Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
File: 4upZNGSFjik5UjRc9Ol3ksiBEFc.mft (raw, json)
Hash identifier: jk7fxl3IxGMTlWkqyaBEO3VuHTgrFFautBHhoRy5Ip0=
Subject key identifier: 1A:94:5C:68:1A:EF:44:89:9E:AA:2D:DA:B7:CB:EA:DD:9B:2C:BD:FB
Authority key identifier: E2:EA:59:34:64:85:8E:29:39:52:34:5C:F4:E9:77:92:C8:81:10:57
Certificate issuer: /CN=e2ea593464858e293952345cf4e97792c8811057
Certificate serial: 01984966EC172D82257172387434A72275A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
Manifest number: 1594
Signing time: Sun 27 Jul 2025 01:02:18 +0000
Manifest this update: Sun 27 Jul 2025 01:02:18 +0000
Manifest next update: Mon 28 Jul 2025 01:02:18 +0000
Files and hashes: 1: 4upZNGSFjik5UjRc9Ol3ksiBEFc.crl (hash: HZGY4gNIMbT1igRXRKH31Rc6gnd6Dn1USjOBlRPwuTQ=)
2: n71MSGzOhUkplgZWWIqcoN_zTeY.roa (hash: M4lvFRLACkU+Ya2mbosmCvcTtHX7Mafia2WGDrBrlJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:ec:17:2d:82:25:71:72:38:74:34:a7:22:75:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2ea593464858e293952345cf4e97792c8811057
Validity
Not Before: Jul 27 01:02:18 2025 GMT
Not After : Jul 28 01:02:18 2025 GMT
Subject: CN=1a945c681aef44899eaa2ddab7cbeadd9b2cbdfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:44:f7:ef:4b:e4:bf:e3:d0:d4:8d:3e:6f:19:
df:8b:82:8c:ac:0c:56:e4:b3:f8:d8:90:97:b9:94:
d6:2f:fa:8c:b7:55:b9:3e:63:fa:5d:ed:eb:df:fb:
32:7e:bc:39:25:80:fb:ba:fc:73:76:e5:49:f1:51:
3c:3d:e4:cf:aa:25:fb:1e:f6:40:81:32:60:cb:64:
39:a5:ad:34:ef:f4:4f:87:34:42:41:9c:9a:65:30:
0c:e9:ff:73:d0:42:5d:db:a7:f8:54:26:49:d5:11:
c7:71:8f:a4:15:a9:4c:0a:8d:26:70:bd:5a:d7:bf:
7c:4b:bb:a3:8b:e9:86:60:33:4c:c2:39:63:14:30:
fa:e5:1e:b4:c1:05:95:3f:eb:16:f6:c4:b8:b9:4f:
f9:63:19:f1:f8:39:9b:13:b7:fe:23:19:35:b0:17:
2c:af:7c:57:1e:34:02:3d:8c:13:63:dd:81:fb:73:
4c:93:f2:00:f2:fc:f5:49:e2:bb:78:64:17:44:06:
4a:2e:d5:ca:74:46:e9:8a:90:f0:8f:42:06:90:e2:
18:d2:ff:8a:20:c7:9e:34:5d:da:d6:62:56:07:83:
99:94:b2:ed:26:da:dc:ef:a0:4a:03:11:78:44:49:
4a:4f:c6:0d:58:0c:a1:5f:15:86:0e:60:f6:83:03:
3a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:94:5C:68:1A:EF:44:89:9E:AA:2D:DA:B7:CB:EA:DD:9B:2C:BD:FB
X509v3 Authority Key Identifier:
keyid:E2:EA:59:34:64:85:8E:29:39:52:34:5C:F4:E9:77:92:C8:81:10:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:4a:ce:6b:e2:64:f1:d0:f3:2c:40:85:56:fb:4c:c8:40:e4:
2b:2e:d6:01:d7:87:22:b6:d3:f8:3b:11:c4:cc:38:96:4b:af:
41:8d:55:fa:43:4e:5e:34:4e:cf:0d:9b:c2:8b:56:ed:2f:f1:
24:a8:85:78:51:e4:e5:74:7b:75:d8:f7:5f:7f:96:2c:46:1d:
19:23:db:0f:1d:79:6c:d1:c7:57:e4:a6:b7:69:62:0a:72:5d:
ee:b5:e0:b6:54:e2:f6:fa:87:a0:a6:0d:51:b6:2d:15:83:ac:
94:06:9a:51:ef:87:8f:a1:97:10:56:3f:50:69:52:9c:5e:32:
74:f4:3c:e0:a6:85:54:48:81:bb:02:b1:44:36:84:fd:92:c2:
5e:94:03:27:7b:0b:47:78:e2:85:81:a1:49:23:4a:f7:16:c8:
4b:0d:64:29:71:c0:78:7c:00:e1:75:af:92:3d:8b:23:c8:48:
87:45:90:c3:e6:7f:b6:57:42:1f:dc:68:d0:fb:06:28:ce:cf:
a5:f7:4f:dc:d9:18:1f:78:25:5b:c6:d2:b1:f0:18:94:e3:18:
62:2d:63:c0:8a:cc:d2:25:f8:6f:d3:11:c5:6a:d8:ae:2e:2e:
29:6a:03:97:38:1d:a8:60:94:e3:c0:a8:01:30:f6:16:42:6f:
00:4a:3d:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZuwXLYIlcXI4dDSnInWlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZWE1OTM0NjQ4NThlMjkzOTUyMzQ1Y2Y0ZTk3NzkyYzg4
MTEwNTcwHhcNMjUwNzI3MDEwMjE4WhcNMjUwNzI4MDEwMjE4WjAzMTEwLwYDVQQD
EygxYTk0NWM2ODFhZWY0NDg5OWVhYTJkZGFiN2NiZWFkZDliMmNiZGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0T370vkv+PQ1I0+bxnfi4KMrAxW
5LP42JCXuZTWL/qMt1W5PmP6Xe3r3/syfrw5JYD7uvxzduVJ8VE8PeTPqiX7HvZA
gTJgy2Q5pa007/RPhzRCQZyaZTAM6f9z0EJd26f4VCZJ1RHHcY+kFalMCo0mcL1a
1798S7uji+mGYDNMwjljFDD65R60wQWVP+sW9sS4uU/5Yxnx+DmbE7f+Ixk1sBcs
r3xXHjQCPYwTY92B+3NMk/IA8vz1SeK7eGQXRAZKLtXKdEbpipDwj0IGkOIY0v+K
IMeeNF3a1mJWB4OZlLLtJtrc76BKAxF4RElKT8YNWAyhXxWGDmD2gwM6CwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBqUXGga70SJnqot2rfL6t2bLL37MB8GA1UdIwQY
MBaAFOLqWTRkhY4pOVI0XPTpd5LIgRBXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHVwWk5HU0ZqaWs1VWpSYzlPbDNrc2lCRUZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9jMzkzMmYtZjQ3Ni00ZDVjLWJiNWEt
NjJlNGJhZWU0ZmM1LzEvNHVwWk5HU0ZqaWs1VWpSYzlPbDNrc2lCRUZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9jMzkzMmYtZjQ3Ni00ZDVjLWJiNWEtNjJlNGJhZWU0ZmM1
LzEvNHVwWk5HU0ZqaWs1VWpSYzlPbDNrc2lCRUZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMErOa+Jk
8dDzLECFVvtMyEDkKy7WAdeHIrbT+DsRxMw4lkuvQY1V+kNOXjROzw2bwotW7S/x
JKiFeFHk5XR7ddj3X3+WLEYdGSPbDx15bNHHV+Smt2liCnJd7rXgtlTi9vqHoKYN
UbYtFYOslAaaUe+Hj6GXEFY/UGlSnF4ydPQ84KaFVEiBuwKxRDaE/ZLCXpQDJ3sL
R3jihYGhSSNK9xbISw1kKXHAeHwA4XWvkj2LI8hIh0WQw+Z/tldCH9xo0PsGKM7P
pfdP3NkYH3glW8bSsfAYlOMYYi1jwIrM0iX4b9MRxWrYri4uKWoDlzgdqGCU48Co
ATD2FkJvAEo9ZQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 04:43:39 2025 by rpki-client