
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.mft
File: 4rVv8vrl9iGUksEtg-EjnWrW4S8.mft (raw, json)
Hash identifier: 8rZoQjxVcuQzGzq/5xPuBVcNV7MZ/o2/X32JWoc+/4g=
Subject key identifier: CB:62:56:B5:D3:D1:AC:24:D6:8E:5B:86:BE:B7:D0:50:91:42:DF:70
Authority key identifier: E2:B5:6F:F2:FA:E5:F6:21:94:92:C1:2D:83:E1:23:9D:6A:D6:E1:2F
Certificate issuer: /CN=e2b56ff2fae5f6219492c12d83e1239d6ad6e12f
Certificate serial: 0199228C5D14D62C80EC6F0E509392A6B805
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rVv8vrl9iGUksEtg-EjnWrW4S8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.mft
Manifest number: 1600
Signing time: Sun 07 Sep 2025 05:00:48 +0000
Manifest this update: Sun 07 Sep 2025 05:00:48 +0000
Manifest next update: Mon 08 Sep 2025 05:00:48 +0000
Files and hashes: 1: 4rVv8vrl9iGUksEtg-EjnWrW4S8.crl (hash: 80wCSMpBcWNy/E49ugrBmlokjnhGuRuIJbi781jnsSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4rVv8vrl9iGUksEtg-EjnWrW4S8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:5d:14:d6:2c:80:ec:6f:0e:50:93:92:a6:b8:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b56ff2fae5f6219492c12d83e1239d6ad6e12f
Validity
Not Before: Sep 7 05:00:48 2025 GMT
Not After : Sep 8 05:00:48 2025 GMT
Subject: CN=cb6256b5d3d1ac24d68e5b86beb7d0509142df70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e6:35:ec:a3:b9:30:97:5e:5e:cd:a9:3c:9e:
c5:3f:7e:bc:9a:eb:ff:06:57:4e:3f:8c:4b:11:f4:
18:98:da:59:5c:15:df:13:94:60:2e:22:61:7e:6e:
0d:d0:be:48:50:5f:4c:6e:55:ee:e3:40:5e:3b:ad:
28:f6:06:e6:ec:f7:5f:7e:05:78:32:5c:b9:7f:23:
ce:34:52:ac:12:fb:38:24:9e:2f:b5:2f:62:10:de:
fe:84:57:03:76:4b:6a:2a:20:05:3a:6c:ca:9e:93:
f7:6f:66:e0:99:6d:eb:06:a8:cb:0d:c4:98:11:6e:
be:35:5e:14:76:46:7e:3d:3c:e2:60:e9:38:0f:8d:
99:ff:a6:b6:05:bb:ef:0b:a6:93:df:ef:f8:91:7d:
72:0d:be:3b:31:bd:c1:fa:fd:8b:ba:f7:7c:b9:a0:
ce:f8:1e:79:dd:55:8a:aa:48:59:06:30:71:1c:88:
67:e3:41:af:a7:ac:2a:19:ad:07:37:40:bc:b9:0b:
ad:35:f6:3d:a2:c7:f7:7a:96:ee:d7:29:f5:a0:25:
2e:e9:dd:46:aa:c6:db:2f:87:eb:21:c1:33:4d:a2:
fa:19:9e:b7:52:35:73:65:d7:fa:e4:6c:20:a3:7e:
7f:28:1b:a3:f3:92:9e:c7:d3:b7:ca:a5:16:a2:fc:
5c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:62:56:B5:D3:D1:AC:24:D6:8E:5B:86:BE:B7:D0:50:91:42:DF:70
X509v3 Authority Key Identifier:
keyid:E2:B5:6F:F2:FA:E5:F6:21:94:92:C1:2D:83:E1:23:9D:6A:D6:E1:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rVv8vrl9iGUksEtg-EjnWrW4S8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:fa:a5:2f:50:5a:6d:99:9b:6c:df:8d:09:66:f1:1b:c4:38:
bb:38:7b:a2:ee:05:f6:51:36:ba:b6:ae:1f:7b:23:2f:e0:25:
43:99:de:ef:45:db:84:b6:7b:a6:43:bd:b8:b3:1c:89:08:3e:
e2:2b:42:e8:98:d8:47:e9:a5:55:ff:4b:56:0d:86:57:c9:5f:
f3:70:f2:5f:a5:fc:1b:63:f7:f2:40:10:7a:42:98:87:fa:ac:
24:01:3f:a2:8f:9f:3e:12:77:85:1e:ea:02:f2:05:d8:2f:d5:
71:dd:5b:b7:29:76:66:d9:1d:8b:62:97:80:13:05:e3:8d:a6:
f1:2d:58:de:e1:dc:e0:d8:3c:c5:31:59:98:61:7c:f5:a7:05:
ba:68:0c:6d:e9:41:3f:05:bf:f4:80:14:c8:84:13:71:2c:be:
97:f2:e6:fa:a2:e7:2d:8d:9d:f1:ab:96:af:61:95:d2:5c:14:
a8:63:7a:a9:8b:7d:09:c8:b3:94:49:de:31:02:21:b9:7e:6c:
29:26:a0:8a:19:ca:dc:bd:e6:9b:6f:37:97:57:3e:df:7f:f2:
1d:20:f1:ba:22:4f:ec:a7:6f:a5:c1:ae:66:99:47:8d:90:3d:
a9:e6:d5:82:4a:3a:f1:9f:2a:f0:c4:19:bb:49:b8:d5:99:80:
fb:42:f8:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijF0U1iyA7G8OUJOSprgFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYjU2ZmYyZmFlNWY2MjE5NDkyYzEyZDgzZTEyMzlkNmFk
NmUxMmYwHhcNMjUwOTA3MDUwMDQ4WhcNMjUwOTA4MDUwMDQ4WjAzMTEwLwYDVQQD
EyhjYjYyNTZiNWQzZDFhYzI0ZDY4ZTViODZiZWI3ZDA1MDkxNDJkZjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouY17KO5MJdeXs2pPJ7FP368muv/
BldOP4xLEfQYmNpZXBXfE5RgLiJhfm4N0L5IUF9MblXu40BeO60o9gbm7PdffgV4
Mly5fyPONFKsEvs4JJ4vtS9iEN7+hFcDdktqKiAFOmzKnpP3b2bgmW3rBqjLDcSY
EW6+NV4UdkZ+PTziYOk4D42Z/6a2BbvvC6aT3+/4kX1yDb47Mb3B+v2Luvd8uaDO
+B553VWKqkhZBjBxHIhn40Gvp6wqGa0HN0C8uQutNfY9osf3epbu1yn1oCUu6d1G
qsbbL4frIcEzTaL6GZ63UjVzZdf65Gwgo35/KBuj85Kex9O3yqUWovxc6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMtiVrXT0awk1o5bhr630FCRQt9wMB8GA1UdIwQY
MBaAFOK1b/L65fYhlJLBLYPhI51q1uEvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHJWdjh2cmw5aUdVa3NFdGctRWpuV3JXNFM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8xMDhiZmYtNmU3MC00M2QyLWFkODkt
NGY2N2ZmNTgxMTQxLzEvNHJWdjh2cmw5aUdVa3NFdGctRWpuV3JXNFM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8xMDhiZmYtNmU3MC00M2QyLWFkODktNGY2N2ZmNTgxMTQx
LzEvNHJWdjh2cmw5aUdVa3NFdGctRWpuV3JXNFM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFvqlL1Ba
bZmbbN+NCWbxG8Q4uzh7ou4F9lE2urauH3sjL+AlQ5ne70XbhLZ7pkO9uLMciQg+
4itC6JjYR+mlVf9LVg2GV8lf83DyX6X8G2P38kAQekKYh/qsJAE/oo+fPhJ3hR7q
AvIF2C/Vcd1btyl2Ztkdi2KXgBMF442m8S1Y3uHc4Ng8xTFZmGF89acFumgMbelB
PwW/9IAUyIQTcSy+l/Lm+qLnLY2d8auWr2GV0lwUqGN6qYt9CcizlEneMQIhuX5s
KSagihnK3L3mm283l1c+33/yHSDxuiJP7KdvpcGuZplHjZA9qebVgko68Z8q8MQZ
u0m41ZmA+0L4cQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:11:56 2025 by rpki-client