Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
File: 4QhbYki9cgdqtCH_oOO_75NWXp0.mft (raw, json)
Hash identifier: xdneG/fJhVqrsKk1r5CjZ3XJ0fjxRla5ZxDW0sIAoiY=
Subject key identifier: 9A:9C:03:FE:57:A5:94:9E:D2:18:6F:91:6F:7E:6A:05:85:58:BB:4D
Authority key identifier: E1:08:5B:62:48:BD:72:07:6A:B4:21:FF:A0:E3:BF:EF:93:56:5E:9D
Certificate issuer: /CN=e1085b6248bd72076ab421ffa0e3bfef93565e9d
Certificate serial: 019922C323E2C6B1478C67E85904B50064EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
Manifest number: 0BC9
Signing time: Sun 07 Sep 2025 06:00:37 +0000
Manifest this update: Sun 07 Sep 2025 06:00:37 +0000
Manifest next update: Mon 08 Sep 2025 06:00:37 +0000
Files and hashes: 1: 4QhbYki9cgdqtCH_oOO_75NWXp0.crl (hash: aRRId0T85a1AsBZEsOo0tFkzwFdtSyAlBllzYsIzkfw=)
2: PBq5zLGD_CUeX0SfhuWUFrucnGw.roa (hash: rPbgNnUy1CwR89NF9bSl2HtGtuQRXqqe8MrxpHJ/Dco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:23:e2:c6:b1:47:8c:67:e8:59:04:b5:00:64:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1085b6248bd72076ab421ffa0e3bfef93565e9d
Validity
Not Before: Sep 7 06:00:37 2025 GMT
Not After : Sep 8 06:00:37 2025 GMT
Subject: CN=9a9c03fe57a5949ed2186f916f7e6a058558bb4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:04:6f:16:d3:12:18:11:97:d4:0d:b0:d0:1f:
22:3f:ff:e4:be:0d:95:6f:15:20:92:29:23:39:ae:
83:b1:00:3a:20:39:c2:34:4d:68:e0:36:88:47:57:
f4:95:db:51:4b:cd:b3:8f:52:9f:8d:1e:9c:18:c2:
71:04:be:b9:87:b4:d1:81:e4:d5:2b:8f:a6:f7:cb:
8a:5a:5f:94:d3:42:97:aa:63:45:e5:b7:4b:ad:57:
71:c2:60:bc:8e:a1:dc:f2:58:12:0a:da:d0:4e:62:
ca:81:d1:f3:68:a3:d0:49:ab:90:e3:64:c5:96:d9:
a2:95:bc:04:60:a0:b8:38:cc:a7:39:36:e6:75:0a:
24:d2:97:a5:b6:a1:b2:92:83:84:f7:81:27:76:ec:
fb:72:3b:2e:f5:2a:48:95:62:ab:02:0c:6b:28:69:
7c:0e:37:68:40:8d:ce:d7:ed:28:78:86:7c:3e:93:
03:4e:27:03:28:da:83:48:b2:c4:7e:cc:91:aa:6d:
1c:b9:d6:b0:e4:19:b0:aa:8b:11:cf:52:b9:06:2f:
bc:e4:a7:14:4f:dd:a6:f1:66:17:04:02:fa:e1:0b:
55:d5:35:13:5c:0b:63:84:af:ff:23:2b:04:a0:56:
a1:24:be:47:d7:9d:fb:12:3f:8b:95:65:ff:35:ae:
c0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:9C:03:FE:57:A5:94:9E:D2:18:6F:91:6F:7E:6A:05:85:58:BB:4D
X509v3 Authority Key Identifier:
keyid:E1:08:5B:62:48:BD:72:07:6A:B4:21:FF:A0:E3:BF:EF:93:56:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:de:69:53:0c:c0:65:bc:40:0b:41:47:11:56:96:7e:ab:c5:
a8:84:22:92:dd:1f:a7:9b:59:5b:fc:78:ad:a0:02:62:b3:57:
c6:40:32:ec:d5:4e:37:77:6e:a6:09:8e:33:34:4a:ee:af:ac:
d4:83:c9:e1:b6:e4:2f:43:87:aa:3c:72:e9:c2:5e:f1:61:11:
77:96:d3:7e:ed:53:d5:e4:c3:56:d8:2f:c7:b2:b9:38:57:cb:
b4:f0:09:03:03:2c:67:a9:69:91:4b:25:18:70:b9:5a:03:98:
73:26:fb:b0:d3:59:83:57:a0:0c:f4:73:d7:ee:ca:1a:aa:23:
9b:49:5a:99:fb:89:5f:e9:28:da:a1:35:c2:fe:07:bf:b2:ea:
11:68:dd:14:2b:ce:3d:05:c8:69:8f:8d:f8:34:f4:83:24:5a:
42:a8:dd:e1:1e:cd:1d:91:d5:16:2c:0d:10:d5:b1:a6:f3:33:
5c:0b:a4:90:5a:8b:fb:e0:5c:70:08:a4:33:b1:31:7d:a3:d9:
54:51:d2:95:d1:fc:a6:af:fe:35:dd:39:70:c9:d0:0f:10:b4:
e5:cb:6c:d3:4a:70:3d:66:e5:57:5c:62:af:c4:14:85:6a:88:
eb:c7:73:24:9d:2f:7e:db:eb:17:97:8b:59:db:f5:91:d7:25:
55:9e:58:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiwyPixrFHjGfoWQS1AGTsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMDg1YjYyNDhiZDcyMDc2YWI0MjFmZmEwZTNiZmVmOTM1
NjVlOWQwHhcNMjUwOTA3MDYwMDM3WhcNMjUwOTA4MDYwMDM3WjAzMTEwLwYDVQQD
Eyg5YTljMDNmZTU3YTU5NDllZDIxODZmOTE2ZjdlNmEwNTg1NThiYjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8QRvFtMSGBGX1A2w0B8iP//kvg2V
bxUgkikjOa6DsQA6IDnCNE1o4DaIR1f0ldtRS82zj1KfjR6cGMJxBL65h7TRgeTV
K4+m98uKWl+U00KXqmNF5bdLrVdxwmC8jqHc8lgSCtrQTmLKgdHzaKPQSauQ42TF
ltmilbwEYKC4OMynOTbmdQok0peltqGykoOE94Enduz7cjsu9SpIlWKrAgxrKGl8
DjdoQI3O1+0oeIZ8PpMDTicDKNqDSLLEfsyRqm0cudaw5BmwqosRz1K5Bi+85KcU
T92m8WYXBAL64QtV1TUTXAtjhK//IysEoFahJL5H1537Ej+LlWX/Na7AcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJqcA/5XpZSe0hhvkW9+agWFWLtNMB8GA1UdIwQY
MBaAFOEIW2JIvXIHarQh/6Djv++TVl6dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFFoYllraTljZ2RxdENIX29PT183NU5XWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy82ZDlhYjUtZDFhZS00NDlkLWE3ZTkt
MWY1Zjk0Y2UzNWVlLzEvNFFoYllraTljZ2RxdENIX29PT183NU5XWHAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy82ZDlhYjUtZDFhZS00NDlkLWE3ZTktMWY1Zjk0Y2UzNWVl
LzEvNFFoYllraTljZ2RxdENIX29PT183NU5XWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN95pUwzA
ZbxAC0FHEVaWfqvFqIQikt0fp5tZW/x4raACYrNXxkAy7NVON3dupgmOMzRK7q+s
1IPJ4bbkL0OHqjxy6cJe8WERd5bTfu1T1eTDVtgvx7K5OFfLtPAJAwMsZ6lpkUsl
GHC5WgOYcyb7sNNZg1egDPRz1+7KGqojm0lamfuJX+ko2qE1wv4Hv7LqEWjdFCvO
PQXIaY+N+DT0gyRaQqjd4R7NHZHVFiwNENWxpvMzXAukkFqL++BccAikM7ExfaPZ
VFHSldH8pq/+Nd05cMnQDxC05cts00pwPWblV1xir8QUhWqI68dzJJ0vftvrF5eL
Wdv1kdclVZ5YGQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:04:28 2025 by rpki-client