Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
File: 4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft (raw, json)
Hash identifier: p676zo1ShPwcotc0l6HVRbLc0XlF3RvvljCSdXTTqGM=
Subject key identifier: CE:4A:65:81:BE:8F:F9:D4:B0:F5:66:A6:6C:21:BF:38:39:E8:03:74
Authority key identifier: E2:D1:7A:DA:64:39:28:8C:29:70:3C:F7:05:EF:64:AF:B3:82:0A:D9
Certificate issuer: /CN=e2d17ada6439288c29703cf705ef64afb3820ad9
Certificate serial: 01993502181B9A572D4BAB47D3A763BD494A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
Manifest number: 06E1
Signing time: Wed 10 Sep 2025 19:02:33 +0000
Manifest this update: Wed 10 Sep 2025 19:02:33 +0000
Manifest next update: Thu 11 Sep 2025 19:02:33 +0000
Files and hashes: 1: 4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl (hash: g3DQ8DpjDRYQ/2A2ElDYx2Mgm6pKYlYTKfEZ/xqSkR0=)
2: 6yVMq5BTt8MOOejBYcSjDgADz6M.roa (hash: +lA9zA3W3Yg9Ww1/RHvP0oevwKXOFVEKE6vwlBI3GS8=)
3: r7S4PGOtYK_PBp7kgURvb3XFM1M.roa (hash: oYqwnDt8x2Fy139phL6QrAYp1Cw9URTCQ1HjbcPByVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:02:18:1b:9a:57:2d:4b:ab:47:d3:a7:63:bd:49:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d17ada6439288c29703cf705ef64afb3820ad9
Validity
Not Before: Sep 10 19:02:33 2025 GMT
Not After : Sep 11 19:02:33 2025 GMT
Subject: CN=ce4a6581be8ff9d4b0f566a66c21bf3839e80374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f9:ff:13:40:a7:0b:bd:80:7f:9f:50:b0:40:
b2:74:f1:f5:89:b8:d0:11:b4:73:96:22:f7:b2:e1:
c5:62:83:4e:5f:50:fa:db:c4:db:e0:c7:80:92:36:
89:ec:ec:f0:1f:c3:b6:26:c1:92:f2:7c:12:31:63:
d0:44:9a:a1:0d:ae:73:c6:05:1b:1f:fc:f1:3d:e7:
6f:4c:d7:6b:57:e0:33:8a:09:99:6b:d7:31:62:db:
08:22:e4:6c:36:ba:f8:70:a3:53:f0:9c:ef:88:98:
6e:1b:56:95:0b:7c:88:b4:3b:f9:26:78:27:dc:07:
aa:45:db:f1:7c:6e:f4:39:7d:99:c2:5f:9e:91:b7:
97:17:31:00:28:e2:2c:3c:43:5b:0b:90:12:e7:07:
b6:7a:c8:6f:db:01:22:f2:25:78:9b:2d:84:bf:31:
07:85:49:0f:50:31:81:1a:6c:4c:76:1b:93:a2:ae:
24:0f:56:cc:b8:d1:f6:b7:51:0a:66:d9:6c:3c:fc:
1a:6e:89:3a:d5:3e:3a:ef:c6:bb:76:4a:86:92:89:
7a:82:2e:82:68:3e:57:de:53:81:c2:cc:17:4c:5e:
b9:3e:6f:e5:1f:c3:11:a9:08:cd:b8:b9:59:4e:1d:
4e:ea:2d:0b:51:d4:e1:76:d3:b0:8a:25:82:c2:6b:
76:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:4A:65:81:BE:8F:F9:D4:B0:F5:66:A6:6C:21:BF:38:39:E8:03:74
X509v3 Authority Key Identifier:
keyid:E2:D1:7A:DA:64:39:28:8C:29:70:3C:F7:05:EF:64:AF:B3:82:0A:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:5e:38:01:0b:4e:2a:7f:0d:01:70:9f:8d:99:b8:91:06:f8:
5d:e5:89:ab:9e:c2:00:46:9a:5a:32:43:ea:e4:ee:68:52:9b:
fd:95:47:c1:13:d3:25:c7:0a:21:a0:7d:d2:e0:b9:49:4e:4b:
5c:2c:15:7e:cb:69:ef:8d:23:07:21:1a:3c:46:70:23:97:79:
d9:20:01:26:0a:0b:c5:84:44:95:ed:de:cd:5c:8b:47:1f:77:
c4:ef:83:60:47:40:84:b7:67:eb:c8:b6:c1:e3:c0:3c:1c:c9:
23:4e:e9:30:b2:97:7e:1d:e2:fb:e9:8f:92:ad:60:1b:31:37:
9e:0b:e1:52:9c:50:c3:03:fe:df:2c:c5:1d:41:0f:c2:d3:18:
8b:18:24:76:58:53:e0:f8:19:2c:98:88:ac:3d:b3:14:d3:68:
96:25:73:f4:5a:ef:87:d6:2c:d5:6f:18:35:6e:3d:e6:5b:93:
ba:4b:86:5d:60:ef:4f:3e:34:77:dc:8f:0f:d9:5e:ba:96:be:
8a:60:52:a4:0c:f3:ae:58:8b:fc:b0:e0:ac:c5:00:4d:e8:0e:
d1:f1:51:f0:e3:0e:63:07:d9:49:39:c6:03:0e:70:28:a1:f0:
fb:5e:7f:2f:be:b1:1f:a8:72:c9:32:5f:80:52:c1:b9:8d:a5:
9d:a9:45:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk1AhgbmlctS6tH06djvUlKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZDE3YWRhNjQzOTI4OGMyOTcwM2NmNzA1ZWY2NGFmYjM4
MjBhZDkwHhcNMjUwOTEwMTkwMjMzWhcNMjUwOTExMTkwMjMzWjAzMTEwLwYDVQQD
EyhjZTRhNjU4MWJlOGZmOWQ0YjBmNTY2YTY2YzIxYmYzODM5ZTgwMzc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/n/E0CnC72Af59QsECydPH1ibjQ
EbRzliL3suHFYoNOX1D628Tb4MeAkjaJ7OzwH8O2JsGS8nwSMWPQRJqhDa5zxgUb
H/zxPedvTNdrV+AzigmZa9cxYtsIIuRsNrr4cKNT8JzviJhuG1aVC3yItDv5Jngn
3AeqRdvxfG70OX2Zwl+ekbeXFzEAKOIsPENbC5AS5we2eshv2wEi8iV4my2EvzEH
hUkPUDGBGmxMdhuToq4kD1bMuNH2t1EKZtlsPPwabok61T4678a7dkqGkol6gi6C
aD5X3lOBwswXTF65Pm/lH8MRqQjNuLlZTh1O6i0LUdThdtOwiiWCwmt2hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM5KZYG+j/nUsPVmpmwhvzg56AN0MB8GA1UdIwQY
MBaAFOLRetpkOSiMKXA89wXvZK+zggrZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHRGNjJtUTVLSXdwY0R6M0JlOWtyN09DQ3RrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mMTJiYTEtZDgyNi00NjYyLWJlZDkt
Yzk5N2I4N2I0YjVmLzEvNHRGNjJtUTVLSXdwY0R6M0JlOWtyN09DQ3RrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9mMTJiYTEtZDgyNi00NjYyLWJlZDktYzk5N2I4N2I0YjVm
LzEvNHRGNjJtUTVLSXdwY0R6M0JlOWtyN09DQ3RrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIV44AQtO
Kn8NAXCfjZm4kQb4XeWJq57CAEaaWjJD6uTuaFKb/ZVHwRPTJccKIaB90uC5SU5L
XCwVfstp740jByEaPEZwI5d52SABJgoLxYREle3ezVyLRx93xO+DYEdAhLdn68i2
wePAPBzJI07pMLKXfh3i++mPkq1gGzE3ngvhUpxQwwP+3yzFHUEPwtMYixgkdlhT
4PgZLJiIrD2zFNNoliVz9Frvh9Ys1W8YNW495luTukuGXWDvTz40d9yPD9leupa+
imBSpAzzrliL/LDgrMUATegO0fFR8OMOYwfZSTnGAw5wKKHw+15/L76xH6hyyTJf
gFLBuY2lnalFsQ==
-----END CERTIFICATE-----
Generated at Wed Sep 10 21:05:16 2025 by rpki-client