Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.mft
File: 4-oU0TQ7mSUGvubD2Q4ZppeYsBg.mft (raw, json)
Hash identifier: hpuO2TDFwSPhe40XFhAMcmCZGPEHXHoQNI7oGy8bCN0=
Subject key identifier: 3A:79:B1:05:FA:1D:03:76:7F:06:41:AB:9F:4E:37:08:52:D4:22:4A
Authority key identifier: E3:EA:14:D1:34:3B:99:25:06:BE:E6:C3:D9:0E:19:A6:97:98:B0:18
Certificate issuer: /CN=e3ea14d1343b992506bee6c3d90e19a69798b018
Certificate serial: 019851C37043E4AB25D2D17A74D46202DAD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.mft
Manifest number: 0F44
Signing time: Mon 28 Jul 2025 16:00:19 +0000
Manifest this update: Mon 28 Jul 2025 16:00:19 +0000
Manifest next update: Tue 29 Jul 2025 16:00:19 +0000
Files and hashes: 1: 4-oU0TQ7mSUGvubD2Q4ZppeYsBg.crl (hash: XLw4aHL1yg7LodHpCeJN1t2D6lwREqogGJOGcN9J+tg=)
2: GLpHbmgk_HKZm99_6XW1zFhPnQ0.roa (hash: L9ftFB4BS92bIq/ClzkGPs+4wSqKQ5UFQA3ipP2ayPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 14:37:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:c3:70:43:e4:ab:25:d2:d1:7a:74:d4:62:02:da:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3ea14d1343b992506bee6c3d90e19a69798b018
Validity
Not Before: Jul 28 16:00:19 2025 GMT
Not After : Jul 29 16:00:19 2025 GMT
Subject: CN=3a79b105fa1d03767f0641ab9f4e370852d4224a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c0:d8:95:e0:5e:a2:5c:2a:d4:17:81:66:8f:
ec:1a:c4:b8:99:45:b1:e7:5b:2c:c5:71:cd:a8:1c:
ff:d8:a5:8d:5f:aa:9f:86:99:b7:e0:aa:cc:f7:42:
f2:27:da:ab:5c:69:ff:49:2e:8d:0a:99:41:d0:04:
2e:e2:2e:c8:06:6b:d8:28:e4:dc:12:47:8c:80:90:
1b:c0:61:a6:3e:9e:d6:21:de:1a:cd:96:1b:6f:f4:
c2:8d:bb:6a:ef:2a:81:4a:8a:59:3d:86:c0:e9:74:
b8:d0:17:89:74:93:5c:91:f1:2a:b5:17:ea:2d:c8:
41:bd:35:37:89:41:d8:bb:0f:1c:54:d0:2d:9c:4c:
6e:6d:7f:5d:d1:f6:f4:bd:d9:88:8b:6b:86:7c:f7:
be:83:89:41:94:8f:b8:d0:25:2a:c9:f2:4f:13:3a:
12:a7:ea:96:fe:41:10:b7:0f:06:5d:c6:e9:c9:c0:
f8:b1:98:60:fb:8b:b7:5c:a6:57:e2:65:c7:ee:ad:
cf:d1:ca:0b:86:a8:c1:db:61:70:6d:66:65:87:0d:
e1:e9:13:9b:96:de:20:d1:ba:81:f4:11:66:47:32:
93:94:27:fe:b3:ec:f6:df:a8:21:05:a0:54:27:6e:
6c:97:6a:bb:97:dc:cb:38:37:1b:95:dd:c1:ef:0f:
74:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:79:B1:05:FA:1D:03:76:7F:06:41:AB:9F:4E:37:08:52:D4:22:4A
X509v3 Authority Key Identifier:
keyid:E3:EA:14:D1:34:3B:99:25:06:BE:E6:C3:D9:0E:19:A6:97:98:B0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:1a:be:07:8f:56:b7:0b:62:fa:b5:55:c6:82:2d:fe:80:02:
cb:dc:c0:6a:31:74:01:98:75:82:35:3d:40:4e:0c:fa:85:2c:
31:3b:fc:b5:15:1f:1f:fd:8d:34:8c:6e:32:af:7f:d5:83:56:
35:8b:14:0a:2a:3c:f1:dd:a9:5f:55:2f:ce:f8:ff:d3:d0:9f:
74:98:b1:b9:6b:17:6d:b7:69:e0:bc:f5:50:3f:86:fd:8f:f5:
c7:0e:9a:aa:28:b8:c7:53:ee:6b:8f:de:4f:59:51:86:fa:56:
ef:8f:6c:6a:9f:ab:80:15:0c:37:c8:50:54:79:d1:81:23:f1:
1c:08:85:3c:8a:98:bb:42:36:fa:1a:fa:c9:93:d1:31:7c:a4:
9b:85:4a:01:d4:f4:c0:85:2d:1c:ff:20:49:d4:8f:20:5a:8d:
72:bd:36:a9:07:9a:53:a0:20:41:b5:73:42:81:8a:e8:e4:a9:
eb:f6:c1:26:97:05:0f:93:44:9f:a6:c4:74:62:06:49:0c:2f:
32:4b:b4:ab:bf:f4:27:39:bb:29:aa:4a:92:7f:f9:ab:8d:d0:
72:45:b7:9c:62:ea:2b:1a:7e:88:c3:27:13:2e:ad:68:8f:40:
ac:8e:58:5c:3d:ec:6a:a2:de:3a:ff:f9:09:c3:ee:12:6b:83:
df:48:f4:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhRw3BD5Ksl0tF6dNRiAtrWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZWExNGQxMzQzYjk5MjUwNmJlZTZjM2Q5MGUxOWE2OTc5
OGIwMTgwHhcNMjUwNzI4MTYwMDE5WhcNMjUwNzI5MTYwMDE5WjAzMTEwLwYDVQQD
EygzYTc5YjEwNWZhMWQwMzc2N2YwNjQxYWI5ZjRlMzcwODUyZDQyMjRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8DYleBeolwq1BeBZo/sGsS4mUWx
51ssxXHNqBz/2KWNX6qfhpm34KrM90LyJ9qrXGn/SS6NCplB0AQu4i7IBmvYKOTc
EkeMgJAbwGGmPp7WId4azZYbb/TCjbtq7yqBSopZPYbA6XS40BeJdJNckfEqtRfq
LchBvTU3iUHYuw8cVNAtnExubX9d0fb0vdmIi2uGfPe+g4lBlI+40CUqyfJPEzoS
p+qW/kEQtw8GXcbpycD4sZhg+4u3XKZX4mXH7q3P0coLhqjB22FwbWZlhw3h6ROb
lt4g0bqB9BFmRzKTlCf+s+z236ghBaBUJ25sl2q7l9zLODcbld3B7w90gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDp5sQX6HQN2fwZBq59ONwhS1CJKMB8GA1UdIwQY
MBaAFOPqFNE0O5klBr7mw9kOGaaXmLAYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNC1vVTBUUTdtU1VHdnViRDJRNFpwcGVZc0JnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85NzE1NTgtZWQ2Ni00YjgzLThmYTQt
ZDRhNGYzNDcxN2YwLzEvNC1vVTBUUTdtU1VHdnViRDJRNFpwcGVZc0JnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni85NzE1NTgtZWQ2Ni00YjgzLThmYTQtZDRhNGYzNDcxN2Yw
LzEvNC1vVTBUUTdtU1VHdnViRDJRNFpwcGVZc0JnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhxq+B49W
twti+rVVxoIt/oACy9zAajF0AZh1gjU9QE4M+oUsMTv8tRUfH/2NNIxuMq9/1YNW
NYsUCio88d2pX1Uvzvj/09CfdJixuWsXbbdp4Lz1UD+G/Y/1xw6aqii4x1Pua4/e
T1lRhvpW749sap+rgBUMN8hQVHnRgSPxHAiFPIqYu0I2+hr6yZPRMXykm4VKAdT0
wIUtHP8gSdSPIFqNcr02qQeaU6AgQbVzQoGK6OSp6/bBJpcFD5NEn6bEdGIGSQwv
Mku0q7/0Jzm7KapKkn/5q43QckW3nGLqKxp+iMMnEy6taI9ArI5YXD3saqLeOv/5
CcPuEmuD30j0iA==
-----END CERTIFICATE-----
Generated at Mon Jul 28 22:17:28 2025 by rpki-client