Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft
File: 4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft (raw, json)
Hash identifier: y4DdIbxVOjUAdUSqcn2AOWOjQnOLXBKbP2ostulfn84=
Subject key identifier: 1C:72:5A:38:E1:B0:3D:F9:72:6F:B1:96:81:B7:EB:9C:0A:D2:62:1B
Authority key identifier: E1:9F:61:51:A3:47:C7:92:2A:C7:CF:46:99:25:34:43:30:D7:24:F7
Certificate issuer: /CN=e19f6151a347c7922ac7cf469925344330d724f7
Certificate serial: 019A4EF41C970427AFA9EC248E8B2C7DC702
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft
Manifest number: 143D
Signing time: Tue 04 Nov 2025 13:00:12 +0000
Manifest this update: Tue 04 Nov 2025 13:00:12 +0000
Manifest next update: Wed 05 Nov 2025 13:00:12 +0000
Files and hashes: 1: 4Z9hUaNHx5Iqx89GmSU0QzDXJPc.crl (hash: 7u8N51kDtOpjFy0x3DisqJtYZeswcBOq8bjzU5sBw+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:1c:97:04:27:af:a9:ec:24:8e:8b:2c:7d:c7:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e19f6151a347c7922ac7cf469925344330d724f7
Validity
Not Before: Nov 4 13:00:12 2025 GMT
Not After : Nov 5 13:00:12 2025 GMT
Subject: CN=1c725a38e1b03df9726fb19681b7eb9c0ad2621b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:46:45:4c:d0:81:dc:c6:10:71:d0:95:f8:24:
3e:e2:7c:4f:a2:ab:24:47:04:77:5f:45:73:a2:72:
4a:58:de:21:d5:9f:7b:01:5d:db:a5:37:ea:82:0e:
85:32:be:e3:d2:a7:65:e7:3d:bf:f8:63:9f:1f:19:
92:70:54:17:a5:dd:d6:43:6c:0f:c1:42:b4:3d:1f:
cf:30:da:28:0e:06:f4:74:b9:35:c7:8c:f0:1f:13:
4c:35:a5:95:c9:85:8b:f6:c6:fb:3a:43:0f:95:75:
38:da:50:7c:00:e7:43:b9:90:1a:83:1b:94:ae:b8:
8e:1c:14:87:73:9b:0d:1c:d1:0b:4c:99:c2:67:30:
97:14:83:84:49:3f:b0:cb:25:50:5d:ad:f3:12:db:
ac:d3:f9:83:dc:4c:44:ac:bd:68:6d:c7:73:0d:fb:
33:c1:3d:3b:21:2f:c4:0c:b1:d1:59:86:06:04:d2:
dd:84:e6:87:9f:04:83:9f:ea:e3:90:a8:58:48:86:
33:d3:76:12:8c:d9:23:8f:ff:94:14:ec:c6:d8:00:
b8:16:90:9c:f7:15:a0:fc:55:21:f5:34:06:68:79:
a9:9c:af:83:7f:55:16:3a:8e:e8:18:a4:0b:92:a0:
a5:04:a0:9d:00:9f:a2:f0:6e:bc:82:69:27:ce:df:
ff:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:72:5A:38:E1:B0:3D:F9:72:6F:B1:96:81:B7:EB:9C:0A:D2:62:1B
X509v3 Authority Key Identifier:
keyid:E1:9F:61:51:A3:47:C7:92:2A:C7:CF:46:99:25:34:43:30:D7:24:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:b3:2b:d8:af:e2:21:e2:f2:8d:04:cf:50:56:e9:c9:9d:c0:
59:01:7f:2b:57:0b:88:c0:73:fd:65:6d:d7:25:19:7e:c2:f6:
23:5e:4d:9c:55:02:fb:00:b8:20:79:39:91:46:77:c6:6b:6e:
8d:d3:bc:7f:c7:a4:fa:9e:43:a2:f0:76:60:8c:7d:84:81:23:
33:28:05:91:18:a2:8f:9a:9c:ea:15:75:42:11:d0:e5:4e:05:
b4:08:94:aa:20:22:9b:19:32:30:c4:75:1a:f8:37:3f:37:f6:
25:c1:ac:b7:25:87:d8:fe:21:ba:b3:50:94:60:2a:af:9a:5b:
46:6d:35:51:d5:df:6c:1d:a8:ad:7d:5d:fd:7b:6f:8d:e6:23:
07:63:ed:fd:b7:b8:b3:df:17:c2:28:e3:ca:f5:6a:e9:ff:bd:
84:05:a3:24:9f:92:38:31:6e:d6:c7:6c:ba:c5:4c:a3:90:0e:
e1:4a:98:76:e5:3d:7c:b1:c6:8f:7c:e1:d8:b5:92:90:e3:bf:
e8:8c:eb:36:e6:4e:e6:b7:50:ac:7f:de:d0:15:de:4d:e5:96:
cd:18:fc:d5:02:5c:83:33:52:5a:36:34:c2:28:e0:7e:7e:d9:
0a:20:45:72:79:93:6c:9c:cd:44:8e:81:27:66:b3:8b:8f:92:
9b:b0:2b:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9ByXBCevqewkjossfccCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxOWY2MTUxYTM0N2M3OTIyYWM3Y2Y0Njk5MjUzNDQzMzBk
NzI0ZjcwHhcNMjUxMTA0MTMwMDEyWhcNMjUxMTA1MTMwMDEyWjAzMTEwLwYDVQQD
EygxYzcyNWEzOGUxYjAzZGY5NzI2ZmIxOTY4MWI3ZWI5YzBhZDI2MjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EZFTNCB3MYQcdCV+CQ+4nxPoqsk
RwR3X0VzonJKWN4h1Z97AV3bpTfqgg6FMr7j0qdl5z2/+GOfHxmScFQXpd3WQ2wP
wUK0PR/PMNooDgb0dLk1x4zwHxNMNaWVyYWL9sb7OkMPlXU42lB8AOdDuZAagxuU
rriOHBSHc5sNHNELTJnCZzCXFIOEST+wyyVQXa3zEtus0/mD3ExErL1obcdzDfsz
wT07IS/EDLHRWYYGBNLdhOaHnwSDn+rjkKhYSIYz03YSjNkjj/+UFOzG2AC4FpCc
9xWg/FUh9TQGaHmpnK+Df1UWOo7oGKQLkqClBKCdAJ+i8G68gmknzt//xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBxyWjjhsD35cm+xloG365wK0mIbMB8GA1UdIwQY
MBaAFOGfYVGjR8eSKsfPRpklNEMw1yT3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFo5aFVhTkh4NUlxeDg5R21TVTBRekRYSlBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8xMTc5Y2UtMjVkOS00Zjk2LWIxMGYt
NDJkNDkzOWEwNTE5LzEvNFo5aFVhTkh4NUlxeDg5R21TVTBRekRYSlBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS8xMTc5Y2UtMjVkOS00Zjk2LWIxMGYtNDJkNDkzOWEwNTE5
LzEvNFo5aFVhTkh4NUlxeDg5R21TVTBRekRYSlBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkbMr2K/i
IeLyjQTPUFbpyZ3AWQF/K1cLiMBz/WVt1yUZfsL2I15NnFUC+wC4IHk5kUZ3xmtu
jdO8f8ek+p5DovB2YIx9hIEjMygFkRiij5qc6hV1QhHQ5U4FtAiUqiAimxkyMMR1
Gvg3Pzf2JcGstyWH2P4hurNQlGAqr5pbRm01UdXfbB2orX1d/XtvjeYjB2Pt/be4
s98XwijjyvVq6f+9hAWjJJ+SODFu1sdsusVMo5AO4UqYduU9fLHGj3zh2LWSkOO/
6IzrNuZO5rdQrH/e0BXeTeWWzRj81QJcgzNSWjY0wijgfn7ZCiBFcnmTbJzNRI6B
J2azi4+Sm7Ar7w==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:24 2025 by rpki-client