YWIxMWZjMDU4YzlhOGVmNDAwZWYxYzNkMTQ0
YTdiYTgwHhcNMjUwNjI4MDkwMDUxWhcNMjUwNjI5MDkwMDUxWjAzMTEwLwYDVQQD
EygyYzk1MmJmM2U2OTdlMmU1ODcwZTE0NWEwMTQ4MDY3ZjMxYzBlYzUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4KXQDW+bd/RdCOmnj3F+GzonRHYS
vEZVbEeTsT5lM9y7d3/OnlUZYvCJVApbHbpYPzHkcQZ8JJ2G1Kl7mcZp45PNEQB5
Y18pv9ObDGR2g5SupYgLzXITL1WQggwZOKROmhb4Tai4MdMy+T9vaITBWpdHAZ5H
kemzjL4MJSrk1Bun3yuqSm7VOWaOdsi0zYal7q77mP/q/UMvEHrw+g6DT/EuGDM1
p3PKX6opJdsPcX+qVuG2V2VvYIvR3CUz0TWsb962M+liYcUTrkRoE1mPgohvOZz8
nznWSLxD9fN4eHgepOqfiUWydIYVtYuEzchkN5tJmY1PTiiRlZpMrif8qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCyVK/Pml+Llhw4UWgFIBn8xwOxQMB8GA1UdIwQY
MBaAFOKuw8irEfwFjJqO9ADvHD0USnuoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHE3RHlLc1JfQVdNbW83MEFPOGNQUlJLZTZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9iYTE5ZTQtNzFjYy00NzBlLWJkYTUt
OWRhNGNjNjIwNTMzLzEvNHE3RHlLc1JfQVdNbW83MEFPOGNQUlJLZTZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9iYTE5ZTQtNzFjYy00NzBlLWJkYTUtOWRhNGNjNjIwNTMz
LzEvNHE3RHlLc1JfQVdNbW83MEFPOGNQUlJLZTZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUMdqzRn1
LANhyqcutXf6G2HefwGnfkSwThTa33S7pfixlou8FxtZgNMSIj51kRLR2RmpADjK
Ko+lDoz4hL60NS+O7LsNv4rLEbg02P4TcQ/dm1EjY81g1jFGLVlrGYvJbS8em6W4
UNHjqvDLEmDza40q/mMNUE2QCLQVbgL4T0RbG5Eb1Zl2Hx+5Q/ECGIb2vLzz30M9
lb8LT9eMC6Rx7hTlsc5dFE8csh1WdMJs6ovgNCGQ9RRiftRF7wd2abodQ6gwJras
oykMg5KDPEwvEOjjKHDlKluO0iby+YAPnCreY11pIxjah7lfqvMvzQ7OtF7wecnF
C1nt4TrXBJZSIA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:32:49 2025 by rpki-client