Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
File: 4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft (raw, json)
Hash identifier: XCODAcrW/VBpMZmJ3RIHlXQnVXHc7wH02Iquwk2mEA8=
Subject key identifier: 28:E6:89:32:45:62:AE:4B:9A:F4:48:31:D5:1B:28:54:D5:FD:AE:AB
Authority key identifier: E1:87:4A:88:7A:A2:88:DA:B7:2C:65:8E:93:69:4E:D5:DA:FD:20:26
Certificate issuer: /CN=e1874a887aa288dab72c658e93694ed5dafd2026
Certificate serial: 019A4EF4D8D5CC815D9FB2FD895C3BC646A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
Manifest number: 1268
Signing time: Tue 04 Nov 2025 13:01:00 +0000
Manifest this update: Tue 04 Nov 2025 13:01:00 +0000
Manifest next update: Wed 05 Nov 2025 13:01:00 +0000
Files and hashes: 1: 4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl (hash: 2GdhcOVIaU3xc1S08JfhyJv7WtzoMSKWz8BiMgyFoLU=)
2: jnxiRSp6LL1UuZSH55PRoBU9Uug.roa (hash: EzydjgFzmvXFQDadZtYOhUDG1+kFGRWU2sNIMDhFrQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:d8:d5:cc:81:5d:9f:b2:fd:89:5c:3b:c6:46:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1874a887aa288dab72c658e93694ed5dafd2026
Validity
Not Before: Nov 4 13:01:00 2025 GMT
Not After : Nov 5 13:01:00 2025 GMT
Subject: CN=28e689324562ae4b9af44831d51b2854d5fdaeab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b9:6e:7c:f7:99:3a:90:8a:41:50:af:1f:5a:
9b:6e:dc:18:66:69:06:52:58:f9:9e:cf:84:b1:97:
df:01:15:ff:2a:6a:26:6c:43:bc:96:09:d5:01:ad:
34:00:3d:8b:ff:76:51:54:89:76:6e:50:fa:ce:d1:
38:df:68:81:e3:99:da:51:d2:ec:11:3a:7c:71:dd:
24:46:8e:ec:e9:fd:c6:18:e9:8e:b4:ae:17:9a:0c:
5a:ac:e6:86:3c:54:23:9a:fb:c5:fd:b6:02:10:2b:
51:3f:34:c1:2a:90:3a:48:1c:e4:74:a1:87:40:57:
4a:84:3d:87:ab:7a:c8:c7:f7:1e:90:20:af:91:75:
d8:da:dd:f6:90:13:75:02:80:c9:40:2b:7f:1d:2d:
4d:b7:4b:87:32:8a:03:79:48:89:47:35:b9:e3:b0:
67:c5:70:d8:5c:a3:61:8f:94:78:86:7c:0a:cc:95:
5e:6a:9d:0b:85:12:e4:98:94:42:76:53:84:dc:eb:
d8:84:f3:96:03:ba:14:c1:0c:7e:58:8f:bc:45:aa:
c6:a0:07:46:c9:be:a6:90:90:96:4e:70:a3:fb:db:
48:ea:98:0d:37:f0:86:47:10:07:6f:7e:b7:5b:13:
8c:48:5e:8b:cf:6a:72:20:7f:a5:6d:fe:1a:c1:de:
c5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E6:89:32:45:62:AE:4B:9A:F4:48:31:D5:1B:28:54:D5:FD:AE:AB
X509v3 Authority Key Identifier:
keyid:E1:87:4A:88:7A:A2:88:DA:B7:2C:65:8E:93:69:4E:D5:DA:FD:20:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:c0:27:ed:e2:35:6c:87:92:4c:9e:c2:7c:0c:75:9c:a6:1d:
b2:4e:9e:0e:4c:e9:7c:ea:0d:cb:a8:0e:b8:aa:a9:b4:5f:72:
67:ed:bc:7e:1b:27:71:3e:9e:49:f2:21:e4:cb:7f:43:bf:49:
1a:62:c4:15:bc:46:e0:ed:b7:cc:d3:03:df:5a:47:fd:18:ed:
b1:2f:1f:bd:55:5b:8a:be:e1:39:3a:69:71:d4:ab:57:64:d7:
df:fc:b3:fc:a1:d1:f8:6f:b1:d3:77:c8:96:ae:f7:e4:39:12:
53:b6:3f:9e:38:5e:55:59:a4:3a:d3:dd:34:ca:37:49:8c:4b:
5a:73:e3:2b:53:5a:f3:0e:72:41:66:0e:71:e6:0b:37:62:4d:
54:bc:96:c2:45:34:b4:59:14:be:c5:b3:aa:31:04:f7:d0:89:
b7:7a:c5:e1:87:70:fc:1e:a5:f5:b3:7c:f2:10:8b:f1:62:6c:
9c:82:a3:34:87:76:16:3a:bb:d4:30:19:5c:4f:45:7d:21:22:
54:35:b2:11:49:ae:a2:7c:29:fc:53:30:76:42:b2:3d:30:2a:
65:04:fb:8a:41:c8:95:7d:65:c5:79:05:2f:57:77:51:51:ce:
c0:4a:c7:1e:a5:8f:ce:b9:b8:82:c0:87:39:33:61:7e:a4:3b:
42:6e:f4:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9NjVzIFdn7L9iVw7xkaoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxODc0YTg4N2FhMjg4ZGFiNzJjNjU4ZTkzNjk0ZWQ1ZGFm
ZDIwMjYwHhcNMjUxMTA0MTMwMTAwWhcNMjUxMTA1MTMwMTAwWjAzMTEwLwYDVQQD
EygyOGU2ODkzMjQ1NjJhZTRiOWFmNDQ4MzFkNTFiMjg1NGQ1ZmRhZWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2blufPeZOpCKQVCvH1qbbtwYZmkG
Ulj5ns+EsZffARX/KmombEO8lgnVAa00AD2L/3ZRVIl2blD6ztE432iB45naUdLs
ETp8cd0kRo7s6f3GGOmOtK4XmgxarOaGPFQjmvvF/bYCECtRPzTBKpA6SBzkdKGH
QFdKhD2Hq3rIx/cekCCvkXXY2t32kBN1AoDJQCt/HS1Nt0uHMooDeUiJRzW547Bn
xXDYXKNhj5R4hnwKzJVeap0LhRLkmJRCdlOE3OvYhPOWA7oUwQx+WI+8RarGoAdG
yb6mkJCWTnCj+9tI6pgNN/CGRxAHb363WxOMSF6Lz2pyIH+lbf4awd7F/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCjmiTJFYq5LmvRIMdUbKFTV/a6rMB8GA1UdIwQY
MBaAFOGHSoh6oojatyxljpNpTtXa/SAmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFlkS2lIcWlpTnEzTEdXT2sybE8xZHI5SUNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8wZmM3ZTUtYjFmNi00NzRlLTk5YTct
ZWRhMjNmMmYxN2U5LzEvNFlkS2lIcWlpTnEzTEdXT2sybE8xZHI5SUNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8wZmM3ZTUtYjFmNi00NzRlLTk5YTctZWRhMjNmMmYxN2U5
LzEvNFlkS2lIcWlpTnEzTEdXT2sybE8xZHI5SUNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi8An7eI1
bIeSTJ7CfAx1nKYdsk6eDkzpfOoNy6gOuKqptF9yZ+28fhsncT6eSfIh5Mt/Q79J
GmLEFbxG4O23zNMD31pH/RjtsS8fvVVbir7hOTppcdSrV2TX3/yz/KHR+G+x03fI
lq735DkSU7Y/njheVVmkOtPdNMo3SYxLWnPjK1Na8w5yQWYOceYLN2JNVLyWwkU0
tFkUvsWzqjEE99CJt3rF4Ydw/B6l9bN88hCL8WJsnIKjNId2Fjq71DAZXE9FfSEi
VDWyEUmuonwp/FMwdkKyPTAqZQT7ikHIlX1lxXkFL1d3UVHOwErHHqWPzrm4gsCH
OTNhfqQ7Qm709w==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:52 2025 by rpki-client