Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
File: 4i1-riHYuu6d5pQNjOaynZKpAx4.mft (raw, json)
Hash identifier: tV9XQRcoiNDauMIOP18fnh8aK/lFAySGiaNyndNvqr8=
Subject key identifier: D2:68:13:96:14:0E:E6:56:AD:EA:DE:03:74:37:54:C2:32:76:66:78
Authority key identifier: E2:2D:7E:AE:21:D8:BA:EE:9D:E6:94:0D:8C:E6:B2:9D:92:A9:03:1E
Certificate issuer: /CN=e22d7eae21d8baee9de6940d8ce6b29d92a9031e
Certificate serial: 0198D698573E7CA482B46661121398EC863C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
Manifest number: 0589
Signing time: Sat 23 Aug 2025 11:02:44 +0000
Manifest this update: Sat 23 Aug 2025 11:02:44 +0000
Manifest next update: Sun 24 Aug 2025 11:02:44 +0000
Files and hashes: 1: 4i1-riHYuu6d5pQNjOaynZKpAx4.crl (hash: OhsNhknfBMV6Tj+ojOHj+ZzQ6WWZ6GEEIPZ9m+kfCaQ=)
2: Ym4cY_1EuRnkCyF3T4bm70pYxjE.roa (hash: AkplZO86AEiMlgSJVWAGSBviunFDjdLnWUMhCPpbyQE=)
3: iIMfjrcM-EEaIrK48S4AaqdLSDc.roa (hash: kGHhJdo0yzn2T1RMM++JhdnOAbfrtsEDL/H5s4If3hE=)
4: kVLjxhxgFuqXEqXn9rCH2eEb9oA.roa (hash: QbtMbRiPhMHo4O/j41QZux+PuXLhM2M+5dr1jmr3fpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:57:3e:7c:a4:82:b4:66:61:12:13:98:ec:86:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e22d7eae21d8baee9de6940d8ce6b29d92a9031e
Validity
Not Before: Aug 23 11:02:44 2025 GMT
Not After : Aug 24 11:02:44 2025 GMT
Subject: CN=d2681396140ee656adeade03743754c232766678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f3:77:bf:60:95:f2:91:f0:9f:96:1b:72:7b:
17:34:f6:7b:39:0f:95:a6:93:e5:57:1a:03:ad:f1:
f1:96:7c:9f:b2:25:e4:57:e8:3a:07:15:f1:f0:dd:
8c:4f:f8:89:87:ea:64:a0:19:44:38:c4:82:62:d5:
de:7a:99:65:34:8e:0f:83:79:e4:c2:e7:ba:0a:a3:
31:ec:50:0b:27:68:a2:a1:58:6e:dd:d9:b0:3f:84:
52:1d:e5:66:d8:e2:96:ca:b9:b2:21:c2:df:14:b6:
cd:ea:bc:59:aa:53:e9:9d:11:55:a2:55:65:a1:d3:
a2:e6:81:e3:13:63:d3:dd:99:b1:32:6f:7e:b1:93:
fa:6c:95:5e:67:d2:e5:e8:44:c5:5a:68:34:32:e1:
6c:bd:76:50:c9:a6:ab:3a:3c:c6:1e:ed:20:f9:10:
8d:35:d8:40:67:01:ef:95:08:38:0a:3f:b2:e0:07:
0b:5e:24:9e:1a:69:9b:1e:5e:7a:eb:f1:8b:b0:51:
94:72:ce:fc:14:19:8c:dc:e5:aa:b9:d0:af:7a:77:
66:9b:da:ce:2b:0f:10:e0:d9:9b:5b:92:6f:63:7f:
df:ba:47:dd:82:8c:92:aa:5f:f2:f9:2d:c9:c6:4f:
83:31:39:2d:00:4e:6b:31:64:ac:67:b9:dd:89:55:
34:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:68:13:96:14:0E:E6:56:AD:EA:DE:03:74:37:54:C2:32:76:66:78
X509v3 Authority Key Identifier:
keyid:E2:2D:7E:AE:21:D8:BA:EE:9D:E6:94:0D:8C:E6:B2:9D:92:A9:03:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:57:a1:fa:ae:8f:9a:57:fd:2f:38:89:57:90:85:cc:1e:b7:
0e:eb:c3:5a:48:9c:cc:5a:10:ae:66:5c:28:f9:5e:9d:96:e4:
71:57:20:d6:60:16:2b:c4:b2:c9:c6:25:e0:53:06:e9:1c:37:
22:76:13:b7:46:4f:35:65:d4:34:46:c6:44:da:0a:96:9d:01:
97:5e:9f:ee:a9:ba:5f:da:5e:e9:d9:3c:f9:dc:e6:55:79:2a:
26:3d:57:20:f8:d9:cc:c7:e0:b2:ac:38:db:db:77:4b:65:15:
5f:8b:79:bb:e7:83:a2:c8:f1:ef:51:db:d2:f1:6c:6b:3d:93:
ff:ed:8e:8d:a1:1e:ab:36:aa:19:32:f4:34:34:0b:fa:93:75:
25:dc:e3:41:b6:93:ba:0c:8e:52:fc:b9:3c:8e:8c:e6:2d:f2:
ef:4f:89:c5:1d:ee:f4:13:28:39:b7:ff:6c:b6:b9:2e:a4:10:
a0:03:53:91:9b:38:50:f3:fd:da:4a:8f:e8:59:32:27:26:66:
e0:06:66:64:25:d6:f4:94:47:aa:9d:8d:ac:46:a5:f4:6c:cb:
a5:71:7e:14:b6:b2:3f:26:7a:da:c6:ea:69:9c:17:21:18:3f:
a6:ff:c4:9b:19:36:bc:ad:2b:b4:d5:42:b9:23:0e:91:15:22:
78:37:c6:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWmFc+fKSCtGZhEhOY7IY8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyMmQ3ZWFlMjFkOGJhZWU5ZGU2OTQwZDhjZTZiMjlkOTJh
OTAzMWUwHhcNMjUwODIzMTEwMjQ0WhcNMjUwODI0MTEwMjQ0WjAzMTEwLwYDVQQD
EyhkMjY4MTM5NjE0MGVlNjU2YWRlYWRlMDM3NDM3NTRjMjMyNzY2Njc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/N3v2CV8pHwn5YbcnsXNPZ7OQ+V
ppPlVxoDrfHxlnyfsiXkV+g6BxXx8N2MT/iJh+pkoBlEOMSCYtXeepllNI4Pg3nk
wue6CqMx7FALJ2iioVhu3dmwP4RSHeVm2OKWyrmyIcLfFLbN6rxZqlPpnRFVolVl
odOi5oHjE2PT3ZmxMm9+sZP6bJVeZ9Ll6ETFWmg0MuFsvXZQyaarOjzGHu0g+RCN
NdhAZwHvlQg4Cj+y4AcLXiSeGmmbHl566/GLsFGUcs78FBmM3OWqudCvendmm9rO
Kw8Q4NmbW5JvY3/fukfdgoySql/y+S3Jxk+DMTktAE5rMWSsZ7ndiVU06wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNJoE5YUDuZWrereA3Q3VMIydmZ4MB8GA1UdIwQY
MBaAFOItfq4h2LruneaUDYzmsp2SqQMeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGkxLXJpSFl1dTZkNXBRTmpPYXluWktwQXg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9hYjgwNzAtNGY1OC00NjM0LTlhNDQt
Mzg3NTM2ZDAzYTcxLzEvNGkxLXJpSFl1dTZkNXBRTmpPYXluWktwQXg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9hYjgwNzAtNGY1OC00NjM0LTlhNDQtMzg3NTM2ZDAzYTcx
LzEvNGkxLXJpSFl1dTZkNXBRTmpPYXluWktwQXg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYFeh+q6P
mlf9LziJV5CFzB63DuvDWkiczFoQrmZcKPlenZbkcVcg1mAWK8SyycYl4FMG6Rw3
InYTt0ZPNWXUNEbGRNoKlp0Bl16f7qm6X9pe6dk8+dzmVXkqJj1XIPjZzMfgsqw4
29t3S2UVX4t5u+eDosjx71Hb0vFsaz2T/+2OjaEeqzaqGTL0NDQL+pN1JdzjQbaT
ugyOUvy5PI6M5i3y70+JxR3u9BMoObf/bLa5LqQQoANTkZs4UPP92kqP6FkyJyZm
4AZmZCXW9JRHqp2NrEal9GzLpXF+FLayPyZ62sbqaZwXIRg/pv/Emxk2vK0rtNVC
uSMOkRUieDfGLA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:15:17 2025 by rpki-client