Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/69a209-fa57-43f0-bbc2-7507e819a795/1/4x2iugV-mlSmFw8lf_l4VtyX4Gg.mft
File: 4x2iugV-mlSmFw8lf_l4VtyX4Gg.mft (raw, json)
Hash identifier: NOfgOL7TCkUJ80OG3BCvHTcbUaWE2iNCU9gtBYtIWzg=
Subject key identifier: 8C:79:15:60:B1:02:F4:9D:46:2D:FB:B6:91:22:5B:60:87:AA:F8:67
Authority key identifier: E3:1D:A2:BA:05:7E:9A:54:A6:17:0F:25:7F:F9:78:56:DC:97:E0:68
Certificate issuer: /CN=e31da2ba057e9a54a6170f257ff97856dc97e068
Certificate serial: 019A5007618E8650F645455EA867FDD5AA1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4x2iugV-mlSmFw8lf_l4VtyX4Gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/69a209-fa57-43f0-bbc2-7507e819a795/1/4x2iugV-mlSmFw8lf_l4VtyX4Gg.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 18:00:52 +0000
Manifest this update: Tue 04 Nov 2025 18:00:52 +0000
Manifest next update: Wed 05 Nov 2025 18:00:52 +0000
Files and hashes: 1: 4x2iugV-mlSmFw8lf_l4VtyX4Gg.crl (hash: 1SbqnxCPtEZFMXmMu1emPhE/9hGfdBfcVyv4R65dAs0=)
2: lQLxDvgdpM5wdztERCLsc3tCNwY.roa (hash: Tk0E6nuunIdfuPSYgglnezBIWaLfJtMK/AmMDpED9vM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/69a209-fa57-43f0-bbc2-7507e819a795/1/4x2iugV-mlSmFw8lf_l4VtyX4Gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/69a209-fa57-43f0-bbc2-7507e819a795/1/4x2iugV-mlSmFw8lf_l4VtyX4Gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4x2iugV-mlSmFw8lf_l4VtyX4Gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:61:8e:86:50:f6:45:45:5e:a8:67:fd:d5:aa:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e31da2ba057e9a54a6170f257ff97856dc97e068
Validity
Not Before: Nov 4 18:00:52 2025 GMT
Not After : Nov 5 18:00:52 2025 GMT
Subject: CN=8c791560b102f49d462dfbb691225b6087aaf867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:95:46:3f:d9:1e:b5:fb:b1:c1:65:cc:0e:0d:
a6:cf:22:c2:53:6e:ab:f8:c9:48:76:df:e1:02:e2:
36:01:3e:e7:44:46:10:05:c9:89:0f:5c:58:5b:73:
c4:3b:c3:2d:9b:8c:d9:a3:48:0e:6d:54:06:b6:9c:
aa:fd:a9:39:fc:ee:62:48:df:0c:f5:65:48:97:d6:
be:2e:ae:43:82:51:60:e4:2b:5a:9f:ab:ad:59:71:
b2:ed:f6:f7:d8:85:4a:ea:e7:4b:e4:f3:c9:3c:5f:
f3:36:2b:a2:6e:ee:34:e2:39:56:0e:73:8e:9a:3c:
a0:3a:b9:ef:d7:77:6b:a1:d7:d9:94:49:f7:0d:77:
06:a7:2f:27:40:3a:f1:0a:c7:02:27:0d:36:b1:48:
f5:59:7a:12:aa:57:c3:93:03:ec:22:85:95:30:d3:
e8:ff:1b:56:73:40:af:29:5e:fb:15:2b:cd:1f:b8:
67:b4:f4:f4:9d:b5:46:27:0a:59:8c:24:27:05:a8:
4a:15:93:b2:83:cc:c2:6c:23:7d:dc:49:15:e5:ee:
48:5a:63:1e:6a:e8:9f:33:e7:58:07:2b:ba:b6:a6:
e3:e5:23:d7:d6:72:c8:20:aa:f3:89:94:5b:84:58:
e8:6b:6f:d2:10:94:89:1a:ef:87:cf:f5:c6:db:fc:
cd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:79:15:60:B1:02:F4:9D:46:2D:FB:B6:91:22:5B:60:87:AA:F8:67
X509v3 Authority Key Identifier:
keyid:E3:1D:A2:BA:05:7E:9A:54:A6:17:0F:25:7F:F9:78:56:DC:97:E0:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4x2iugV-mlSmFw8lf_l4VtyX4Gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/69a209-fa57-43f0-bbc2-7507e819a795/1/4x2iugV-mlSmFw8lf_l4VtyX4Gg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/69a209-fa57-43f0-bbc2-7507e819a795/1/4x2iugV-mlSmFw8lf_l4VtyX4Gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:4c:ee:4a:9c:0e:ed:11:56:fb:de:f6:6e:d0:bb:b4:38:7c:
d9:0b:75:8b:fe:02:6d:77:44:69:33:2f:69:5a:56:84:1a:49:
9a:4e:2d:69:e7:00:d0:76:68:16:51:51:15:da:a8:2d:f6:be:
91:ef:cb:3b:1e:d5:25:82:18:2c:b7:5e:e7:ce:d8:4e:13:c0:
38:59:db:0d:cc:80:c6:53:1f:f4:88:9e:39:bb:50:10:f8:83:
7f:c1:08:dd:a4:46:1a:9d:34:a3:82:1c:7c:74:9f:da:b5:fa:
86:47:d0:84:2f:b7:e4:6f:57:97:7b:0f:a7:94:fe:d9:30:fa:
d6:56:a6:5d:6d:67:f6:62:a9:e5:1e:47:b0:78:57:ae:e6:1a:
41:ec:3a:d2:e5:fe:55:46:e8:83:b2:02:43:09:81:9e:2e:cc:
51:a5:3d:23:6e:3c:64:c0:ce:07:90:21:29:53:8f:45:ad:59:
9f:42:e2:13:84:58:0e:3b:e9:93:25:27:d2:f0:df:c0:24:b5:
50:f8:21:1d:49:43:b5:8c:4f:0e:90:ab:e6:fa:26:e4:43:f7:
52:8d:ae:12:ac:18:4d:0d:d4:0e:fa:f8:38:50:6d:53:33:b2:
45:dc:95:d4:54:c3:8a:ac:85:07:ca:6d:82:91:cd:d9:ea:11:
82:d8:e8:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQB2GOhlD2RUVeqGf91aodMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMWRhMmJhMDU3ZTlhNTRhNjE3MGYyNTdmZjk3ODU2ZGM5
N2UwNjgwHhcNMjUxMTA0MTgwMDUyWhcNMjUxMTA1MTgwMDUyWjAzMTEwLwYDVQQD
Eyg4Yzc5MTU2MGIxMDJmNDlkNDYyZGZiYjY5MTIyNWI2MDg3YWFmODY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JVGP9ketfuxwWXMDg2mzyLCU26r
+MlIdt/hAuI2AT7nREYQBcmJD1xYW3PEO8Mtm4zZo0gObVQGtpyq/ak5/O5iSN8M
9WVIl9a+Lq5DglFg5Ctan6utWXGy7fb32IVK6udL5PPJPF/zNiuibu404jlWDnOO
mjygOrnv13drodfZlEn3DXcGpy8nQDrxCscCJw02sUj1WXoSqlfDkwPsIoWVMNPo
/xtWc0CvKV77FSvNH7hntPT0nbVGJwpZjCQnBahKFZOyg8zCbCN93EkV5e5IWmMe
auifM+dYByu6tqbj5SPX1nLIIKrziZRbhFjoa2/SEJSJGu+Hz/XG2/zNzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIx5FWCxAvSdRi37tpEiW2CHqvhnMB8GA1UdIwQY
MBaAFOMdoroFfppUphcPJX/5eFbcl+BoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHgyaXVnVi1tbFNtRnc4bGZfbDRWdHlYNEdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy82OWEyMDktZmE1Ny00M2YwLWJiYzIt
NzUwN2U4MTlhNzk1LzEvNHgyaXVnVi1tbFNtRnc4bGZfbDRWdHlYNEdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy82OWEyMDktZmE1Ny00M2YwLWJiYzItNzUwN2U4MTlhNzk1
LzEvNHgyaXVnVi1tbFNtRnc4bGZfbDRWdHlYNEdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARUzuSpwO
7RFW+972btC7tDh82Qt1i/4CbXdEaTMvaVpWhBpJmk4taecA0HZoFlFRFdqoLfa+
ke/LOx7VJYIYLLde587YThPAOFnbDcyAxlMf9IieObtQEPiDf8EI3aRGGp00o4Ic
fHSf2rX6hkfQhC+35G9Xl3sPp5T+2TD61lamXW1n9mKp5R5HsHhXruYaQew60uX+
VUbog7ICQwmBni7MUaU9I248ZMDOB5AhKVOPRa1Zn0LiE4RYDjvpkyUn0vDfwCS1
UPghHUlDtYxPDpCr5vom5EP3Uo2uEqwYTQ3UDvr4OFBtUzOyRdyV1FTDiqyFB8pt
gpHN2eoRgtjoVg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:47:55 2025 by rpki-client