Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft
File: 4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft (raw, json)
Hash identifier: 5yqJWyktQnyh2rkri5MYV/UgsX6W4vF86ASj6ITWQa0=
Subject key identifier: CD:25:A4:33:1D:9F:A0:5E:C2:45:57:80:B1:09:B6:0B:B2:17:8C:0F
Authority key identifier: E3:1F:36:56:C6:ED:9A:3F:9A:42:C6:78:A7:8A:2E:37:4F:8E:57:D3
Certificate issuer: /CN=e31f3656c6ed9a3f9a42c678a78a2e374f8e57d3
Certificate serial: 0198537B4E76B9B6117709026A663254A317
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft
Manifest number: 05E8
Signing time: Tue 29 Jul 2025 00:00:46 +0000
Manifest this update: Tue 29 Jul 2025 00:00:46 +0000
Manifest next update: Wed 30 Jul 2025 00:00:46 +0000
Files and hashes: 1: 4x82Vsbtmj-aQsZ4p4ouN0-OV9M.crl (hash: 1nRu3yxopnRpKZxTVmKuchGMh5/OponcHErlXgWcb8k=)
2: L4hlYKajNqyPnVVv7AIxEY7dFGs.roa (hash: dC2HFDiddhP1IjnshflG9aATVdgRr01kQzAT+rfJKcU=)
3: RLzTzgtpUaEv3Hac48DwnQ6OKRA.roa (hash: U62vygXnMfJooP0R/d4gF/Enn1AJ0PueFVZ40dCASXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:7b:4e:76:b9:b6:11:77:09:02:6a:66:32:54:a3:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e31f3656c6ed9a3f9a42c678a78a2e374f8e57d3
Validity
Not Before: Jul 29 00:00:46 2025 GMT
Not After : Jul 30 00:00:46 2025 GMT
Subject: CN=cd25a4331d9fa05ec2455780b109b60bb2178c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5f:1b:fa:f0:ea:38:76:4b:58:ca:6b:76:35:
10:85:82:f6:06:c0:d6:b8:75:59:3f:66:f2:5e:dc:
a4:11:6b:b9:bc:b8:6f:aa:40:7a:56:e7:5b:1f:d1:
14:33:b3:29:04:42:83:ac:f1:b9:5e:31:66:5c:95:
63:c8:b0:14:a9:b5:a1:c7:45:de:4d:81:e2:a5:dd:
48:3d:72:d7:d9:0e:a9:ec:fc:ae:06:41:ae:7f:a6:
86:9e:8b:71:6c:d8:d8:f5:42:6b:04:04:3d:90:ff:
72:7f:8a:34:15:0b:dc:6c:97:e2:00:9a:31:7f:e8:
03:59:af:d4:e2:53:6b:be:68:10:23:5c:6d:ab:e1:
70:59:51:94:af:56:3a:65:79:2d:34:21:50:74:20:
5c:2c:c4:e1:23:19:d6:c0:a9:f2:a9:8f:fb:e8:91:
20:9a:81:8b:7f:b8:b6:38:5f:e6:fa:ea:6f:1e:8d:
cb:17:7e:e1:b9:a3:64:34:43:94:03:cb:64:74:18:
52:de:9d:82:c3:68:df:14:85:e4:f0:09:d6:4f:05:
66:0e:e4:f2:3d:a9:ac:c8:49:58:f7:c1:5b:42:3d:
d2:5d:3c:79:aa:d6:fd:a7:1f:90:f7:13:29:d1:d4:
73:4c:4f:00:80:2a:55:14:7a:4c:a3:e6:7a:01:2e:
98:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:25:A4:33:1D:9F:A0:5E:C2:45:57:80:B1:09:B6:0B:B2:17:8C:0F
X509v3 Authority Key Identifier:
keyid:E3:1F:36:56:C6:ED:9A:3F:9A:42:C6:78:A7:8A:2E:37:4F:8E:57:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:4b:8f:b2:dd:c0:83:57:8c:26:02:70:af:6f:d9:05:86:34:
4e:22:ce:43:40:22:46:c6:50:1c:c7:d7:ba:87:7e:12:23:52:
59:87:ba:b0:5a:61:86:cd:44:ab:bc:f6:10:05:26:5c:d8:93:
10:27:75:c7:c4:2c:82:5c:6c:43:2d:3a:78:61:dc:b7:78:b0:
af:be:bf:81:13:c9:27:cd:77:dd:bf:f2:86:e0:51:6a:a2:cf:
ad:59:1b:5c:59:3d:2d:cb:13:33:7f:41:dd:ab:7e:c3:77:19:
0c:6f:27:2e:e4:77:86:61:24:ae:b8:f3:c2:e1:82:2b:c7:94:
ac:c6:1d:e5:43:64:86:e1:09:42:1c:f6:ff:69:f8:3e:10:47:
dd:5b:3a:83:f1:c1:3f:ea:14:85:1d:36:90:34:28:d4:3c:dc:
15:72:bd:54:3a:13:43:ce:67:e0:5d:87:e4:ef:28:63:3e:2f:
5a:ed:13:96:0f:a9:d1:14:78:c5:39:b3:db:6e:e1:80:64:1a:
94:a9:70:31:e8:ed:8d:70:55:6d:f6:fa:a7:cb:ef:60:51:61:
e6:ea:59:f5:74:1b:eb:50:69:80:7a:6c:a6:d7:e5:5b:ba:24:
b8:b7:3c:9f:64:a1:a1:63:16:e0:29:a8:45:ab:72:2e:d6:bf:
e9:f4:0b:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhTe052ubYRdwkCamYyVKMXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMWYzNjU2YzZlZDlhM2Y5YTQyYzY3OGE3OGEyZTM3NGY4
ZTU3ZDMwHhcNMjUwNzI5MDAwMDQ2WhcNMjUwNzMwMDAwMDQ2WjAzMTEwLwYDVQQD
EyhjZDI1YTQzMzFkOWZhMDVlYzI0NTU3ODBiMTA5YjYwYmIyMTc4YzBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxF8b+vDqOHZLWMprdjUQhYL2BsDW
uHVZP2byXtykEWu5vLhvqkB6VudbH9EUM7MpBEKDrPG5XjFmXJVjyLAUqbWhx0Xe
TYHipd1IPXLX2Q6p7PyuBkGuf6aGnotxbNjY9UJrBAQ9kP9yf4o0FQvcbJfiAJox
f+gDWa/U4lNrvmgQI1xtq+FwWVGUr1Y6ZXktNCFQdCBcLMThIxnWwKnyqY/76JEg
moGLf7i2OF/m+upvHo3LF37huaNkNEOUA8tkdBhS3p2Cw2jfFIXk8AnWTwVmDuTy
PamsyElY98FbQj3SXTx5qtb9px+Q9xMp0dRzTE8AgCpVFHpMo+Z6AS6YAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM0lpDMdn6BewkVXgLEJtguyF4wPMB8GA1UdIwQY
MBaAFOMfNlbG7Zo/mkLGeKeKLjdPjlfTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHg4MlZzYnRtai1hUXNaNHA0b3VOMC1PVjlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8wMmY4YTEtMzM4My00ZDIxLWFhMjUt
ZTczM2MyNjJhMzgyLzEvNHg4MlZzYnRtai1hUXNaNHA0b3VOMC1PVjlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8wMmY4YTEtMzM4My00ZDIxLWFhMjUtZTczM2MyNjJhMzgy
LzEvNHg4MlZzYnRtai1hUXNaNHA0b3VOMC1PVjlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsUuPst3A
g1eMJgJwr2/ZBYY0TiLOQ0AiRsZQHMfXuod+EiNSWYe6sFphhs1Eq7z2EAUmXNiT
ECd1x8QsglxsQy06eGHct3iwr76/gRPJJ8133b/yhuBRaqLPrVkbXFk9LcsTM39B
3at+w3cZDG8nLuR3hmEkrrjzwuGCK8eUrMYd5UNkhuEJQhz2/2n4PhBH3Vs6g/HB
P+oUhR02kDQo1DzcFXK9VDoTQ85n4F2H5O8oYz4vWu0Tlg+p0RR4xTmz227hgGQa
lKlwMejtjXBVbfb6p8vvYFFh5upZ9XQb61BpgHpsptflW7okuLc8n2ShoWMW4Cmo
RatyLta/6fQLTw==
-----END CERTIFICATE-----
Generated at Tue Jul 29 07:35:27 2025 by rpki-client