Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft
File: 4tGVYU7uSi27UfWyHmnRbE4UQa8.mft (raw, json)
Hash identifier: SJ0ZsBlFMbPBZxUrFfXlnR9efM/ONpcPFJiXhAohm1s=
Subject key identifier: 6E:0C:6D:12:4A:61:27:56:39:D3:3F:3C:7C:18:73:C2:91:47:F8:E6
Authority key identifier: E2:D1:95:61:4E:EE:4A:2D:BB:51:F5:B2:1E:69:D1:6C:4E:14:41:AF
Certificate issuer: /CN=e2d195614eee4a2dbb51f5b21e69d16c4e1441af
Certificate serial: 0199239F0F9C16B6034F05E52C7F89752533
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tGVYU7uSi27UfWyHmnRbE4UQa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft
Manifest number: 0157
Signing time: Sun 07 Sep 2025 10:00:50 +0000
Manifest this update: Sun 07 Sep 2025 10:00:50 +0000
Manifest next update: Mon 08 Sep 2025 10:00:50 +0000
Files and hashes: 1: 4tGVYU7uSi27UfWyHmnRbE4UQa8.crl (hash: 4gebgtAkPWUq07LgS9TBb4Tj0h6VYRi4Nci9zFXGaIs=)
2: I6b16o_Ase2s-4OxbTzP2XU7AO8.roa (hash: 6HiWXRxkCGNhrpcrbbFpGCz17IhI/bbEhWJf+70NeCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tGVYU7uSi27UfWyHmnRbE4UQa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:0f:9c:16:b6:03:4f:05:e5:2c:7f:89:75:25:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d195614eee4a2dbb51f5b21e69d16c4e1441af
Validity
Not Before: Sep 7 10:00:50 2025 GMT
Not After : Sep 8 10:00:50 2025 GMT
Subject: CN=6e0c6d124a61275639d33f3c7c1873c29147f8e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ba:4a:98:0a:80:f0:d3:d1:4b:bc:b0:a9:19:
82:8c:81:e0:b1:f8:c4:3c:2b:cb:13:38:a3:ef:f2:
80:22:20:d4:da:32:90:a1:79:25:0b:68:fd:05:35:
56:7d:b9:18:8a:6d:42:fa:fd:4e:fb:fc:45:a1:70:
0c:3a:30:e5:94:75:ee:6d:0f:ff:c8:84:2d:7d:69:
b3:06:e9:89:4d:25:a3:01:33:fa:33:c7:53:72:05:
92:63:e0:f3:7b:a1:d6:5d:5b:bb:9b:d8:52:eb:1d:
0c:dc:d7:61:24:00:fe:0a:62:41:ab:84:2d:45:a3:
a2:2d:f3:9d:ba:cf:03:c1:33:a6:c0:01:98:fa:71:
f4:df:b7:aa:d2:ac:4a:9f:25:06:e0:5b:31:3f:d1:
9d:65:c9:23:f9:7a:1d:58:c2:f4:a9:b2:f7:b9:c1:
d5:fa:59:21:49:d5:e4:d9:42:39:dc:0e:d9:e8:63:
fe:7c:d3:0e:c9:b5:b6:6f:e2:c7:b8:08:8b:60:6f:
30:ef:37:63:41:2d:ae:54:64:c0:92:82:7d:dd:1e:
48:bd:26:84:d5:09:8b:60:40:af:0f:b5:28:a6:e0:
00:af:ad:16:61:3c:dc:f2:90:c9:08:f0:7a:34:28:
0a:5a:b4:a6:c5:89:ab:ea:f1:52:1b:4b:29:f0:e3:
27:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:0C:6D:12:4A:61:27:56:39:D3:3F:3C:7C:18:73:C2:91:47:F8:E6
X509v3 Authority Key Identifier:
keyid:E2:D1:95:61:4E:EE:4A:2D:BB:51:F5:B2:1E:69:D1:6C:4E:14:41:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tGVYU7uSi27UfWyHmnRbE4UQa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:61:f6:7e:82:d7:7a:8e:8b:46:d5:a4:f5:a8:8e:d8:df:44:
44:46:19:63:dc:17:81:cb:c2:e6:5d:80:4e:4b:2b:26:01:de:
77:3b:e2:bf:36:58:fe:ce:cd:87:02:63:55:f0:52:4b:fe:f0:
84:86:2c:a6:cc:8f:32:b0:cc:34:16:e4:82:4a:3b:8f:64:d5:
a2:26:b1:d0:17:e5:18:66:c7:e6:15:33:06:40:4d:e8:e8:15:
cf:2e:57:d6:4b:db:4a:43:8a:cb:67:0b:7a:ba:12:e6:87:cd:
e9:44:95:d4:64:96:2c:51:27:0d:2f:2c:9a:9a:26:d9:b0:6c:
ce:89:13:8c:11:44:92:0d:72:84:28:8e:47:ec:ac:f2:08:13:
13:8e:c2:35:3e:ef:b4:3f:37:69:0f:56:6b:c5:43:69:47:8b:
0a:7f:d4:46:3f:c9:57:94:d5:5e:08:fa:c9:b0:1d:c8:d0:ac:
67:61:e5:f7:b5:b2:51:3b:96:a4:70:ff:58:1e:9b:be:c4:8b:
81:35:39:22:41:54:f0:db:6a:0b:99:0d:94:0c:7b:96:5d:3f:
58:6e:51:dd:a8:4c:08:6a:db:94:96:35:b1:16:a6:f6:79:aa:
08:ec:29:f0:4e:cf:45:fc:57:bc:ca:fa:e6:9d:9d:2e:f7:2e:
3a:e2:0a:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjnw+cFrYDTwXlLH+JdSUzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZDE5NTYxNGVlZTRhMmRiYjUxZjViMjFlNjlkMTZjNGUx
NDQxYWYwHhcNMjUwOTA3MTAwMDUwWhcNMjUwOTA4MTAwMDUwWjAzMTEwLwYDVQQD
Eyg2ZTBjNmQxMjRhNjEyNzU2MzlkMzNmM2M3YzE4NzNjMjkxNDdmOGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07pKmAqA8NPRS7ywqRmCjIHgsfjE
PCvLEzij7/KAIiDU2jKQoXklC2j9BTVWfbkYim1C+v1O+/xFoXAMOjDllHXubQ//
yIQtfWmzBumJTSWjATP6M8dTcgWSY+Dze6HWXVu7m9hS6x0M3NdhJAD+CmJBq4Qt
RaOiLfOdus8DwTOmwAGY+nH037eq0qxKnyUG4FsxP9GdZckj+XodWML0qbL3ucHV
+lkhSdXk2UI53A7Z6GP+fNMOybW2b+LHuAiLYG8w7zdjQS2uVGTAkoJ93R5IvSaE
1QmLYECvD7UopuAAr60WYTzc8pDJCPB6NCgKWrSmxYmr6vFSG0sp8OMnJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG4MbRJKYSdWOdM/PHwYc8KRR/jmMB8GA1UdIwQY
MBaAFOLRlWFO7kotu1H1sh5p0WxOFEGvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHRHVllVN3VTaTI3VWZXeUhtblJiRTRVUWE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9jZWI0Y2ItMmVhNy00MmQwLWJiMmEt
NWRhYzYzNzg0MDU4LzEvNHRHVllVN3VTaTI3VWZXeUhtblJiRTRVUWE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9jZWI0Y2ItMmVhNy00MmQwLWJiMmEtNWRhYzYzNzg0MDU4
LzEvNHRHVllVN3VTaTI3VWZXeUhtblJiRTRVUWE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXmH2foLX
eo6LRtWk9aiO2N9EREYZY9wXgcvC5l2ATksrJgHedzvivzZY/s7NhwJjVfBSS/7w
hIYspsyPMrDMNBbkgko7j2TVoiax0BflGGbH5hUzBkBN6OgVzy5X1kvbSkOKy2cL
eroS5ofN6USV1GSWLFEnDS8smpom2bBszokTjBFEkg1yhCiOR+ys8ggTE47CNT7v
tD83aQ9Wa8VDaUeLCn/URj/JV5TVXgj6ybAdyNCsZ2Hl97WyUTuWpHD/WB6bvsSL
gTU5IkFU8NtqC5kNlAx7ll0/WG5R3ahMCGrblJY1sRam9nmqCOwp8E7PRfxXvMr6
5p2dLvcuOuIK4Q==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:27:03 2025 by rpki-client