Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.mft
File: t4mjDNb2wYIF_ZrKFK20K_Dckuw.mft (raw, json)
Hash identifier: Vz1jfqYIWzq0CYZ7aPvKpag/Y51TDMxVLcLIkMoxb98=
Subject key identifier: 93:C5:8C:3F:94:20:30:BA:5D:7E:D7:DF:25:AA:22:F4:B5:2D:A1:55
Authority key identifier: B7:89:A3:0C:D6:F6:C1:82:05:FD:9A:CA:14:AD:B4:2B:F0:DC:92:EC
Certificate issuer: /CN=b789a30cd6f6c18205fd9aca14adb42bf0dc92ec
Certificate serial: 019A4EF420E6B85C32ED4B432F73C2924381
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4mjDNb2wYIF_ZrKFK20K_Dckuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.mft
Manifest number: 0AB2
Signing time: Tue 04 Nov 2025 13:00:13 +0000
Manifest this update: Tue 04 Nov 2025 13:00:13 +0000
Manifest next update: Wed 05 Nov 2025 13:00:13 +0000
Files and hashes: 1: t4mjDNb2wYIF_ZrKFK20K_Dckuw.crl (hash: xMN9uzhrIabrCmQY5WDHS0hzLI0QDghwIKtU6uhrltU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4mjDNb2wYIF_ZrKFK20K_Dckuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:20:e6:b8:5c:32:ed:4b:43:2f:73:c2:92:43:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b789a30cd6f6c18205fd9aca14adb42bf0dc92ec
Validity
Not Before: Nov 4 13:00:13 2025 GMT
Not After : Nov 5 13:00:13 2025 GMT
Subject: CN=93c58c3f942030ba5d7ed7df25aa22f4b52da155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:69:df:09:5e:5b:1c:82:81:c9:05:9b:bc:04:
2d:ed:46:63:86:50:72:85:09:95:81:56:9f:ea:8f:
4a:3b:8a:1d:46:16:e3:16:9f:78:db:b2:58:1b:44:
4f:b0:af:b8:02:00:77:ff:03:21:c1:aa:d4:42:5d:
81:d0:ae:36:7b:e1:f3:fb:0b:fd:2f:14:99:60:71:
9f:2a:c2:fc:32:15:05:2a:8b:68:7b:84:f8:93:31:
d1:11:47:f1:0b:1b:ad:7d:5b:b5:d0:b6:d1:41:f0:
b4:98:14:cf:7b:6e:17:a1:fb:73:93:ea:f6:94:6b:
32:4b:6a:93:e9:96:6d:e9:bc:5f:92:1f:b7:46:db:
01:dd:ad:f3:0c:7b:f5:de:0e:35:87:41:71:7b:d3:
aa:81:71:9e:26:7e:7c:35:7b:69:d0:74:34:64:1f:
6b:ea:bc:f9:37:74:36:a7:b4:c2:a5:9e:38:b3:6e:
9b:7a:ad:27:48:48:12:7d:18:db:04:1c:86:2c:f3:
71:74:b3:0c:15:14:5c:b9:ca:ab:e1:74:c8:2a:7b:
20:bb:50:9a:29:67:91:0e:84:c2:74:69:d7:de:86:
d9:9a:a9:07:06:f9:92:ce:33:d5:e4:62:0b:b7:0f:
35:bc:0d:6d:90:4c:7c:25:aa:bf:3a:c8:41:5c:e8:
ea:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:C5:8C:3F:94:20:30:BA:5D:7E:D7:DF:25:AA:22:F4:B5:2D:A1:55
X509v3 Authority Key Identifier:
keyid:B7:89:A3:0C:D6:F6:C1:82:05:FD:9A:CA:14:AD:B4:2B:F0:DC:92:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4mjDNb2wYIF_ZrKFK20K_Dckuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:28:a7:0c:da:e5:77:71:9a:f8:b8:5e:ac:2e:e9:d0:fb:80:
a8:a0:3b:44:6c:c6:ed:8a:5c:fc:17:a2:b1:13:a4:ef:31:07:
42:24:e7:dd:2f:65:9f:c8:92:c4:f5:95:ae:79:68:b5:66:28:
88:14:ac:47:c3:9e:74:57:25:06:50:2b:57:cf:e8:77:71:c6:
ca:c6:2d:6e:36:b8:c5:38:cc:da:d7:40:3b:a3:3c:48:e9:b4:
40:64:cd:d3:9a:8f:2a:30:b6:c4:48:95:13:74:8f:3f:4f:6f:
9f:90:16:db:a2:ba:a5:45:38:2f:2c:b9:af:cb:c6:d3:31:2b:
28:db:8c:0b:ce:9e:3c:16:1b:cd:db:9e:dd:d8:b9:99:ee:93:
a1:4a:ce:f6:2f:1f:08:d9:93:62:42:f0:33:dc:9f:b9:29:5f:
b2:19:9b:e0:bc:d5:f4:53:41:32:11:7d:07:48:bb:43:af:02:
c3:f0:97:79:92:3d:22:c8:6b:ca:67:2c:79:bb:f7:79:8f:cb:
f3:ca:f1:98:ac:1c:50:99:b3:cc:1f:62:bf:2b:ce:6a:4d:7f:
dc:f8:28:db:fd:c9:bb:b6:96:39:cb:68:1a:c4:f4:30:1d:4e:
c1:bc:9c:2a:ac:8e:a8:6a:43:b6:8c:4c:01:1d:f7:6b:84:fb:
c4:2c:ea:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9CDmuFwy7UtDL3PCkkOBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3ODlhMzBjZDZmNmMxODIwNWZkOWFjYTE0YWRiNDJiZjBk
YzkyZWMwHhcNMjUxMTA0MTMwMDEzWhcNMjUxMTA1MTMwMDEzWjAzMTEwLwYDVQQD
Eyg5M2M1OGMzZjk0MjAzMGJhNWQ3ZWQ3ZGYyNWFhMjJmNGI1MmRhMTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGnfCV5bHIKByQWbvAQt7UZjhlBy
hQmVgVaf6o9KO4odRhbjFp9427JYG0RPsK+4AgB3/wMhwarUQl2B0K42e+Hz+wv9
LxSZYHGfKsL8MhUFKotoe4T4kzHREUfxCxutfVu10LbRQfC0mBTPe24Xoftzk+r2
lGsyS2qT6ZZt6bxfkh+3RtsB3a3zDHv13g41h0Fxe9OqgXGeJn58NXtp0HQ0ZB9r
6rz5N3Q2p7TCpZ44s26beq0nSEgSfRjbBByGLPNxdLMMFRRcucqr4XTIKnsgu1Ca
KWeRDoTCdGnX3obZmqkHBvmSzjPV5GILtw81vA1tkEx8Jaq/OshBXOjqKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJPFjD+UIDC6XX7X3yWqIvS1LaFVMB8GA1UdIwQY
MBaAFLeJowzW9sGCBf2ayhSttCvw3JLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDRtakROYjJ3WUlGX1pyS0ZLMjBLX0Rja3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9iMmIzMTEtMmUzMi00YjBkLWI4NmMt
NjcxMzVkMzE2ZThjLzEvdDRtakROYjJ3WUlGX1pyS0ZLMjBLX0Rja3V3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9iMmIzMTEtMmUzMi00YjBkLWI4NmMtNjcxMzVkMzE2ZThj
LzEvdDRtakROYjJ3WUlGX1pyS0ZLMjBLX0Rja3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcSinDNrl
d3Ga+LherC7p0PuAqKA7RGzG7Ypc/BeisROk7zEHQiTn3S9ln8iSxPWVrnlotWYo
iBSsR8OedFclBlArV8/od3HGysYtbja4xTjM2tdAO6M8SOm0QGTN05qPKjC2xEiV
E3SPP09vn5AW26K6pUU4Lyy5r8vG0zErKNuMC86ePBYbzdue3di5me6ToUrO9i8f
CNmTYkLwM9yfuSlfshmb4LzV9FNBMhF9B0i7Q68Cw/CXeZI9Ishrymcsebv3eY/L
88rxmKwcUJmzzB9ivyvOak1/3Pgo2/3Ju7aWOctoGsT0MB1OwbycKqyOqGpDtoxM
AR33a4T7xCzqmQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:45:42 2025 by rpki-client