Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft
File: 4gThwgEU13MWlN3E8nfE3xv_xPg.mft (raw, json)
Hash identifier: uoTYqP6S9J+5K5ZLJy0JIPh2UEd9XPoZ+an2VvlLET0=
Subject key identifier: B4:A7:90:BE:FF:1B:B8:41:26:BC:31:D3:B7:99:F9:1B:FC:F1:DF:C4
Authority key identifier: E2:04:E1:C2:01:14:D7:73:16:94:DD:C4:F2:77:C4:DF:1B:FF:C4:F8
Certificate issuer: /CN=e204e1c20114d7731694ddc4f277c4df1bffc4f8
Certificate serial: 019921B19F23545E708A4A3674A1731B868E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gThwgEU13MWlN3E8nfE3xv_xPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 01:01:52 +0000
Manifest this update: Sun 07 Sep 2025 01:01:52 +0000
Manifest next update: Mon 08 Sep 2025 01:01:52 +0000
Files and hashes: 1: 4gThwgEU13MWlN3E8nfE3xv_xPg.crl (hash: K2OhThEmljZVjEA5MRya8AU08VyWO3zTHEe161ISYjc=)
2: BDxLMkKnaceqpe6Gqca_PK3aI0Q.roa (hash: g477khgykIY2Mcl6yKjre2phFpHAMbTwNboQthw3CVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4gThwgEU13MWlN3E8nfE3xv_xPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:9f:23:54:5e:70:8a:4a:36:74:a1:73:1b:86:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e204e1c20114d7731694ddc4f277c4df1bffc4f8
Validity
Not Before: Sep 7 01:01:52 2025 GMT
Not After : Sep 8 01:01:52 2025 GMT
Subject: CN=b4a790beff1bb84126bc31d3b799f91bfcf1dfc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:2e:7e:84:41:36:d1:88:09:2b:2a:84:b9:d8:
c1:27:bc:f5:34:0b:a2:9c:8f:37:56:a3:71:ad:97:
95:4e:c4:92:f2:63:69:92:29:4c:7a:1b:e8:68:38:
21:98:ce:2f:57:11:15:7a:74:72:3b:70:14:9f:0a:
84:1f:19:15:c8:56:67:6c:dd:0c:07:e7:97:5c:85:
c9:2a:9a:22:5b:e2:85:49:6a:61:23:e2:28:1b:51:
18:71:53:c4:75:ba:fe:16:aa:8d:e7:bb:bb:7f:e6:
c6:9f:d4:e5:ae:ea:a3:fe:41:72:bc:9b:31:83:11:
43:f4:3c:f9:8c:a7:fc:43:63:86:92:2a:0d:30:68:
a4:19:bb:ea:21:0c:68:93:d0:96:a0:cb:b0:fa:50:
35:2b:b7:a6:12:c2:18:dc:c7:66:6a:c4:dc:f9:cd:
88:68:73:ff:87:ca:23:f3:11:ce:37:b1:f2:8f:2e:
c5:a0:51:df:fb:6d:18:c3:bb:18:a2:7f:83:c4:fb:
f4:f8:94:6e:b3:da:42:55:00:6e:00:b3:f2:f5:b5:
4e:ca:8d:d1:6a:b3:a6:e9:16:2f:e8:a6:1f:3b:d7:
39:c3:2d:1a:70:f2:bb:b1:17:b6:38:8e:33:8f:2e:
08:2b:08:e3:75:16:39:c3:ef:c4:c8:a9:70:82:fc:
b0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A7:90:BE:FF:1B:B8:41:26:BC:31:D3:B7:99:F9:1B:FC:F1:DF:C4
X509v3 Authority Key Identifier:
keyid:E2:04:E1:C2:01:14:D7:73:16:94:DD:C4:F2:77:C4:DF:1B:FF:C4:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gThwgEU13MWlN3E8nfE3xv_xPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:37:2f:7d:df:93:95:39:d4:08:9d:92:14:e9:6c:a1:ed:83:
51:42:f7:25:3e:33:fb:7c:59:60:2b:3a:9b:58:11:ab:22:1a:
36:67:57:dd:6e:62:7b:22:a5:13:48:7f:35:90:97:d3:09:b5:
4a:91:18:f2:b9:fd:ee:d1:05:58:5e:5e:2b:ae:04:3b:c4:a3:
10:4f:ea:bb:d8:cb:79:12:28:4b:4b:87:0d:8a:97:f5:41:88:
b0:e6:07:f3:fb:71:db:5e:c3:0c:2a:a0:19:d8:e9:17:3b:40:
fe:e0:79:bf:45:aa:fd:4a:3a:40:07:29:23:bb:0d:b6:76:de:
6c:7f:b1:90:69:93:a3:42:8d:e1:a8:14:b5:0d:cf:75:80:e9:
f2:e9:3c:bd:f9:34:62:cb:7e:2b:32:e6:c7:22:9a:f6:91:73:
d0:dd:81:34:95:ee:f5:1d:8e:d7:d7:d4:2c:ec:a0:f6:e9:b3:
d2:f2:4c:22:e7:7d:d3:49:e3:38:ac:54:28:96:60:1d:b9:29:
e5:e6:34:c8:da:e3:9d:46:39:f6:4a:4d:48:58:b6:4f:c5:13:
98:f4:de:93:a2:35:bd:70:bd:da:6a:97:b0:bf:76:0f:1a:04:
9a:11:e9:6c:dd:8a:68:ba:c4:6d:0b:9e:e4:f4:e6:2e:ab:c8:
12:d2:9c:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsZ8jVF5wiko2dKFzG4aOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyMDRlMWMyMDExNGQ3NzMxNjk0ZGRjNGYyNzdjNGRmMWJm
ZmM0ZjgwHhcNMjUwOTA3MDEwMTUyWhcNMjUwOTA4MDEwMTUyWjAzMTEwLwYDVQQD
EyhiNGE3OTBiZWZmMWJiODQxMjZiYzMxZDNiNzk5ZjkxYmZjZjFkZmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8i5+hEE20YgJKyqEudjBJ7z1NAui
nI83VqNxrZeVTsSS8mNpkilMehvoaDghmM4vVxEVenRyO3AUnwqEHxkVyFZnbN0M
B+eXXIXJKpoiW+KFSWphI+IoG1EYcVPEdbr+FqqN57u7f+bGn9Tlruqj/kFyvJsx
gxFD9Dz5jKf8Q2OGkioNMGikGbvqIQxok9CWoMuw+lA1K7emEsIY3MdmasTc+c2I
aHP/h8oj8xHON7Hyjy7FoFHf+20Yw7sYon+DxPv0+JRus9pCVQBuALPy9bVOyo3R
arOm6RYv6KYfO9c5wy0acPK7sRe2OI4zjy4IKwjjdRY5w+/EyKlwgvywFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLSnkL7/G7hBJrwx07eZ+Rv88d/EMB8GA1UdIwQY
MBaAFOIE4cIBFNdzFpTdxPJ3xN8b/8T4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGdUaHdnRVUxM01XbE4zRThuZkUzeHZfeFBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9iOWRmNWEtYTQ1NC00ZTI3LTg2YWYt
MTNkMzgwNzE1Y2VmLzEvNGdUaHdnRVUxM01XbE4zRThuZkUzeHZfeFBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9iOWRmNWEtYTQ1NC00ZTI3LTg2YWYtMTNkMzgwNzE1Y2Vm
LzEvNGdUaHdnRVUxM01XbE4zRThuZkUzeHZfeFBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbjcvfd+T
lTnUCJ2SFOlsoe2DUUL3JT4z+3xZYCs6m1gRqyIaNmdX3W5ieyKlE0h/NZCX0wm1
SpEY8rn97tEFWF5eK64EO8SjEE/qu9jLeRIoS0uHDYqX9UGIsOYH8/tx217DDCqg
GdjpFztA/uB5v0Wq/Uo6QAcpI7sNtnbebH+xkGmTo0KN4agUtQ3PdYDp8uk8vfk0
Yst+KzLmxyKa9pFz0N2BNJXu9R2O19fULOyg9umz0vJMIud900njOKxUKJZgHbkp
5eY0yNrjnUY59kpNSFi2T8UTmPTek6I1vXC92mqXsL92DxoEmhHpbN2KaLrEbQue
5PTmLqvIEtKcGw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:08:16 2025 by rpki-client