Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.mft
File: g4dr-7WujP4Ra7X18oZKEWITqk8.mft (raw, json)
Hash identifier: BMCDSgHDz2vl7MCnnrmk+I2Yg+Y6NAYSqWOAeEeLBMM=
Subject key identifier: 46:CD:EB:27:E1:14:0F:6E:D8:F7:82:CE:0D:E6:A4:31:9F:31:64:E8
Authority key identifier: 83:87:6B:FB:B5:AE:8C:FE:11:6B:B5:F5:F2:86:4A:11:62:13:AA:4F
Certificate issuer: /CN=83876bfbb5ae8cfe116bb5f5f2864a116213aa4f
Certificate serial: 019A53E3A6C18F56A109053F1EBAD0C81F77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4dr-7WujP4Ra7X18oZKEWITqk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 12:00:19 +0000
Manifest this update: Wed 05 Nov 2025 12:00:19 +0000
Manifest next update: Thu 06 Nov 2025 12:00:19 +0000
Files and hashes: 1: g4dr-7WujP4Ra7X18oZKEWITqk8.crl (hash: 7f5ySu/DKWjMP5tg0hEtdvz099zbcttNZp37CPyN/QA=)
2: on6c4T5uruUZ19cPvyYxdOa3Uo4.roa (hash: DzOTGbti7Ycex9SFmllizCyD+Zg7ddBWN0hhpKZi1gA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/g4dr-7WujP4Ra7X18oZKEWITqk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e3:a6:c1:8f:56:a1:09:05:3f:1e:ba:d0:c8:1f:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83876bfbb5ae8cfe116bb5f5f2864a116213aa4f
Validity
Not Before: Nov 5 12:00:19 2025 GMT
Not After : Nov 6 12:00:19 2025 GMT
Subject: CN=46cdeb27e1140f6ed8f782ce0de6a4319f3164e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d7:94:9f:25:4b:91:92:26:f2:71:9e:0c:ca:
c1:3c:30:db:e8:3f:57:91:19:8e:54:d4:a8:a9:0b:
b2:79:97:68:9e:65:b8:7d:a0:07:b7:9c:3e:25:d6:
63:4c:da:55:26:a9:bd:9b:49:58:aa:af:12:9a:7e:
b6:53:4c:df:a9:24:19:77:13:1e:6b:ac:dd:35:45:
dc:44:8f:81:31:61:f6:53:b1:82:42:6b:61:d2:9a:
df:24:71:7d:27:9b:5b:60:5c:aa:e9:6b:36:fd:e4:
0a:8b:3b:9b:29:08:92:46:8f:e6:98:24:45:cd:d6:
d2:4e:e3:3f:db:3a:8f:c0:fa:04:5f:55:2d:b7:9c:
39:54:b0:37:f6:16:ed:dd:8a:cb:de:7c:ea:c2:ef:
8f:02:69:ba:2f:c6:24:0b:f9:0d:15:97:d8:17:53:
ee:63:a9:ca:f4:ef:de:18:9f:ef:5a:c6:fc:a4:f3:
bd:db:91:55:20:aa:84:39:9a:d3:66:4c:d3:0a:0e:
da:e3:fe:5d:a2:6d:8c:eb:6a:d8:53:82:c3:ed:82:
c7:68:44:5d:fd:4f:69:bc:03:13:38:2e:c9:57:65:
37:f6:7e:04:07:13:dd:34:9f:84:a0:25:2c:98:d0:
03:f7:3e:1d:42:ce:1f:b6:25:ad:07:93:5f:a9:3f:
ab:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:CD:EB:27:E1:14:0F:6E:D8:F7:82:CE:0D:E6:A4:31:9F:31:64:E8
X509v3 Authority Key Identifier:
keyid:83:87:6B:FB:B5:AE:8C:FE:11:6B:B5:F5:F2:86:4A:11:62:13:AA:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4dr-7WujP4Ra7X18oZKEWITqk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:1e:c3:db:d1:1b:f5:f2:da:b3:e1:6f:56:e7:77:6f:97:b7:
2d:cf:75:21:c2:33:1c:4f:f2:73:25:9e:e7:90:f2:14:43:d1:
bf:d1:77:98:56:17:30:7b:6c:6e:d1:39:ef:75:2f:a7:93:f8:
c9:f7:ec:1f:1e:60:9b:17:8b:8a:4d:52:ec:05:a5:d7:f1:1d:
25:7b:14:c2:2c:03:92:54:f6:75:32:c9:d9:19:bc:05:4e:ce:
5c:06:bc:d4:d2:7a:dc:e9:a4:44:fe:a6:b0:07:74:aa:58:ac:
0c:e8:02:2f:b7:dc:c5:c9:a1:02:e6:de:7a:e3:f4:74:41:cc:
29:8c:06:5e:72:be:1f:c3:b4:d2:d2:f4:4a:05:de:8e:40:d9:
c4:51:e6:03:f0:ad:08:eb:1d:a0:19:aa:a0:20:f5:ff:97:bf:
ce:19:45:27:bf:e2:02:99:e8:16:8b:57:ce:bd:60:f4:3d:aa:
8d:59:d2:28:49:1f:23:c5:f8:57:85:d0:bb:4b:7d:83:8c:e2:
d6:8d:8c:6f:55:18:49:d3:bd:2e:21:cd:a6:98:b5:08:5f:de:
ff:a0:16:67:6d:89:72:c3:37:e7:b0:5a:20:1e:8b:86:43:07:
dc:a5:eb:67:f3:b7:e3:43:ad:fb:93:2e:ce:61:79:98:d1:e6:
9d:8d:c8:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpT46bBj1ahCQU/HrrQyB93MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzODc2YmZiYjVhZThjZmUxMTZiYjVmNWYyODY0YTExNjIx
M2FhNGYwHhcNMjUxMTA1MTIwMDE5WhcNMjUxMTA2MTIwMDE5WjAzMTEwLwYDVQQD
Eyg0NmNkZWIyN2UxMTQwZjZlZDhmNzgyY2UwZGU2YTQzMTlmMzE2NGU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9eUnyVLkZIm8nGeDMrBPDDb6D9X
kRmOVNSoqQuyeZdonmW4faAHt5w+JdZjTNpVJqm9m0lYqq8Smn62U0zfqSQZdxMe
a6zdNUXcRI+BMWH2U7GCQmth0prfJHF9J5tbYFyq6Ws2/eQKizubKQiSRo/mmCRF
zdbSTuM/2zqPwPoEX1Utt5w5VLA39hbt3YrL3nzqwu+PAmm6L8YkC/kNFZfYF1Pu
Y6nK9O/eGJ/vWsb8pPO925FVIKqEOZrTZkzTCg7a4/5dom2M62rYU4LD7YLHaERd
/U9pvAMTOC7JV2U39n4EBxPdNJ+EoCUsmNAD9z4dQs4ftiWtB5NfqT+rBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEbN6yfhFA9u2PeCzg3mpDGfMWToMB8GA1UdIwQY
MBaAFIOHa/u1roz+EWu19fKGShFiE6pPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzRkci03V3VqUDRSYTdYMThvWktFV0lUcWs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS80MmJkNWQtNGMzZS00M2Y0LWE4NTct
N2U3MDlhZjA1N2Q1LzEvZzRkci03V3VqUDRSYTdYMThvWktFV0lUcWs4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS80MmJkNWQtNGMzZS00M2Y0LWE4NTctN2U3MDlhZjA1N2Q1
LzEvZzRkci03V3VqUDRSYTdYMThvWktFV0lUcWs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADx7D29Eb
9fLas+FvVud3b5e3Lc91IcIzHE/ycyWe55DyFEPRv9F3mFYXMHtsbtE573Uvp5P4
yffsHx5gmxeLik1S7AWl1/EdJXsUwiwDklT2dTLJ2Rm8BU7OXAa81NJ63OmkRP6m
sAd0qlisDOgCL7fcxcmhAubeeuP0dEHMKYwGXnK+H8O00tL0SgXejkDZxFHmA/Ct
COsdoBmqoCD1/5e/zhlFJ7/iApnoFotXzr1g9D2qjVnSKEkfI8X4V4XQu0t9g4zi
1o2Mb1UYSdO9LiHNppi1CF/e/6AWZ22JcsM357BaIB6LhkMH3KXrZ/O340Ot+5Mu
zmF5mNHmnY3IWA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 21:31:15 2025 by rpki-client