Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/381b9e-cb19-4088-9066-dee317eec2f7/1/4BX_AFqiZpHH4zDr-cHEwa5UlNQ.mft
File: 4BX_AFqiZpHH4zDr-cHEwa5UlNQ.mft (raw, json)
Hash identifier: npLWnn/cldHIOMJD+oRScSXxcmTZKR2q97nhZMgOh44=
Subject key identifier: 8B:D9:B4:18:70:E9:DA:40:18:30:FD:71:4B:11:46:0E:26:60:ED:3A
Authority key identifier: E0:15:FF:00:5A:A2:66:91:C7:E3:30:EB:F9:C1:C4:C1:AE:54:94:D4
Certificate issuer: /CN=e015ff005aa26691c7e330ebf9c1c4c1ae5494d4
Certificate serial: 019923311291AF1854A94E455ADAEBF1D8C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BX_AFqiZpHH4zDr-cHEwa5UlNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/381b9e-cb19-4088-9066-dee317eec2f7/1/4BX_AFqiZpHH4zDr-cHEwa5UlNQ.mft
Manifest number: 25
Signing time: Sun 07 Sep 2025 08:00:42 +0000
Manifest this update: Sun 07 Sep 2025 08:00:42 +0000
Manifest next update: Mon 08 Sep 2025 08:00:42 +0000
Files and hashes: 1: 4BX_AFqiZpHH4zDr-cHEwa5UlNQ.crl (hash: wPQQgX4HyR3c2VyVYJhdxPDp1kCQniyiGDnkcrqJ6HE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/381b9e-cb19-4088-9066-dee317eec2f7/1/4BX_AFqiZpHH4zDr-cHEwa5UlNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/381b9e-cb19-4088-9066-dee317eec2f7/1/4BX_AFqiZpHH4zDr-cHEwa5UlNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4BX_AFqiZpHH4zDr-cHEwa5UlNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:12:91:af:18:54:a9:4e:45:5a:da:eb:f1:d8:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e015ff005aa26691c7e330ebf9c1c4c1ae5494d4
Validity
Not Before: Sep 7 08:00:42 2025 GMT
Not After : Sep 8 08:00:42 2025 GMT
Subject: CN=8bd9b41870e9da401830fd714b11460e2660ed3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:26:3e:1a:aa:19:36:fc:a1:ba:91:b1:b1:de:
2f:4a:be:ce:16:fd:c2:05:02:19:9c:c6:a6:af:da:
a6:b5:e6:1d:00:94:68:63:f0:a3:81:c1:65:26:c4:
a5:bb:08:52:52:5f:2d:7f:f7:59:af:ed:02:3f:82:
c1:64:fb:68:99:f1:c1:6e:9d:3c:05:ba:5a:de:c7:
50:bb:98:25:7d:ea:30:96:a3:de:e5:a3:5c:b6:ff:
3c:d2:5d:df:3b:e2:40:37:34:d2:f5:d1:5e:ff:ea:
a6:67:ca:d4:89:36:b8:a3:32:24:2c:8f:21:0a:5a:
04:c9:bf:8b:58:df:30:8c:fe:4e:55:ff:24:e4:b8:
b8:95:25:3b:ca:e4:f0:9b:b5:d4:ca:b1:3d:31:80:
11:43:e0:bd:db:ef:f9:c4:f8:56:ad:48:33:f7:1b:
6f:8e:8e:9f:63:b4:6c:f5:33:6c:37:e9:80:2d:f4:
13:b6:ee:fa:51:db:43:63:4d:81:f5:43:94:16:bf:
34:6b:e9:e9:0b:f0:63:5d:16:1d:59:18:12:13:35:
2f:f1:03:6c:6a:2d:44:52:3d:a5:8b:ce:d5:6b:d7:
da:5e:e5:14:24:e8:d8:6b:bc:4f:c6:b2:17:d0:0a:
9b:f2:a1:10:2e:a8:61:00:8c:0c:7c:2f:fb:35:3d:
12:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D9:B4:18:70:E9:DA:40:18:30:FD:71:4B:11:46:0E:26:60:ED:3A
X509v3 Authority Key Identifier:
keyid:E0:15:FF:00:5A:A2:66:91:C7:E3:30:EB:F9:C1:C4:C1:AE:54:94:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BX_AFqiZpHH4zDr-cHEwa5UlNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/381b9e-cb19-4088-9066-dee317eec2f7/1/4BX_AFqiZpHH4zDr-cHEwa5UlNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/381b9e-cb19-4088-9066-dee317eec2f7/1/4BX_AFqiZpHH4zDr-cHEwa5UlNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:33:8e:6a:c4:93:42:94:e8:b7:f8:61:18:c3:f2:4a:4a:eb:
b8:18:8a:41:b0:6f:93:0d:6f:9c:bb:e1:96:54:5f:d9:38:43:
be:c8:3b:8a:32:9d:fd:e8:6c:8e:94:46:b3:bd:19:c3:01:66:
da:76:e1:55:bf:6d:30:3a:40:b3:d2:c5:b0:21:3e:35:fe:de:
8f:ca:3e:fb:5b:74:f2:69:e1:0c:13:e2:43:ef:89:fd:23:76:
50:0b:be:57:dd:15:71:44:c0:9d:1e:f1:66:ca:b0:f2:36:74:
e7:21:20:0d:92:bd:1b:eb:5d:4d:c6:67:90:fa:2e:3d:6b:a5:
d6:c2:8e:87:f3:01:53:35:2c:49:c6:9a:34:bc:6f:e7:aa:1b:
8c:a9:4d:c7:6f:53:9e:69:ca:bc:d2:1e:41:ca:e2:4d:64:ba:
68:20:f3:d9:8d:d2:c3:a8:6b:49:b7:ec:d4:14:9f:45:c3:b9:
fa:d6:40:ee:85:46:e4:e4:42:07:10:76:35:ca:35:64:14:ea:
c4:4d:6f:c2:a5:b5:a8:7a:f6:2f:7b:be:fd:bf:78:8b:d2:d5:
5f:59:21:b1:d5:a0:d8:77:5e:ba:10:f7:08:02:0f:cc:9c:32:
24:9e:db:b0:d0:c8:74:bd:4b:cf:7d:4c:7b:5a:81:1f:9b:84:
d7:64:12:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjMRKRrxhUqU5FWtrr8djCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwMTVmZjAwNWFhMjY2OTFjN2UzMzBlYmY5YzFjNGMxYWU1
NDk0ZDQwHhcNMjUwOTA3MDgwMDQyWhcNMjUwOTA4MDgwMDQyWjAzMTEwLwYDVQQD
Eyg4YmQ5YjQxODcwZTlkYTQwMTgzMGZkNzE0YjExNDYwZTI2NjBlZDNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCY+GqoZNvyhupGxsd4vSr7OFv3C
BQIZnMamr9qmteYdAJRoY/CjgcFlJsSluwhSUl8tf/dZr+0CP4LBZPtomfHBbp08
Bbpa3sdQu5glfeowlqPe5aNctv880l3fO+JANzTS9dFe/+qmZ8rUiTa4ozIkLI8h
CloEyb+LWN8wjP5OVf8k5Li4lSU7yuTwm7XUyrE9MYARQ+C92+/5xPhWrUgz9xtv
jo6fY7Rs9TNsN+mALfQTtu76UdtDY02B9UOUFr80a+npC/BjXRYdWRgSEzUv8QNs
ai1EUj2li87Va9faXuUUJOjYa7xPxrIX0Aqb8qEQLqhhAIwMfC/7NT0S6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIvZtBhw6dpAGDD9cUsRRg4mYO06MB8GA1UdIwQY
MBaAFOAV/wBaomaRx+Mw6/nBxMGuVJTUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEJYX0FGcWlacEhINHpEci1jSEV3YTVVbE5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8zODFiOWUtY2IxOS00MDg4LTkwNjYt
ZGVlMzE3ZWVjMmY3LzEvNEJYX0FGcWlacEhINHpEci1jSEV3YTVVbE5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8zODFiOWUtY2IxOS00MDg4LTkwNjYtZGVlMzE3ZWVjMmY3
LzEvNEJYX0FGcWlacEhINHpEci1jSEV3YTVVbE5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfzOOasST
QpTot/hhGMPySkrruBiKQbBvkw1vnLvhllRf2ThDvsg7ijKd/ehsjpRGs70ZwwFm
2nbhVb9tMDpAs9LFsCE+Nf7ej8o++1t08mnhDBPiQ++J/SN2UAu+V90VcUTAnR7x
Zsqw8jZ05yEgDZK9G+tdTcZnkPouPWul1sKOh/MBUzUsScaaNLxv56objKlNx29T
nmnKvNIeQcriTWS6aCDz2Y3Sw6hrSbfs1BSfRcO5+tZA7oVG5ORCBxB2Nco1ZBTq
xE1vwqW1qHr2L3u+/b94i9LVX1khsdWg2HdeuhD3CAIPzJwyJJ7bsNDIdL1Lz31M
e1qBH5uE12QSkA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:33 2025 by rpki-client