Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.mft
File: 4HG570GlOChYzZ7vmKf7nRJqpK4.mft (raw, json)
Hash identifier: 2Nvw9muCG0YRmxv0vfwY1x2nQJik8smdM4kfrU2SAc0=
Subject key identifier: 69:AB:F7:E0:82:C5:25:01:F3:D8:C2:6D:AC:92:5C:C9:25:65:46:1C
Authority key identifier: E0:71:B9:EF:41:A5:38:28:58:CD:9E:EF:98:A7:FB:9D:12:6A:A4:AE
Certificate issuer: /CN=e071b9ef41a5382858cd9eef98a7fb9d126aa4ae
Certificate serial: 019931248B513327B268F7927EDD21847D03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4HG570GlOChYzZ7vmKf7nRJqpK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.mft
Manifest number: 03A2
Signing time: Wed 10 Sep 2025 01:01:42 +0000
Manifest this update: Wed 10 Sep 2025 01:01:42 +0000
Manifest next update: Thu 11 Sep 2025 01:01:42 +0000
Files and hashes: 1: 4HG570GlOChYzZ7vmKf7nRJqpK4.crl (hash: UG5vThqyJrqkAUp/++AEAwYWxsZHUa5jb4Lzwa39D94=)
2: YBfLAkuYURNDoMTvjD2hLc0uuNc.roa (hash: gM7Y+qrK9OGNkcbA31bQAYiigRBUM5Di4cIR3nOhPM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4HG570GlOChYzZ7vmKf7nRJqpK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:24:8b:51:33:27:b2:68:f7:92:7e:dd:21:84:7d:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e071b9ef41a5382858cd9eef98a7fb9d126aa4ae
Validity
Not Before: Sep 10 01:01:42 2025 GMT
Not After : Sep 11 01:01:42 2025 GMT
Subject: CN=69abf7e082c52501f3d8c26dac925cc92565461c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f9:95:67:52:68:b7:84:54:00:59:c4:cd:02:
99:85:3f:bc:5e:02:fb:67:99:78:dc:86:93:35:1b:
d5:0e:95:1c:a1:66:ea:fe:88:5a:33:f0:8d:c4:ac:
4b:dd:a1:85:07:0f:bd:7e:36:e3:78:26:42:de:2d:
7d:40:1c:ed:8a:ec:83:40:cc:e8:49:66:77:17:29:
c6:e2:68:a0:51:e5:7e:b9:2a:98:83:2a:d2:61:e6:
49:06:f2:16:47:8c:8f:48:03:71:43:9c:fb:82:03:
32:63:05:4b:fe:07:b0:1b:07:77:d9:26:0e:33:10:
d7:60:e1:89:4f:92:7e:dd:19:22:79:14:dd:fd:1a:
20:e2:96:17:9d:6e:b3:46:76:fd:c7:da:bf:85:20:
43:2c:54:8e:01:9d:ab:35:7a:7f:63:e5:86:51:2a:
44:41:f9:20:bc:bc:62:36:fd:fc:49:10:0f:62:74:
fc:ab:cb:12:f7:00:06:71:54:06:6f:f1:37:89:3c:
12:e6:f0:78:3d:62:51:f0:bb:5e:9b:52:c6:63:41:
19:39:10:e3:04:91:20:ff:a6:23:70:15:c0:c3:46:
a8:13:a5:be:a9:3d:a4:7f:6e:e1:ae:ce:11:9c:d3:
6b:f1:02:28:fb:96:70:f0:31:d4:d6:94:ba:1f:3c:
29:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:AB:F7:E0:82:C5:25:01:F3:D8:C2:6D:AC:92:5C:C9:25:65:46:1C
X509v3 Authority Key Identifier:
keyid:E0:71:B9:EF:41:A5:38:28:58:CD:9E:EF:98:A7:FB:9D:12:6A:A4:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4HG570GlOChYzZ7vmKf7nRJqpK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:3f:9b:18:25:3e:3c:8a:88:8e:58:4f:36:5b:59:d0:e8:f0:
d3:f1:30:71:33:a8:1b:f1:36:9d:af:af:5b:29:6d:f7:da:2f:
00:32:44:cc:cf:1c:8f:2c:9b:dc:2e:fd:f2:32:16:8f:4e:43:
a6:40:2b:27:01:bb:80:78:55:ef:2f:ae:c2:27:ba:84:02:00:
18:d2:12:8c:1c:ca:80:54:77:8e:52:e2:ee:f8:16:34:cb:f2:
de:0f:1f:4a:6a:5c:b1:92:dd:b5:b9:a1:14:87:08:44:5f:d1:
2e:0e:b7:09:64:8c:e7:3d:7c:e4:d5:13:f8:75:a2:bb:3e:a0:
7f:ca:d2:bd:3e:35:ab:01:8e:7c:06:59:c7:dc:2e:e9:e8:c0:
e3:29:28:60:59:d3:f2:34:07:f3:2f:aa:3e:a0:6f:c5:9a:75:
8d:73:9f:79:36:a0:3e:85:36:a0:cf:dd:20:66:f4:6f:1a:e6:
28:e6:b7:34:ba:4b:91:0f:40:86:d7:91:b1:f9:91:b1:df:f3:
56:14:55:f1:8b:d4:44:70:77:61:19:5e:bf:5a:22:42:f5:da:
67:3f:4e:d9:6b:8b:cf:0b:45:1f:b6:cb:2d:74:78:24:4d:85:
81:b8:78:46:dd:a2:51:e8:7f:c9:48:01:98:04:0f:c0:b0:d8:
57:c5:25:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkxJItRMyeyaPeSft0hhH0DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNzFiOWVmNDFhNTM4Mjg1OGNkOWVlZjk4YTdmYjlkMTI2
YWE0YWUwHhcNMjUwOTEwMDEwMTQyWhcNMjUwOTExMDEwMTQyWjAzMTEwLwYDVQQD
Eyg2OWFiZjdlMDgyYzUyNTAxZjNkOGMyNmRhYzkyNWNjOTI1NjU0NjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfmVZ1Jot4RUAFnEzQKZhT+8XgL7
Z5l43IaTNRvVDpUcoWbq/ohaM/CNxKxL3aGFBw+9fjbjeCZC3i19QBztiuyDQMzo
SWZ3FynG4migUeV+uSqYgyrSYeZJBvIWR4yPSANxQ5z7ggMyYwVL/gewGwd32SYO
MxDXYOGJT5J+3RkieRTd/Rog4pYXnW6zRnb9x9q/hSBDLFSOAZ2rNXp/Y+WGUSpE
QfkgvLxiNv38SRAPYnT8q8sS9wAGcVQGb/E3iTwS5vB4PWJR8Ltem1LGY0EZORDj
BJEg/6YjcBXAw0aoE6W+qT2kf27hrs4RnNNr8QIo+5Zw8DHU1pS6HzwpWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGmr9+CCxSUB89jCbaySXMklZUYcMB8GA1UdIwQY
MBaAFOBxue9BpTgoWM2e75in+50SaqSuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEhHNTcwR2xPQ2hZelo3dm1LZjduUkpxcEs0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9iODE0NjAtZTA2Yy00MzUyLWFiMWIt
YmIzODBiY2FiZDI4LzEvNEhHNTcwR2xPQ2hZelo3dm1LZjduUkpxcEs0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9iODE0NjAtZTA2Yy00MzUyLWFiMWItYmIzODBiY2FiZDI4
LzEvNEhHNTcwR2xPQ2hZelo3dm1LZjduUkpxcEs0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPj+bGCU+
PIqIjlhPNltZ0Ojw0/EwcTOoG/E2na+vWylt99ovADJEzM8cjyyb3C798jIWj05D
pkArJwG7gHhV7y+uwie6hAIAGNISjBzKgFR3jlLi7vgWNMvy3g8fSmpcsZLdtbmh
FIcIRF/RLg63CWSM5z185NUT+HWiuz6gf8rSvT41qwGOfAZZx9wu6ejA4ykoYFnT
8jQH8y+qPqBvxZp1jXOfeTagPoU2oM/dIGb0bxrmKOa3NLpLkQ9AhteRsfmRsd/z
VhRV8YvURHB3YRlev1oiQvXaZz9O2WuLzwtFH7bLLXR4JE2Fgbh4Rt2iUeh/yUgB
mAQPwLDYV8Ul8A==
-----END CERTIFICATE-----
Generated at Wed Sep 10 03:57:24 2025 by rpki-client