Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
File: 4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft (raw, json)
Hash identifier: Jays/OLswYZgVFemPKbSUVRPtuMb4bBEpDNkyFcJD0c=
Subject key identifier: 9A:AA:04:16:6E:A4:0B:F3:6D:5D:6A:F4:5E:A3:F7:2F:96:A1:FC:39
Authority key identifier: E1:B9:A3:CE:0F:59:39:10:81:9C:32:71:E1:E8:D0:BD:13:71:A6:BE
Certificate issuer: /CN=e1b9a3ce0f593910819c3271e1e8d0bd1371a6be
Certificate serial: 019A4D746C3F28C14B22C248A72521B39ADB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
Manifest number: 164A
Signing time: Tue 04 Nov 2025 06:01:06 +0000
Manifest this update: Tue 04 Nov 2025 06:01:06 +0000
Manifest next update: Wed 05 Nov 2025 06:01:06 +0000
Files and hashes: 1: 4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl (hash: FL+5JhR3WM/7wssyIv9tac8B7+Enmfw9dpLdOOdxxBA=)
2: a66Wq_cz1-opkUh3xxWdvnCXHIE.roa (hash: RBd7B7hKzSBV9gC+hmCCrVD1uw4jr8IoDZkTqDG8H1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:6c:3f:28:c1:4b:22:c2:48:a7:25:21:b3:9a:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1b9a3ce0f593910819c3271e1e8d0bd1371a6be
Validity
Not Before: Nov 4 06:01:06 2025 GMT
Not After : Nov 5 06:01:06 2025 GMT
Subject: CN=9aaa04166ea40bf36d5d6af45ea3f72f96a1fc39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2e:4d:f6:4c:c9:6f:2d:ce:1b:9c:fe:12:47:
90:b8:ea:46:53:e0:06:3f:67:3e:9e:4c:ce:61:58:
87:a1:d8:13:3b:06:c9:7b:2c:52:1b:19:87:c2:81:
df:98:11:f2:c5:61:2e:bb:5e:84:ae:27:59:2f:c9:
2c:14:b4:d4:bc:f6:b4:e8:2a:cd:2d:f1:95:c7:be:
e7:53:95:b6:13:7d:a9:26:a3:4b:f8:0f:49:20:b8:
10:02:cf:96:bf:12:a0:02:2e:ec:36:c1:67:be:ec:
38:0b:66:04:91:3f:58:de:b3:c8:15:44:86:25:3f:
7f:b3:02:72:be:11:14:f0:7c:0a:b2:55:4a:f8:0d:
13:d9:66:7d:9d:54:79:37:7a:2e:be:e5:62:9c:77:
bf:46:29:aa:6c:96:53:6c:bd:69:87:82:42:51:23:
c3:59:11:6d:b9:f2:7b:3b:cd:12:8c:b6:ad:c6:6c:
02:05:40:b4:b3:22:89:10:51:08:48:e7:fc:66:81:
b7:e4:03:ce:ea:82:ab:90:11:c1:b4:91:08:40:5d:
b4:ed:2e:6f:2f:1c:2d:44:5d:8a:e4:7c:1d:80:ca:
b1:10:76:1d:cc:4b:04:29:30:de:d2:c7:f9:9b:f0:
57:0a:97:5e:9e:67:c2:bf:0d:be:cd:7b:49:08:85:
d3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:AA:04:16:6E:A4:0B:F3:6D:5D:6A:F4:5E:A3:F7:2F:96:A1:FC:39
X509v3 Authority Key Identifier:
keyid:E1:B9:A3:CE:0F:59:39:10:81:9C:32:71:E1:E8:D0:BD:13:71:A6:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:77:00:c2:7e:71:7d:a3:78:68:65:90:fc:2e:98:f4:9c:e1:
dc:a9:1a:82:4f:ea:f0:d4:d1:e1:3c:b8:a8:1b:67:ee:88:c5:
b1:aa:47:f8:c4:0a:dd:74:1b:ed:ed:cc:92:a9:86:b7:40:a4:
8b:42:72:ed:39:34:ad:1f:dc:cc:8d:41:8d:9d:78:77:09:19:
50:14:37:b5:83:e1:91:7d:6f:0d:56:2b:0d:cf:01:50:a9:b6:
87:8d:9c:d9:9e:1e:52:30:b3:61:8b:26:1b:94:b0:2f:9a:a6:
37:47:eb:0a:32:f6:d6:c0:96:3c:95:dd:20:ab:66:88:57:a8:
92:62:5b:5f:be:38:0f:d1:28:93:51:18:01:1c:a3:2f:d3:20:
7b:79:4a:3f:3d:e5:ad:99:78:88:e6:4e:8a:8e:c4:09:13:eb:
b6:d9:95:a4:52:c2:22:47:00:4c:6d:79:f3:c4:d6:07:83:79:
87:c3:82:92:25:4f:41:09:7b:7d:de:52:b2:ac:3d:25:7f:c8:
5a:c7:3e:72:f2:d6:02:9a:7e:84:70:60:e2:69:d4:44:b3:4d:
b3:7f:3b:05:60:a9:0b:19:24:78:8d:c7:f6:d8:7b:c4:fe:fa:
5d:46:9e:d5:3d:2d:f2:a3:72:5b:8d:22:0b:0f:39:4c:8a:b7:
92:35:cf:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNdGw/KMFLIsJIpyUhs5rbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxYjlhM2NlMGY1OTM5MTA4MTljMzI3MWUxZThkMGJkMTM3
MWE2YmUwHhcNMjUxMTA0MDYwMTA2WhcNMjUxMTA1MDYwMTA2WjAzMTEwLwYDVQQD
Eyg5YWFhMDQxNjZlYTQwYmYzNmQ1ZDZhZjQ1ZWEzZjcyZjk2YTFmYzM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoC5N9kzJby3OG5z+EkeQuOpGU+AG
P2c+nkzOYViHodgTOwbJeyxSGxmHwoHfmBHyxWEuu16EridZL8ksFLTUvPa06CrN
LfGVx77nU5W2E32pJqNL+A9JILgQAs+WvxKgAi7sNsFnvuw4C2YEkT9Y3rPIFUSG
JT9/swJyvhEU8HwKslVK+A0T2WZ9nVR5N3ouvuVinHe/RimqbJZTbL1ph4JCUSPD
WRFtufJ7O80SjLatxmwCBUC0syKJEFEISOf8ZoG35APO6oKrkBHBtJEIQF207S5v
LxwtRF2K5HwdgMqxEHYdzEsEKTDe0sf5m/BXCpdenmfCvw2+zXtJCIXTvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJqqBBZupAvzbV1q9F6j9y+Wofw5MB8GA1UdIwQY
MBaAFOG5o84PWTkQgZwyceHo0L0Tcaa+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGJtanpnOVpPUkNCbkRKeDRlalF2Uk54cHI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8wZDhiZTgtYjRiNC00MzZlLTg2ZTIt
YmE0YzU2ZDhjMGNlLzEvNGJtanpnOVpPUkNCbkRKeDRlalF2Uk54cHI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8wZDhiZTgtYjRiNC00MzZlLTg2ZTItYmE0YzU2ZDhjMGNl
LzEvNGJtanpnOVpPUkNCbkRKeDRlalF2Uk54cHI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALncAwn5x
faN4aGWQ/C6Y9Jzh3Kkagk/q8NTR4Ty4qBtn7ojFsapH+MQK3XQb7e3MkqmGt0Ck
i0Jy7Tk0rR/czI1BjZ14dwkZUBQ3tYPhkX1vDVYrDc8BUKm2h42c2Z4eUjCzYYsm
G5SwL5qmN0frCjL21sCWPJXdIKtmiFeokmJbX744D9Eok1EYARyjL9Mge3lKPz3l
rZl4iOZOio7ECRPrttmVpFLCIkcATG1588TWB4N5h8OCkiVPQQl7fd5Ssqw9JX/I
Wsc+cvLWApp+hHBg4mnURLNNs387BWCpCxkkeI3H9th7xP76XUae1T0t8qNyW40i
Cw85TIq3kjXPXg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:58 2025 by rpki-client