Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.mft
File: 4Zd4WdBx9xUIN7KstDU_8z79gxw.mft (raw, json)
Hash identifier: bXPk2vivEXzSouRxQLN1sNh5tVEOSlfhBt/y0IuSBsc=
Subject key identifier: 97:D0:19:BF:33:8B:84:A2:61:49:CE:6D:EE:B1:DA:9B:D7:B4:CB:7E
Authority key identifier: E1:97:78:59:D0:71:F7:15:08:37:B2:AC:B4:35:3F:F3:3E:FD:83:1C
Certificate issuer: /CN=e1977859d071f7150837b2acb4353ff33efd831c
Certificate serial: 01992330F24EA8DD800E553A28B389E2C2FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Zd4WdBx9xUIN7KstDU_8z79gxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.mft
Manifest number: 1442
Signing time: Sun 07 Sep 2025 08:00:34 +0000
Manifest this update: Sun 07 Sep 2025 08:00:34 +0000
Manifest next update: Mon 08 Sep 2025 08:00:34 +0000
Files and hashes: 1: 4Zd4WdBx9xUIN7KstDU_8z79gxw.crl (hash: AZUYXZp9Jk+CZAd1aQmu9gHlkFWrDVzLgQrr6QBugH8=)
2: yF44GfEIvZjG1b-fqxz7IcsVaik.roa (hash: Nr6aX1S4xhUfVJHe+PzjETZYUXFy6RKCIH4m44as1jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Zd4WdBx9xUIN7KstDU_8z79gxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:30:f2:4e:a8:dd:80:0e:55:3a:28:b3:89:e2:c2:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1977859d071f7150837b2acb4353ff33efd831c
Validity
Not Before: Sep 7 08:00:34 2025 GMT
Not After : Sep 8 08:00:34 2025 GMT
Subject: CN=97d019bf338b84a26149ce6deeb1da9bd7b4cb7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:df:a8:b7:51:39:6a:3a:05:aa:19:14:f0:3a:
ac:40:8e:e2:1e:9c:1f:e2:a6:bb:44:93:a6:22:12:
a4:4f:2a:20:c4:93:d3:0b:63:1a:b3:05:be:6a:6d:
e5:8b:0f:23:71:99:8b:c8:08:b7:94:42:e9:0f:b4:
7b:e2:31:39:fb:a3:cb:fe:d6:de:05:1d:f9:dd:82:
90:52:d9:eb:fe:ae:15:e9:81:03:bb:97:b9:bc:71:
21:fd:07:08:d2:49:e4:ac:39:71:42:a9:36:aa:10:
3c:da:98:45:ea:2f:93:68:f2:db:1a:25:76:a5:67:
b7:1f:33:2c:3b:56:61:56:22:23:c0:eb:15:53:9b:
0e:23:34:6b:5f:29:32:f4:73:56:29:fc:0f:a8:44:
3a:d5:5e:27:e8:43:7f:2a:30:a5:3a:d3:da:8e:c6:
30:88:8b:e9:4d:00:09:b2:98:5d:a9:cd:0f:4d:35:
32:12:27:9b:bf:7d:95:a2:e0:59:d3:0e:5c:d3:7c:
bb:28:0e:40:70:d4:70:d4:75:38:be:61:c9:75:5b:
85:83:8e:93:28:b1:19:46:e0:75:54:75:8b:1d:66:
53:e7:23:e3:8f:6c:67:1e:40:78:9c:ea:5a:4f:2d:
12:76:58:99:88:00:1c:de:3c:78:56:a4:78:97:60:
b8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D0:19:BF:33:8B:84:A2:61:49:CE:6D:EE:B1:DA:9B:D7:B4:CB:7E
X509v3 Authority Key Identifier:
keyid:E1:97:78:59:D0:71:F7:15:08:37:B2:AC:B4:35:3F:F3:3E:FD:83:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Zd4WdBx9xUIN7KstDU_8z79gxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:94:b9:33:8b:e3:b4:26:23:7f:10:ba:38:80:97:83:54:ff:
d5:f5:bb:90:cc:80:5e:f8:bb:e2:77:ac:a9:77:7d:8f:27:ed:
97:f2:35:fc:6f:35:43:8e:00:ae:88:a4:00:a2:b7:73:92:d8:
5a:1f:0f:00:ea:06:8b:6c:55:66:eb:c4:de:87:ea:ef:b7:d8:
c3:27:1c:22:6a:08:87:94:59:24:02:05:26:d5:a2:04:a9:7e:
69:38:6e:60:39:ce:4b:5b:a7:e2:07:18:18:be:ae:3f:e2:2b:
e1:d6:49:ab:a3:86:0f:64:9e:be:bb:f1:6f:e5:89:36:e3:36:
a0:40:65:41:21:18:57:40:16:64:66:cb:eb:7a:e2:90:3e:5c:
2b:7c:d7:bb:89:dd:aa:0f:f9:07:63:73:0d:73:ee:88:ab:41:
5c:de:06:40:64:4d:b6:a3:0b:98:56:32:47:8f:d2:7d:3b:fb:
5a:a6:a5:1d:9f:a3:a7:e2:26:06:c0:8b:a0:7a:86:2d:3c:4a:
5f:84:e0:31:c6:0a:be:09:2f:0e:37:c0:82:0b:eb:f8:5b:f8:
0c:00:6a:e6:5a:be:f9:7c:26:c1:0c:f0:fb:72:ae:f2:a6:b1:
1d:62:38:5d:62:44:8c:5e:62:4f:fc:ba:fd:50:c1:4b:f9:72:
27:1f:f5:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjMPJOqN2ADlU6KLOJ4sL8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxOTc3ODU5ZDA3MWY3MTUwODM3YjJhY2I0MzUzZmYzM2Vm
ZDgzMWMwHhcNMjUwOTA3MDgwMDM0WhcNMjUwOTA4MDgwMDM0WjAzMTEwLwYDVQQD
Eyg5N2QwMTliZjMzOGI4NGEyNjE0OWNlNmRlZWIxZGE5YmQ3YjRjYjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5N+ot1E5ajoFqhkU8DqsQI7iHpwf
4qa7RJOmIhKkTyogxJPTC2MaswW+am3liw8jcZmLyAi3lELpD7R74jE5+6PL/tbe
BR353YKQUtnr/q4V6YEDu5e5vHEh/QcI0knkrDlxQqk2qhA82phF6i+TaPLbGiV2
pWe3HzMsO1ZhViIjwOsVU5sOIzRrXyky9HNWKfwPqEQ61V4n6EN/KjClOtPajsYw
iIvpTQAJsphdqc0PTTUyEiebv32VouBZ0w5c03y7KA5AcNRw1HU4vmHJdVuFg46T
KLEZRuB1VHWLHWZT5yPjj2xnHkB4nOpaTy0SdliZiAAc3jx4VqR4l2C4MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJfQGb8zi4SiYUnObe6x2pvXtMt+MB8GA1UdIwQY
MBaAFOGXeFnQcfcVCDeyrLQ1P/M+/YMcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFpkNFdkQng5eFVJTjdLc3REVV84ejc5Z3h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85ZDdjZDctZWU2My00ODg2LThmZTEt
YjVjZTZiNmZkNGQxLzEvNFpkNFdkQng5eFVJTjdLc3REVV84ejc5Z3h3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni85ZDdjZDctZWU2My00ODg2LThmZTEtYjVjZTZiNmZkNGQx
LzEvNFpkNFdkQng5eFVJTjdLc3REVV84ejc5Z3h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMJS5M4vj
tCYjfxC6OICXg1T/1fW7kMyAXvi74nesqXd9jyftl/I1/G81Q44AroikAKK3c5LY
Wh8PAOoGi2xVZuvE3ofq77fYwyccImoIh5RZJAIFJtWiBKl+aThuYDnOS1un4gcY
GL6uP+Ir4dZJq6OGD2Sevrvxb+WJNuM2oEBlQSEYV0AWZGbL63rikD5cK3zXu4nd
qg/5B2NzDXPuiKtBXN4GQGRNtqMLmFYyR4/SfTv7WqalHZ+jp+ImBsCLoHqGLTxK
X4TgMcYKvgkvDjfAggvr+Fv4DABq5lq++XwmwQzw+3Ku8qaxHWI4XWJEjF5iT/y6
/VDBS/lyJx/15A==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:16:07 2025 by rpki-client