Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
File: 4jDeX9PCRVFzumlqmUQdliDYHTg.mft (raw, json)
Hash identifier: 8ahdiFulTwnh/PfwPZFr8joEjsPlXvemQaWwRLyFIdg=
Subject key identifier: 7F:09:33:CE:98:13:6A:3C:60:24:62:1C:E7:82:B6:2A:9E:0C:00:EF
Authority key identifier: E2:30:DE:5F:D3:C2:45:51:73:BA:69:6A:99:44:1D:96:20:D8:1D:38
Certificate issuer: /CN=e230de5fd3c2455173ba696a99441d9620d81d38
Certificate serial: 01992255E738FD100B6D0CA46071FAEC8C2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
Manifest number: 0C89
Signing time: Sun 07 Sep 2025 04:01:18 +0000
Manifest this update: Sun 07 Sep 2025 04:01:18 +0000
Manifest next update: Mon 08 Sep 2025 04:01:18 +0000
Files and hashes: 1: 4jDeX9PCRVFzumlqmUQdliDYHTg.crl (hash: vCHJAGoNQ96t1U38+iHtKji/JJTPuzGH+vX/T11C2y0=)
2: qADZbjUspL_WRqhq7wvNpX-fT-E.roa (hash: 8V+RbGGUYULjGMvZVkBND643qQkjbKJgabtjnmu0hrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:e7:38:fd:10:0b:6d:0c:a4:60:71:fa:ec:8c:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e230de5fd3c2455173ba696a99441d9620d81d38
Validity
Not Before: Sep 7 04:01:18 2025 GMT
Not After : Sep 8 04:01:18 2025 GMT
Subject: CN=7f0933ce98136a3c6024621ce782b62a9e0c00ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2e:d0:77:9d:d7:89:48:72:b5:dc:33:98:22:
b2:58:9b:3f:46:43:79:f7:b6:bb:0f:3f:e7:81:86:
f3:79:36:3d:1f:fa:5e:74:60:fe:63:2a:60:82:a7:
51:01:62:65:d5:57:19:bc:24:b4:23:25:93:2e:a9:
46:af:14:ab:c0:41:53:f5:bc:cc:64:6d:8f:48:09:
14:e9:ea:f6:5d:2c:ff:21:a0:d0:a6:c6:cb:c0:7b:
e3:e5:76:e2:95:eb:c2:67:32:6b:d3:b6:83:69:10:
d2:d5:27:b0:dd:1a:2d:39:bb:0f:c7:6f:26:bc:59:
90:e9:8c:14:b2:a5:57:22:20:a6:fd:2b:45:24:f0:
9d:54:d7:6f:27:bc:2c:40:d8:00:79:14:cc:bd:96:
75:e7:34:46:4c:66:1f:2f:0f:13:93:42:b7:b7:d3:
51:ff:28:0c:26:61:b6:47:85:29:51:2f:39:e1:89:
e4:bd:ae:69:4b:79:11:0c:dc:61:81:5f:7a:32:ee:
20:b8:8b:29:2d:35:4c:e1:27:06:9c:66:c8:a8:ff:
2a:c7:f4:d2:c3:a9:6e:16:b4:f3:de:c7:ad:b8:9d:
00:33:8e:ac:b4:01:44:dd:08:d1:2c:6b:95:b8:0d:
f4:98:32:c4:97:cb:d3:d2:ac:f8:92:c6:b9:b9:23:
4a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:09:33:CE:98:13:6A:3C:60:24:62:1C:E7:82:B6:2A:9E:0C:00:EF
X509v3 Authority Key Identifier:
keyid:E2:30:DE:5F:D3:C2:45:51:73:BA:69:6A:99:44:1D:96:20:D8:1D:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:15:14:0f:26:db:89:ff:53:f2:7e:fd:69:4d:8c:fe:f2:a9:
a3:32:70:5d:5f:2c:63:70:54:22:48:59:59:ab:5a:47:70:f6:
14:72:56:2a:e0:3b:da:e4:5f:9f:2c:cd:00:90:f1:ba:97:ab:
6c:fd:09:57:6c:cf:25:02:f1:08:35:11:50:0e:ef:4c:c4:8a:
92:a8:17:e8:93:c5:e2:a0:70:01:02:3d:23:59:f7:15:97:68:
1b:68:a9:18:91:85:b4:90:09:89:25:9d:22:79:c8:db:3d:61:
86:cd:6a:d1:4a:57:38:56:31:b8:cf:f4:15:13:9c:55:09:a5:
59:a7:78:2d:9a:28:75:04:05:40:3f:ab:df:53:ba:1f:85:4a:
be:4d:6b:09:a2:36:1d:66:ac:2c:0b:81:92:d2:86:bf:58:57:
c5:2f:64:4d:c4:0f:a0:6b:84:a4:cf:06:19:b7:49:97:89:b4:
b1:05:aa:a9:c0:14:35:cd:1f:c1:f0:15:9c:68:35:0a:e0:6d:
1f:93:67:19:db:f7:52:05:34:c8:6c:db:f4:64:f5:1a:f1:3d:
92:e7:cf:73:f9:ec:3a:86:ff:c3:b2:85:c7:ab:91:11:3e:a9:
da:fa:2c:19:cf:eb:3d:e5:e7:f4:de:e7:55:0a:a7:19:1f:29:
d7:57:30:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiVec4/RALbQykYHH67IwrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyMzBkZTVmZDNjMjQ1NTE3M2JhNjk2YTk5NDQxZDk2MjBk
ODFkMzgwHhcNMjUwOTA3MDQwMTE4WhcNMjUwOTA4MDQwMTE4WjAzMTEwLwYDVQQD
Eyg3ZjA5MzNjZTk4MTM2YTNjNjAyNDYyMWNlNzgyYjYyYTllMGMwMGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmi7Qd53XiUhytdwzmCKyWJs/RkN5
97a7Dz/ngYbzeTY9H/pedGD+YypggqdRAWJl1VcZvCS0IyWTLqlGrxSrwEFT9bzM
ZG2PSAkU6er2XSz/IaDQpsbLwHvj5XbilevCZzJr07aDaRDS1Sew3RotObsPx28m
vFmQ6YwUsqVXIiCm/StFJPCdVNdvJ7wsQNgAeRTMvZZ15zRGTGYfLw8Tk0K3t9NR
/ygMJmG2R4UpUS854Ynkva5pS3kRDNxhgV96Mu4guIspLTVM4ScGnGbIqP8qx/TS
w6luFrTz3setuJ0AM46stAFE3QjRLGuVuA30mDLEl8vT0qz4ksa5uSNKuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH8JM86YE2o8YCRiHOeCtiqeDADvMB8GA1UdIwQY
MBaAFOIw3l/TwkVRc7ppaplEHZYg2B04MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGpEZVg5UENSVkZ6dW1scW1VUWRsaURZSFRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9mYWM3ZWQtOTAxOC00NWRiLTg5NDct
ZmI1YzU4MmU0MDk3LzEvNGpEZVg5UENSVkZ6dW1scW1VUWRsaURZSFRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9mYWM3ZWQtOTAxOC00NWRiLTg5NDctZmI1YzU4MmU0MDk3
LzEvNGpEZVg5UENSVkZ6dW1scW1VUWRsaURZSFRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqRUUDybb
if9T8n79aU2M/vKpozJwXV8sY3BUIkhZWataR3D2FHJWKuA72uRfnyzNAJDxuper
bP0JV2zPJQLxCDURUA7vTMSKkqgX6JPF4qBwAQI9I1n3FZdoG2ipGJGFtJAJiSWd
InnI2z1hhs1q0UpXOFYxuM/0FROcVQmlWad4LZoodQQFQD+r31O6H4VKvk1rCaI2
HWasLAuBktKGv1hXxS9kTcQPoGuEpM8GGbdJl4m0sQWqqcAUNc0fwfAVnGg1CuBt
H5NnGdv3UgU0yGzb9GT1GvE9kufPc/nsOob/w7KFx6uRET6p2vosGc/rPeXn9N7n
VQqnGR8p11cw8g==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:30:50 2025 by rpki-client