Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
File: 4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft (raw, json)
Hash identifier: mKXgPbi6T5azGtZCLwdGMnZmwkj1iVn2giQKVq/6H/o=
Subject key identifier: 6C:39:FA:A3:42:4C:FB:B3:69:7C:52:B3:55:7F:82:8D:66:58:07:7B
Authority key identifier: E1:A9:FE:3C:8A:69:D5:09:35:A1:F7:49:66:6E:08:DC:75:45:94:DD
Certificate issuer: /CN=e1a9fe3c8a69d50935a1f749666e08dc754594dd
Certificate serial: 01984BC1932D5AFCC9AB21988FB5B532473B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
Manifest number: 10C5
Signing time: Sun 27 Jul 2025 12:00:33 +0000
Manifest this update: Sun 27 Jul 2025 12:00:33 +0000
Manifest next update: Mon 28 Jul 2025 12:00:33 +0000
Files and hashes: 1: 3BfIScw6HImdI4whE_vk-buQO8s.roa (hash: G0gYam1RQRQrZL9flb7DmAGTR2cR1ZnF922oRZ/xNlg=)
2: 4an-PIpp1Qk1ofdJZm4I3HVFlN0.crl (hash: 5C8fo7ylqb2cPZ1/bepFf7NLP4FZykGS8+YE5iE15PI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:c1:93:2d:5a:fc:c9:ab:21:98:8f:b5:b5:32:47:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1a9fe3c8a69d50935a1f749666e08dc754594dd
Validity
Not Before: Jul 27 12:00:33 2025 GMT
Not After : Jul 28 12:00:33 2025 GMT
Subject: CN=6c39faa3424cfbb3697c52b3557f828d6658077b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:71:11:70:83:5c:af:49:25:81:06:0c:aa:a8:
a6:68:96:cc:24:9d:31:cb:10:d1:4f:85:38:c9:79:
4e:1f:83:1b:e9:9c:c3:32:5b:7d:62:58:dc:a5:f9:
2e:e0:ab:6f:4a:01:9c:1f:33:2c:60:f5:6a:dd:99:
f6:a1:29:a8:ed:e5:22:4b:95:33:8b:a2:54:3f:f0:
8a:7f:7b:47:ae:4a:30:e8:09:8e:98:6a:f5:18:61:
52:0e:d5:09:41:29:28:08:35:3e:b1:31:d9:fc:9b:
9b:a4:82:cf:fc:fb:74:3b:7f:96:1d:8c:00:6f:61:
68:7e:01:68:29:5b:57:1d:ac:88:37:1e:4d:66:dd:
4b:a0:ca:09:8f:d8:22:60:73:95:01:bb:b6:e9:1f:
b3:35:42:92:45:79:de:f7:a3:79:28:62:c4:8e:46:
39:12:30:36:4b:a8:0a:71:45:f9:da:80:87:f5:8a:
a9:3d:76:76:62:4b:33:3f:90:d6:11:a7:e5:b2:b3:
0b:91:b4:73:d2:7d:f5:53:f7:1d:b7:54:ff:b7:df:
8b:3a:c5:e5:83:dc:9e:87:1d:02:a0:c3:b8:99:f4:
3f:31:c1:5b:8a:15:8c:dd:e0:ac:41:10:7d:87:95:
d6:2c:4b:67:aa:eb:51:c9:42:30:92:6a:5a:ac:71:
66:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:39:FA:A3:42:4C:FB:B3:69:7C:52:B3:55:7F:82:8D:66:58:07:7B
X509v3 Authority Key Identifier:
keyid:E1:A9:FE:3C:8A:69:D5:09:35:A1:F7:49:66:6E:08:DC:75:45:94:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:19:98:72:1e:35:2d:6d:59:20:b9:ab:bc:eb:a8:80:e8:7e:
90:eb:dd:78:ec:e8:38:01:17:f9:33:4c:58:4e:b5:6c:03:a9:
54:03:88:f3:8b:fb:5e:f1:e5:ab:33:89:18:4b:fc:4e:cc:8e:
e6:94:7d:2f:8c:87:d9:c0:4e:b9:8e:b8:e0:c7:3e:00:6e:e0:
17:1d:83:ce:18:70:9a:0d:42:c1:2c:83:04:78:0e:5f:b7:b5:
39:2f:c0:81:46:a6:3d:b2:90:e3:cd:a2:a1:c3:61:94:d4:f8:
44:11:c4:33:f2:84:7f:8f:c6:9a:ba:7d:3f:2b:10:82:06:d1:
7e:76:44:ba:09:f4:34:e0:7e:2e:10:5c:02:13:91:fe:07:38:
eb:09:52:82:9e:d5:a3:0e:a9:f3:4e:ea:73:1c:19:bc:25:80:
a6:c6:1b:c0:f2:7d:d0:a0:96:78:ba:4f:99:fa:be:5d:44:0a:
f7:a3:71:17:94:67:a9:ec:5c:15:66:48:55:a5:6a:ef:34:f3:
3b:85:49:47:a6:ba:b0:82:da:7b:d7:da:7e:2f:ae:a5:7f:c5:
1e:02:0b:71:f9:5c:09:28:1f:24:9d:3f:24:88:7e:95:fb:e6:
05:6d:23:a5:87:ab:13:38:1b:da:9f:ac:e8:ed:1d:4b:fd:77:
ed:5b:20:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLwZMtWvzJqyGYj7W1Mkc7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxYTlmZTNjOGE2OWQ1MDkzNWExZjc0OTY2NmUwOGRjNzU0
NTk0ZGQwHhcNMjUwNzI3MTIwMDMzWhcNMjUwNzI4MTIwMDMzWjAzMTEwLwYDVQQD
Eyg2YzM5ZmFhMzQyNGNmYmIzNjk3YzUyYjM1NTdmODI4ZDY2NTgwNzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnERcINcr0klgQYMqqimaJbMJJ0x
yxDRT4U4yXlOH4Mb6ZzDMlt9Yljcpfku4KtvSgGcHzMsYPVq3Zn2oSmo7eUiS5Uz
i6JUP/CKf3tHrkow6AmOmGr1GGFSDtUJQSkoCDU+sTHZ/JubpILP/Pt0O3+WHYwA
b2FofgFoKVtXHayINx5NZt1LoMoJj9giYHOVAbu26R+zNUKSRXne96N5KGLEjkY5
EjA2S6gKcUX52oCH9YqpPXZ2YkszP5DWEaflsrMLkbRz0n31U/cdt1T/t9+LOsXl
g9yehx0CoMO4mfQ/McFbihWM3eCsQRB9h5XWLEtnqutRyUIwkmparHFmmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGw5+qNCTPuzaXxSs1V/go1mWAd7MB8GA1UdIwQY
MBaAFOGp/jyKadUJNaH3SWZuCNx1RZTdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGFuLVBJcHAxUWsxb2ZkSlptNEkzSFZGbE4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8wZTZmNGEtZmQ1Ny00MTFiLWE5NGIt
NmI2ZmRiNTRiYTMxLzEvNGFuLVBJcHAxUWsxb2ZkSlptNEkzSFZGbE4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8wZTZmNGEtZmQ1Ny00MTFiLWE5NGItNmI2ZmRiNTRiYTMx
LzEvNGFuLVBJcHAxUWsxb2ZkSlptNEkzSFZGbE4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzhmYch41
LW1ZILmrvOuogOh+kOvdeOzoOAEX+TNMWE61bAOpVAOI84v7XvHlqzOJGEv8TsyO
5pR9L4yH2cBOuY644Mc+AG7gFx2Dzhhwmg1CwSyDBHgOX7e1OS/AgUamPbKQ482i
ocNhlNT4RBHEM/KEf4/Gmrp9PysQggbRfnZEugn0NOB+LhBcAhOR/gc46wlSgp7V
ow6p807qcxwZvCWApsYbwPJ90KCWeLpPmfq+XUQK96NxF5RnqexcFWZIVaVq7zTz
O4VJR6a6sILae9fafi+upX/FHgILcflcCSgfJJ0/JIh+lfvmBW0jpYerEzgb2p+s
6O0dS/137VsgcA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 14:04:17 2025 by rpki-client