
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.mft
File: 4-d1gqvilic_V6RVSq2m-lwf6bA.mft (raw, json)
Hash identifier: 7Ug3bXZZVz/n9bB8XSeaI3TIDKZNamAQA9bvF0gZnTU=
Subject key identifier: 7B:BC:9F:31:FE:29:5B:CC:08:81:DB:25:7A:E2:22:F7:01:3A:5B:91
Authority key identifier: E3:E7:75:82:AB:E2:96:27:3F:57:A4:55:4A:AD:A6:FA:5C:1F:E9:B0
Certificate issuer: /CN=e3e77582abe296273f57a4554aada6fa5c1fe9b0
Certificate serial: 019922C3125C5291894DD459DCDB3C29CBC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4-d1gqvilic_V6RVSq2m-lwf6bA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.mft
Manifest number: 0538
Signing time: Sun 07 Sep 2025 06:00:33 +0000
Manifest this update: Sun 07 Sep 2025 06:00:33 +0000
Manifest next update: Mon 08 Sep 2025 06:00:33 +0000
Files and hashes: 1: 4-d1gqvilic_V6RVSq2m-lwf6bA.crl (hash: 3HpKtedg3znbo/pWtCaOIjMbWihv8x01kqf+T8iIF8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4-d1gqvilic_V6RVSq2m-lwf6bA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:12:5c:52:91:89:4d:d4:59:dc:db:3c:29:cb:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3e77582abe296273f57a4554aada6fa5c1fe9b0
Validity
Not Before: Sep 7 06:00:33 2025 GMT
Not After : Sep 8 06:00:33 2025 GMT
Subject: CN=7bbc9f31fe295bcc0881db257ae222f7013a5b91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:1c:e6:34:9c:95:93:da:a1:cf:f9:6b:f6:ea:
06:52:10:a6:bb:98:81:ed:f7:75:20:dc:60:28:b9:
01:18:5b:a7:3b:f9:48:96:ee:5b:19:bd:71:c3:e2:
c6:26:ef:7a:22:fb:83:e4:23:76:26:ff:2b:c2:2b:
bf:ea:58:92:18:7a:5b:61:ba:80:5d:75:6d:55:d5:
04:dd:30:a6:89:22:05:3c:d0:1f:c2:7d:64:39:c4:
37:14:8e:03:44:57:d6:68:d2:02:ae:da:ad:f0:76:
1b:37:da:a0:c7:37:7b:eb:1c:89:be:3b:9f:db:3a:
93:66:05:a0:30:d3:dd:b0:49:5f:b9:e2:30:e7:db:
68:5b:76:dc:10:1a:62:0b:fd:d2:7e:d9:3a:04:02:
32:3f:c0:da:3e:a6:74:a7:13:74:91:29:7e:6c:aa:
b6:f6:4f:b4:fa:81:4b:32:f2:33:3b:5f:dd:b4:9f:
67:89:b4:b1:3d:39:c9:0a:fe:54:0a:57:69:6f:63:
98:ed:d5:b2:47:8a:e1:72:5f:f1:41:cb:48:ee:0f:
3e:0d:94:bc:06:3d:c7:53:e4:1b:5b:0a:1d:c6:58:
7d:da:8c:dd:94:42:7b:bb:8d:20:21:00:36:71:ed:
5b:12:8a:fd:18:49:e1:92:a1:21:59:3b:7b:f4:fc:
21:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:BC:9F:31:FE:29:5B:CC:08:81:DB:25:7A:E2:22:F7:01:3A:5B:91
X509v3 Authority Key Identifier:
keyid:E3:E7:75:82:AB:E2:96:27:3F:57:A4:55:4A:AD:A6:FA:5C:1F:E9:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-d1gqvilic_V6RVSq2m-lwf6bA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:f8:b8:18:44:12:89:ef:0a:dd:2c:ed:8d:cb:f4:0b:21:e0:
63:1a:94:5f:7e:74:9d:8c:28:8c:5b:f4:fd:d5:f2:5a:dd:d0:
ca:8f:eb:f2:42:8b:26:22:be:1e:36:92:55:f2:2a:5c:11:1e:
8f:83:6c:a3:d9:f2:b8:2d:05:4f:35:e9:f9:f2:62:7b:55:2c:
53:b9:ee:c1:73:d6:6e:cc:d0:38:f4:be:89:5d:fb:59:17:f5:
d7:6c:d6:69:89:1d:32:c3:7b:e4:79:20:b8:37:48:7d:d9:78:
79:b5:fc:da:ce:c9:3e:93:83:66:d3:51:76:7c:cb:bd:e9:8b:
14:6a:53:09:8a:7d:79:ec:7f:c1:b2:4c:ac:34:39:d2:35:f7:
3e:15:af:d0:5b:61:c0:ee:33:75:5c:bc:ee:65:03:ca:e2:60:
43:ce:c4:36:ac:1d:2c:26:a0:f4:57:7f:1a:20:14:89:e8:a7:
5e:27:64:4f:64:77:3c:ac:37:2f:b3:be:df:e8:b8:c8:bf:63:
03:4f:53:dc:7e:7b:39:9d:17:5f:e8:4e:06:f5:b5:db:ae:d9:
fe:5a:49:8e:cf:83:ae:90:f8:af:9c:e1:21:49:69:28:d8:0e:
d3:7c:5e:62:46:c1:61:a3:6d:3f:a6:87:9b:b2:e9:fb:8f:6a:
f6:2b:da:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiwxJcUpGJTdRZ3Ns8KcvCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZTc3NTgyYWJlMjk2MjczZjU3YTQ1NTRhYWRhNmZhNWMx
ZmU5YjAwHhcNMjUwOTA3MDYwMDMzWhcNMjUwOTA4MDYwMDMzWjAzMTEwLwYDVQQD
Eyg3YmJjOWYzMWZlMjk1YmNjMDg4MWRiMjU3YWUyMjJmNzAxM2E1YjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hzmNJyVk9qhz/lr9uoGUhCmu5iB
7fd1INxgKLkBGFunO/lIlu5bGb1xw+LGJu96IvuD5CN2Jv8rwiu/6liSGHpbYbqA
XXVtVdUE3TCmiSIFPNAfwn1kOcQ3FI4DRFfWaNICrtqt8HYbN9qgxzd76xyJvjuf
2zqTZgWgMNPdsElfueIw59toW3bcEBpiC/3Sftk6BAIyP8DaPqZ0pxN0kSl+bKq2
9k+0+oFLMvIzO1/dtJ9nibSxPTnJCv5UCldpb2OY7dWyR4rhcl/xQctI7g8+DZS8
Bj3HU+QbWwodxlh92ozdlEJ7u40gIQA2ce1bEor9GEnhkqEhWTt79PwhPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHu8nzH+KVvMCIHbJXriIvcBOluRMB8GA1UdIwQY
MBaAFOPndYKr4pYnP1ekVUqtpvpcH+mwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNC1kMWdxdmlsaWNfVjZSVlNxMm0tbHdmNmJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8xNjgwOTYtYzg4Ny00NzZmLWIzMzUt
MTE4OTYwZWY2MmM2LzEvNC1kMWdxdmlsaWNfVjZSVlNxMm0tbHdmNmJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny8xNjgwOTYtYzg4Ny00NzZmLWIzMzUtMTE4OTYwZWY2MmM2
LzEvNC1kMWdxdmlsaWNfVjZSVlNxMm0tbHdmNmJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMfi4GEQS
ie8K3Sztjcv0CyHgYxqUX350nYwojFv0/dXyWt3Qyo/r8kKLJiK+HjaSVfIqXBEe
j4Nso9nyuC0FTzXp+fJie1UsU7nuwXPWbszQOPS+iV37WRf112zWaYkdMsN75Hkg
uDdIfdl4ebX82s7JPpODZtNRdnzLvemLFGpTCYp9eex/wbJMrDQ50jX3PhWv0Fth
wO4zdVy87mUDyuJgQ87ENqwdLCag9Fd/GiAUieinXidkT2R3PKw3L7O+3+i4yL9j
A09T3H57OZ0XX+hOBvW1267Z/lpJjs+DrpD4r5zhIUlpKNgO03xeYkbBYaNtP6aH
m7Lp+49q9ivaRw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:20:53 2025 by rpki-client