Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
File: 4iqTzrgrZ1qEsNeOea5KeXypgjE.mft (raw, json)
Hash identifier: 9QAGf1U+kooLKKRrHOT0Cl0iFq9HLMiChMvHWhJxXpk=
Subject key identifier: 71:FD:B2:44:6D:80:4F:98:3A:42:5A:1F:7C:14:B7:D2:77:EB:C7:B7
Authority key identifier: E2:2A:93:CE:B8:2B:67:5A:84:B0:D7:8E:79:AE:4A:79:7C:A9:82:31
Certificate issuer: /CN=e22a93ceb82b675a84b0d78e79ae4a797ca98231
Certificate serial: 019A4EF45B849E88D77D8DCC1222DE86AA73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
Manifest number: 12A4
Signing time: Tue 04 Nov 2025 13:00:28 +0000
Manifest this update: Tue 04 Nov 2025 13:00:28 +0000
Manifest next update: Wed 05 Nov 2025 13:00:28 +0000
Files and hashes: 1: 4iqTzrgrZ1qEsNeOea5KeXypgjE.crl (hash: NYRlCiRiEltfUekPldyNMh5NDTMu34HODR4dd7z6LOE=)
2: yB2qv2hArqh8Rg0DZ4yGfxQJ57I.roa (hash: b+3wO516colETH6Q8Hnf3dC3oM2heED/4qOLBklRlP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:5b:84:9e:88:d7:7d:8d:cc:12:22:de:86:aa:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e22a93ceb82b675a84b0d78e79ae4a797ca98231
Validity
Not Before: Nov 4 13:00:28 2025 GMT
Not After : Nov 5 13:00:28 2025 GMT
Subject: CN=71fdb2446d804f983a425a1f7c14b7d277ebc7b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:92:dd:fd:e7:d8:b6:f2:36:3c:57:8e:be:d1:
f3:db:52:8a:cf:1d:50:c7:8e:61:8e:59:aa:5a:45:
89:25:e7:a0:76:0f:46:2f:3a:9f:58:81:fa:4c:a4:
2e:9f:e8:38:40:13:c2:09:af:3e:a4:9e:68:34:15:
22:6a:1d:eb:b9:7f:9e:e2:e0:1a:59:79:b2:5b:1e:
7f:2e:f2:c0:b5:a6:7c:f4:b7:bc:bd:80:96:2a:00:
b4:37:d4:b3:da:65:39:72:2d:f9:14:99:ea:a1:4f:
83:06:47:15:af:a4:38:00:c8:9f:0e:86:c8:01:52:
68:1d:b7:5f:51:51:78:85:50:98:e8:f0:d9:4e:5c:
59:33:d3:ac:25:48:92:01:c3:d2:aa:93:df:2a:84:
7f:3d:0a:2d:48:5a:19:83:7e:e7:e1:d7:28:46:aa:
9a:b4:5d:aa:4a:ac:b0:d1:bb:ba:9c:18:1b:ee:76:
13:7f:60:d7:be:ea:ff:bd:08:ff:bb:78:10:6b:20:
d9:50:ce:57:d4:ae:bd:7f:f6:cf:24:d4:81:f4:4c:
27:62:17:01:ff:bc:0a:6c:70:19:39:9b:08:6d:55:
c1:6d:42:8d:aa:32:0e:59:35:d9:f0:af:31:a8:be:
31:3a:11:db:23:e7:5b:12:8e:e2:7e:34:bc:19:64:
b2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:FD:B2:44:6D:80:4F:98:3A:42:5A:1F:7C:14:B7:D2:77:EB:C7:B7
X509v3 Authority Key Identifier:
keyid:E2:2A:93:CE:B8:2B:67:5A:84:B0:D7:8E:79:AE:4A:79:7C:A9:82:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:7c:72:28:f5:b9:ae:75:ba:1b:19:66:0d:8d:64:d6:5c:04:
0c:5a:22:91:90:ef:b1:65:35:90:5c:d7:a2:46:f6:41:f9:d7:
3a:70:1e:9e:8d:aa:33:e9:42:e4:08:9e:72:49:19:99:17:d5:
82:e6:7b:d8:17:06:30:60:73:be:3a:18:38:f5:8c:2b:ee:fb:
17:30:e4:b3:5d:ad:cd:7c:f7:50:9b:f9:9b:ce:51:f2:f2:1b:
2c:16:9a:9f:6d:13:b0:80:fb:32:1b:d9:62:c6:90:54:f5:94:
57:29:7d:33:a0:d2:3f:7b:75:09:0b:80:9b:f7:15:93:7f:47:
0b:6d:eb:0c:f8:dc:d3:0f:f9:a8:cf:50:f5:94:de:ee:ea:3b:
a1:86:7e:e3:3f:6b:d2:c9:43:a9:43:68:71:45:e7:7b:c2:0e:
98:d4:db:de:81:6c:f5:07:05:00:ae:31:fd:ff:5b:87:d1:26:
fb:b8:68:aa:4e:08:f9:cb:68:48:2c:2d:c3:e9:a4:c3:ff:4d:
7c:7b:b4:fb:39:a9:03:fb:5e:b6:48:c1:41:c4:68:2f:4d:22:
c8:a9:62:2c:6c:c6:61:2f:19:c5:d7:72:7c:da:64:6b:44:a4:
d6:45:d5:41:83:60:74:29:34:01:9e:35:73:e6:20:60:2d:a4:
9b:e2:8f:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9FuEnojXfY3MEiLehqpzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyMmE5M2NlYjgyYjY3NWE4NGIwZDc4ZTc5YWU0YTc5N2Nh
OTgyMzEwHhcNMjUxMTA0MTMwMDI4WhcNMjUxMTA1MTMwMDI4WjAzMTEwLwYDVQQD
Eyg3MWZkYjI0NDZkODA0Zjk4M2E0MjVhMWY3YzE0YjdkMjc3ZWJjN2I3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZLd/efYtvI2PFeOvtHz21KKzx1Q
x45hjlmqWkWJJeegdg9GLzqfWIH6TKQun+g4QBPCCa8+pJ5oNBUiah3ruX+e4uAa
WXmyWx5/LvLAtaZ89Le8vYCWKgC0N9Sz2mU5ci35FJnqoU+DBkcVr6Q4AMifDobI
AVJoHbdfUVF4hVCY6PDZTlxZM9OsJUiSAcPSqpPfKoR/PQotSFoZg37n4dcoRqqa
tF2qSqyw0bu6nBgb7nYTf2DXvur/vQj/u3gQayDZUM5X1K69f/bPJNSB9EwnYhcB
/7wKbHAZOZsIbVXBbUKNqjIOWTXZ8K8xqL4xOhHbI+dbEo7ifjS8GWSy+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHH9skRtgE+YOkJaH3wUt9J368e3MB8GA1UdIwQY
MBaAFOIqk864K2dahLDXjnmuSnl8qYIxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGlxVHpyZ3JaMXFFc05lT2VhNUtlWHlwZ2pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8yZTgyY2ItNGE2ZS00MDhmLWFmMjAt
ODQzMTU0YTgwYjcyLzEvNGlxVHpyZ3JaMXFFc05lT2VhNUtlWHlwZ2pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi8yZTgyY2ItNGE2ZS00MDhmLWFmMjAtODQzMTU0YTgwYjcy
LzEvNGlxVHpyZ3JaMXFFc05lT2VhNUtlWHlwZ2pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ3xyKPW5
rnW6GxlmDY1k1lwEDFoikZDvsWU1kFzXokb2QfnXOnAeno2qM+lC5AieckkZmRfV
guZ72BcGMGBzvjoYOPWMK+77FzDks12tzXz3UJv5m85R8vIbLBaan20TsID7MhvZ
YsaQVPWUVyl9M6DSP3t1CQuAm/cVk39HC23rDPjc0w/5qM9Q9ZTe7uo7oYZ+4z9r
0slDqUNocUXne8IOmNTb3oFs9QcFAK4x/f9bh9Em+7hoqk4I+ctoSCwtw+mkw/9N
fHu0+zmpA/tetkjBQcRoL00iyKliLGzGYS8ZxddyfNpka0Sk1kXVQYNgdCk0AZ41
c+YgYC2km+KP8g==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:22:02 2025 by rpki-client