Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.mft
File: 4xci15v_Q4Sll8tUTZ55dEkNhzQ.mft (raw, json)
Hash identifier: /a1A2TDMIfnPiRGHLIlU+ILMk5HLcmgZ430IUra6Zik=
Subject key identifier: EA:71:05:7D:74:9B:19:05:1F:95:08:55:B0:51:02:CA:6D:C6:8A:CC
Authority key identifier: E3:17:22:D7:9B:FF:43:84:A5:97:CB:54:4D:9E:79:74:49:0D:87:34
Certificate issuer: /CN=e31722d79bff4384a597cb544d9e7974490d8734
Certificate serial: 0198D5BC3FC260CB9BD81163D5D9339D08F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xci15v_Q4Sll8tUTZ55dEkNhzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.mft
Manifest number: 0F18
Signing time: Sat 23 Aug 2025 07:02:20 +0000
Manifest this update: Sat 23 Aug 2025 07:02:20 +0000
Manifest next update: Sun 24 Aug 2025 07:02:20 +0000
Files and hashes: 1: 4xci15v_Q4Sll8tUTZ55dEkNhzQ.crl (hash: TmWbyIWYXFI8uF34j1Hia8cN9B/NOHYhVm/yon8ildU=)
2: 7wwToY-I4oQ7zD9rX8H-_4Eb5b4.roa (hash: Hl91ZV/in/bxS0Jez/RCMKQB6Lc2qVYsfbP/T+sqKUA=)
3: VnRQ8C8QXZSlLiPv3ntpPix0MBc.roa (hash: GsTYSMVbMlYjzB/yj1A15/Pa7xUVFVUn8yyhUswywB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xci15v_Q4Sll8tUTZ55dEkNhzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:3f:c2:60:cb:9b:d8:11:63:d5:d9:33:9d:08:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e31722d79bff4384a597cb544d9e7974490d8734
Validity
Not Before: Aug 23 07:02:20 2025 GMT
Not After : Aug 24 07:02:20 2025 GMT
Subject: CN=ea71057d749b19051f950855b05102ca6dc68acc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f6:8a:dd:b2:a1:36:60:86:09:19:08:24:62:
38:c7:0f:bf:ec:9e:7e:46:74:2e:6d:9e:bf:2e:79:
e0:c7:c8:6e:33:e6:33:b7:ba:ce:88:a7:75:8c:ed:
f9:3f:f5:2a:3b:9b:52:75:14:1d:02:8e:de:26:ee:
be:72:55:a7:b3:0a:f0:48:0a:ea:fd:ea:90:a5:2c:
92:c5:7a:1d:5c:22:dd:ab:b2:07:e4:6a:dd:1b:59:
31:3c:a2:3e:7e:df:b1:b7:d7:31:53:ad:03:5e:51:
15:93:1e:87:f6:55:68:08:d1:b6:29:ce:22:15:3f:
e6:1e:e9:6e:e1:ff:a7:68:2a:ab:ad:3f:f8:30:75:
92:17:12:c2:e2:e7:80:f3:8f:9d:2d:f4:09:30:b6:
6c:c7:b8:4d:8c:56:f9:64:52:65:fd:48:18:3e:fc:
fd:da:ee:18:be:71:2c:ee:02:aa:45:fe:14:53:8a:
aa:63:0b:bc:0e:0b:b4:71:18:0b:23:99:e5:91:ee:
5d:69:78:9e:31:41:cb:8f:ae:40:d1:2c:3e:61:29:
df:b0:6c:95:ad:bc:d9:5e:25:cf:8c:ba:b4:9e:8d:
11:10:49:71:68:88:87:ef:9d:5b:a1:fd:a7:da:02:
7a:9e:d4:e3:fa:bd:07:75:d3:80:b1:05:cf:02:a9:
c6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:71:05:7D:74:9B:19:05:1F:95:08:55:B0:51:02:CA:6D:C6:8A:CC
X509v3 Authority Key Identifier:
keyid:E3:17:22:D7:9B:FF:43:84:A5:97:CB:54:4D:9E:79:74:49:0D:87:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xci15v_Q4Sll8tUTZ55dEkNhzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:56:09:7b:e6:ec:43:a6:87:57:67:2e:60:8d:02:0c:c5:21:
8d:cc:6b:fd:f2:e0:7a:f6:f5:45:5a:60:95:25:b1:3e:20:f4:
ea:a8:47:0d:b8:38:92:ad:ce:14:a3:00:45:f0:71:91:a3:be:
e6:a6:9f:9d:f1:94:69:db:42:61:4e:05:c7:f7:2f:f0:ea:01:
c3:cd:10:7e:c1:c6:11:d9:80:ba:2b:12:ac:a5:e3:da:55:92:
06:8c:70:d3:45:08:ce:ce:7f:91:dd:e6:e4:66:86:0f:e8:fe:
7b:17:fb:13:12:0b:4e:d5:33:66:53:61:2e:bc:81:a4:be:22:
e8:55:c7:df:d0:82:c0:e9:e2:cd:27:54:ba:64:db:f4:35:79:
a5:e9:41:97:73:6e:08:46:c0:94:ba:1a:95:d6:7a:8b:72:fc:
8e:db:7a:da:bf:72:96:89:a7:73:11:8e:64:4d:f0:37:59:ab:
83:e2:ed:3b:41:27:71:0d:64:18:00:87:6b:72:54:71:1c:85:
76:30:78:ca:15:e9:7f:e1:5d:1d:84:83:b9:c6:4d:98:24:30:
ef:a5:da:2b:d0:08:fa:1b:73:a5:07:f1:83:f8:ce:20:0c:35:
39:66:af:cd:69:20:ad:54:ca:76:e4:7a:1b:1f:ed:fb:c1:dd:
ff:63:00:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVvD/CYMub2BFj1dkznQj2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMTcyMmQ3OWJmZjQzODRhNTk3Y2I1NDRkOWU3OTc0NDkw
ZDg3MzQwHhcNMjUwODIzMDcwMjIwWhcNMjUwODI0MDcwMjIwWjAzMTEwLwYDVQQD
EyhlYTcxMDU3ZDc0OWIxOTA1MWY5NTA4NTViMDUxMDJjYTZkYzY4YWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4faK3bKhNmCGCRkIJGI4xw+/7J5+
RnQubZ6/Lnngx8huM+Yzt7rOiKd1jO35P/UqO5tSdRQdAo7eJu6+clWnswrwSArq
/eqQpSySxXodXCLdq7IH5GrdG1kxPKI+ft+xt9cxU60DXlEVkx6H9lVoCNG2Kc4i
FT/mHulu4f+naCqrrT/4MHWSFxLC4ueA84+dLfQJMLZsx7hNjFb5ZFJl/UgYPvz9
2u4YvnEs7gKqRf4UU4qqYwu8Dgu0cRgLI5nlke5daXieMUHLj65A0Sw+YSnfsGyV
rbzZXiXPjLq0no0REElxaIiH751bof2n2gJ6ntTj+r0HddOAsQXPAqnGhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOpxBX10mxkFH5UIVbBRAsptxorMMB8GA1UdIwQY
MBaAFOMXIteb/0OEpZfLVE2eeXRJDYc0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHhjaTE1dl9RNFNsbDh0VVRaNTVkRWtOaHpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9iNTU1OWUtOTUwYi00OGY0LWEyYWIt
YjI2ZjFhNzBhZjBkLzEvNHhjaTE1dl9RNFNsbDh0VVRaNTVkRWtOaHpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9iNTU1OWUtOTUwYi00OGY0LWEyYWItYjI2ZjFhNzBhZjBk
LzEvNHhjaTE1dl9RNFNsbDh0VVRaNTVkRWtOaHpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbFYJe+bs
Q6aHV2cuYI0CDMUhjcxr/fLgevb1RVpglSWxPiD06qhHDbg4kq3OFKMARfBxkaO+
5qafnfGUadtCYU4Fx/cv8OoBw80QfsHGEdmAuisSrKXj2lWSBoxw00UIzs5/kd3m
5GaGD+j+exf7ExILTtUzZlNhLryBpL4i6FXH39CCwOnizSdUumTb9DV5pelBl3Nu
CEbAlLoaldZ6i3L8jtt62r9ylomncxGOZE3wN1mrg+LtO0EncQ1kGACHa3JUcRyF
djB4yhXpf+FdHYSDucZNmCQw76XaK9AI+htzpQfxg/jOIAw1OWavzWkgrVTKduR6
Gx/t+8Hd/2MAHQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:18:30 2025 by rpki-client