Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.mft
File: 4SOGDiDNss_fLO-zdToVuCKCkmY.mft (raw, json)
Hash identifier: PXCHHaTvGJFnt7k6iu0VyWVU5Si8PK02VyA7nOWSTXw=
Subject key identifier: 52:E0:67:E9:69:36:2A:22:02:FC:87:8F:54:92:5F:8D:41:33:26:EA
Authority key identifier: E1:23:86:0E:20:CD:B2:CF:DF:2C:EF:B3:75:3A:15:B8:22:82:92:66
Certificate issuer: /CN=e123860e20cdb2cfdf2cefb3753a15b822829266
Certificate serial: 019A4DE18AFC3A09D71CAD38B7B9212977A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4SOGDiDNss_fLO-zdToVuCKCkmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.mft
Manifest number: 171E
Signing time: Tue 04 Nov 2025 08:00:18 +0000
Manifest this update: Tue 04 Nov 2025 08:00:18 +0000
Manifest next update: Wed 05 Nov 2025 08:00:18 +0000
Files and hashes: 1: 4SOGDiDNss_fLO-zdToVuCKCkmY.crl (hash: vECuWakuWyHHWYkfImyX/1Q7p4BTn4zKZvbWjm12A+g=)
2: C_WwagoxlETCmC3xgCtnJTSTiFU.roa (hash: DG+d+a6FZH6p2em3ravozO37hhn38lEfqxBjBjLqEHk=)
3: egQwRHU5AE-klzoLV3_Sw_tkXYo.roa (hash: Nr/ciMVzEFBT/2eRIx3/XPFBkeS8bONzVMg9DvriCrs=)
4: p0iloktOu4HrQp8Fbazd0VMW18A.roa (hash: WuG4K1BU3enI1jODi4UBhPWn6TyCLQBuQYRFhQ0mg6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4SOGDiDNss_fLO-zdToVuCKCkmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:8a:fc:3a:09:d7:1c:ad:38:b7:b9:21:29:77:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e123860e20cdb2cfdf2cefb3753a15b822829266
Validity
Not Before: Nov 4 08:00:18 2025 GMT
Not After : Nov 5 08:00:18 2025 GMT
Subject: CN=52e067e969362a2202fc878f54925f8d413326ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:08:6f:f7:01:2c:34:c8:51:9e:ca:4e:f6:81:
4d:15:2e:c9:1f:59:78:ed:a9:0c:ff:d6:5c:90:49:
7c:0f:0c:1b:81:21:86:54:d6:5a:83:cc:8a:a6:73:
91:5b:1a:4b:2e:9d:22:32:e7:14:b5:b1:d0:ac:1e:
d8:94:66:c3:03:50:b5:56:38:29:d3:13:fc:6f:da:
95:79:11:78:3f:88:45:fc:21:85:03:44:dd:4d:f6:
58:7f:da:f9:9a:c0:2c:27:69:e1:b8:66:52:d1:1a:
55:76:67:c1:32:74:5f:8f:e0:d6:f9:5a:c7:3c:25:
9f:a3:db:62:38:45:1a:f3:b3:2f:1c:97:28:95:9b:
ce:70:22:ef:f1:89:3f:11:41:60:de:dc:86:66:d7:
3f:05:7b:94:99:ce:0f:94:af:88:a2:39:06:38:bd:
f4:27:c7:3e:27:7e:e5:70:d9:ac:a3:24:ab:7d:76:
97:c0:72:97:83:12:99:0c:bc:00:e2:85:c1:d5:28:
22:15:3d:6c:0d:3e:3e:d9:f6:f2:22:1d:ec:a0:03:
47:30:3d:16:15:76:a3:50:7a:b8:7d:dd:63:82:14:
c5:d5:96:02:18:44:31:65:6e:f5:67:87:c0:ce:b5:
3e:e4:59:df:84:d2:42:bc:2e:d4:27:ea:d9:03:23:
c8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:E0:67:E9:69:36:2A:22:02:FC:87:8F:54:92:5F:8D:41:33:26:EA
X509v3 Authority Key Identifier:
keyid:E1:23:86:0E:20:CD:B2:CF:DF:2C:EF:B3:75:3A:15:B8:22:82:92:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SOGDiDNss_fLO-zdToVuCKCkmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:a2:7a:1d:56:21:73:79:c2:23:74:f0:be:49:5c:39:21:c0:
35:ab:b0:02:6c:c4:0f:ae:ec:d6:61:58:33:eb:8d:1d:3f:37:
4a:51:70:c8:0b:96:e6:ce:d2:32:e9:17:93:17:8f:88:21:69:
eb:ae:9c:93:e8:d6:d5:b2:e7:e2:64:cb:df:1e:4e:f0:33:3e:
a6:de:ea:f4:8e:1d:d4:63:c6:0a:07:be:35:e7:63:f0:b9:cc:
5c:e2:75:34:4d:5e:5c:0a:56:29:85:e2:0d:f3:91:25:7f:a0:
b2:53:2b:95:60:f2:54:70:df:20:9d:6d:f6:c0:b9:86:1d:03:
98:a5:76:e0:9f:42:fb:ca:e0:04:45:85:86:f8:52:ef:de:24:
7d:59:2c:ee:bd:12:ff:9a:d0:27:1d:26:49:8c:76:a1:b2:54:
51:68:e1:f4:aa:c3:57:ca:a9:d0:71:82:15:b8:20:c7:04:c8:
40:05:e3:17:f5:5a:2e:60:bc:7c:b6:82:2e:36:a1:1a:5d:34:
7c:47:e6:a5:4f:0f:da:cf:73:b2:7a:89:08:c3:cf:0d:84:38:
28:e8:c6:42:a9:6f:cc:38:29:6c:39:87:eb:42:27:8d:bd:b0:
ef:ba:92:9c:ef:d5:d1:1b:69:39:52:8a:2e:ad:96:cb:90:66:
a7:7c:0f:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4Yr8OgnXHK04t7khKXejMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMjM4NjBlMjBjZGIyY2ZkZjJjZWZiMzc1M2ExNWI4MjI4
MjkyNjYwHhcNMjUxMTA0MDgwMDE4WhcNMjUxMTA1MDgwMDE4WjAzMTEwLwYDVQQD
Eyg1MmUwNjdlOTY5MzYyYTIyMDJmYzg3OGY1NDkyNWY4ZDQxMzMyNmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Qhv9wEsNMhRnspO9oFNFS7JH1l4
7akM/9ZckEl8DwwbgSGGVNZag8yKpnORWxpLLp0iMucUtbHQrB7YlGbDA1C1Vjgp
0xP8b9qVeRF4P4hF/CGFA0TdTfZYf9r5msAsJ2nhuGZS0RpVdmfBMnRfj+DW+VrH
PCWfo9tiOEUa87MvHJcolZvOcCLv8Yk/EUFg3tyGZtc/BXuUmc4PlK+IojkGOL30
J8c+J37lcNmsoySrfXaXwHKXgxKZDLwA4oXB1SgiFT1sDT4+2fbyIh3soANHMD0W
FXajUHq4fd1jghTF1ZYCGEQxZW71Z4fAzrU+5FnfhNJCvC7UJ+rZAyPIQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFLgZ+lpNioiAvyHj1SSX41BMybqMB8GA1UdIwQY
MBaAFOEjhg4gzbLP3yzvs3U6FbgigpJmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFNPR0RpRE5zc19mTE8temRUb1Z1Q0tDa21ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC84MTA1OTktNzMxYS00ODZhLWIyM2Yt
NDc1MzdlYjY0NGY1LzEvNFNPR0RpRE5zc19mTE8temRUb1Z1Q0tDa21ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC84MTA1OTktNzMxYS00ODZhLWIyM2YtNDc1MzdlYjY0NGY1
LzEvNFNPR0RpRE5zc19mTE8temRUb1Z1Q0tDa21ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS6J6HVYh
c3nCI3TwvklcOSHANauwAmzED67s1mFYM+uNHT83SlFwyAuW5s7SMukXkxePiCFp
666ck+jW1bLn4mTL3x5O8DM+pt7q9I4d1GPGCge+Nedj8LnMXOJ1NE1eXApWKYXi
DfORJX+gslMrlWDyVHDfIJ1t9sC5hh0DmKV24J9C+8rgBEWFhvhS794kfVks7r0S
/5rQJx0mSYx2obJUUWjh9KrDV8qp0HGCFbggxwTIQAXjF/VaLmC8fLaCLjahGl00
fEfmpU8P2s9zsnqJCMPPDYQ4KOjGQqlvzDgpbDmH60Injb2w77qSnO/V0RtpOVKK
Lq2Wy5Bmp3wPTw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:13 2025 by rpki-client