Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.mft
File: 4bUJZyudmYtGScw3aoKYeeb-rKc.mft (raw, json)
Hash identifier: 038BsuHNm31FQLJN73KETLuyTtYUCMtHJw0n1i7Dmzk=
Subject key identifier: 2F:16:A4:CB:22:F6:66:AF:D1:AD:19:26:26:85:F3:42:A9:20:DF:58
Authority key identifier: E1:B5:09:67:2B:9D:99:8B:46:49:CC:37:6A:82:98:79:E6:FE:AC:A7
Certificate issuer: /CN=e1b509672b9d998b4649cc376a829879e6feaca7
Certificate serial: 019A4EF4AA45598F6231F60E99A6BD69512F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bUJZyudmYtGScw3aoKYeeb-rKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.mft
Manifest number: 0609
Signing time: Tue 04 Nov 2025 13:00:48 +0000
Manifest this update: Tue 04 Nov 2025 13:00:48 +0000
Manifest next update: Wed 05 Nov 2025 13:00:48 +0000
Files and hashes: 1: 4bUJZyudmYtGScw3aoKYeeb-rKc.crl (hash: NOszOs9Nf2I1HLyJwy/koywtsgU5tQzPWQt2nN2Yqdo=)
2: OQo7GpnulSOExhIEm_K7r3ad-fY.roa (hash: Ps91P3w11BS7K9Fm7RIorSRMZXeRo1jCwYGqQnSXpfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4bUJZyudmYtGScw3aoKYeeb-rKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:aa:45:59:8f:62:31:f6:0e:99:a6:bd:69:51:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1b509672b9d998b4649cc376a829879e6feaca7
Validity
Not Before: Nov 4 13:00:48 2025 GMT
Not After : Nov 5 13:00:48 2025 GMT
Subject: CN=2f16a4cb22f666afd1ad19262685f342a920df58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:47:1d:66:bb:f5:e5:8c:ac:a8:5b:b6:da:1a:
85:c0:9f:8b:8e:65:46:ba:e6:9f:ae:3f:4b:13:25:
31:7e:4b:5e:9e:41:a1:eb:30:46:29:ea:59:65:88:
fa:b3:fc:68:fa:fd:02:ae:f8:25:66:96:2a:29:f5:
60:7a:0a:65:1e:d3:29:f7:58:70:af:4d:a3:d9:a3:
e8:e7:b0:2e:90:e4:f9:db:84:dc:c5:03:c2:d8:4e:
58:53:f9:a1:5b:51:ee:ad:97:96:cd:64:7f:9c:ba:
67:04:9b:66:3d:5a:51:af:0b:34:ec:2c:30:b5:4c:
af:90:12:03:6b:43:bd:8c:12:c4:3d:e9:f4:e9:82:
4c:cd:f4:d4:82:c6:66:0d:0b:a7:31:d0:e3:99:59:
c7:5e:4f:bb:4c:05:77:46:19:ea:94:93:60:cf:94:
8e:7a:37:74:9f:d5:b8:0c:e5:a7:66:c9:e9:87:f1:
49:95:2a:09:01:14:72:00:15:2b:eb:10:a5:96:11:
f4:95:1e:07:df:70:32:cb:04:52:92:85:50:2d:72:
b0:54:e0:2d:55:b0:e6:54:1a:78:a6:06:5a:99:1e:
31:31:1a:92:3d:d3:17:8d:7b:e4:76:b2:b5:ef:60:
82:da:04:84:cd:f9:8d:12:72:36:c5:0d:9d:b2:b0:
f6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:16:A4:CB:22:F6:66:AF:D1:AD:19:26:26:85:F3:42:A9:20:DF:58
X509v3 Authority Key Identifier:
keyid:E1:B5:09:67:2B:9D:99:8B:46:49:CC:37:6A:82:98:79:E6:FE:AC:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bUJZyudmYtGScw3aoKYeeb-rKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:68:15:ec:e9:d4:56:d4:4c:c1:bb:32:2b:ef:1b:9a:a2:2e:
20:ab:9c:e8:3e:c5:81:34:bf:08:d2:4a:5e:ef:ef:44:b9:95:
38:d6:c5:cd:3d:f9:95:c7:fa:31:0c:9a:2e:a8:64:1a:68:1d:
37:72:66:ed:e7:d2:0b:1e:ef:e1:03:e8:2b:c2:ef:cc:94:1b:
9e:59:83:2b:ae:ab:62:98:5e:d5:dc:ec:a3:bd:a9:30:a8:a1:
da:bb:31:2c:72:2f:99:c2:93:fe:50:18:7c:b8:d2:e0:55:8d:
b0:03:1b:57:da:cc:cc:ef:92:03:84:9d:c7:dc:8c:6a:a5:47:
33:42:86:c2:1e:df:01:59:ed:92:6b:b5:54:a0:8f:b7:a6:dd:
90:01:0b:e8:78:7d:33:85:61:58:90:fe:0e:f7:0d:8d:1a:c9:
8e:45:31:25:29:5c:ab:0a:56:c8:c0:ac:ba:1e:d6:81:96:08:
9f:0c:29:78:6f:21:53:af:e1:54:0a:3d:41:8e:9c:19:e1:a9:
da:47:83:56:9a:d0:ac:af:2d:95:f4:89:12:e9:d7:c7:e1:aa:
b6:ab:56:27:25:48:c3:03:b6:b2:98:dc:ca:b6:68:ef:63:ed:
14:44:8d:d5:35:be:5f:d2:a3:95:11:43:13:ce:7b:64:18:27:
e2:e9:73:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9KpFWY9iMfYOmaa9aVEvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxYjUwOTY3MmI5ZDk5OGI0NjQ5Y2MzNzZhODI5ODc5ZTZm
ZWFjYTcwHhcNMjUxMTA0MTMwMDQ4WhcNMjUxMTA1MTMwMDQ4WjAzMTEwLwYDVQQD
EygyZjE2YTRjYjIyZjY2NmFmZDFhZDE5MjYyNjg1ZjM0MmE5MjBkZjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEcdZrv15YysqFu22hqFwJ+LjmVG
uuafrj9LEyUxfktenkGh6zBGKepZZYj6s/xo+v0CrvglZpYqKfVgegplHtMp91hw
r02j2aPo57AukOT524TcxQPC2E5YU/mhW1HurZeWzWR/nLpnBJtmPVpRrws07Cww
tUyvkBIDa0O9jBLEPen06YJMzfTUgsZmDQunMdDjmVnHXk+7TAV3RhnqlJNgz5SO
ejd0n9W4DOWnZsnph/FJlSoJARRyABUr6xCllhH0lR4H33AyywRSkoVQLXKwVOAt
VbDmVBp4pgZamR4xMRqSPdMXjXvkdrK172CC2gSEzfmNEnI2xQ2dsrD2wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC8WpMsi9mav0a0ZJiaF80KpIN9YMB8GA1UdIwQY
MBaAFOG1CWcrnZmLRknMN2qCmHnm/qynMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGJVSlp5dWRtWXRHU2N3M2FvS1llZWItcktjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy81NDZhNTUtZGRhYS00MzQxLWI4Zjkt
M2VjNTIyNzcxZjQwLzEvNGJVSlp5dWRtWXRHU2N3M2FvS1llZWItcktjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy81NDZhNTUtZGRhYS00MzQxLWI4ZjktM2VjNTIyNzcxZjQw
LzEvNGJVSlp5dWRtWXRHU2N3M2FvS1llZWItcktjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAImgV7OnU
VtRMwbsyK+8bmqIuIKuc6D7FgTS/CNJKXu/vRLmVONbFzT35lcf6MQyaLqhkGmgd
N3Jm7efSCx7v4QPoK8LvzJQbnlmDK66rYphe1dzso72pMKih2rsxLHIvmcKT/lAY
fLjS4FWNsAMbV9rMzO+SA4Sdx9yMaqVHM0KGwh7fAVntkmu1VKCPt6bdkAEL6Hh9
M4VhWJD+DvcNjRrJjkUxJSlcqwpWyMCsuh7WgZYInwwpeG8hU6/hVAo9QY6cGeGp
2keDVprQrK8tlfSJEunXx+GqtqtWJyVIwwO2spjcyrZo72PtFESN1TW+X9KjlRFD
E857ZBgn4ulzpQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:45 2025 by rpki-client