Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft
File: 4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft (raw, json)
Hash identifier: KTsJiioYrIlOnrMFgqUAY9pC76YJqQ6YXtPu2VvyLPA=
Subject key identifier: 79:94:44:1D:22:F8:9F:12:B1:6B:5F:79:6B:B2:E9:0E:05:88:D5:63
Authority key identifier: E2:3C:0C:3E:01:06:C9:65:D4:60:CD:0C:3C:BC:5E:23:4F:82:A6:B4
Certificate issuer: /CN=e23c0c3e0106c965d460cd0c3cbc5e234f82a6b4
Certificate serial: 01984776D24ED4156A646763C27862A76B3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jwMPgEGyWXUYM0MPLxeI0-CprQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft
Manifest number: 1062
Signing time: Sat 26 Jul 2025 16:00:26 +0000
Manifest this update: Sat 26 Jul 2025 16:00:26 +0000
Manifest next update: Sun 27 Jul 2025 16:00:26 +0000
Files and hashes: 1: 4jwMPgEGyWXUYM0MPLxeI0-CprQ.crl (hash: hHQGtW+bn8pcxqWxTg44icq+J+qG/fNip6XNIcm6SLA=)
2: lEkuEW8EviMetjsHoH1cfPquirw.roa (hash: a862beX9o/VH2MAJR1fguEQH5T+CIEuXUqOcrtZ0/zw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jwMPgEGyWXUYM0MPLxeI0-CprQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:d2:4e:d4:15:6a:64:67:63:c2:78:62:a7:6b:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e23c0c3e0106c965d460cd0c3cbc5e234f82a6b4
Validity
Not Before: Jul 26 16:00:26 2025 GMT
Not After : Jul 27 16:00:26 2025 GMT
Subject: CN=7994441d22f89f12b16b5f796bb2e90e0588d563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:16:9c:2e:50:ba:b4:fa:f6:79:48:0b:e8:dd:
2f:4e:1e:60:eb:3b:f3:dd:35:ae:d2:58:66:24:47:
c6:34:34:c8:36:2a:27:fe:76:91:fd:e1:3c:cb:e4:
f0:75:6b:e9:87:06:2a:dd:0a:ad:7e:8d:c2:0c:d4:
26:d2:7c:4b:9d:6d:fc:f7:5d:25:b6:71:48:91:4a:
fd:7b:4c:9c:f7:e1:13:05:97:65:13:86:99:a5:a2:
dc:e6:76:20:2e:eb:b3:55:35:6d:e2:b7:2a:1d:d8:
8f:dd:b0:08:a5:d5:ce:53:6e:ee:c3:09:d8:21:89:
20:b1:19:07:35:cc:81:3d:28:ae:9c:52:8b:93:27:
bf:cd:9b:e2:19:b3:81:84:47:03:4d:5a:50:37:35:
ba:92:fe:09:68:65:c7:18:47:fb:af:db:ce:06:2b:
a1:9a:ea:8b:49:9e:8c:95:c3:94:7c:7a:b3:c1:70:
65:a2:ed:97:d1:d0:f7:bb:cd:60:1b:b9:94:1f:f1:
a3:46:27:65:0e:20:39:cb:10:01:25:c4:49:84:29:
25:1b:ff:8a:5d:25:e5:64:c4:56:eb:be:00:a9:ab:
51:0d:b5:ca:16:f2:e6:96:6a:de:03:c0:c3:ee:8d:
d4:13:a5:75:bb:67:cc:e6:04:e7:65:dc:a9:d0:1a:
dc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:94:44:1D:22:F8:9F:12:B1:6B:5F:79:6B:B2:E9:0E:05:88:D5:63
X509v3 Authority Key Identifier:
keyid:E2:3C:0C:3E:01:06:C9:65:D4:60:CD:0C:3C:BC:5E:23:4F:82:A6:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jwMPgEGyWXUYM0MPLxeI0-CprQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:bd:d4:10:80:41:7c:08:d7:56:42:bf:2d:a3:d4:dc:94:38:
88:a6:bf:96:bc:68:e3:46:02:ec:11:3f:0a:7f:1b:b6:af:45:
b7:20:5c:2a:03:de:03:02:26:3f:10:01:46:ad:38:91:6b:55:
eb:d5:97:40:03:ed:12:76:ab:e7:25:00:82:95:9b:4f:2e:c8:
62:b5:b2:b8:8b:37:a7:48:95:c7:33:90:eb:a8:3e:7a:5b:c9:
f7:e2:2d:d9:ae:2c:64:bf:0e:d7:2d:ba:30:5c:15:01:40:ab:
18:26:5b:12:66:32:f2:f5:97:b9:7f:e2:43:08:ef:b2:60:57:
e3:84:64:13:0d:85:95:ed:1f:64:06:0d:bd:5a:13:a8:fb:7f:
97:2a:0a:a9:44:d5:26:3d:85:f5:88:90:1b:82:a7:e4:41:4b:
3b:5a:4b:72:7e:19:5c:c9:ff:42:1b:83:e0:27:ac:75:a5:a5:
f6:ca:e3:32:22:e5:33:81:24:fc:fa:f5:cf:76:f9:02:52:91:
95:b0:80:55:15:55:eb:8b:ca:ac:5b:82:49:d4:32:af:a5:ec:
95:bf:a7:0e:14:c7:88:ca:9a:36:0d:df:2d:f4:72:73:8d:f4:
30:a6:b8:4e:e2:07:1d:9f:48:61:a6:ba:a5:83:a0:7d:9c:1c:
26:78:e3:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHdtJO1BVqZGdjwnhip2s9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyM2MwYzNlMDEwNmM5NjVkNDYwY2QwYzNjYmM1ZTIzNGY4
MmE2YjQwHhcNMjUwNzI2MTYwMDI2WhcNMjUwNzI3MTYwMDI2WjAzMTEwLwYDVQQD
Eyg3OTk0NDQxZDIyZjg5ZjEyYjE2YjVmNzk2YmIyZTkwZTA1ODhkNTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxacLlC6tPr2eUgL6N0vTh5g6zvz
3TWu0lhmJEfGNDTINion/naR/eE8y+TwdWvphwYq3Qqtfo3CDNQm0nxLnW38910l
tnFIkUr9e0yc9+ETBZdlE4aZpaLc5nYgLuuzVTVt4rcqHdiP3bAIpdXOU27uwwnY
IYkgsRkHNcyBPSiunFKLkye/zZviGbOBhEcDTVpQNzW6kv4JaGXHGEf7r9vOBiuh
muqLSZ6MlcOUfHqzwXBlou2X0dD3u81gG7mUH/GjRidlDiA5yxABJcRJhCklG/+K
XSXlZMRW674AqatRDbXKFvLmlmreA8DD7o3UE6V1u2fM5gTnZdyp0BrcnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHmURB0i+J8SsWtfeWuy6Q4FiNVjMB8GA1UdIwQY
MBaAFOI8DD4BBsll1GDNDDy8XiNPgqa0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGp3TVBnRUd5V1hVWU0wTVBMeGVJMC1DcHJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC82NDdmMjgtNTljZi00ZDY4LWE1MGYt
MTc2NGIwMzYxOGZjLzEvNGp3TVBnRUd5V1hVWU0wTVBMeGVJMC1DcHJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC82NDdmMjgtNTljZi00ZDY4LWE1MGYtMTc2NGIwMzYxOGZj
LzEvNGp3TVBnRUd5V1hVWU0wTVBMeGVJMC1DcHJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcr3UEIBB
fAjXVkK/LaPU3JQ4iKa/lrxo40YC7BE/Cn8btq9FtyBcKgPeAwImPxABRq04kWtV
69WXQAPtEnar5yUAgpWbTy7IYrWyuIs3p0iVxzOQ66g+elvJ9+It2a4sZL8O1y26
MFwVAUCrGCZbEmYy8vWXuX/iQwjvsmBX44RkEw2Fle0fZAYNvVoTqPt/lyoKqUTV
Jj2F9YiQG4Kn5EFLO1pLcn4ZXMn/QhuD4CesdaWl9srjMiLlM4Ek/Pr1z3b5AlKR
lbCAVRVV64vKrFuCSdQyr6Xslb+nDhTHiMqaNg3fLfRyc430MKa4TuIHHZ9IYaa6
pYOgfZwcJnjjow==
-----END CERTIFICATE-----
Generated at Sat Jul 26 19:03:34 2025 by rpki-client