Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.mft
File: 4qhjHttIETIyWh0Yb73gH6FXeRA.mft (raw, json)
Hash identifier: F/KvS638UyWe3CQy2ej3fLPoAouJzcmvNarjSjqqhJw=
Subject key identifier: 65:EF:92:9B:AC:E1:26:BE:45:10:01:02:21:AE:13:43:A9:62:B9:1F
Authority key identifier: E2:A8:63:1E:DB:48:11:32:32:5A:1D:18:6F:BD:E0:1F:A1:57:79:10
Certificate issuer: /CN=e2a8631edb481132325a1d186fbde01fa1577910
Certificate serial: 019849D2E0AD810ABB4C19B82E8056E741A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4qhjHttIETIyWh0Yb73gH6FXeRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.mft
Manifest number: 0584
Signing time: Sun 27 Jul 2025 03:00:13 +0000
Manifest this update: Sun 27 Jul 2025 03:00:13 +0000
Manifest next update: Mon 28 Jul 2025 03:00:13 +0000
Files and hashes: 1: 4qhjHttIETIyWh0Yb73gH6FXeRA.crl (hash: wAnxFnjbu+FHm0GXS7UGBfRXSXvq46nrVMaUegWyj6w=)
2: h3E6-zfi_xyDMKZ-mjqCgktKu5o.roa (hash: jFGY2eFUS/f/RiSzQYMsT/EoV/0tdGrsjyAMY/vYpEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4qhjHttIETIyWh0Yb73gH6FXeRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:e0:ad:81:0a:bb:4c:19:b8:2e:80:56:e7:41:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2a8631edb481132325a1d186fbde01fa1577910
Validity
Not Before: Jul 27 03:00:13 2025 GMT
Not After : Jul 28 03:00:13 2025 GMT
Subject: CN=65ef929bace126be4510010221ae1343a962b91f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:83:3e:0f:46:75:92:a6:0d:9a:48:7a:b1:f7:
ba:19:47:be:a1:60:bd:37:d7:5a:50:ca:7f:6d:44:
2f:6b:95:0e:a7:ba:c7:5e:47:81:55:92:24:eb:fd:
55:35:c5:d6:a0:ac:7b:71:3e:bd:ee:97:60:3c:de:
a7:65:66:72:80:9c:29:9b:2e:4d:05:f9:00:d4:77:
ca:0f:db:e9:fe:ce:0c:67:c6:29:96:b1:15:a1:c4:
38:ea:23:21:ac:31:73:7d:dd:85:70:68:d5:ad:c0:
fe:2e:76:bc:f1:6d:1a:3c:17:32:1b:1f:b4:f0:06:
bf:1a:af:37:f2:48:5c:78:53:e1:45:cb:dd:18:a4:
f0:a4:cd:85:b0:9d:d6:8f:84:6e:64:92:09:ea:92:
e4:19:0c:81:99:53:f6:21:09:b5:7d:98:4b:af:01:
fe:2b:29:7e:77:b7:13:b1:6f:41:c8:fc:51:c9:f8:
6e:5a:f7:e5:2d:f7:e1:62:14:ba:5f:23:5a:2a:c8:
63:b5:cc:d6:9d:45:98:d0:15:17:b8:c7:2a:18:93:
aa:a8:12:d9:7d:34:53:df:f5:ca:66:29:ae:02:d8:
0f:4f:07:df:a5:6a:2c:0e:61:c3:98:fb:ea:42:9b:
97:1c:fb:1c:78:2a:88:82:6d:34:5f:3c:f9:a7:26:
22:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:EF:92:9B:AC:E1:26:BE:45:10:01:02:21:AE:13:43:A9:62:B9:1F
X509v3 Authority Key Identifier:
keyid:E2:A8:63:1E:DB:48:11:32:32:5A:1D:18:6F:BD:E0:1F:A1:57:79:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qhjHttIETIyWh0Yb73gH6FXeRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:8e:96:e4:34:95:02:fc:f8:fc:3a:58:df:77:90:96:b7:f7:
19:b6:48:b1:19:2a:56:67:b1:b2:90:d3:f2:6a:eb:ad:e5:d5:
d8:44:b2:e1:84:7a:c0:f4:d0:34:38:10:8e:b5:32:1c:49:09:
c7:68:dd:94:74:89:be:1c:68:3d:30:3a:13:97:06:be:0f:6f:
7e:c0:d8:f8:45:b3:b5:d1:dd:74:f0:4b:d5:ad:94:18:5b:16:
81:86:15:a6:28:42:21:76:8c:ae:e4:e5:41:66:df:72:df:08:
a1:9d:7e:61:d5:3b:0b:5e:c3:97:e3:e4:b8:e9:d1:23:af:bf:
98:14:93:7e:7b:d0:a6:31:d4:95:b5:50:ee:59:1a:02:26:53:
2e:97:7d:14:80:15:a4:d7:7c:12:c6:5b:4d:41:e4:33:7a:4a:
7a:ed:4b:35:dc:a5:47:b4:62:4c:b0:14:e5:2b:8a:a8:19:64:
87:42:9d:14:17:96:44:7f:bb:93:11:d1:2c:0b:7f:f1:e1:92:
69:7f:7b:f4:5d:d1:ab:1c:f0:0d:34:22:15:27:bd:2b:6c:d2:
70:17:1b:b0:ca:f5:be:4d:d2:dd:a4:68:25:91:38:b8:60:be:
08:f8:0b:3e:da:8d:2e:c7:97:ff:83:23:77:c9:d2:63:7c:52:
4a:0b:fa:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJ0uCtgQq7TBm4LoBW50GkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYTg2MzFlZGI0ODExMzIzMjVhMWQxODZmYmRlMDFmYTE1
Nzc5MTAwHhcNMjUwNzI3MDMwMDEzWhcNMjUwNzI4MDMwMDEzWjAzMTEwLwYDVQQD
Eyg2NWVmOTI5YmFjZTEyNmJlNDUxMDAxMDIyMWFlMTM0M2E5NjJiOTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIM+D0Z1kqYNmkh6sfe6GUe+oWC9
N9daUMp/bUQva5UOp7rHXkeBVZIk6/1VNcXWoKx7cT697pdgPN6nZWZygJwpmy5N
BfkA1HfKD9vp/s4MZ8YplrEVocQ46iMhrDFzfd2FcGjVrcD+Lna88W0aPBcyGx+0
8Aa/Gq838khceFPhRcvdGKTwpM2FsJ3Wj4RuZJIJ6pLkGQyBmVP2IQm1fZhLrwH+
Kyl+d7cTsW9ByPxRyfhuWvflLffhYhS6XyNaKshjtczWnUWY0BUXuMcqGJOqqBLZ
fTRT3/XKZimuAtgPTwffpWosDmHDmPvqQpuXHPsceCqIgm00Xzz5pyYiTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGXvkpus4Sa+RRABAiGuE0OpYrkfMB8GA1UdIwQY
MBaAFOKoYx7bSBEyMlodGG+94B+hV3kQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHFoakh0dElFVEl5V2gwWWI3M2dINkZYZVJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS82YWMwNTYtYmFhNC00YzcxLWI5NDAt
NDZkNmJhZWZkYWIxLzEvNHFoakh0dElFVEl5V2gwWWI3M2dINkZYZVJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS82YWMwNTYtYmFhNC00YzcxLWI5NDAtNDZkNmJhZWZkYWIx
LzEvNHFoakh0dElFVEl5V2gwWWI3M2dINkZYZVJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH46W5DSV
Avz4/DpY33eQlrf3GbZIsRkqVmexspDT8mrrreXV2ESy4YR6wPTQNDgQjrUyHEkJ
x2jdlHSJvhxoPTA6E5cGvg9vfsDY+EWztdHddPBL1a2UGFsWgYYVpihCIXaMruTl
QWbfct8IoZ1+YdU7C17Dl+PkuOnRI6+/mBSTfnvQpjHUlbVQ7lkaAiZTLpd9FIAV
pNd8EsZbTUHkM3pKeu1LNdylR7RiTLAU5SuKqBlkh0KdFBeWRH+7kxHRLAt/8eGS
aX979F3RqxzwDTQiFSe9K2zScBcbsMr1vk3S3aRoJZE4uGC+CPgLPtqNLseX/4Mj
d8nSY3xSSgv6mA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 04:54:46 2025 by rpki-client