Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft
File: 4Sz8faj6dKFt04wXwgoBksuy0_4.mft (raw, json)
Hash identifier: +qT5oX5UTKCug51OxP7PcoAiQ8ZDVCmA71qVsldOyfo=
Subject key identifier: 8B:B9:14:14:33:8E:EB:5D:34:74:F3:B1:58:4A:DF:83:2C:6A:A1:17
Authority key identifier: E1:2C:FC:7D:A8:FA:74:A1:6D:D3:8C:17:C2:0A:01:92:CB:B2:D3:FE
Certificate issuer: /CN=e12cfc7da8fa74a16dd38c17c20a0192cbb2d3fe
Certificate serial: 019A4F98FE81CC0DF9AC90C7C63C5D1B0154
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Sz8faj6dKFt04wXwgoBksuy0_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft
Manifest number: 0DDD
Signing time: Tue 04 Nov 2025 16:00:17 +0000
Manifest this update: Tue 04 Nov 2025 16:00:17 +0000
Manifest next update: Wed 05 Nov 2025 16:00:17 +0000
Files and hashes: 1: 4Sz8faj6dKFt04wXwgoBksuy0_4.crl (hash: 1k1pl7IpqO13X9wtYzu2bM962mxrb2tVyB5Tqucs4cI=)
2: CzgWRo2OrtBEMKgJ83rtq5Y3g98.roa (hash: 2xTrIXSTjNXzltKj7q0eYjRCvrpmaN3vPbRoQNYjpK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Sz8faj6dKFt04wXwgoBksuy0_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:fe:81:cc:0d:f9:ac:90:c7:c6:3c:5d:1b:01:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e12cfc7da8fa74a16dd38c17c20a0192cbb2d3fe
Validity
Not Before: Nov 4 16:00:17 2025 GMT
Not After : Nov 5 16:00:17 2025 GMT
Subject: CN=8bb91414338eeb5d3474f3b1584adf832c6aa117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:24:53:6c:74:91:a9:04:38:b9:f9:a0:19:ec:
20:17:c9:a3:a9:59:c8:84:5a:56:54:9d:73:22:e9:
99:57:63:7f:b2:a7:c3:70:c7:94:c5:2e:e9:88:ec:
99:e0:bd:50:f0:a3:2e:e2:ed:58:4e:28:9c:f2:52:
df:90:c4:7c:39:2e:54:b2:19:61:48:cf:e7:6b:f2:
7e:74:d8:3d:6a:5a:3a:d7:61:e5:ea:2d:e5:ca:de:
ae:44:78:5d:e2:48:3f:c1:1d:61:96:53:71:fc:10:
a1:dc:a3:10:a3:09:5a:be:1b:59:d3:0d:60:8c:29:
c6:4a:82:5a:49:b6:7d:0a:0e:78:4a:08:84:25:d8:
dc:0e:eb:68:76:0f:91:b4:e3:ef:2b:4c:fb:86:7b:
89:d4:09:fa:0e:29:d8:74:c3:a8:a8:f6:f6:72:fe:
25:7b:5a:be:b2:da:38:12:78:db:9a:ea:19:3d:e7:
26:48:46:fe:9e:7d:83:b0:a5:3d:9b:5b:08:d5:44:
07:d5:d6:db:74:62:f1:66:8f:35:f7:49:e4:a9:6e:
15:e5:9b:4a:8e:14:a4:a6:8e:3f:38:32:13:76:c0:
b0:01:62:f5:6d:80:ac:9e:d6:dc:df:ad:3b:43:be:
5c:a4:e8:ee:e4:20:b1:95:57:96:6f:1b:9b:10:3f:
80:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:B9:14:14:33:8E:EB:5D:34:74:F3:B1:58:4A:DF:83:2C:6A:A1:17
X509v3 Authority Key Identifier:
keyid:E1:2C:FC:7D:A8:FA:74:A1:6D:D3:8C:17:C2:0A:01:92:CB:B2:D3:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Sz8faj6dKFt04wXwgoBksuy0_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:96:c6:a1:7f:28:62:7b:78:18:28:fa:7a:83:6b:79:f5:72:
40:9c:3e:86:3a:00:2e:45:b2:bb:9d:6e:a3:78:2a:f6:69:90:
fb:8e:2f:df:02:71:d0:33:dc:97:29:45:ef:47:83:5b:e7:98:
13:47:a2:b1:2b:80:a3:0d:64:d7:b9:a9:28:52:a4:43:61:b0:
88:68:02:1e:15:ad:aa:90:97:16:7e:af:a6:3e:03:a3:1a:eb:
c3:52:35:1b:a1:1b:b9:96:df:dd:79:63:59:70:c9:df:76:03:
a7:ab:af:4d:15:ee:dc:02:2f:96:6d:ec:2a:f4:43:8b:f3:6a:
0f:75:02:d5:fe:05:90:0b:e0:da:f3:6c:26:a4:a0:48:cd:90:
79:a3:98:50:b9:7d:6c:59:df:57:40:89:87:57:6c:9b:7c:9b:
8e:55:00:d7:38:f5:03:2c:86:c2:66:98:04:53:ed:aa:79:df:
d9:44:c1:94:cb:55:40:eb:79:f3:ed:59:5a:5a:45:7b:3a:31:
ba:26:92:cd:0f:6e:06:91:2a:18:c9:d2:69:dc:ec:8d:80:ff:
c2:59:0a:7b:b2:2a:f2:11:fa:90:e2:17:d6:09:04:29:0d:b9:
72:20:87:95:d1:d5:2f:8b:7f:c4:72:9f:f2:27:9e:05:35:a4:
b1:4e:15:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmP6BzA35rJDHxjxdGwFUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMmNmYzdkYThmYTc0YTE2ZGQzOGMxN2MyMGEwMTkyY2Ji
MmQzZmUwHhcNMjUxMTA0MTYwMDE3WhcNMjUxMTA1MTYwMDE3WjAzMTEwLwYDVQQD
Eyg4YmI5MTQxNDMzOGVlYjVkMzQ3NGYzYjE1ODRhZGY4MzJjNmFhMTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSRTbHSRqQQ4ufmgGewgF8mjqVnI
hFpWVJ1zIumZV2N/sqfDcMeUxS7piOyZ4L1Q8KMu4u1YTiic8lLfkMR8OS5Ushlh
SM/na/J+dNg9alo612Hl6i3lyt6uRHhd4kg/wR1hllNx/BCh3KMQowlavhtZ0w1g
jCnGSoJaSbZ9Cg54SgiEJdjcDutodg+RtOPvK0z7hnuJ1An6DinYdMOoqPb2cv4l
e1q+sto4EnjbmuoZPecmSEb+nn2DsKU9m1sI1UQH1dbbdGLxZo8190nkqW4V5ZtK
jhSkpo4/ODITdsCwAWL1bYCsntbc3607Q75cpOju5CCxlVeWbxubED+ALwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIu5FBQzjutdNHTzsVhK34MsaqEXMB8GA1UdIwQY
MBaAFOEs/H2o+nShbdOMF8IKAZLLstP+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFN6OGZhajZkS0Z0MDR3WHdnb0Jrc3V5MF80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9hNmFlZmYtOWI5YS00YzE4LTk0NzQt
MjI3MmI0ZGJhYTYyLzEvNFN6OGZhajZkS0Z0MDR3WHdnb0Jrc3V5MF80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC9hNmFlZmYtOWI5YS00YzE4LTk0NzQtMjI3MmI0ZGJhYTYy
LzEvNFN6OGZhajZkS0Z0MDR3WHdnb0Jrc3V5MF80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA5bGoX8o
Ynt4GCj6eoNrefVyQJw+hjoALkWyu51uo3gq9mmQ+44v3wJx0DPclylF70eDW+eY
E0eisSuAow1k17mpKFKkQ2GwiGgCHhWtqpCXFn6vpj4Doxrrw1I1G6EbuZbf3Xlj
WXDJ33YDp6uvTRXu3AIvlm3sKvRDi/NqD3UC1f4FkAvg2vNsJqSgSM2QeaOYULl9
bFnfV0CJh1dsm3ybjlUA1zj1AyyGwmaYBFPtqnnf2UTBlMtVQOt58+1ZWlpFezox
uiaSzQ9uBpEqGMnSadzsjYD/wlkKe7Iq8hH6kOIX1gkEKQ25ciCHldHVL4t/xHKf
8ieeBTWksU4Vww==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:36 2025 by rpki-client