Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft
File: 4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft (raw, json)
Hash identifier: ay9junnOas/KDc9OLz5xqvDWa9+5wTMqRIz2x8qedDE=
Subject key identifier: AE:C7:C2:3F:5A:06:91:D1:46:7B:E3:7C:C6:87:F5:E9:10:7A:DC:E6
Authority key identifier: E0:D1:A8:36:6C:21:15:9F:07:94:78:A9:03:08:43:FB:F6:06:31:B9
Certificate issuer: /CN=e0d1a8366c21159f079478a9030843fbf60631b9
Certificate serial: 019A4EF49950B5F305EB4AE01BA348F43BC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4NGoNmwhFZ8HlHipAwhD-_YGMbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft
Manifest number: 169F
Signing time: Tue 04 Nov 2025 13:00:44 +0000
Manifest this update: Tue 04 Nov 2025 13:00:44 +0000
Manifest next update: Wed 05 Nov 2025 13:00:44 +0000
Files and hashes: 1: 4NGoNmwhFZ8HlHipAwhD-_YGMbk.crl (hash: b8cg1y0KmO2cvmtTohxRu+Fu3UQweujq0UPbbGNiY4M=)
2: X6zK_zIJEJ4ZvUFy-bZ0YYb3PXk.roa (hash: 73bfs58Aeh5k14l65MP0sPTsNd9XJmQVqU0en4/SkEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4NGoNmwhFZ8HlHipAwhD-_YGMbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:99:50:b5:f3:05:eb:4a:e0:1b:a3:48:f4:3b:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0d1a8366c21159f079478a9030843fbf60631b9
Validity
Not Before: Nov 4 13:00:44 2025 GMT
Not After : Nov 5 13:00:44 2025 GMT
Subject: CN=aec7c23f5a0691d1467be37cc687f5e9107adce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:08:d6:3c:06:8a:eb:da:52:39:6a:95:0f:15:
d1:54:4c:7c:20:aa:4e:c0:a6:71:4d:a0:d8:4a:f1:
3c:c4:8a:b8:10:69:bd:90:06:06:42:db:70:40:11:
fe:76:69:1b:3f:a3:75:b8:f2:7a:55:b5:d4:bb:da:
d0:bd:b5:85:fc:da:85:41:94:7e:24:e8:6c:b6:71:
5e:08:82:f0:3b:8e:2a:46:3a:93:d7:ef:7e:1d:99:
4f:a7:21:e9:1b:01:74:34:03:c7:d0:23:04:a9:07:
23:c5:57:36:fb:47:f3:2a:ad:25:b6:50:a9:5f:de:
44:fd:31:4d:5e:b7:35:f4:01:b7:02:38:da:24:89:
e9:7b:25:fb:d3:67:27:c4:7a:34:23:d9:39:31:65:
14:8b:3d:6e:df:29:7f:8a:42:02:62:c7:db:3b:75:
81:49:78:77:39:92:fd:e3:48:93:c0:d8:1a:df:90:
33:a3:bd:24:a2:61:3d:71:af:81:8d:01:db:0c:72:
5d:21:e1:e3:d8:67:71:95:fe:30:a6:cd:85:cd:e7:
3c:5c:74:55:7b:0a:f9:dd:0a:44:09:02:54:48:57:
75:cd:af:54:e3:ac:01:7e:76:0a:42:57:9f:39:b8:
89:5f:9a:ce:9b:5a:e4:6e:7f:40:36:93:96:55:cd:
17:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C7:C2:3F:5A:06:91:D1:46:7B:E3:7C:C6:87:F5:E9:10:7A:DC:E6
X509v3 Authority Key Identifier:
keyid:E0:D1:A8:36:6C:21:15:9F:07:94:78:A9:03:08:43:FB:F6:06:31:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NGoNmwhFZ8HlHipAwhD-_YGMbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:44:2c:c8:e7:52:18:08:fe:06:a0:4f:f3:37:31:14:93:ea:
5d:c8:d7:69:02:ac:22:56:d1:61:e4:09:7a:b4:c1:c1:51:7e:
9d:b0:f4:9a:72:f8:91:33:2e:df:97:5f:f2:16:83:0d:2d:9d:
1f:3b:14:49:47:88:0c:4c:cc:89:05:c2:95:ec:46:8a:d5:4c:
48:52:27:fc:a8:66:e4:a9:8c:3d:35:34:c8:c3:66:d5:97:3b:
1f:7a:ad:91:82:9b:83:c7:b0:ee:fe:d5:88:a8:bd:0f:fc:43:
6d:34:70:01:24:bd:c2:18:a6:1a:71:ad:f5:13:77:f9:62:cd:
f7:5b:f0:60:0b:52:14:c2:51:c6:30:0e:59:a1:18:0e:9f:15:
e0:8d:1a:81:10:a0:ff:da:7c:6d:e1:4a:59:51:86:16:06:29:
bd:ea:c5:a6:47:f5:05:a9:bc:fb:33:98:e6:7b:14:c8:76:4e:
41:27:0b:e9:52:3d:c0:8d:7a:7d:dd:89:ff:03:92:3f:f3:0c:
7e:de:1d:67:f7:5a:7b:f0:0e:0c:8b:a7:e0:a3:90:57:f2:ae:
3d:45:02:34:8c:d9:2c:90:88:e6:e5:6e:a5:5f:53:6e:9b:3a:
0f:4e:46:1e:59:d1:97:85:e6:12:2b:18:4c:60:e1:ab:f0:b9:
34:3b:ad:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9JlQtfMF60rgG6NI9DvJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwZDFhODM2NmMyMTE1OWYwNzk0NzhhOTAzMDg0M2ZiZjYw
NjMxYjkwHhcNMjUxMTA0MTMwMDQ0WhcNMjUxMTA1MTMwMDQ0WjAzMTEwLwYDVQQD
EyhhZWM3YzIzZjVhMDY5MWQxNDY3YmUzN2NjNjg3ZjVlOTEwN2FkY2U2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5wjWPAaK69pSOWqVDxXRVEx8IKpO
wKZxTaDYSvE8xIq4EGm9kAYGQttwQBH+dmkbP6N1uPJ6VbXUu9rQvbWF/NqFQZR+
JOhstnFeCILwO44qRjqT1+9+HZlPpyHpGwF0NAPH0CMEqQcjxVc2+0fzKq0ltlCp
X95E/TFNXrc19AG3AjjaJInpeyX702cnxHo0I9k5MWUUiz1u3yl/ikICYsfbO3WB
SXh3OZL940iTwNga35Azo70komE9ca+BjQHbDHJdIeHj2Gdxlf4wps2Fzec8XHRV
ewr53QpECQJUSFd1za9U46wBfnYKQlefObiJX5rOm1rkbn9ANpOWVc0XsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK7Hwj9aBpHRRnvjfMaH9ekQetzmMB8GA1UdIwQY
MBaAFODRqDZsIRWfB5R4qQMIQ/v2BjG5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNE5Hb05td2hGWjhIbEhpcEF3aEQtX1lHTWJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8yZGUzMjQtODZjNy00M2Q2LTlkZjIt
ZjhhZTBkYmM1ZGYyLzEvNE5Hb05td2hGWjhIbEhpcEF3aEQtX1lHTWJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS8yZGUzMjQtODZjNy00M2Q2LTlkZjItZjhhZTBkYmM1ZGYy
LzEvNE5Hb05td2hGWjhIbEhpcEF3aEQtX1lHTWJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASkQsyOdS
GAj+BqBP8zcxFJPqXcjXaQKsIlbRYeQJerTBwVF+nbD0mnL4kTMu35df8haDDS2d
HzsUSUeIDEzMiQXClexGitVMSFIn/Khm5KmMPTU0yMNm1Zc7H3qtkYKbg8ew7v7V
iKi9D/xDbTRwASS9whimGnGt9RN3+WLN91vwYAtSFMJRxjAOWaEYDp8V4I0agRCg
/9p8beFKWVGGFgYpverFpkf1Bam8+zOY5nsUyHZOQScL6VI9wI16fd2J/wOSP/MM
ft4dZ/dae/AODIun4KOQV/KuPUUCNIzZLJCI5uVupV9Tbps6D05GHlnRl4XmEisY
TGDhq/C5NDutGA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 23:30:01 2025 by rpki-client