Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
File: 4iqTzrgrZ1qEsNeOea5KeXypgjE.mft (raw, json)
Hash identifier: yjJ+ui2j76/LuEZQN/XYjdY4yPMO7vko1H7w3oZSct4=
Subject key identifier: E6:C1:73:16:DA:0E:2D:C9:AD:37:29:19:B6:88:DA:FB:9D:54:5E:AC
Authority key identifier: E2:2A:93:CE:B8:2B:67:5A:84:B0:D7:8E:79:AE:4A:79:7C:A9:82:31
Certificate issuer: /CN=e22a93ceb82b675a84b0d78e79ae4a797ca98231
Certificate serial: 01993500A210608381EA2286E5B119C975EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
Manifest number: 1212
Signing time: Wed 10 Sep 2025 19:00:57 +0000
Manifest this update: Wed 10 Sep 2025 19:00:57 +0000
Manifest next update: Thu 11 Sep 2025 19:00:57 +0000
Files and hashes: 1: 4iqTzrgrZ1qEsNeOea5KeXypgjE.crl (hash: 0Uz61ejSV2CFTpab5WqSXpbLbucdp94V1h3kRORtgnU=)
2: yB2qv2hArqh8Rg0DZ4yGfxQJ57I.roa (hash: b+3wO516colETH6Q8Hnf3dC3oM2heED/4qOLBklRlP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:00:a2:10:60:83:81:ea:22:86:e5:b1:19:c9:75:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e22a93ceb82b675a84b0d78e79ae4a797ca98231
Validity
Not Before: Sep 10 19:00:57 2025 GMT
Not After : Sep 11 19:00:57 2025 GMT
Subject: CN=e6c17316da0e2dc9ad372919b688dafb9d545eac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:79:36:41:b1:1e:41:0c:83:39:c0:14:c4:57:
06:d2:ce:61:b4:32:6d:93:a8:80:59:25:ac:ef:79:
c0:b8:59:9c:14:6c:83:6b:75:c7:cd:eb:58:31:b1:
48:18:5e:12:0f:e7:75:31:ab:4c:ed:b3:4c:c6:71:
a9:51:2e:cf:5e:62:67:74:ff:2f:74:de:70:6d:e6:
92:9e:21:b6:22:61:a7:57:db:aa:fb:e3:44:5b:18:
01:bb:97:15:f5:ee:94:01:40:3b:54:9f:bf:ab:1f:
98:b8:c8:65:6f:9f:0a:7c:30:10:79:e4:2d:75:51:
f3:18:93:54:6d:a7:20:90:3d:83:f3:19:67:5a:fc:
d3:0f:26:91:23:bc:6f:ca:94:3f:3b:93:31:b2:5a:
fb:de:2a:02:ad:6e:6a:f0:c9:13:4d:20:5d:46:f1:
f1:37:45:00:85:db:9f:74:88:b4:0d:72:eb:ad:44:
54:21:05:f0:39:e1:ca:ca:c6:99:67:fb:3e:7e:09:
e3:69:b1:12:63:84:a1:d0:57:2b:4b:8b:2b:1f:b5:
36:18:49:af:c4:c3:b5:ba:e6:45:f8:1c:b9:b0:c2:
0d:ca:fe:9b:01:20:ca:c1:79:21:2f:d3:7b:21:9b:
8a:71:68:49:b7:c3:1a:c5:ca:0a:a8:d1:b4:65:d1:
a4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C1:73:16:DA:0E:2D:C9:AD:37:29:19:B6:88:DA:FB:9D:54:5E:AC
X509v3 Authority Key Identifier:
keyid:E2:2A:93:CE:B8:2B:67:5A:84:B0:D7:8E:79:AE:4A:79:7C:A9:82:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:cf:8e:4a:9e:dd:78:b5:c7:42:a8:e0:dd:ae:ea:57:8b:95:
29:a4:20:33:2c:2a:e9:c5:42:4d:ba:46:0a:b7:61:55:7c:60:
5c:f0:c1:e8:2e:aa:4f:8e:57:17:ca:f5:eb:8c:8d:a3:0f:c4:
5b:2c:7b:f0:d3:d0:dd:37:32:56:8f:3f:dc:0a:b1:c5:16:c1:
2c:1d:b5:c6:52:74:ef:df:cf:af:f5:81:69:11:07:4a:42:4b:
e2:f3:0b:7b:36:11:1d:1c:9e:02:4d:d9:00:b0:44:90:e2:9c:
86:1f:a6:0f:42:67:88:fa:82:f3:c3:96:92:9e:26:2f:6b:ae:
a3:d0:11:ec:e6:fa:2f:a1:eb:7f:ea:d3:e0:fc:c3:17:5b:63:
56:2a:5c:9f:ef:3c:4b:b2:c6:21:99:ad:cc:a1:9e:50:79:f5:
eb:a9:c8:31:e0:fc:57:2a:f3:3d:2e:1b:98:7e:83:55:73:21:
5d:bc:de:79:32:48:ba:77:2a:72:82:8f:c3:31:52:2c:03:c6:
a7:0f:bd:d6:8a:f9:89:c5:49:47:19:07:90:c1:78:6e:12:a1:
18:d4:96:d7:f7:36:b2:4b:b6:30:5e:88:f3:c6:ca:0b:a2:92:
b9:20:45:60:5a:9d:55:61:23:23:b2:c4:44:5f:5f:b9:39:57:
09:16:eb:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk1AKIQYIOB6iKG5bEZyXXrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyMmE5M2NlYjgyYjY3NWE4NGIwZDc4ZTc5YWU0YTc5N2Nh
OTgyMzEwHhcNMjUwOTEwMTkwMDU3WhcNMjUwOTExMTkwMDU3WjAzMTEwLwYDVQQD
EyhlNmMxNzMxNmRhMGUyZGM5YWQzNzI5MTliNjg4ZGFmYjlkNTQ1ZWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnk2QbEeQQyDOcAUxFcG0s5htDJt
k6iAWSWs73nAuFmcFGyDa3XHzetYMbFIGF4SD+d1MatM7bNMxnGpUS7PXmJndP8v
dN5wbeaSniG2ImGnV9uq++NEWxgBu5cV9e6UAUA7VJ+/qx+YuMhlb58KfDAQeeQt
dVHzGJNUbacgkD2D8xlnWvzTDyaRI7xvypQ/O5Mxslr73ioCrW5q8MkTTSBdRvHx
N0UAhdufdIi0DXLrrURUIQXwOeHKysaZZ/s+fgnjabESY4Sh0FcrS4srH7U2GEmv
xMO1uuZF+By5sMINyv6bASDKwXkhL9N7IZuKcWhJt8MaxcoKqNG0ZdGkYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFObBcxbaDi3JrTcpGbaI2vudVF6sMB8GA1UdIwQY
MBaAFOIqk864K2dahLDXjnmuSnl8qYIxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGlxVHpyZ3JaMXFFc05lT2VhNUtlWHlwZ2pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8yZTgyY2ItNGE2ZS00MDhmLWFmMjAt
ODQzMTU0YTgwYjcyLzEvNGlxVHpyZ3JaMXFFc05lT2VhNUtlWHlwZ2pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi8yZTgyY2ItNGE2ZS00MDhmLWFmMjAtODQzMTU0YTgwYjcy
LzEvNGlxVHpyZ3JaMXFFc05lT2VhNUtlWHlwZ2pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOM+OSp7d
eLXHQqjg3a7qV4uVKaQgMywq6cVCTbpGCrdhVXxgXPDB6C6qT45XF8r164yNow/E
Wyx78NPQ3TcyVo8/3AqxxRbBLB21xlJ079/Pr/WBaREHSkJL4vMLezYRHRyeAk3Z
ALBEkOKchh+mD0JniPqC88OWkp4mL2uuo9AR7Ob6L6Hrf+rT4PzDF1tjVipcn+88
S7LGIZmtzKGeUHn166nIMeD8VyrzPS4bmH6DVXMhXbzeeTJIuncqcoKPwzFSLAPG
pw+91or5icVJRxkHkMF4bhKhGNSW1/c2sku2MF6I88bKC6KSuSBFYFqdVWEjI7LE
RF9fuTlXCRbrgA==
-----END CERTIFICATE-----
Generated at Thu Sep 11 03:28:26 2025 by rpki-client