Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/89542a-587d-4c27-a523-6a1b9c1c6924/1/R4nF3A3VRPwCt-Z-XxusRWqr_mE.mft
File: R4nF3A3VRPwCt-Z-XxusRWqr_mE.mft (raw, json)
Hash identifier: KJhWZYP+AgioN+dxwKxZhNuBqoIdLjuC++YLsfRJeyY=
Subject key identifier: 0A:4E:16:8A:CE:55:B9:45:67:1A:44:AD:0A:15:E6:0A:2E:2A:B6:82
Authority key identifier: 47:89:C5:DC:0D:D5:44:FC:02:B7:E6:7E:5F:1B:AC:45:6A:AB:FE:61
Certificate issuer: /CN=4789c5dc0dd544fc02b7e67e5f1bac456aabfe61
Certificate serial: 019A4F993EB768F079F0B546C70A48BF69BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R4nF3A3VRPwCt-Z-XxusRWqr_mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/89542a-587d-4c27-a523-6a1b9c1c6924/1/R4nF3A3VRPwCt-Z-XxusRWqr_mE.mft
Manifest number: 1714
Signing time: Tue 04 Nov 2025 16:00:34 +0000
Manifest this update: Tue 04 Nov 2025 16:00:34 +0000
Manifest next update: Wed 05 Nov 2025 16:00:34 +0000
Files and hashes: 1: L6iR0CMwTlXaB3-hN4yCOodUYRY.roa (hash: eWR/YwFC9Nkq/Z8RvdCdYOBK7oxzXqUpetNS4HVcl8U=)
2: R4nF3A3VRPwCt-Z-XxusRWqr_mE.crl (hash: l7xyPZlwnPINjbuZb4fx3G60FMNue6DG4JkhXt5h+DM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/89542a-587d-4c27-a523-6a1b9c1c6924/1/R4nF3A3VRPwCt-Z-XxusRWqr_mE.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/89542a-587d-4c27-a523-6a1b9c1c6924/1/R4nF3A3VRPwCt-Z-XxusRWqr_mE.mft
rsync://rpki.ripe.net/repository/DEFAULT/R4nF3A3VRPwCt-Z-XxusRWqr_mE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:3e:b7:68:f0:79:f0:b5:46:c7:0a:48:bf:69:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4789c5dc0dd544fc02b7e67e5f1bac456aabfe61
Validity
Not Before: Nov 4 16:00:34 2025 GMT
Not After : Nov 5 16:00:34 2025 GMT
Subject: CN=0a4e168ace55b945671a44ad0a15e60a2e2ab682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ca:e6:9a:81:7f:b2:63:63:0d:25:4e:1b:bc:
18:d1:29:97:38:99:c1:8e:be:34:86:b9:33:8a:18:
da:e3:ef:c9:e2:9c:51:ce:a4:4f:2e:ce:6c:1f:22:
31:8e:9f:43:f1:3d:0d:c1:95:25:ea:48:c0:8f:30:
a1:4f:37:d3:c5:61:27:74:79:fc:f0:65:6b:04:f1:
87:0f:bb:eb:a9:d0:c9:f7:d6:82:b4:a5:cb:3f:01:
56:9a:65:96:4e:91:21:97:8c:30:58:d8:37:f6:87:
47:6c:77:c6:24:1b:94:3d:f5:4c:23:81:94:bd:b6:
14:eb:7b:9b:9d:93:83:1d:23:55:24:4a:95:90:82:
54:04:c0:d2:06:fc:9b:97:84:06:6c:a9:bf:c8:55:
d7:3f:39:c8:a7:82:2c:6a:ac:d3:d8:d6:7a:9c:3f:
a2:86:e7:9c:e9:0e:76:df:03:24:0d:36:8b:6a:1d:
58:c9:8a:85:e2:1d:6e:93:00:d0:4f:5a:1c:9d:35:
0a:0e:35:32:18:04:ef:e3:57:e3:49:3c:1d:dd:46:
90:73:a1:63:c1:6f:b1:d7:31:4f:a1:5e:d7:4f:77:
be:86:a9:31:ca:86:94:4b:52:59:1b:ae:e7:68:5f:
8c:89:9b:2c:50:ca:12:f0:eb:69:a8:f3:a4:3c:36:
94:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:4E:16:8A:CE:55:B9:45:67:1A:44:AD:0A:15:E6:0A:2E:2A:B6:82
X509v3 Authority Key Identifier:
keyid:47:89:C5:DC:0D:D5:44:FC:02:B7:E6:7E:5F:1B:AC:45:6A:AB:FE:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R4nF3A3VRPwCt-Z-XxusRWqr_mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/89542a-587d-4c27-a523-6a1b9c1c6924/1/R4nF3A3VRPwCt-Z-XxusRWqr_mE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/89542a-587d-4c27-a523-6a1b9c1c6924/1/R4nF3A3VRPwCt-Z-XxusRWqr_mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:39:f4:08:f9:d5:f3:9e:02:de:83:3d:93:2b:73:74:bd:68:
2b:9c:da:92:df:9a:e4:de:0f:6e:bb:7d:7a:23:7c:75:3f:f1:
05:69:04:28:d0:eb:12:b9:ad:8a:69:5d:91:e8:a4:dd:6f:e9:
d6:7b:2b:9f:db:a8:80:3b:43:24:5a:a9:25:1d:04:0c:f3:65:
16:01:6e:74:f4:1a:31:a8:6e:3c:ab:f1:aa:ab:44:df:a7:cb:
0d:32:d3:33:ef:87:8b:cc:f8:6b:e4:5a:01:8f:dc:41:52:2b:
37:13:ce:50:08:a2:8f:34:c3:84:91:73:89:8d:71:16:72:5c:
10:1c:67:58:2c:f4:15:7f:b4:91:0e:d2:f1:59:f6:3a:2a:0f:
2e:49:6a:56:ec:5a:3c:d4:7d:52:f1:48:54:74:0f:12:5c:f3:
f9:06:06:5b:f6:ce:cc:0d:33:48:b8:c2:05:1d:e3:7b:dc:a3:
5c:e8:62:1b:50:cc:ca:14:3b:01:66:c7:1c:39:67:15:5a:cc:
68:15:d8:de:c0:72:28:4b:31:71:2e:74:55:62:e8:3b:40:10:
a7:93:94:02:2f:31:06:c8:df:59:23:56:b2:10:73:35:c0:87:
e9:30:79:cc:ef:0a:48:53:ed:cb:ba:70:98:4e:12:79:2f:be:
56:6c:69:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmT63aPB58LVGxwpIv2m6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3ODljNWRjMGRkNTQ0ZmMwMmI3ZTY3ZTVmMWJhYzQ1NmFh
YmZlNjEwHhcNMjUxMTA0MTYwMDM0WhcNMjUxMTA1MTYwMDM0WjAzMTEwLwYDVQQD
EygwYTRlMTY4YWNlNTViOTQ1NjcxYTQ0YWQwYTE1ZTYwYTJlMmFiNjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMrmmoF/smNjDSVOG7wY0SmXOJnB
jr40hrkzihja4+/J4pxRzqRPLs5sHyIxjp9D8T0NwZUl6kjAjzChTzfTxWEndHn8
8GVrBPGHD7vrqdDJ99aCtKXLPwFWmmWWTpEhl4wwWNg39odHbHfGJBuUPfVMI4GU
vbYU63ubnZODHSNVJEqVkIJUBMDSBvybl4QGbKm/yFXXPznIp4IsaqzT2NZ6nD+i
huec6Q523wMkDTaLah1YyYqF4h1ukwDQT1ocnTUKDjUyGATv41fjSTwd3UaQc6Fj
wW+x1zFPoV7XT3e+hqkxyoaUS1JZG67naF+MiZssUMoS8OtpqPOkPDaUDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFApOForOVblFZxpErQoV5gouKraCMB8GA1UdIwQY
MBaAFEeJxdwN1UT8Arfmfl8brEVqq/5hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjRuRjNBM1ZSUHdDdC1aLVh4dXNSV3FyX21FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS84OTU0MmEtNTg3ZC00YzI3LWE1MjMt
NmExYjljMWM2OTI0LzEvUjRuRjNBM1ZSUHdDdC1aLVh4dXNSV3FyX21FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS84OTU0MmEtNTg3ZC00YzI3LWE1MjMtNmExYjljMWM2OTI0
LzEvUjRuRjNBM1ZSUHdDdC1aLVh4dXNSV3FyX21FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArDn0CPnV
854C3oM9kytzdL1oK5zakt+a5N4Pbrt9eiN8dT/xBWkEKNDrErmtimldkeik3W/p
1nsrn9uogDtDJFqpJR0EDPNlFgFudPQaMahuPKvxqqtE36fLDTLTM++Hi8z4a+Ra
AY/cQVIrNxPOUAiijzTDhJFziY1xFnJcEBxnWCz0FX+0kQ7S8Vn2OioPLklqVuxa
PNR9UvFIVHQPElzz+QYGW/bOzA0zSLjCBR3je9yjXOhiG1DMyhQ7AWbHHDlnFVrM
aBXY3sByKEsxcS50VWLoO0AQp5OUAi8xBsjfWSNWshBzNcCH6TB5zO8KSFPty7pw
mE4SeS++VmxpTQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:44:31 2025 by rpki-client