Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft
File: 06v49M34ljoYLaDN-QjDhEf6egk.mft (raw, json)
Hash identifier: lhqRskFF+hljDBfx9pWylyTof1mtO9MYDd5BgcX6MUE=
Subject key identifier: 48:35:48:91:79:B4:00:0A:00:AE:4E:B1:72:EA:99:C0:7A:7D:ED:AF
Authority key identifier: D3:AB:F8:F4:CD:F8:96:3A:18:2D:A0:CD:F9:08:C3:84:47:FA:7A:09
Certificate issuer: /CN=d3abf8f4cdf8963a182da0cdf908c38447fa7a09
Certificate serial: 0198D4DFD3141850E3DDDA5E992EC5C12415
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/06v49M34ljoYLaDN-QjDhEf6egk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft
Manifest number: 043A
Signing time: Sat 23 Aug 2025 03:01:34 +0000
Manifest this update: Sat 23 Aug 2025 03:01:34 +0000
Manifest next update: Sun 24 Aug 2025 03:01:34 +0000
Files and hashes: 1: 06v49M34ljoYLaDN-QjDhEf6egk.crl (hash: aZDog402rFXn4AAPjFeZyY8k5YoKa9MGU5KxQJbTUb4=)
2: oT2LDF85PY5HdbBLwhoxl8tjz8s.roa (hash: 1EymL80SjeM7RupyG8pGED+B/g9jGLElUsA1V765L5Y=)
3: rQUKCahIBhl3q6X_ssqHaslUPkw.roa (hash: oqWMNr1y2jXmtuppkY6LyFtpsdVUxnQjZycMv+hYavM=)
4: tFTfuySubfSrRVHUhxYeF1u80Zs.roa (hash: fQsA3U2f82hs7Bti4LUoQIz7rVn7qpzt4RTZ9jhDkSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft
rsync://rpki.ripe.net/repository/DEFAULT/06v49M34ljoYLaDN-QjDhEf6egk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:d3:14:18:50:e3:dd:da:5e:99:2e:c5:c1:24:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3abf8f4cdf8963a182da0cdf908c38447fa7a09
Validity
Not Before: Aug 23 03:01:34 2025 GMT
Not After : Aug 24 03:01:34 2025 GMT
Subject: CN=4835489179b4000a00ae4eb172ea99c07a7dedaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ca:e7:a2:db:06:eb:52:52:36:75:aa:2c:95:
fa:7d:49:a5:b1:a0:4c:df:9e:f8:8b:ff:2c:0b:f5:
74:27:f2:57:72:d9:10:a9:17:1a:c8:10:22:b2:93:
85:cf:c8:90:90:27:7a:8c:19:69:6e:20:b6:fe:5c:
7a:cb:eb:4e:5f:7b:02:23:b0:01:d8:e1:0c:f7:49:
fa:31:65:37:c4:37:16:9c:f2:12:c6:81:6c:17:b5:
9d:04:07:53:3e:78:81:29:6c:9a:83:59:cf:04:cb:
91:e3:e6:fd:68:a7:9c:96:72:0e:8a:86:f2:32:75:
03:0e:7f:83:92:a2:e5:8b:3b:2c:d9:b6:5a:16:44:
e6:ff:11:fc:cb:57:25:5b:66:98:5d:b7:a8:e3:3c:
3f:c9:43:91:65:c8:a6:86:c6:15:4a:5d:cc:50:d6:
83:d9:9f:8b:a0:e0:df:89:73:a9:38:62:c5:5c:cb:
47:ea:08:aa:9c:11:82:c8:82:66:9f:7e:e5:b4:2a:
02:05:93:d8:b1:83:6c:69:c3:8a:d2:5d:76:4e:8e:
12:a2:f9:fe:01:cc:1a:40:31:c6:9a:1e:2e:bb:93:
86:52:03:e4:ef:82:d8:7a:2a:9c:a0:21:7c:d2:2b:
a1:40:9b:9b:73:3d:0e:69:86:bd:83:fe:4c:17:5e:
0e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:35:48:91:79:B4:00:0A:00:AE:4E:B1:72:EA:99:C0:7A:7D:ED:AF
X509v3 Authority Key Identifier:
keyid:D3:AB:F8:F4:CD:F8:96:3A:18:2D:A0:CD:F9:08:C3:84:47:FA:7A:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06v49M34ljoYLaDN-QjDhEf6egk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:8a:3f:26:79:67:50:d0:97:f6:a2:45:d6:3a:1f:f6:71:eb:
f3:b2:41:7a:7f:e1:6e:c8:84:d1:fb:5f:9c:b6:1d:f1:c8:2a:
2d:1a:1f:82:b0:46:ac:80:bc:b3:1a:bc:77:79:ea:54:dc:1c:
10:1e:84:61:76:51:ca:f3:00:ac:23:fe:3e:33:6e:10:f6:85:
cc:1f:ee:82:05:b6:4c:bd:48:a0:67:1c:49:64:5f:21:1e:97:
e2:b4:53:43:e6:c5:c3:a5:30:f8:8e:0c:10:66:f7:83:39:bb:
c4:37:0c:8b:42:d0:d5:7b:3f:92:ba:df:82:6a:48:06:1a:a1:
9e:aa:df:87:cc:42:ad:80:e4:67:ca:27:50:a8:e0:3e:b9:bb:
aa:dc:f6:3b:b8:d1:c3:85:26:f0:46:91:27:54:d7:23:36:a3:
91:5e:d3:8f:ca:10:84:3c:41:1f:35:71:f6:eb:4d:02:58:f7:
c7:09:6a:fe:81:26:4a:26:b9:54:72:1f:26:dc:92:15:43:6b:
8d:cc:d8:7e:b3:7c:3e:7c:30:23:14:38:1a:9d:74:21:29:ce:
d2:14:8e:90:8a:d5:38:a9:84:3e:46:19:43:96:b7:0c:f4:31:
1e:b7:6a:f1:62:16:6a:68:4b:0c:32:63:45:fa:90:6a:0f:d6:
2e:5d:4a:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU39MUGFDj3dpemS7FwSQVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYWJmOGY0Y2RmODk2M2ExODJkYTBjZGY5MDhjMzg0NDdm
YTdhMDkwHhcNMjUwODIzMDMwMTM0WhcNMjUwODI0MDMwMTM0WjAzMTEwLwYDVQQD
Eyg0ODM1NDg5MTc5YjQwMDBhMDBhZTRlYjE3MmVhOTljMDdhN2RlZGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcrnotsG61JSNnWqLJX6fUmlsaBM
3574i/8sC/V0J/JXctkQqRcayBAispOFz8iQkCd6jBlpbiC2/lx6y+tOX3sCI7AB
2OEM90n6MWU3xDcWnPISxoFsF7WdBAdTPniBKWyag1nPBMuR4+b9aKeclnIOioby
MnUDDn+DkqLlizss2bZaFkTm/xH8y1clW2aYXbeo4zw/yUORZcimhsYVSl3MUNaD
2Z+LoODfiXOpOGLFXMtH6giqnBGCyIJmn37ltCoCBZPYsYNsacOK0l12To4Sovn+
AcwaQDHGmh4uu5OGUgPk74LYeiqcoCF80iuhQJubcz0OaYa9g/5MF14OhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEg1SJF5tAAKAK5OsXLqmcB6fe2vMB8GA1UdIwQY
MBaAFNOr+PTN+JY6GC2gzfkIw4RH+noJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDZ2NDlNMzRsam9ZTGFETi1RakRoRWY2ZWdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8yNmQxOTMtNDBjMi00MTdiLWJkNTIt
NWMxMGJkYjg2NmUwLzEvMDZ2NDlNMzRsam9ZTGFETi1RakRoRWY2ZWdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8yNmQxOTMtNDBjMi00MTdiLWJkNTItNWMxMGJkYjg2NmUw
LzEvMDZ2NDlNMzRsam9ZTGFETi1RakRoRWY2ZWdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz4o/Jnln
UNCX9qJF1jof9nHr87JBen/hbsiE0ftfnLYd8cgqLRofgrBGrIC8sxq8d3nqVNwc
EB6EYXZRyvMArCP+PjNuEPaFzB/uggW2TL1IoGccSWRfIR6X4rRTQ+bFw6Uw+I4M
EGb3gzm7xDcMi0LQ1Xs/krrfgmpIBhqhnqrfh8xCrYDkZ8onUKjgPrm7qtz2O7jR
w4Um8EaRJ1TXIzajkV7Tj8oQhDxBHzVx9utNAlj3xwlq/oEmSia5VHIfJtySFUNr
jczYfrN8PnwwIxQ4Gp10ISnO0hSOkIrVOKmEPkYZQ5a3DPQxHrdq8WIWamhLDDJj
RfqQag/WLl1KAQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:40:19 2025 by rpki-client