Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft
File: 4I6QfA_lCJGna9mbKQhwCmrGLjg.mft (raw, json)
Hash identifier: cjVzzPEJLENjjwXKjGksqALiyliPSepJVaGUpvDtyzQ=
Subject key identifier: 6E:9C:C1:D7:E7:A9:28:54:CB:16:FB:6A:73:37:8C:20:CC:FB:38:A7
Authority key identifier: E0:8E:90:7C:0F:E5:08:91:A7:6B:D9:9B:29:08:70:0A:6A:C6:2E:38
Certificate issuer: /CN=e08e907c0fe50891a76bd99b2908700a6ac62e38
Certificate serial: 019A4EF511BB69D971CED78E49E3391501F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4I6QfA_lCJGna9mbKQhwCmrGLjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 13:01:14 +0000
Manifest this update: Tue 04 Nov 2025 13:01:14 +0000
Manifest next update: Wed 05 Nov 2025 13:01:14 +0000
Files and hashes: 1: 4I6QfA_lCJGna9mbKQhwCmrGLjg.crl (hash: XlLWObrvBnYagtXYJvtgxrQX3jk9PylMHhS1k4+wr6w=)
2: STK2SAlRO7jYy3vcEqTR9ikjblA.roa (hash: k6oW+GQsDjU/vILzjfv+z+LTQhLzDJ0y7rBRC2wvlVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4I6QfA_lCJGna9mbKQhwCmrGLjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:11:bb:69:d9:71:ce:d7:8e:49:e3:39:15:01:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e08e907c0fe50891a76bd99b2908700a6ac62e38
Validity
Not Before: Nov 4 13:01:14 2025 GMT
Not After : Nov 5 13:01:14 2025 GMT
Subject: CN=6e9cc1d7e7a92854cb16fb6a73378c20ccfb38a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b4:de:d3:1e:98:ce:25:f7:5b:3a:fe:61:c4:
04:78:4c:13:b6:19:a1:ad:c4:94:1e:b9:d9:8e:0c:
ba:ef:01:8e:92:3d:87:36:2d:af:d3:47:fa:46:d1:
07:d8:f8:bf:1d:03:41:6c:38:02:0b:5e:da:96:de:
e9:4e:ec:bf:72:72:48:38:19:73:22:ab:7f:87:19:
ea:84:3e:b8:f4:f7:77:88:28:22:4d:14:14:94:26:
1f:c8:ef:13:bd:34:c4:9b:18:ff:76:28:8a:b6:53:
bd:28:9d:08:dd:d6:b5:11:43:20:ee:8d:fb:e9:1b:
d0:f6:9a:61:e1:4a:b7:5c:d1:a6:ad:51:ed:43:e7:
b4:a6:a1:df:be:aa:a6:45:0b:2f:d0:9d:81:6f:34:
98:18:c2:f2:43:0c:83:ec:80:0a:b4:e8:97:15:d6:
cb:f4:d7:e5:0a:4c:67:42:2e:ab:36:2e:40:31:04:
8e:62:62:08:c7:8d:84:fe:87:ab:ed:46:0a:7b:f7:
d4:67:a0:7e:69:b4:87:38:39:32:01:d9:40:61:32:
8e:cd:38:aa:61:5c:45:5a:b5:41:ca:d7:4f:da:36:
71:cd:2b:68:c2:4c:0d:e3:c1:29:48:1d:84:67:d7:
aa:6d:6a:f7:ab:22:ef:ff:5f:ea:e0:53:e9:6b:40:
3f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:9C:C1:D7:E7:A9:28:54:CB:16:FB:6A:73:37:8C:20:CC:FB:38:A7
X509v3 Authority Key Identifier:
keyid:E0:8E:90:7C:0F:E5:08:91:A7:6B:D9:9B:29:08:70:0A:6A:C6:2E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4I6QfA_lCJGna9mbKQhwCmrGLjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:a1:8a:4f:69:3b:34:fd:3d:37:cd:d4:4d:0a:7e:22:49:f8:
08:28:b4:d7:3b:4e:4e:87:d6:c7:d6:9a:ab:6c:67:38:0c:ea:
3c:02:be:6c:ef:55:be:9b:dd:be:8b:1f:d7:96:64:cf:1d:c4:
62:c3:fa:03:b1:2c:4a:79:db:bf:0b:32:d9:8f:06:44:d4:40:
ac:f5:68:02:e9:a0:22:2f:a1:7b:41:3b:f6:98:43:c5:67:be:
db:79:02:30:ba:c5:03:94:b9:35:08:79:d1:b6:db:c4:89:e4:
71:a3:ec:6d:e6:80:65:45:33:f6:3e:22:ec:03:e0:fc:17:66:
17:f4:f6:aa:96:17:dd:5b:2a:7e:3e:83:9b:69:46:54:89:88:
b4:9e:75:74:c5:04:87:49:a5:e9:b9:17:09:b1:07:2f:4b:80:
68:da:32:ee:8a:79:d9:67:64:8a:fc:5d:f1:60:cb:26:e9:ab:
33:ca:b5:b4:01:90:41:07:c2:db:23:fc:d6:ae:6e:1c:89:52:
85:e2:3b:2f:03:41:e4:7a:33:c5:e7:e3:d0:7d:a0:4b:ee:1e:
0e:e8:20:6b:7b:aa:92:52:85:37:56:73:a9:97:f3:b3:12:73:
34:ec:db:eb:ca:96:c1:a4:18:1f:c6:f0:9b:ca:42:c0:56:4c:
8d:69:6e:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9RG7adlxzteOSeM5FQHzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwOGU5MDdjMGZlNTA4OTFhNzZiZDk5YjI5MDg3MDBhNmFj
NjJlMzgwHhcNMjUxMTA0MTMwMTE0WhcNMjUxMTA1MTMwMTE0WjAzMTEwLwYDVQQD
Eyg2ZTljYzFkN2U3YTkyODU0Y2IxNmZiNmE3MzM3OGMyMGNjZmIzOGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7Te0x6YziX3Wzr+YcQEeEwTthmh
rcSUHrnZjgy67wGOkj2HNi2v00f6RtEH2Pi/HQNBbDgCC17alt7pTuy/cnJIOBlz
Iqt/hxnqhD649Pd3iCgiTRQUlCYfyO8TvTTEmxj/diiKtlO9KJ0I3da1EUMg7o37
6RvQ9pph4Uq3XNGmrVHtQ+e0pqHfvqqmRQsv0J2BbzSYGMLyQwyD7IAKtOiXFdbL
9NflCkxnQi6rNi5AMQSOYmIIx42E/oer7UYKe/fUZ6B+abSHODkyAdlAYTKOzTiq
YVxFWrVBytdP2jZxzStowkwN48EpSB2EZ9eqbWr3qyLv/1/q4FPpa0A/owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG6cwdfnqShUyxb7anM3jCDM+zinMB8GA1UdIwQY
MBaAFOCOkHwP5QiRp2vZmykIcApqxi44MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEk2UWZBX2xDSkduYTltYktRaHdDbXJHTGpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9jMjhlMjctZDA1Yi00NzhhLTliMGIt
ZGI5Nzg5MmE1MWZkLzEvNEk2UWZBX2xDSkduYTltYktRaHdDbXJHTGpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9jMjhlMjctZDA1Yi00NzhhLTliMGItZGI5Nzg5MmE1MWZk
LzEvNEk2UWZBX2xDSkduYTltYktRaHdDbXJHTGpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsKGKT2k7
NP09N83UTQp+Ikn4CCi01ztOTofWx9aaq2xnOAzqPAK+bO9Vvpvdvosf15Zkzx3E
YsP6A7EsSnnbvwsy2Y8GRNRArPVoAumgIi+he0E79phDxWe+23kCMLrFA5S5NQh5
0bbbxInkcaPsbeaAZUUz9j4i7APg/BdmF/T2qpYX3Vsqfj6Dm2lGVImItJ51dMUE
h0ml6bkXCbEHL0uAaNoy7op52Wdkivxd8WDLJumrM8q1tAGQQQfC2yP81q5uHIlS
heI7LwNB5Hozxefj0H2gS+4eDugga3uqklKFN1ZzqZfzsxJzNOzb68qWwaQYH8bw
m8pCwFZMjWlufg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:31:31 2025 by rpki-client