Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft
File: RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft (raw, json)
Hash identifier: rfJOYX17y9bTLhuYq8eDJzmawxNsZhf6tHf5MgEB3kU=
Subject key identifier: 4E:F8:FB:82:4F:ED:09:DF:A9:A9:B6:3A:EF:12:08:F0:5F:9D:C1:BC
Authority key identifier: 46:03:C6:56:C1:97:46:1A:49:CA:A1:FF:D7:20:D1:8B:EE:AC:80:76
Certificate issuer: /CN=4603c656c197461a49caa1ffd720d18beeac8076
Certificate serial: 019A4E86480E58A2BE3BFB29883A7FB47E13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RgPGVsGXRhpJyqH_1yDRi-6sgHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft
Manifest number: 04D5
Signing time: Tue 04 Nov 2025 11:00:14 +0000
Manifest this update: Tue 04 Nov 2025 11:00:14 +0000
Manifest next update: Wed 05 Nov 2025 11:00:14 +0000
Files and hashes: 1: RgPGVsGXRhpJyqH_1yDRi-6sgHY.crl (hash: aHUIPXQEyS01R+whf4Gf3eq58sY5zOrlwYCh4uHqR0s=)
2: etkRbnW9ryrJ6e3ywwJ1q9bD7Xw.roa (hash: JMmWgxd8mijwpLVsPTeG3AKA8OAxDNzyK+lSzQE8/U0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RgPGVsGXRhpJyqH_1yDRi-6sgHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:48:0e:58:a2:be:3b:fb:29:88:3a:7f:b4:7e:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4603c656c197461a49caa1ffd720d18beeac8076
Validity
Not Before: Nov 4 11:00:14 2025 GMT
Not After : Nov 5 11:00:14 2025 GMT
Subject: CN=4ef8fb824fed09dfa9a9b63aef1208f05f9dc1bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:60:2e:c2:7c:25:b1:ac:b4:36:78:17:1f:89:
c7:63:1f:2d:9a:0d:fb:1a:bd:8d:72:6a:b9:13:1e:
4b:c0:55:c7:f3:81:2e:15:40:cd:58:3b:76:6d:94:
3e:69:77:e7:88:88:02:11:71:63:72:87:e8:34:70:
a4:75:f5:c7:ef:ef:1e:c1:7e:70:44:cf:5a:06:c6:
21:0c:b2:04:3a:f5:30:b0:d2:cf:8b:84:83:de:36:
c2:05:ab:c6:dd:7f:8d:17:35:9b:56:fe:6b:61:d6:
c4:38:27:1c:59:9c:4c:91:3b:2f:c2:ee:56:cb:ad:
e2:6f:57:27:59:63:d6:aa:25:8d:d6:61:8b:3f:c9:
b8:99:d4:00:f8:53:82:6a:88:81:e6:9a:99:a1:6d:
54:f3:dd:c8:56:8c:44:c0:86:d7:95:e4:df:fb:a0:
56:76:db:d3:64:0f:9a:64:57:1b:55:ef:9b:1a:1d:
a5:eb:0d:37:77:84:5f:b9:8b:d0:4f:aa:3a:7e:ad:
17:4c:77:ca:05:4d:ca:c4:70:de:4e:7c:8b:b3:43:
28:8b:ff:8b:a8:b1:17:ac:d1:3c:7f:3c:8b:0f:70:
10:6f:eb:53:07:e9:8d:53:ca:82:1e:c4:7c:03:95:
52:60:1d:b6:5e:30:ed:f4:37:ea:c2:09:39:95:95:
e6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F8:FB:82:4F:ED:09:DF:A9:A9:B6:3A:EF:12:08:F0:5F:9D:C1:BC
X509v3 Authority Key Identifier:
keyid:46:03:C6:56:C1:97:46:1A:49:CA:A1:FF:D7:20:D1:8B:EE:AC:80:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgPGVsGXRhpJyqH_1yDRi-6sgHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:1c:f7:2c:f5:1a:c8:d6:a8:9e:31:da:a9:90:d5:d9:72:65:
c2:7e:8d:e3:db:dd:14:21:d8:d6:90:b6:a9:53:dd:13:7a:ff:
41:93:b0:f0:cb:59:72:a9:d0:ec:1b:a4:27:49:de:7c:24:43:
85:69:b6:78:80:18:94:f8:10:dc:a8:45:5e:8b:bd:8c:01:5e:
e8:7d:ad:12:45:49:47:a0:1a:b8:03:67:40:0a:29:1b:73:64:
58:d5:cd:70:f1:6b:01:f9:05:77:c8:43:17:31:e6:09:6f:3b:
40:c2:5e:2c:55:b6:d4:69:12:34:35:82:15:1f:83:d7:f7:f3:
cb:7b:e9:83:29:30:33:0c:eb:30:42:2b:39:b0:f9:48:1a:b0:
8e:cd:9d:3b:77:2a:e6:b8:93:ff:c7:a6:78:76:03:58:ce:a9:
ea:e2:f0:e2:ce:83:07:bc:d0:d3:e4:25:14:0d:3d:91:3f:79:
ea:ea:46:6a:fe:b9:c3:d4:f5:53:54:78:b4:b5:58:85:6c:41:
67:c2:32:02:49:cc:79:8a:81:b9:d0:71:a0:8f:d6:c8:01:2d:
05:b8:ee:0d:14:b7:86:3c:29:d1:95:15:fa:e6:7a:7a:b8:c9:
0c:fb:6b:41:30:51:bd:f4:e8:67:9e:2f:fe:fa:14:0d:55:fa:
d7:58:f7:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOhkgOWKK+O/spiDp/tH4TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MDNjNjU2YzE5NzQ2MWE0OWNhYTFmZmQ3MjBkMThiZWVh
YzgwNzYwHhcNMjUxMTA0MTEwMDE0WhcNMjUxMTA1MTEwMDE0WjAzMTEwLwYDVQQD
Eyg0ZWY4ZmI4MjRmZWQwOWRmYTlhOWI2M2FlZjEyMDhmMDVmOWRjMWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWAuwnwlsay0NngXH4nHYx8tmg37
Gr2Ncmq5Ex5LwFXH84EuFUDNWDt2bZQ+aXfniIgCEXFjcofoNHCkdfXH7+8ewX5w
RM9aBsYhDLIEOvUwsNLPi4SD3jbCBavG3X+NFzWbVv5rYdbEOCccWZxMkTsvwu5W
y63ib1cnWWPWqiWN1mGLP8m4mdQA+FOCaoiB5pqZoW1U893IVoxEwIbXleTf+6BW
dtvTZA+aZFcbVe+bGh2l6w03d4RfuYvQT6o6fq0XTHfKBU3KxHDeTnyLs0Moi/+L
qLEXrNE8fzyLD3AQb+tTB+mNU8qCHsR8A5VSYB22XjDt9Dfqwgk5lZXmOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE74+4JP7Qnfqam2Ou8SCPBfncG8MB8GA1UdIwQY
MBaAFEYDxlbBl0YaScqh/9cg0YvurIB2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmdQR1ZzR1hSaHBKeXFIXzF5RFJpLTZzZ0hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy84MWFjNzEtMGYyYS00ODYxLTk1OWIt
YWZhNGZkMzUwNmQwLzEvUmdQR1ZzR1hSaHBKeXFIXzF5RFJpLTZzZ0hZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy84MWFjNzEtMGYyYS00ODYxLTk1OWItYWZhNGZkMzUwNmQw
LzEvUmdQR1ZzR1hSaHBKeXFIXzF5RFJpLTZzZ0hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArxz3LPUa
yNaonjHaqZDV2XJlwn6N49vdFCHY1pC2qVPdE3r/QZOw8MtZcqnQ7BukJ0nefCRD
hWm2eIAYlPgQ3KhFXou9jAFe6H2tEkVJR6AauANnQAopG3NkWNXNcPFrAfkFd8hD
FzHmCW87QMJeLFW21GkSNDWCFR+D1/fzy3vpgykwMwzrMEIrObD5SBqwjs2dO3cq
5riT/8emeHYDWM6p6uLw4s6DB7zQ0+QlFA09kT956upGav65w9T1U1R4tLVYhWxB
Z8IyAknMeYqBudBxoI/WyAEtBbjuDRS3hjwp0ZUV+uZ6erjJDPtrQTBRvfToZ54v
/voUDVX611j30w==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:02:23 2025 by rpki-client