Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
File: 4C7HTaVJNr70L-JgWX3W0h3M7fw.mft (raw, json)
Hash identifier: yRLDhTSbBBVVlOTb83qnspiCtkdmXQ+z6+z9LZQiDa0=
Subject key identifier: C8:BB:6A:B6:3D:C2:E1:6C:9F:85:08:0F:5D:17:B3:90:31:A6:49:70
Authority key identifier: E0:2E:C7:4D:A5:49:36:BE:F4:2F:E2:60:59:7D:D6:D2:1D:CC:ED:FC
Certificate issuer: /CN=e02ec74da54936bef42fe260597dd6d21dccedfc
Certificate serial: 019A4E4FE0242136E7D32EB3C69FE4FEFB91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
Manifest number: 1673
Signing time: Tue 04 Nov 2025 10:00:48 +0000
Manifest this update: Tue 04 Nov 2025 10:00:48 +0000
Manifest next update: Wed 05 Nov 2025 10:00:48 +0000
Files and hashes: 1: 4C7HTaVJNr70L-JgWX3W0h3M7fw.crl (hash: EWoE1C1i/JglUjWJKS2oiLT/juyYr+sM2hSXtS4rUY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:e0:24:21:36:e7:d3:2e:b3:c6:9f:e4:fe:fb:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e02ec74da54936bef42fe260597dd6d21dccedfc
Validity
Not Before: Nov 4 10:00:48 2025 GMT
Not After : Nov 5 10:00:48 2025 GMT
Subject: CN=c8bb6ab63dc2e16c9f85080f5d17b39031a64970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ef:de:6c:fa:aa:45:9a:a6:6b:14:95:67:97:
e4:e2:e9:82:c3:db:36:70:7b:1d:f1:e2:3b:da:19:
89:10:58:45:e3:5f:54:b3:ae:2e:77:ef:d4:b8:8b:
2f:6a:62:a4:0c:d8:20:c1:d7:1a:d7:bb:2e:93:8b:
86:70:2a:03:d5:25:06:7b:21:69:fb:10:38:98:f9:
8a:06:6c:29:5c:f3:d9:da:17:e1:d0:c6:b9:15:16:
8f:9f:51:31:14:07:14:89:3b:23:6b:d4:e5:f0:59:
94:af:66:18:91:c5:64:8a:a4:61:46:7d:be:ba:a3:
c5:2b:18:69:c3:9a:2c:10:fc:d5:63:3a:1d:05:d4:
03:61:40:05:2c:6b:5a:fd:bb:66:20:f6:38:3e:f0:
3b:80:f2:97:db:ff:ea:b8:42:df:0b:c2:10:ef:f2:
60:30:60:13:74:05:41:27:73:68:22:c7:9a:ff:0a:
74:5e:f3:1f:07:17:e6:80:c6:be:23:6a:9c:fb:1a:
3d:f8:e2:75:6c:bd:2c:fa:f3:b8:da:2f:fd:07:b9:
dc:f4:c6:ab:a6:d5:74:8e:ec:76:b5:d4:4f:63:07:
79:88:e6:b1:37:3b:e5:ee:18:29:5b:03:62:4a:0c:
d8:d0:f0:3d:bd:93:20:25:5a:58:d8:5f:dd:49:2a:
f8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:BB:6A:B6:3D:C2:E1:6C:9F:85:08:0F:5D:17:B3:90:31:A6:49:70
X509v3 Authority Key Identifier:
keyid:E0:2E:C7:4D:A5:49:36:BE:F4:2F:E2:60:59:7D:D6:D2:1D:CC:ED:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:8c:e5:f4:bb:88:bb:67:da:38:9f:e3:e6:1c:12:24:ce:63:
9c:c6:6d:54:1b:df:00:e8:25:22:f7:9e:75:17:92:7e:ae:b3:
ac:cc:2d:29:d4:e3:c6:af:c1:52:b7:86:7e:d7:80:6f:0a:62:
45:12:70:cc:ea:b2:a7:f1:dc:a6:06:9b:e7:f7:a3:9e:d7:2c:
48:d3:38:49:70:82:86:c7:85:ee:68:98:aa:86:31:3b:0d:b1:
76:7b:4a:ab:9a:9e:29:61:39:0f:c0:20:33:a4:86:64:06:d9:
79:5e:98:24:91:e8:b6:0f:15:81:b6:cf:69:01:ab:31:83:7b:
66:86:f1:31:00:32:38:f3:af:1f:9a:1f:3e:63:6e:ab:67:c3:
f3:68:8d:ce:84:ae:78:b7:36:d7:05:1f:67:51:6d:8b:58:17:
55:54:f8:7b:46:19:39:f2:32:29:5c:7d:2e:9f:78:c2:ef:05:
91:38:ad:8f:b0:f0:03:f0:63:d8:cd:92:73:f9:9a:38:f8:f0:
40:93:72:9a:b5:36:52:0f:38:7d:c4:ff:2c:28:b5:2f:1c:6d:
70:7c:2d:cc:87:f5:4b:7f:09:9e:44:18:64:b4:47:77:41:b2:
0b:bb:6d:7d:8f:51:30:03:e4:2e:25:f4:62:98:09:23:0e:bf:
43:94:3d:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT+AkITbn0y6zxp/k/vuRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwMmVjNzRkYTU0OTM2YmVmNDJmZTI2MDU5N2RkNmQyMWRj
Y2VkZmMwHhcNMjUxMTA0MTAwMDQ4WhcNMjUxMTA1MTAwMDQ4WjAzMTEwLwYDVQQD
EyhjOGJiNmFiNjNkYzJlMTZjOWY4NTA4MGY1ZDE3YjM5MDMxYTY0OTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+/ebPqqRZqmaxSVZ5fk4umCw9s2
cHsd8eI72hmJEFhF419Us64ud+/UuIsvamKkDNggwdca17suk4uGcCoD1SUGeyFp
+xA4mPmKBmwpXPPZ2hfh0Ma5FRaPn1ExFAcUiTsja9Tl8FmUr2YYkcVkiqRhRn2+
uqPFKxhpw5osEPzVYzodBdQDYUAFLGta/btmIPY4PvA7gPKX2//quELfC8IQ7/Jg
MGATdAVBJ3NoIsea/wp0XvMfBxfmgMa+I2qc+xo9+OJ1bL0s+vO42i/9B7nc9Mar
ptV0jux2tdRPYwd5iOaxNzvl7hgpWwNiSgzY0PA9vZMgJVpY2F/dSSr4kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMi7arY9wuFsn4UID10Xs5AxpklwMB8GA1UdIwQY
MBaAFOAux02lSTa+9C/iYFl91tIdzO38MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEM3SFRhVkpOcjcwTC1KZ1dYM1cwaDNNN2Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi83NGUwMTMtNWExYy00MDAzLWJmOTIt
MDFiOGIwZjRiMDE5LzEvNEM3SFRhVkpOcjcwTC1KZ1dYM1cwaDNNN2Z3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi83NGUwMTMtNWExYy00MDAzLWJmOTItMDFiOGIwZjRiMDE5
LzEvNEM3SFRhVkpOcjcwTC1KZ1dYM1cwaDNNN2Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq4zl9LuI
u2faOJ/j5hwSJM5jnMZtVBvfAOglIveedReSfq6zrMwtKdTjxq/BUreGfteAbwpi
RRJwzOqyp/Hcpgab5/ejntcsSNM4SXCChseF7miYqoYxOw2xdntKq5qeKWE5D8Ag
M6SGZAbZeV6YJJHotg8VgbbPaQGrMYN7ZobxMQAyOPOvH5ofPmNuq2fD82iNzoSu
eLc21wUfZ1Fti1gXVVT4e0YZOfIyKVx9Lp94wu8FkTitj7DwA/Bj2M2Sc/maOPjw
QJNymrU2Ug84fcT/LCi1LxxtcHwtzIf1S38JnkQYZLRHd0GyC7ttfY9RMAPkLiX0
YpgJIw6/Q5Q9qA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:55 2025 by rpki-client