Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/46f147-173f-4260-aa7b-3a6bf890a01d/1/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.mft
File: 4KAQbNKFfvEyNIZ8t_FqI6k_qpM.mft (raw, json)
Hash identifier: ybg3WgHl+g8kNW6Ghd7gtDn9FhhB8SCpwnZcFSVZdbg=
Subject key identifier: A7:97:FE:CD:85:35:64:8C:C3:85:34:79:C9:36:04:A5:25:D8:AF:A1
Authority key identifier: E0:A0:10:6C:D2:85:7E:F1:32:34:86:7C:B7:F1:6A:23:A9:3F:AA:93
Certificate issuer: /CN=e0a0106cd2857ef13234867cb7f16a23a93faa93
Certificate serial: 019921E7BD3FDBBB3A102AB3D54D8B30C447
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/46f147-173f-4260-aa7b-3a6bf890a01d/1/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 02:00:59 +0000
Manifest this update: Sun 07 Sep 2025 02:00:59 +0000
Manifest next update: Mon 08 Sep 2025 02:00:59 +0000
Files and hashes: 1: 4KAQbNKFfvEyNIZ8t_FqI6k_qpM.crl (hash: t8iKqpq5ONQst0P2PTE32rfZU6KPxc7UrFl05aoVe/c=)
2: NAPyyzZUEw4Zn65wAuFDux_YC9U.roa (hash: lU32nj8CJcUtMjGhuL2rXmP4Es+fbhl1wJhVBrmgarI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/46f147-173f-4260-aa7b-3a6bf890a01d/1/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/46f147-173f-4260-aa7b-3a6bf890a01d/1/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:bd:3f:db:bb:3a:10:2a:b3:d5:4d:8b:30:c4:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0a0106cd2857ef13234867cb7f16a23a93faa93
Validity
Not Before: Sep 7 02:00:59 2025 GMT
Not After : Sep 8 02:00:59 2025 GMT
Subject: CN=a797fecd8535648cc3853479c93604a525d8afa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4a:7e:63:87:84:bd:15:6f:bf:3f:68:ee:b9:
af:ee:4b:de:96:3c:87:e7:ed:44:76:e8:a9:5e:ac:
81:56:05:ec:83:2f:69:a4:32:d2:b9:68:80:9a:f1:
21:6f:e2:c4:ad:e9:53:9b:12:34:d0:60:69:aa:52:
46:c7:f8:f4:74:a5:95:49:9f:f2:e4:ca:18:75:3c:
4c:15:50:7a:31:32:c7:e9:9b:19:b4:ff:5e:0f:9f:
8d:bd:ee:5f:99:58:65:c8:50:37:d6:83:16:3e:d6:
cb:e4:89:2f:f8:3d:a1:39:28:9a:e3:e5:bc:7f:28:
0a:eb:be:ca:c8:c3:93:2e:09:c2:59:27:37:7a:ec:
88:56:48:b3:ef:74:65:e4:26:f1:40:4b:23:b5:98:
32:2e:b4:54:36:ca:24:3c:ec:39:57:5e:9c:81:ce:
81:00:a1:bf:1d:8d:c4:fa:8d:8a:d1:4e:12:aa:d2:
9d:e8:5e:7b:c4:15:c3:6f:f5:97:a7:47:75:5c:e7:
b7:2c:9e:dd:f0:fe:fa:2f:89:8f:d0:60:01:ef:3c:
eb:7a:ca:ff:20:ea:21:c1:10:da:b3:57:e4:44:85:
69:5a:4d:f4:fc:ea:4e:47:a8:43:e1:7f:9e:01:73:
cb:1b:79:24:bb:fd:39:e4:20:1e:7e:7d:3a:d4:1c:
23:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:97:FE:CD:85:35:64:8C:C3:85:34:79:C9:36:04:A5:25:D8:AF:A1
X509v3 Authority Key Identifier:
keyid:E0:A0:10:6C:D2:85:7E:F1:32:34:86:7C:B7:F1:6A:23:A9:3F:AA:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/46f147-173f-4260-aa7b-3a6bf890a01d/1/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/46f147-173f-4260-aa7b-3a6bf890a01d/1/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:56:6f:43:50:9f:e0:e3:f9:4b:a6:76:c1:42:1a:86:36:36:
70:8a:41:66:60:63:38:1b:da:01:5c:6d:e9:e5:01:14:e4:bf:
1f:7e:07:79:ba:75:6d:26:a9:1f:38:d6:2a:59:ff:ae:72:93:
0a:1a:e7:33:92:bc:99:15:46:b3:8a:31:81:5e:ac:3b:07:6a:
30:22:02:32:41:86:b6:e2:4e:9f:04:3e:f3:17:ab:74:23:10:
92:81:61:57:12:10:34:bd:ff:d7:be:aa:47:6b:e5:ae:87:c5:
05:77:a8:66:12:c7:4c:8d:69:d7:18:f8:a8:14:c2:8f:e6:a8:
91:27:52:b8:1d:cd:ec:31:98:d7:0b:c3:52:b9:df:ba:d4:bb:
b1:b9:ae:2d:5b:75:7a:3b:a4:cb:97:26:f4:10:77:bd:9f:36:
d9:d1:36:3e:2f:2f:16:d2:59:41:28:e3:c0:0f:ef:09:1c:0e:
3c:18:2e:b1:22:c8:09:01:52:49:4b:ec:ce:5d:36:cb:49:97:
7c:02:e3:92:f4:04:24:e3:a5:46:c1:97:03:81:36:cb:30:f1:
09:47:a8:ef:6a:26:07:e1:0b:03:33:61:73:ef:b2:ad:41:9c:
b5:d8:d3:2e:ac:da:aa:8b:89:ce:03:14:a6:7a:b1:44:f6:d0:
31:26:c1:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkh570/27s6ECqz1U2LMMRHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwYTAxMDZjZDI4NTdlZjEzMjM0ODY3Y2I3ZjE2YTIzYTkz
ZmFhOTMwHhcNMjUwOTA3MDIwMDU5WhcNMjUwOTA4MDIwMDU5WjAzMTEwLwYDVQQD
EyhhNzk3ZmVjZDg1MzU2NDhjYzM4NTM0NzljOTM2MDRhNTI1ZDhhZmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEp+Y4eEvRVvvz9o7rmv7kveljyH
5+1EduipXqyBVgXsgy9ppDLSuWiAmvEhb+LErelTmxI00GBpqlJGx/j0dKWVSZ/y
5MoYdTxMFVB6MTLH6ZsZtP9eD5+Nve5fmVhlyFA31oMWPtbL5Ikv+D2hOSia4+W8
fygK677KyMOTLgnCWSc3euyIVkiz73Rl5CbxQEsjtZgyLrRUNsokPOw5V16cgc6B
AKG/HY3E+o2K0U4SqtKd6F57xBXDb/WXp0d1XOe3LJ7d8P76L4mP0GAB7zzresr/
IOohwRDas1fkRIVpWk30/OpOR6hD4X+eAXPLG3kku/055CAefn061BwjVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKeX/s2FNWSMw4U0eck2BKUl2K+hMB8GA1UdIwQY
MBaAFOCgEGzShX7xMjSGfLfxaiOpP6qTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEtBUWJOS0ZmdkV5TklaOHRfRnFJNmtfcXBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi80NmYxNDctMTczZi00MjYwLWFhN2It
M2E2YmY4OTBhMDFkLzEvNEtBUWJOS0ZmdkV5TklaOHRfRnFJNmtfcXBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi80NmYxNDctMTczZi00MjYwLWFhN2ItM2E2YmY4OTBhMDFk
LzEvNEtBUWJOS0ZmdkV5TklaOHRfRnFJNmtfcXBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADVZvQ1Cf
4OP5S6Z2wUIahjY2cIpBZmBjOBvaAVxt6eUBFOS/H34Hebp1bSapHzjWKln/rnKT
ChrnM5K8mRVGs4oxgV6sOwdqMCICMkGGtuJOnwQ+8xerdCMQkoFhVxIQNL3/176q
R2vlrofFBXeoZhLHTI1p1xj4qBTCj+aokSdSuB3N7DGY1wvDUrnfutS7sbmuLVt1
ejuky5cm9BB3vZ822dE2Pi8vFtJZQSjjwA/vCRwOPBgusSLICQFSSUvszl02y0mX
fALjkvQEJOOlRsGXA4E2yzDxCUeo72omB+ELAzNhc++yrUGctdjTLqzaqouJzgMU
pnqxRPbQMSbB3g==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:39:03 2025 by rpki-client