Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.mft
File: 4njEqqAhvti5JuNZH99QyN9rwXI.mft (raw, json)
Hash identifier: QxQR9iJcNv8GcoOoW6J0f9/G3UKOzb3Vit4PDvjxmHw=
Subject key identifier: D5:93:53:94:DE:06:F6:9D:62:3E:25:6F:03:D2:AC:00:8C:63:67:64
Authority key identifier: E2:78:C4:AA:A0:21:BE:D8:B9:26:E3:59:1F:DF:50:C8:DF:6B:C1:72
Certificate issuer: /CN=e278c4aaa021bed8b926e3591fdf50c8df6bc172
Certificate serial: 019921E77F6241467AFEF1DE0ED533884BB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4njEqqAhvti5JuNZH99QyN9rwXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.mft
Manifest number: 08E6
Signing time: Sun 07 Sep 2025 02:00:43 +0000
Manifest this update: Sun 07 Sep 2025 02:00:43 +0000
Manifest next update: Mon 08 Sep 2025 02:00:43 +0000
Files and hashes: 1: 1ypxGUz02dU-GrVHnawwOGAtbp8.roa (hash: s/FzoESG6FigLmQ9qVLEYvChgXRxC5KQ8IrkGKlYCxY=)
2: 4njEqqAhvti5JuNZH99QyN9rwXI.crl (hash: GVESEk/+JX07vkjC7pm7tpRHGg13lGB3rZDfRu3xcwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4njEqqAhvti5JuNZH99QyN9rwXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:7f:62:41:46:7a:fe:f1:de:0e:d5:33:88:4b:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e278c4aaa021bed8b926e3591fdf50c8df6bc172
Validity
Not Before: Sep 7 02:00:43 2025 GMT
Not After : Sep 8 02:00:43 2025 GMT
Subject: CN=d5935394de06f69d623e256f03d2ac008c636764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b2:b1:7f:5e:ef:83:38:2b:9b:46:2a:32:c7:
6d:4a:8c:5d:ba:22:f0:6d:bf:52:5a:04:cd:bb:d6:
54:f3:ba:45:18:15:83:ca:d8:74:a1:61:3e:d8:fa:
f4:61:4a:2c:72:21:91:68:ea:45:41:4d:42:cd:c6:
81:f5:fd:ed:97:31:c1:8b:99:67:3d:87:da:41:91:
69:e2:c9:6d:ba:4f:90:d7:a1:c7:5c:ce:20:5b:a1:
4c:e2:3c:33:73:d5:76:fc:6a:15:90:6d:6d:5e:3f:
43:b7:f5:9f:f7:2a:0f:0a:db:ce:67:32:c5:e5:88:
a5:d0:82:8f:ca:6b:c6:68:d7:65:a3:f9:8f:fb:6a:
b1:9f:28:d7:5c:b3:92:ce:af:52:7b:ff:c2:0c:14:
fb:f5:87:3d:54:ab:02:7f:08:04:95:18:db:54:79:
5e:be:61:01:19:e6:74:6b:4b:71:af:c6:07:62:09:
a7:5b:fc:10:60:92:c6:3c:46:31:ad:3e:55:67:0a:
a5:57:c5:07:19:7a:eb:e4:7c:cc:f5:b5:5f:81:30:
57:d6:16:b9:76:73:64:a8:c3:e9:32:af:a6:2d:a1:
64:c0:63:40:57:64:6c:bc:aa:6b:2a:e2:3a:b4:96:
09:26:75:e4:11:94:71:2e:d4:59:23:37:a4:74:da:
30:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:93:53:94:DE:06:F6:9D:62:3E:25:6F:03:D2:AC:00:8C:63:67:64
X509v3 Authority Key Identifier:
keyid:E2:78:C4:AA:A0:21:BE:D8:B9:26:E3:59:1F:DF:50:C8:DF:6B:C1:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4njEqqAhvti5JuNZH99QyN9rwXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:70:3c:7c:f7:b8:d2:52:55:af:31:7d:3c:1e:fc:79:05:d1:
0b:c0:b5:09:90:04:0e:6c:12:73:26:a8:52:5b:41:57:21:73:
b4:09:09:f6:e7:e5:26:05:ef:06:86:69:39:6e:71:4d:df:73:
cd:85:b4:31:ce:38:dd:b4:9b:2e:5c:69:63:6f:6e:f3:d8:4c:
ce:1a:37:50:fe:27:12:d7:53:03:e6:00:03:1a:a9:d3:59:6d:
8b:71:ed:83:9e:01:85:00:91:bc:c9:9e:3e:3c:fc:dc:d0:1b:
95:95:57:bb:61:0d:2d:1e:fb:89:29:00:3f:71:3e:fd:51:52:
20:46:c5:95:d8:78:3b:6f:a9:66:54:33:fa:85:32:b2:88:00:
19:44:b9:e9:ad:82:74:08:5b:2c:de:59:90:4d:5e:45:26:05:
19:85:12:3c:86:bc:a2:51:f1:cd:36:16:da:57:ae:b3:41:0f:
be:bf:33:ed:b2:10:00:7a:b0:e7:22:8c:b4:73:d2:0a:97:a6:
51:31:cd:48:08:ff:b0:b4:c1:32:da:eb:88:cd:2c:df:ce:13:
a2:9e:2c:4a:39:ae:66:bf:8d:f4:a7:5b:82:f6:f6:38:49:56:
92:b4:91:ee:bd:9c:37:2e:e7:94:80:01:f1:6f:00:58:ef:8e:
7a:94:c8:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkh539iQUZ6/vHeDtUziEu1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyNzhjNGFhYTAyMWJlZDhiOTI2ZTM1OTFmZGY1MGM4ZGY2
YmMxNzIwHhcNMjUwOTA3MDIwMDQzWhcNMjUwOTA4MDIwMDQzWjAzMTEwLwYDVQQD
EyhkNTkzNTM5NGRlMDZmNjlkNjIzZTI1NmYwM2QyYWMwMDhjNjM2NzY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrKxf17vgzgrm0YqMsdtSoxduiLw
bb9SWgTNu9ZU87pFGBWDyth0oWE+2Pr0YUosciGRaOpFQU1CzcaB9f3tlzHBi5ln
PYfaQZFp4sltuk+Q16HHXM4gW6FM4jwzc9V2/GoVkG1tXj9Dt/Wf9yoPCtvOZzLF
5Yil0IKPymvGaNdlo/mP+2qxnyjXXLOSzq9Se//CDBT79Yc9VKsCfwgElRjbVHle
vmEBGeZ0a0txr8YHYgmnW/wQYJLGPEYxrT5VZwqlV8UHGXrr5HzM9bVfgTBX1ha5
dnNkqMPpMq+mLaFkwGNAV2RsvKprKuI6tJYJJnXkEZRxLtRZIzekdNowfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNWTU5TeBvadYj4lbwPSrACMY2dkMB8GA1UdIwQY
MBaAFOJ4xKqgIb7YuSbjWR/fUMjfa8FyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNG5qRXFxQWh2dGk1SnVOWkg5OVF5Tjlyd1hJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jMDY5MzctOTNiMy00NDJlLTg2NzYt
ZmM0MzM5MTk4OGY3LzEvNG5qRXFxQWh2dGk1SnVOWkg5OVF5Tjlyd1hJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9jMDY5MzctOTNiMy00NDJlLTg2NzYtZmM0MzM5MTk4OGY3
LzEvNG5qRXFxQWh2dGk1SnVOWkg5OVF5Tjlyd1hJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHXA8fPe4
0lJVrzF9PB78eQXRC8C1CZAEDmwScyaoUltBVyFztAkJ9uflJgXvBoZpOW5xTd9z
zYW0Mc443bSbLlxpY29u89hMzho3UP4nEtdTA+YAAxqp01lti3Htg54BhQCRvMme
Pjz83NAblZVXu2ENLR77iSkAP3E+/VFSIEbFldh4O2+pZlQz+oUysogAGUS56a2C
dAhbLN5ZkE1eRSYFGYUSPIa8olHxzTYW2leus0EPvr8z7bIQAHqw5yKMtHPSCpem
UTHNSAj/sLTBMtrriM0s384Top4sSjmuZr+N9Kdbgvb2OElWkrSR7r2cNy7nlIAB
8W8AWO+OepTIcA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:49:41 2025 by rpki-client