Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft
File: 4ndTjewu_NLxHMY3GX0dmm_a6dk.mft (raw, json)
Hash identifier: VzoBT6746aWMMk/n5sd2TC7V8gCpc6/l/J/NAYhBJXU=
Subject key identifier: BC:CC:0D:17:77:89:84:56:28:6C:6A:24:66:55:90:B1:9E:94:3A:CF
Authority key identifier: E2:77:53:8D:EC:2E:FC:D2:F1:1C:C6:37:19:7D:1D:9A:6F:DA:E9:D9
Certificate issuer: /CN=e277538dec2efcd2f11cc637197d1d9a6fdae9d9
Certificate serial: 0198499C67620B8202CF34D564614EB6C870
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ndTjewu_NLxHMY3GX0dmm_a6dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft
Manifest number: 12B8
Signing time: Sun 27 Jul 2025 02:00:43 +0000
Manifest this update: Sun 27 Jul 2025 02:00:43 +0000
Manifest next update: Mon 28 Jul 2025 02:00:43 +0000
Files and hashes: 1: 4ndTjewu_NLxHMY3GX0dmm_a6dk.crl (hash: b7fqVgFe1UYlGla+WQLxIlk0GizAZFp2z9riaCxL1Ww=)
2: hA-e1ExzRSPNWyW93O3s0XSrAZ4.roa (hash: wOrCVsUdrc4d/IuOMgZHbZ6waL7T9XC1LvudSdq2sG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ndTjewu_NLxHMY3GX0dmm_a6dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:67:62:0b:82:02:cf:34:d5:64:61:4e:b6:c8:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e277538dec2efcd2f11cc637197d1d9a6fdae9d9
Validity
Not Before: Jul 27 02:00:43 2025 GMT
Not After : Jul 28 02:00:43 2025 GMT
Subject: CN=bccc0d1777898456286c6a24665590b19e943acf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:32:b7:55:28:e8:ec:7c:bb:87:4d:a6:1b:b7:
d5:60:6f:ab:5b:77:18:0d:76:a3:9c:f4:82:b8:04:
47:00:fa:aa:50:06:fa:8d:6e:62:82:c0:14:39:6a:
4c:81:2b:d0:4b:38:5f:a9:bb:30:53:2a:63:b6:b6:
64:90:22:8c:a3:92:4d:54:0a:14:41:86:62:c5:62:
93:ed:73:48:e6:5b:25:6c:e7:38:fa:d6:83:93:eb:
64:45:e6:17:ee:fa:a4:bc:17:03:d7:cc:45:bb:6a:
ad:ac:84:1e:6c:a9:79:43:29:32:54:e5:24:5f:12:
2f:1b:b6:df:48:db:c5:3c:f2:34:6b:3b:16:e0:0c:
50:9e:9c:b9:28:93:09:91:1f:ab:8e:32:d5:50:05:
79:55:37:a4:52:ec:85:bd:47:69:bb:e5:46:09:4d:
e9:d5:52:51:b9:01:b7:7d:85:aa:8a:f3:aa:2f:e7:
ea:e2:78:d6:fb:5c:52:45:89:b8:c7:a9:53:be:eb:
dd:0d:b4:81:a2:c6:4f:41:74:26:e7:76:19:d4:4d:
d3:50:42:85:ee:89:9c:dd:a6:e0:4a:d7:06:83:5f:
af:54:5e:c5:6e:02:a6:36:82:3d:e2:bd:ea:3a:1c:
e1:b1:77:04:4c:8f:56:5b:3b:87:9f:0d:23:6f:df:
96:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:CC:0D:17:77:89:84:56:28:6C:6A:24:66:55:90:B1:9E:94:3A:CF
X509v3 Authority Key Identifier:
keyid:E2:77:53:8D:EC:2E:FC:D2:F1:1C:C6:37:19:7D:1D:9A:6F:DA:E9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ndTjewu_NLxHMY3GX0dmm_a6dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:82:49:df:19:43:86:1e:89:af:41:4a:af:14:f4:c1:fb:fb:
9d:62:90:75:d0:f1:8e:01:de:72:c0:8d:25:34:b7:19:61:bd:
06:9b:fe:9e:5f:fc:b5:17:12:d7:3a:72:f2:45:c6:66:97:b8:
88:4d:87:cc:70:3e:5b:18:04:80:0d:c3:5d:a2:ef:26:a3:10:
e2:bc:9e:41:8e:69:82:e0:f6:75:7c:63:b6:9a:23:5a:38:7a:
5d:87:35:a8:fb:83:6b:0f:af:cb:23:f0:51:3f:48:4e:c8:c0:
be:fa:17:99:be:50:b7:e4:3b:07:61:fd:76:af:58:f6:81:14:
84:f0:ae:f1:26:58:ac:96:5e:b1:f5:b0:c1:cd:66:31:1f:94:
d9:43:e4:e5:53:b3:55:e0:82:68:e9:79:40:fe:2a:59:24:6b:
a1:b3:d5:1e:0a:73:5d:ad:ca:f9:f8:2b:ec:7f:b2:be:93:a7:
60:1c:b2:9c:38:22:b2:0a:8d:65:5b:02:f7:ac:e1:6f:9e:a5:
aa:84:76:82:e5:fb:22:4b:17:56:3d:45:dc:f2:79:40:0c:be:
d5:36:a8:91:e8:da:bf:ce:f1:70:38:c8:29:4d:29:05:40:50:
eb:5d:00:78:81:ff:80:b4:4a:95:60:e4:cc:89:fa:a5:1d:90:
75:3d:03:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJnGdiC4ICzzTVZGFOtshwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyNzc1MzhkZWMyZWZjZDJmMTFjYzYzNzE5N2QxZDlhNmZk
YWU5ZDkwHhcNMjUwNzI3MDIwMDQzWhcNMjUwNzI4MDIwMDQzWjAzMTEwLwYDVQQD
EyhiY2NjMGQxNzc3ODk4NDU2Mjg2YzZhMjQ2NjU1OTBiMTllOTQzYWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jK3VSjo7Hy7h02mG7fVYG+rW3cY
DXajnPSCuARHAPqqUAb6jW5igsAUOWpMgSvQSzhfqbswUypjtrZkkCKMo5JNVAoU
QYZixWKT7XNI5lslbOc4+taDk+tkReYX7vqkvBcD18xFu2qtrIQebKl5QykyVOUk
XxIvG7bfSNvFPPI0azsW4AxQnpy5KJMJkR+rjjLVUAV5VTekUuyFvUdpu+VGCU3p
1VJRuQG3fYWqivOqL+fq4njW+1xSRYm4x6lTvuvdDbSBosZPQXQm53YZ1E3TUEKF
7omc3abgStcGg1+vVF7FbgKmNoI94r3qOhzhsXcETI9WWzuHnw0jb9+WaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLzMDRd3iYRWKGxqJGZVkLGelDrPMB8GA1UdIwQY
MBaAFOJ3U43sLvzS8RzGNxl9HZpv2unZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNG5kVGpld3VfTkx4SE1ZM0dYMGRtbV9hNmRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9hMzFkZGItMWZkMi00NjFjLWJmZWIt
ODJlZTJkMmI0Mjg5LzEvNG5kVGpld3VfTkx4SE1ZM0dYMGRtbV9hNmRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9hMzFkZGItMWZkMi00NjFjLWJmZWItODJlZTJkMmI0Mjg5
LzEvNG5kVGpld3VfTkx4SE1ZM0dYMGRtbV9hNmRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo4JJ3xlD
hh6Jr0FKrxT0wfv7nWKQddDxjgHecsCNJTS3GWG9Bpv+nl/8tRcS1zpy8kXGZpe4
iE2HzHA+WxgEgA3DXaLvJqMQ4ryeQY5pguD2dXxjtpojWjh6XYc1qPuDaw+vyyPw
UT9ITsjAvvoXmb5Qt+Q7B2H9dq9Y9oEUhPCu8SZYrJZesfWwwc1mMR+U2UPk5VOz
VeCCaOl5QP4qWSRrobPVHgpzXa3K+fgr7H+yvpOnYByynDgisgqNZVsC96zhb56l
qoR2guX7IksXVj1F3PJ5QAy+1Taokejav87xcDjIKU0pBUBQ610AeIH/gLRKlWDk
zIn6pR2QdT0DLw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:17:19 2025 by rpki-client