Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.mft
File: 4KACksKhBiuzKYCjxEP_84OkEAI.mft (raw, json)
Hash identifier: Jv97sZTq5+CaKhTgrx9IZ+/hXHnqPFfEb9TMtH0l3WQ=
Subject key identifier: 5E:BA:7E:6B:9F:5D:B5:4E:2F:A3:B7:3B:B7:7C:DC:D4:17:A6:C2:40
Authority key identifier: E0:A0:02:92:C2:A1:06:2B:B3:29:80:A3:C4:43:FF:F3:83:A4:10:02
Certificate issuer: /CN=e0a00292c2a1062bb32980a3c443fff383a41002
Certificate serial: 01995155025B12AFB658C0B5CBF11FA6CA45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KACksKhBiuzKYCjxEP_84OkEAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.mft
Manifest number: 0A49
Signing time: Tue 16 Sep 2025 07:02:29 +0000
Manifest this update: Tue 16 Sep 2025 07:02:29 +0000
Manifest next update: Wed 17 Sep 2025 07:02:29 +0000
Files and hashes: 1: 4KACksKhBiuzKYCjxEP_84OkEAI.crl (hash: YcpXo5e5ktCMUB2ux2iUgy+SeziTATMPIi1pyVME0Cg=)
2: mSKL5dZ-DfhQmd3vDgNujHfDeWQ.roa (hash: kM0tftmTBoswJU9/17L/nHsaIm00B47zHx/WZDRsoCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4KACksKhBiuzKYCjxEP_84OkEAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:51:55:02:5b:12:af:b6:58:c0:b5:cb:f1:1f:a6:ca:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0a00292c2a1062bb32980a3c443fff383a41002
Validity
Not Before: Sep 16 07:02:29 2025 GMT
Not After : Sep 17 07:02:29 2025 GMT
Subject: CN=5eba7e6b9f5db54e2fa3b73bb77cdcd417a6c240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5e:9e:03:34:ee:e6:a9:1e:f8:da:14:e6:72:
ac:1b:22:28:9f:af:82:be:a0:44:f5:d0:72:38:f6:
e1:24:f4:47:a7:6e:19:50:34:c3:ae:5b:9f:6f:e2:
a5:80:e1:51:f7:fe:bb:24:29:f3:c3:38:b9:0b:6a:
2f:b7:a2:09:8d:e8:48:b6:1d:3b:35:7c:ba:b0:e4:
94:ae:b1:df:6d:ec:44:88:5c:cc:a9:66:39:10:53:
3b:2d:a2:25:5f:1e:23:a5:9c:b1:d1:38:eb:49:25:
0f:ff:ca:f4:c5:ac:9c:55:b9:e0:d1:4e:7d:09:8f:
5f:8e:e6:62:5c:77:2d:ce:71:59:94:d0:95:62:bf:
43:5d:1d:ae:b5:f3:7a:52:a4:da:9e:d8:e8:0b:80:
d5:e9:69:4d:60:2e:bf:b8:0e:56:ff:11:7b:c9:38:
42:65:58:f6:ae:11:42:e8:05:cf:21:64:cc:94:d4:
f4:fe:d8:50:27:3e:b6:6a:c4:f5:cc:b9:de:9e:f7:
d8:f2:5d:31:11:fa:14:a9:3d:2b:79:44:2b:c4:de:
34:8c:b8:92:a7:36:4f:db:0b:2e:bd:cd:a8:e6:8c:
e1:f7:c3:cf:2a:97:59:f1:39:39:1b:67:5f:66:cb:
22:d5:1c:24:56:97:f1:a5:1c:a5:ff:a9:45:33:ff:
2b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:BA:7E:6B:9F:5D:B5:4E:2F:A3:B7:3B:B7:7C:DC:D4:17:A6:C2:40
X509v3 Authority Key Identifier:
keyid:E0:A0:02:92:C2:A1:06:2B:B3:29:80:A3:C4:43:FF:F3:83:A4:10:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KACksKhBiuzKYCjxEP_84OkEAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:1e:e1:2e:77:29:28:8a:08:20:1b:a8:90:a0:2f:bb:9f:6e:
a2:90:f0:39:23:90:c5:f1:37:b0:ac:4e:31:59:b5:1c:fa:54:
84:ac:5f:f9:19:c3:18:bc:95:40:4a:d7:70:31:cb:84:8d:47:
e4:23:de:f5:11:97:77:08:8b:15:68:f5:c2:f7:4e:f2:e9:36:
71:d9:d6:d0:17:0a:05:4b:a9:b5:c2:ae:c2:bb:bc:a4:71:a4:
c4:db:8d:b3:5e:8f:a4:e4:72:21:e1:37:25:f9:85:2b:3f:3e:
5e:5e:44:69:20:a0:bd:3e:bb:a7:ff:2a:c5:ed:4e:d3:c3:d9:
80:5c:08:3a:70:b0:14:16:3d:e4:cf:de:72:89:15:43:7e:94:
7d:bc:6a:8b:68:5c:ec:bf:ba:2f:87:c5:ba:d5:7d:e4:72:14:
51:ab:15:96:0c:c5:85:7d:f8:14:64:0d:36:13:ec:e9:36:1b:
9e:d8:a2:1a:b8:82:15:08:fd:d3:34:c6:63:84:5f:50:8e:0e:
c1:4f:73:c6:55:d3:a3:c4:7c:e3:8f:30:c3:34:4b:5d:58:9d:
fb:f5:4c:0c:a7:97:96:49:92:c3:4b:ca:5b:b3:d6:1f:07:07:
2f:26:b8:8a:98:cf:c0:da:a8:c0:ac:2f:9e:b8:5b:47:d8:43:
42:3e:f5:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZlRVQJbEq+2WMC1y/EfpspFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwYTAwMjkyYzJhMTA2MmJiMzI5ODBhM2M0NDNmZmYzODNh
NDEwMDIwHhcNMjUwOTE2MDcwMjI5WhcNMjUwOTE3MDcwMjI5WjAzMTEwLwYDVQQD
Eyg1ZWJhN2U2YjlmNWRiNTRlMmZhM2I3M2JiNzdjZGNkNDE3YTZjMjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtl6eAzTu5qke+NoU5nKsGyIon6+C
vqBE9dByOPbhJPRHp24ZUDTDrlufb+KlgOFR9/67JCnzwzi5C2ovt6IJjehIth07
NXy6sOSUrrHfbexEiFzMqWY5EFM7LaIlXx4jpZyx0TjrSSUP/8r0xaycVbng0U59
CY9fjuZiXHctznFZlNCVYr9DXR2utfN6UqTantjoC4DV6WlNYC6/uA5W/xF7yThC
ZVj2rhFC6AXPIWTMlNT0/thQJz62asT1zLnenvfY8l0xEfoUqT0reUQrxN40jLiS
pzZP2wsuvc2o5ozh98PPKpdZ8Tk5G2dfZssi1RwkVpfxpRyl/6lFM/8r2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF66fmufXbVOL6O3O7d83NQXpsJAMB8GA1UdIwQY
MBaAFOCgApLCoQYrsymAo8RD//ODpBACMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEtBQ2tzS2hCaXV6S1lDanhFUF84NE9rRUFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy82YzA1NjMtNmExYy00NDMyLWE1OGQt
M2I2NGNjMzM2Yzc5LzEvNEtBQ2tzS2hCaXV6S1lDanhFUF84NE9rRUFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy82YzA1NjMtNmExYy00NDMyLWE1OGQtM2I2NGNjMzM2Yzc5
LzEvNEtBQ2tzS2hCaXV6S1lDanhFUF84NE9rRUFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqR7hLncp
KIoIIBuokKAvu59uopDwOSOQxfE3sKxOMVm1HPpUhKxf+RnDGLyVQErXcDHLhI1H
5CPe9RGXdwiLFWj1wvdO8uk2cdnW0BcKBUuptcKuwru8pHGkxNuNs16PpORyIeE3
JfmFKz8+Xl5EaSCgvT67p/8qxe1O08PZgFwIOnCwFBY95M/ecokVQ36Ufbxqi2hc
7L+6L4fFutV95HIUUasVlgzFhX34FGQNNhPs6TYbntiiGriCFQj90zTGY4RfUI4O
wU9zxlXTo8R8448wwzRLXVid+/VMDKeXlkmSw0vKW7PWHwcHLya4ipjPwNqowKwv
nrhbR9hDQj71Ag==
-----END CERTIFICATE-----
Generated at Tue Sep 16 10:55:22 2025 by rpki-client