Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft
File: r4j95vrbtrLB22_kH4KdHyAVvgs.mft (raw, json)
Hash identifier: oWCVAkhDHtzAcye9h4vxr7TZMFibAvhuIxuvsOmoGjc=
Subject key identifier: 36:AD:CD:11:61:16:7D:5E:4C:76:E1:8C:6E:9E:DE:9F:0E:4F:98:A0
Authority key identifier: AF:88:FD:E6:FA:DB:B6:B2:C1:DB:6F:E4:1F:82:9D:1F:20:15:BE:0B
Certificate issuer: /CN=af88fde6fadbb6b2c1db6fe41f829d1f2015be0b
Certificate serial: 0199228C83503D59717AC5628AF034ED1024
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft
Manifest number: 0D0B
Signing time: Sun 07 Sep 2025 05:00:57 +0000
Manifest this update: Sun 07 Sep 2025 05:00:57 +0000
Manifest next update: Mon 08 Sep 2025 05:00:57 +0000
Files and hashes: 1: RHreYh0WmNugHNPOVP5GHBEiSQE.roa (hash: lDEy9crc1E/w31v0jSsa/vEhnHdpcWtnPtxtDbNUjjc=)
2: r4j95vrbtrLB22_kH4KdHyAVvgs.crl (hash: C3MUpuqi0emjEt4xHlsrGqOF4ku8J0w/ZSngiD46DqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:83:50:3d:59:71:7a:c5:62:8a:f0:34:ed:10:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af88fde6fadbb6b2c1db6fe41f829d1f2015be0b
Validity
Not Before: Sep 7 05:00:57 2025 GMT
Not After : Sep 8 05:00:57 2025 GMT
Subject: CN=36adcd1161167d5e4c76e18c6e9ede9f0e4f98a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f5:76:13:ce:dd:f5:24:52:75:3a:b5:6c:4a:
37:27:c9:67:49:11:54:0f:65:67:53:6c:b7:30:61:
57:e0:df:9d:3f:fc:15:45:d4:d8:7e:1e:2f:49:f5:
d8:03:f9:92:1c:6f:e1:c1:f1:83:31:84:a2:b8:67:
50:c5:c3:fa:0a:de:30:a8:40:89:95:50:f0:e0:f9:
c6:b8:b3:04:1f:b9:f3:d5:b5:60:f3:44:82:1c:e6:
f2:05:e5:e7:29:39:8d:db:25:1f:6e:19:d4:55:4b:
1f:40:96:e9:16:d4:94:e4:56:83:3c:c6:66:86:77:
c1:55:41:f8:d2:47:b8:2e:92:fd:47:03:40:ed:98:
3c:2b:08:15:76:d7:14:95:e8:bb:5a:89:2f:d0:3f:
2a:4d:e5:48:32:90:07:1a:a8:76:ca:a9:ef:d8:7e:
32:d6:b6:a0:b5:1a:fa:71:d7:d6:4d:57:e9:6e:cf:
f4:4c:93:e9:39:7c:9e:e2:a0:5a:c8:d5:31:43:97:
ba:e9:fa:de:68:c2:0c:43:ef:5c:a5:a3:ca:f1:93:
bd:bf:0a:45:90:1b:4b:e7:49:f1:21:e0:45:11:ce:
ca:08:7a:41:ad:9a:e6:e9:49:28:be:b6:56:33:b6:
2f:74:7f:a5:b7:c7:60:48:00:a0:cf:ac:43:94:37:
99:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:AD:CD:11:61:16:7D:5E:4C:76:E1:8C:6E:9E:DE:9F:0E:4F:98:A0
X509v3 Authority Key Identifier:
keyid:AF:88:FD:E6:FA:DB:B6:B2:C1:DB:6F:E4:1F:82:9D:1F:20:15:BE:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:6b:a8:57:e3:95:19:13:2e:61:62:aa:49:cc:fc:a1:ef:24:
a0:c5:20:cd:e8:3e:dc:31:96:b1:df:50:cb:d5:79:7e:05:d9:
18:c4:7b:be:84:80:09:a7:55:72:e2:e1:1a:52:72:29:e2:e0:
21:b1:35:7c:83:19:fa:bb:f8:05:af:a2:42:18:14:ed:88:f1:
fa:69:7f:f8:f3:8c:d6:29:9d:57:8d:01:ad:61:ba:5c:d4:e9:
17:83:b7:d1:a6:89:50:eb:5c:88:44:48:1c:27:43:a0:ad:6f:
bb:17:bd:9b:8c:62:18:5c:83:a7:e8:2c:b4:5e:75:2c:d1:bd:
67:5f:45:09:07:a1:75:11:89:95:70:64:b9:d3:53:e2:df:81:
26:56:9a:1b:8c:b6:b5:0f:fa:80:71:a1:93:7d:3f:d9:55:31:
87:b5:83:22:9b:31:83:5b:92:a5:8d:47:92:33:e1:bb:88:80:
ed:db:73:d2:1b:97:ee:25:21:d5:25:ed:e3:92:f0:99:d1:69:
ac:f4:c3:d9:94:f4:2e:49:0c:6f:90:5d:65:8f:8b:2f:1f:37:
f4:b0:40:d5:23:51:d2:bc:55:1f:cf:81:cd:30:f3:77:e2:d3:
91:11:08:a0:c9:11:a3:10:97:5c:4a:4c:59:57:86:3f:83:b1:
66:7f:28:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijINQPVlxesViivA07RAkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmODhmZGU2ZmFkYmI2YjJjMWRiNmZlNDFmODI5ZDFmMjAx
NWJlMGIwHhcNMjUwOTA3MDUwMDU3WhcNMjUwOTA4MDUwMDU3WjAzMTEwLwYDVQQD
EygzNmFkY2QxMTYxMTY3ZDVlNGM3NmUxOGM2ZTllZGU5ZjBlNGY5OGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6fV2E87d9SRSdTq1bEo3J8lnSRFU
D2VnU2y3MGFX4N+dP/wVRdTYfh4vSfXYA/mSHG/hwfGDMYSiuGdQxcP6Ct4wqECJ
lVDw4PnGuLMEH7nz1bVg80SCHObyBeXnKTmN2yUfbhnUVUsfQJbpFtSU5FaDPMZm
hnfBVUH40ke4LpL9RwNA7Zg8KwgVdtcUlei7Wokv0D8qTeVIMpAHGqh2yqnv2H4y
1ragtRr6cdfWTVfpbs/0TJPpOXye4qBayNUxQ5e66freaMIMQ+9cpaPK8ZO9vwpF
kBtL50nxIeBFEc7KCHpBrZrm6UkovrZWM7YvdH+lt8dgSACgz6xDlDeZJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDatzRFhFn1eTHbhjG6e3p8OT5igMB8GA1UdIwQY
MBaAFK+I/eb627aywdtv5B+CnR8gFb4LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjRqOTV2cmJ0ckxCMjJfa0g0S2RIeUFWdmdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9mZDU5NmEtM2Y1NC00ZTA2LTg2MjAt
NmUwZDIxM2Y0ODRhLzEvcjRqOTV2cmJ0ckxCMjJfa0g0S2RIeUFWdmdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9mZDU5NmEtM2Y1NC00ZTA2LTg2MjAtNmUwZDIxM2Y0ODRh
LzEvcjRqOTV2cmJ0ckxCMjJfa0g0S2RIeUFWdmdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf2uoV+OV
GRMuYWKqScz8oe8koMUgzeg+3DGWsd9Qy9V5fgXZGMR7voSACadVcuLhGlJyKeLg
IbE1fIMZ+rv4Ba+iQhgU7Yjx+ml/+POM1imdV40BrWG6XNTpF4O30aaJUOtciERI
HCdDoK1vuxe9m4xiGFyDp+gstF51LNG9Z19FCQehdRGJlXBkudNT4t+BJlaaG4y2
tQ/6gHGhk30/2VUxh7WDIpsxg1uSpY1HkjPhu4iA7dtz0huX7iUh1SXt45LwmdFp
rPTD2ZT0LkkMb5BdZY+LLx839LBA1SNR0rxVH8+BzTDzd+LTkREIoMkRoxCXXEpM
WVeGP4OxZn8ouw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:05:46 2025 by rpki-client