Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.mft
File: 4McMwtIdqMLqZIFTT0jaSVqoS90.mft (raw, json)
Hash identifier: r6LlZ61LzFI7jiwD+i6UarKqgmHWMoj+XdH5Y+DTf7M=
Subject key identifier: 2F:93:0B:CF:99:59:0E:01:A3:24:09:99:60:A1:08:9E:49:3C:ED:14
Authority key identifier: E0:C7:0C:C2:D2:1D:A8:C2:EA:64:81:53:4F:48:DA:49:5A:A8:4B:DD
Certificate issuer: /CN=e0c70cc2d21da8c2ea6481534f48da495aa84bdd
Certificate serial: 019A5007095C20698F04D43CA6876474206E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4McMwtIdqMLqZIFTT0jaSVqoS90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 18:00:29 +0000
Manifest this update: Tue 04 Nov 2025 18:00:29 +0000
Manifest next update: Wed 05 Nov 2025 18:00:29 +0000
Files and hashes: 1: 4McMwtIdqMLqZIFTT0jaSVqoS90.crl (hash: Sq7+/ecUDabaQfwHsGJ/VOuSraTrATCskhWinQSvbRE=)
2: Eyx-nlRpe0-godGFL3xYlKtLlbQ.roa (hash: 9oeY/MAa6lvwYN19OiXxeJ1LVR37sI0FzCd1Eq/rgTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.mft
rsync://rpki.ripe.net/repository/DEFAULT/4McMwtIdqMLqZIFTT0jaSVqoS90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:09:5c:20:69:8f:04:d4:3c:a6:87:64:74:20:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0c70cc2d21da8c2ea6481534f48da495aa84bdd
Validity
Not Before: Nov 4 18:00:29 2025 GMT
Not After : Nov 5 18:00:29 2025 GMT
Subject: CN=2f930bcf99590e01a324099960a1089e493ced14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fd:3d:3f:95:a6:8a:1f:2e:9a:3e:0b:60:9d:
08:07:0b:11:b5:c4:5d:9f:61:9c:6b:9a:46:a9:0f:
e4:d3:19:b1:5b:2e:ae:97:a6:85:26:c6:30:05:bc:
d6:56:5c:47:ed:2d:d0:11:70:2f:70:b3:a2:34:e4:
e4:53:2d:47:4c:4c:f7:72:13:68:49:c2:ab:8e:13:
f6:11:02:26:dc:96:f1:c4:f8:d3:16:c8:2a:80:ac:
81:94:0f:d6:79:43:ea:54:7b:f7:f0:c8:df:71:70:
ad:65:f0:1b:97:3a:c2:6d:d9:77:80:c7:82:eb:0d:
5c:0e:ab:fc:ee:b3:d1:e9:d6:68:60:8c:cf:0a:80:
95:ba:4b:b0:8d:f7:4a:9f:32:3a:2e:7f:a4:26:87:
49:68:ec:fa:b4:f6:11:92:c4:88:81:31:da:f9:09:
49:4b:df:86:8f:46:c4:0d:1e:79:0f:17:40:c3:71:
01:26:99:00:b5:3a:92:b4:13:19:f5:97:9d:f9:0a:
b5:4a:09:3a:02:ef:13:07:57:7a:5f:d9:1b:99:38:
7c:d0:22:e7:77:67:da:03:8b:61:ee:bf:57:3b:54:
19:a8:89:3e:49:9e:67:a6:7c:80:94:9f:4f:3e:92:
f4:0a:ee:f4:90:d7:bf:cb:05:24:71:0b:de:1b:6f:
6c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:93:0B:CF:99:59:0E:01:A3:24:09:99:60:A1:08:9E:49:3C:ED:14
X509v3 Authority Key Identifier:
keyid:E0:C7:0C:C2:D2:1D:A8:C2:EA:64:81:53:4F:48:DA:49:5A:A8:4B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4McMwtIdqMLqZIFTT0jaSVqoS90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:3b:11:fa:ef:fd:a3:c2:69:40:7c:dd:64:d1:b7:88:76:6c:
6d:ea:82:25:cd:0b:65:88:ad:1d:50:df:89:f4:8c:6f:ad:b6:
08:2f:19:26:b2:04:05:c2:98:85:3e:60:1d:1f:84:55:57:ac:
af:47:fa:f9:dd:46:0c:02:8d:00:8e:c3:a3:97:21:2d:e0:25:
f8:dd:ce:26:a9:16:3a:fd:b1:f5:12:75:b0:22:08:06:56:d7:
8c:e6:bf:42:d6:24:6b:55:4f:cf:69:11:5d:62:c0:55:ac:26:
f0:a1:c1:d3:ca:be:e2:23:b2:82:95:90:d1:9b:83:05:b8:9d:
96:ac:12:78:c1:27:ec:d7:0d:ee:3d:3c:62:9e:de:be:d9:0e:
bb:6f:9f:8d:a4:9a:e2:d7:e5:34:d2:5c:14:63:94:17:b7:af:
0c:38:7a:8c:cf:6f:32:b8:f5:a3:54:51:1f:38:b0:69:c5:03:
69:1d:8d:6f:48:4e:98:7b:29:cb:1f:1c:cd:5a:d0:79:e3:94:
af:64:03:2b:d5:1d:f2:c9:07:90:5d:d9:ed:c0:8d:6b:b2:b6:
ff:18:57:a8:bc:6f:3b:be:41:13:0f:26:71:2f:23:39:89:99:
63:cf:a5:1d:3a:4f:08:4b:36:7d:4b:f6:2d:da:29:7d:5f:a4:
ae:1a:8a:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQBwlcIGmPBNQ8podkdCBuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwYzcwY2MyZDIxZGE4YzJlYTY0ODE1MzRmNDhkYTQ5NWFh
ODRiZGQwHhcNMjUxMTA0MTgwMDI5WhcNMjUxMTA1MTgwMDI5WjAzMTEwLwYDVQQD
EygyZjkzMGJjZjk5NTkwZTAxYTMyNDA5OTk2MGExMDg5ZTQ5M2NlZDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/09P5Wmih8umj4LYJ0IBwsRtcRd
n2Gca5pGqQ/k0xmxWy6ul6aFJsYwBbzWVlxH7S3QEXAvcLOiNOTkUy1HTEz3chNo
ScKrjhP2EQIm3JbxxPjTFsgqgKyBlA/WeUPqVHv38MjfcXCtZfAblzrCbdl3gMeC
6w1cDqv87rPR6dZoYIzPCoCVukuwjfdKnzI6Ln+kJodJaOz6tPYRksSIgTHa+QlJ
S9+Gj0bEDR55DxdAw3EBJpkAtTqStBMZ9Zed+Qq1Sgk6Au8TB1d6X9kbmTh80CLn
d2faA4th7r9XO1QZqIk+SZ5npnyAlJ9PPpL0Cu70kNe/ywUkcQveG29sBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC+TC8+ZWQ4BoyQJmWChCJ5JPO0UMB8GA1UdIwQY
MBaAFODHDMLSHajC6mSBU09I2klaqEvdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNE1jTXd0SWRxTUxxWklGVFQwamFTVnFvUzkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC83MTAzM2MtMGI2YS00NmU2LWE1ZmUt
MzI5YTk5ZjBmMWI1LzEvNE1jTXd0SWRxTUxxWklGVFQwamFTVnFvUzkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC83MTAzM2MtMGI2YS00NmU2LWE1ZmUtMzI5YTk5ZjBmMWI1
LzEvNE1jTXd0SWRxTUxxWklGVFQwamFTVnFvUzkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAITsR+u/9
o8JpQHzdZNG3iHZsbeqCJc0LZYitHVDfifSMb622CC8ZJrIEBcKYhT5gHR+EVVes
r0f6+d1GDAKNAI7Do5chLeAl+N3OJqkWOv2x9RJ1sCIIBlbXjOa/QtYka1VPz2kR
XWLAVawm8KHB08q+4iOygpWQ0ZuDBbidlqwSeMEn7NcN7j08Yp7evtkOu2+fjaSa
4tflNNJcFGOUF7evDDh6jM9vMrj1o1RRHziwacUDaR2Nb0hOmHspyx8czVrQeeOU
r2QDK9Ud8skHkF3Z7cCNa7K2/xhXqLxvO75BEw8mcS8jOYmZY8+lHTpPCEs2fUv2
LdopfV+krhqK5g==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:34:23 2025 by rpki-client