Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.mft
File: 4jRLpjQJYdpe60riOemgYmd5Pi4.mft (raw, json)
Hash identifier: DVFQRie3GIlSGjmawmT9otoLLDivwSgFRNgz3eoL7qk=
Subject key identifier: CA:D1:8E:8B:71:8E:BB:38:4F:0A:87:56:BE:57:91:B7:80:68:3A:16
Authority key identifier: E2:34:4B:A6:34:09:61:DA:5E:EB:4A:E2:39:E9:A0:62:67:79:3E:2E
Certificate issuer: /CN=e2344ba6340961da5eeb4ae239e9a06267793e2e
Certificate serial: 01991D66243874ABB481401BC75B04763C85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jRLpjQJYdpe60riOemgYmd5Pi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.mft
Manifest number: 0CC2
Signing time: Sat 06 Sep 2025 05:00:57 +0000
Manifest this update: Sat 06 Sep 2025 05:00:57 +0000
Manifest next update: Sun 07 Sep 2025 05:00:57 +0000
Files and hashes: 1: 4jRLpjQJYdpe60riOemgYmd5Pi4.crl (hash: OaCk3wIjwlTSVm/dz6oL+UGY78tUt23f2e5c0Bvahng=)
2: WpIYL0DvGR69MNqQHSOeKTTXrTw.roa (hash: SM3OGEHCPKRu3sADiQcW/ukfL9VQE5Fwf5KPU4G5dDQ=)
3: kxBC-y0IllTJVS30L0NxSPbYl5k.roa (hash: URvxTuHHPgKr+L+8uNywgEsk29rIbLnVfs2KTbEBNVw=)
4: pOMTJTMzSvxdTwpBEEiCIJOdgS4.roa (hash: N66sR+vsnvfn2vQyEXUghMnGW+xEPargkQo2ZBulpiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jRLpjQJYdpe60riOemgYmd5Pi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1d:66:24:38:74:ab:b4:81:40:1b:c7:5b:04:76:3c:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2344ba6340961da5eeb4ae239e9a06267793e2e
Validity
Not Before: Sep 6 05:00:57 2025 GMT
Not After : Sep 7 05:00:57 2025 GMT
Subject: CN=cad18e8b718ebb384f0a8756be5791b780683a16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:58:30:b7:ce:18:46:7b:42:29:47:74:17:79:
20:ef:a7:ec:d0:45:27:fe:ce:db:8d:d8:be:8c:1b:
26:20:3f:d8:8d:7c:f9:58:a0:5d:e1:2b:08:9d:db:
cf:06:fb:f4:9b:03:b7:83:77:0a:a0:3f:9a:02:12:
d6:2a:8f:b4:0d:ec:88:aa:48:01:67:89:c7:58:9b:
5e:a1:c2:10:8b:e1:6c:e4:89:4f:42:22:d1:f4:bd:
b1:91:1b:e0:4d:6a:6d:8f:09:44:49:20:28:12:46:
16:b5:95:55:01:12:66:d6:25:2c:42:9a:93:50:ea:
0b:5e:fe:49:7a:78:eb:29:2a:44:2f:96:65:39:09:
8b:8f:c0:40:44:89:8a:92:23:f1:2b:e6:28:31:a4:
3e:15:bf:8e:eb:0c:89:21:59:fc:77:de:1c:89:74:
cf:19:17:c0:c6:68:50:cb:51:f2:0e:91:23:3a:5a:
fa:ae:58:38:85:fb:76:44:64:db:e4:cd:39:c6:92:
cd:cf:c9:b2:96:f8:ca:50:fe:d5:a6:8d:e2:d4:1d:
5d:f8:d7:9f:13:e3:df:64:d7:34:03:88:9c:58:bb:
31:9a:c4:ea:32:d6:fd:4f:57:97:06:6d:80:12:12:
9f:6a:a5:51:93:3e:06:8e:51:f5:15:5c:f1:99:44:
a4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D1:8E:8B:71:8E:BB:38:4F:0A:87:56:BE:57:91:B7:80:68:3A:16
X509v3 Authority Key Identifier:
keyid:E2:34:4B:A6:34:09:61:DA:5E:EB:4A:E2:39:E9:A0:62:67:79:3E:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jRLpjQJYdpe60riOemgYmd5Pi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:38:fa:09:84:e2:4d:f1:12:f5:05:5c:68:fe:b0:40:da:be:
0e:ae:f2:b5:f4:82:20:ba:68:4a:72:29:07:2f:da:68:41:fb:
9d:2f:d9:80:3a:c8:68:13:10:9f:0c:e5:2d:cd:aa:2d:4a:04:
71:0c:ae:e7:9d:6e:0b:d2:3d:38:a6:b7:b6:1e:51:3e:65:82:
4e:ac:2b:1e:d2:85:4c:6a:47:5e:3e:bb:f5:c6:93:75:68:3b:
05:7f:1b:1b:20:c7:ef:d3:98:f2:0f:6f:36:41:78:d9:46:44:
4e:67:cb:cb:7b:6e:7a:d2:d6:2d:20:6d:e9:bb:c1:a5:c2:8c:
fc:40:c4:ce:01:54:dd:c5:8b:28:87:24:39:be:e7:65:db:f8:
5f:e0:43:73:e4:66:95:5e:20:0f:52:51:a5:39:17:3a:b8:e6:
95:1a:5a:39:97:6d:87:7c:ec:31:6f:23:0c:9c:b2:16:58:6d:
c8:13:a3:a5:06:e2:9a:0e:75:22:e4:f4:30:82:0b:17:c1:38:
b7:0b:7c:46:4c:7c:33:8b:8b:21:1e:a2:8e:68:64:27:67:c2:
65:0d:a8:f3:a8:8f:d9:61:34:c3:4a:70:32:ef:a5:e2:51:68:
b5:77:40:67:c0:19:70:a4:a2:ac:19:b3:ae:de:0e:66:03:d2:
bd:06:c6:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkdZiQ4dKu0gUAbx1sEdjyFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyMzQ0YmE2MzQwOTYxZGE1ZWViNGFlMjM5ZTlhMDYyNjc3
OTNlMmUwHhcNMjUwOTA2MDUwMDU3WhcNMjUwOTA3MDUwMDU3WjAzMTEwLwYDVQQD
EyhjYWQxOGU4YjcxOGViYjM4NGYwYTg3NTZiZTU3OTFiNzgwNjgzYTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Vgwt84YRntCKUd0F3kg76fs0EUn
/s7bjdi+jBsmID/YjXz5WKBd4SsIndvPBvv0mwO3g3cKoD+aAhLWKo+0DeyIqkgB
Z4nHWJteocIQi+Fs5IlPQiLR9L2xkRvgTWptjwlESSAoEkYWtZVVARJm1iUsQpqT
UOoLXv5JenjrKSpEL5ZlOQmLj8BARImKkiPxK+YoMaQ+Fb+O6wyJIVn8d94ciXTP
GRfAxmhQy1HyDpEjOlr6rlg4hft2RGTb5M05xpLNz8mylvjKUP7Vpo3i1B1d+Nef
E+PfZNc0A4icWLsxmsTqMtb9T1eXBm2AEhKfaqVRkz4GjlH1FVzxmUSkMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMrRjotxjrs4TwqHVr5XkbeAaDoWMB8GA1UdIwQY
MBaAFOI0S6Y0CWHaXutK4jnpoGJneT4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGpSTHBqUUpZZHBlNjByaU9lbWdZbWQ1UGk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80NGVjNDMtNTkzNS00YWIyLWIxM2Qt
MDJlYjlhNDEyNjM3LzEvNGpSTHBqUUpZZHBlNjByaU9lbWdZbWQ1UGk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC80NGVjNDMtNTkzNS00YWIyLWIxM2QtMDJlYjlhNDEyNjM3
LzEvNGpSTHBqUUpZZHBlNjByaU9lbWdZbWQ1UGk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADzj6CYTi
TfES9QVcaP6wQNq+Dq7ytfSCILpoSnIpBy/aaEH7nS/ZgDrIaBMQnwzlLc2qLUoE
cQyu551uC9I9OKa3th5RPmWCTqwrHtKFTGpHXj679caTdWg7BX8bGyDH79OY8g9v
NkF42UZETmfLy3tuetLWLSBt6bvBpcKM/EDEzgFU3cWLKIckOb7nZdv4X+BDc+Rm
lV4gD1JRpTkXOrjmlRpaOZdth3zsMW8jDJyyFlhtyBOjpQbimg51IuT0MIILF8E4
twt8Rkx8M4uLIR6ijmhkJ2fCZQ2o86iP2WE0w0pwMu+l4lFotXdAZ8AZcKSirBmz
rt4OZgPSvQbGrg==
-----END CERTIFICATE-----
Generated at Sat Sep 6 11:47:20 2025 by rpki-client