Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft
File: f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft (raw, json)
Hash identifier: yw5mLqOUjf+uNrdGccKLaDJWzBQ2zEFRM0cE408+uYc=
Subject key identifier: 32:C8:3B:2C:63:1C:ED:F8:84:22:F1:95:FE:5B:1F:A2:E8:84:57:19
Authority key identifier: 7F:85:E9:90:35:43:97:E3:6C:0C:A9:03:A0:C6:20:C7:70:9E:FD:CD
Certificate issuer: /CN=7f85e990354397e36c0ca903a0c620c7709efdcd
Certificate serial: 019A4D7383BB27D50D10EDEC0B023C71308F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft
Manifest number: 033A
Signing time: Tue 04 Nov 2025 06:00:06 +0000
Manifest this update: Tue 04 Nov 2025 06:00:06 +0000
Manifest next update: Wed 05 Nov 2025 06:00:06 +0000
Files and hashes: 1: XIAriGwKiXIV89XyokuVSU6ok94.roa (hash: hF3zC1oiW03gwgTs9lo/n7vUmEiv8dfR/NI1cnnwuzk=)
2: f4XpkDVDl-NsDKkDoMYgx3Ce_c0.crl (hash: 93DsJapML+KFCbNPqlwdcsTiX3s6RY/P8YwNbH1WJTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft
rsync://rpki.ripe.net/repository/DEFAULT/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:83:bb:27:d5:0d:10:ed:ec:0b:02:3c:71:30:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f85e990354397e36c0ca903a0c620c7709efdcd
Validity
Not Before: Nov 4 06:00:06 2025 GMT
Not After : Nov 5 06:00:06 2025 GMT
Subject: CN=32c83b2c631cedf88422f195fe5b1fa2e8845719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6f:99:89:94:46:3e:cb:c7:33:58:7b:98:2e:
4d:73:c1:41:42:49:a2:ef:f6:f6:17:72:bb:cd:72:
40:a7:34:05:1f:d1:49:e7:4d:c8:22:7e:8f:1c:15:
d9:08:3c:0c:e5:f3:68:b1:bb:46:ff:e1:d7:0a:f0:
ca:9a:81:4f:1c:a8:3f:53:ba:bb:31:80:32:9c:d1:
f2:e6:cf:40:7d:c4:5c:0e:cd:9d:de:63:3a:a7:47:
fa:a8:67:ec:a9:50:25:ce:96:35:93:a1:2e:24:60:
9a:5f:39:9a:4f:51:aa:d3:2c:be:56:a1:80:21:da:
5a:52:6b:5a:b3:72:8b:5a:71:98:e0:db:93:31:ab:
78:7d:b8:82:6d:a6:17:e0:07:43:fd:57:1b:05:61:
f0:9b:72:1c:87:ee:f3:03:6c:e7:6c:71:08:6c:23:
ff:32:35:55:9e:18:6f:c0:f7:9c:27:5e:44:89:61:
fe:77:32:28:51:7c:96:b7:03:19:d1:dc:33:52:55:
21:15:a9:01:1a:7b:33:fd:81:49:ef:b6:17:13:e1:
b2:25:85:99:0f:e8:54:39:2d:6c:7c:94:a0:54:f4:
5d:3a:81:17:43:f0:9d:45:f1:3c:ff:d6:c0:cf:ba:
b4:d3:2a:bc:2b:d3:52:d0:d3:1e:90:0f:7c:1f:05:
75:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C8:3B:2C:63:1C:ED:F8:84:22:F1:95:FE:5B:1F:A2:E8:84:57:19
X509v3 Authority Key Identifier:
keyid:7F:85:E9:90:35:43:97:E3:6C:0C:A9:03:A0:C6:20:C7:70:9E:FD:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:6e:58:51:79:3e:b2:ae:ad:31:79:46:6f:2e:b5:cf:9c:df:
91:6a:87:32:b7:e0:d0:49:61:1a:e0:21:3d:11:72:c1:c9:89:
8b:c2:8d:35:cc:1e:dc:1a:a3:4a:df:46:37:56:fd:c0:a2:b9:
58:2c:3d:42:64:23:14:6f:29:d9:a2:5e:9a:04:63:d1:a0:ed:
e3:51:65:84:d9:50:49:87:b7:f9:8e:ce:f5:5f:fc:af:00:de:
8c:fd:ae:93:4c:09:14:77:a9:f5:18:85:3b:ba:0b:d2:65:2d:
b5:4b:c1:49:18:5b:e5:e3:a5:1a:3e:74:a6:37:ee:d9:c2:5a:
c1:cd:88:5a:29:81:95:84:e9:56:05:42:4c:d7:8d:74:f7:e2:
67:8b:09:42:12:5c:d6:14:63:92:7b:4a:5d:65:4c:f8:79:1d:
d9:86:2a:e1:3d:ff:f8:ae:c3:24:ec:eb:3d:83:08:e9:96:51:
f4:e7:fe:d7:5d:b3:26:bf:8e:de:f4:d4:bc:f9:00:1a:c0:34:
7f:91:4e:2e:e4:df:12:4f:ea:e0:23:cd:85:00:24:4f:fc:6a:
5a:a4:2c:28:4b:2f:7b:6c:3b:87:c3:2a:61:c8:ef:85:41:b7:
cf:fc:da:6f:6f:df:c0:23:63:8b:33:25:06:37:23:6d:45:6a:
07:f9:1d:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNc4O7J9UNEO3sCwI8cTCPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmODVlOTkwMzU0Mzk3ZTM2YzBjYTkwM2EwYzYyMGM3NzA5
ZWZkY2QwHhcNMjUxMTA0MDYwMDA2WhcNMjUxMTA1MDYwMDA2WjAzMTEwLwYDVQQD
EygzMmM4M2IyYzYzMWNlZGY4ODQyMmYxOTVmZTViMWZhMmU4ODQ1NzE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzm+ZiZRGPsvHM1h7mC5Nc8FBQkmi
7/b2F3K7zXJApzQFH9FJ503IIn6PHBXZCDwM5fNosbtG/+HXCvDKmoFPHKg/U7q7
MYAynNHy5s9AfcRcDs2d3mM6p0f6qGfsqVAlzpY1k6EuJGCaXzmaT1Gq0yy+VqGA
IdpaUmtas3KLWnGY4NuTMat4fbiCbaYX4AdD/VcbBWHwm3Ich+7zA2znbHEIbCP/
MjVVnhhvwPecJ15EiWH+dzIoUXyWtwMZ0dwzUlUhFakBGnsz/YFJ77YXE+GyJYWZ
D+hUOS1sfJSgVPRdOoEXQ/CdRfE8/9bAz7q00yq8K9NS0NMekA98HwV1cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDLIOyxjHO34hCLxlf5bH6LohFcZMB8GA1UdIwQY
MBaAFH+F6ZA1Q5fjbAypA6DGIMdwnv3NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjRYcGtEVkRsLU5zREtrRG9NWWd4M0NlX2MwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS80YWUxNzUtNTVkMC00ODRkLThkMTEt
OGM5ZDU4MjNiYWQ5LzEvZjRYcGtEVkRsLU5zREtrRG9NWWd4M0NlX2MwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS80YWUxNzUtNTVkMC00ODRkLThkMTEtOGM5ZDU4MjNiYWQ5
LzEvZjRYcGtEVkRsLU5zREtrRG9NWWd4M0NlX2MwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArG5YUXk+
sq6tMXlGby61z5zfkWqHMrfg0ElhGuAhPRFywcmJi8KNNcwe3BqjSt9GN1b9wKK5
WCw9QmQjFG8p2aJemgRj0aDt41FlhNlQSYe3+Y7O9V/8rwDejP2uk0wJFHep9RiF
O7oL0mUttUvBSRhb5eOlGj50pjfu2cJawc2IWimBlYTpVgVCTNeNdPfiZ4sJQhJc
1hRjkntKXWVM+Hkd2YYq4T3/+K7DJOzrPYMI6ZZR9Of+112zJr+O3vTUvPkAGsA0
f5FOLuTfEk/q4CPNhQAkT/xqWqQsKEsve2w7h8MqYcjvhUG3z/zab2/fwCNjizMl
BjcjbUVqB/kdQw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:13 2025 by rpki-client