Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
File: 4QhbYki9cgdqtCH_oOO_75NWXp0.mft (raw, json)
Hash identifier: hN243w7Jhw9je+fa+8fPDftYguPuY97/25gQsApZBZE=
Subject key identifier: A4:20:09:C8:78:48:01:23:5B:E1:DA:BA:81:5D:BC:56:7D:FD:49:F4
Authority key identifier: E1:08:5B:62:48:BD:72:07:6A:B4:21:FF:A0:E3:BF:EF:93:56:5E:9D
Certificate issuer: /CN=e1085b6248bd72076ab421ffa0e3bfef93565e9d
Certificate serial: 019A4E1911599872ED4A3F437591BAB2E36D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
Manifest number: 0C64
Signing time: Tue 04 Nov 2025 09:00:56 +0000
Manifest this update: Tue 04 Nov 2025 09:00:56 +0000
Manifest next update: Wed 05 Nov 2025 09:00:56 +0000
Files and hashes: 1: 4QhbYki9cgdqtCH_oOO_75NWXp0.crl (hash: u5BCgjDq3b0uBPBN/dQKmbnZ0nUPloTM4yBxdceCtgA=)
2: PBq5zLGD_CUeX0SfhuWUFrucnGw.roa (hash: rPbgNnUy1CwR89NF9bSl2HtGtuQRXqqe8MrxpHJ/Dco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:19:11:59:98:72:ed:4a:3f:43:75:91:ba:b2:e3:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1085b6248bd72076ab421ffa0e3bfef93565e9d
Validity
Not Before: Nov 4 09:00:56 2025 GMT
Not After : Nov 5 09:00:56 2025 GMT
Subject: CN=a42009c8784801235be1daba815dbc567dfd49f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:92:75:91:e9:26:a0:0c:67:89:47:f1:68:7b:
2d:a2:99:78:14:37:0e:70:b0:e1:d0:cc:62:ed:a7:
9b:2a:5d:c9:80:03:4b:ce:d9:f8:ba:93:dd:85:b6:
83:0d:65:11:cf:e5:56:ca:b5:79:32:88:22:c0:c3:
96:50:e5:a9:f1:25:e2:82:ba:64:ee:6f:69:f5:c5:
e4:2d:d2:46:01:ca:07:79:e8:7f:13:52:c0:cb:81:
a9:af:ed:e7:15:25:1d:ff:bc:b5:cc:b7:76:65:d0:
88:f9:07:24:d1:05:81:30:b2:2d:db:8b:eb:2e:e9:
82:67:f1:27:ec:7d:ef:d3:33:da:56:ba:cd:07:c6:
50:3d:c9:ad:77:0d:75:ac:be:9e:f9:de:eb:57:9b:
6d:1c:c2:f5:e9:e5:f1:95:e6:84:49:ea:0c:ad:87:
21:eb:10:12:7a:6e:41:95:3c:49:71:40:8a:a4:94:
00:ed:a9:d6:af:17:f3:4c:7c:2c:65:56:99:d7:d0:
e7:cf:6f:63:19:69:a8:78:53:c9:c6:89:fc:5d:44:
ca:f4:f2:32:3b:00:0b:1b:aa:55:10:d2:63:30:e5:
af:59:e6:6a:37:aa:ab:1a:0b:ab:28:6f:d6:eb:db:
0c:c6:cb:f1:7e:22:df:17:56:8a:fe:c8:4b:43:7f:
9b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:20:09:C8:78:48:01:23:5B:E1:DA:BA:81:5D:BC:56:7D:FD:49:F4
X509v3 Authority Key Identifier:
keyid:E1:08:5B:62:48:BD:72:07:6A:B4:21:FF:A0:E3:BF:EF:93:56:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:b1:b9:e6:c7:fd:02:a0:90:e7:fc:da:e0:c0:f6:43:34:71:
5e:36:91:43:db:bc:20:5e:13:7b:36:9a:93:d8:3d:34:57:45:
46:13:48:1a:3f:d1:7f:0b:70:2f:b7:21:ca:cf:95:c7:e8:68:
10:c8:8a:22:48:73:9f:c8:ba:45:e3:77:96:c9:91:86:6b:53:
dc:73:d5:49:f5:a4:f6:7f:7e:de:47:bd:47:67:d7:bf:84:6f:
55:2a:5d:f2:0f:7f:4c:a2:0d:c6:1a:4c:74:a4:ab:c1:2b:a7:
de:3e:e4:0c:fc:82:f1:e5:a5:df:e0:c5:a2:e6:31:59:cf:21:
e0:67:62:2b:cb:a7:04:70:76:04:9f:08:dc:9d:5a:a1:4e:5f:
65:4c:e0:f3:3a:6c:bb:ab:f9:24:9e:5b:1e:b8:69:15:15:0c:
67:2e:3c:46:fc:6e:19:7a:14:5b:2d:e2:86:5f:5f:52:aa:48:
96:d9:e0:b0:55:97:36:63:e3:98:97:85:8f:0b:f1:14:78:d4:
d7:da:0b:57:99:28:8a:f1:45:8c:1e:06:8e:19:4a:c1:e8:87:
52:d2:a2:2a:d7:81:4f:75:64:42:cd:55:c7:9e:32:87:3a:22:
e0:1c:64:13:7a:3d:5b:48:43:06:52:6a:99:ad:ce:af:44:32:
9a:e0:03:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGRFZmHLtSj9DdZG6suNtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMDg1YjYyNDhiZDcyMDc2YWI0MjFmZmEwZTNiZmVmOTM1
NjVlOWQwHhcNMjUxMTA0MDkwMDU2WhcNMjUxMTA1MDkwMDU2WjAzMTEwLwYDVQQD
EyhhNDIwMDljODc4NDgwMTIzNWJlMWRhYmE4MTVkYmM1NjdkZmQ0OWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpJ1kekmoAxniUfxaHstopl4FDcO
cLDh0Mxi7aebKl3JgANLztn4upPdhbaDDWURz+VWyrV5MogiwMOWUOWp8SXigrpk
7m9p9cXkLdJGAcoHeeh/E1LAy4Gpr+3nFSUd/7y1zLd2ZdCI+Qck0QWBMLIt24vr
LumCZ/En7H3v0zPaVrrNB8ZQPcmtdw11rL6e+d7rV5ttHML16eXxleaESeoMrYch
6xASem5BlTxJcUCKpJQA7anWrxfzTHwsZVaZ19Dnz29jGWmoeFPJxon8XUTK9PIy
OwALG6pVENJjMOWvWeZqN6qrGgurKG/W69sMxsvxfiLfF1aK/shLQ3+brwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKQgCch4SAEjW+HauoFdvFZ9/Un0MB8GA1UdIwQY
MBaAFOEIW2JIvXIHarQh/6Djv++TVl6dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFFoYllraTljZ2RxdENIX29PT183NU5XWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy82ZDlhYjUtZDFhZS00NDlkLWE3ZTkt
MWY1Zjk0Y2UzNWVlLzEvNFFoYllraTljZ2RxdENIX29PT183NU5XWHAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy82ZDlhYjUtZDFhZS00NDlkLWE3ZTktMWY1Zjk0Y2UzNWVl
LzEvNFFoYllraTljZ2RxdENIX29PT183NU5XWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE7G55sf9
AqCQ5/za4MD2QzRxXjaRQ9u8IF4Tezaak9g9NFdFRhNIGj/RfwtwL7chys+Vx+ho
EMiKIkhzn8i6ReN3lsmRhmtT3HPVSfWk9n9+3ke9R2fXv4RvVSpd8g9/TKINxhpM
dKSrwSun3j7kDPyC8eWl3+DFouYxWc8h4GdiK8unBHB2BJ8I3J1aoU5fZUzg8zps
u6v5JJ5bHrhpFRUMZy48RvxuGXoUWy3ihl9fUqpIltngsFWXNmPjmJeFjwvxFHjU
19oLV5koivFFjB4GjhlKweiHUtKiKteBT3VkQs1Vx54yhzoi4BxkE3o9W0hDBlJq
ma3Or0QymuADfA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:08:05 2025 by rpki-client