Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
File: 4p9JZACcdLuBrtnGcHgBPcho7xc.mft (raw, json)
Hash identifier: w78NjlY9meNxTweJvH2OCK7kltRKusGQmTs9qlDx6o4=
Subject key identifier: 91:62:BD:36:03:81:34:8A:65:48:80:95:2D:BB:27:E0:CB:C4:ED:B9
Authority key identifier: E2:9F:49:64:00:9C:74:BB:81:AE:D9:C6:70:78:01:3D:C8:68:EF:17
Certificate issuer: /CN=e29f4964009c74bb81aed9c67078013dc868ef17
Certificate serial: 019A522C32F7C60F46E58C4302023ADEBE41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 04:00:19 +0000
Manifest this update: Wed 05 Nov 2025 04:00:19 +0000
Manifest next update: Thu 06 Nov 2025 04:00:19 +0000
Files and hashes: 1: 1KTjmYkB3cj_19bwNwOyE5tGxCk.roa (hash: H8xeX/8Uyv31FbjznlcJqitCSYJrp0RSe/v1PmExVLA=)
2: 4p9JZACcdLuBrtnGcHgBPcho7xc.crl (hash: DtKKXAt1vXGDCpEKNtLUGskR2my9iJDxdQuBpLGILL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 04:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:32:f7:c6:0f:46:e5:8c:43:02:02:3a:de:be:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e29f4964009c74bb81aed9c67078013dc868ef17
Validity
Not Before: Nov 5 04:00:19 2025 GMT
Not After : Nov 6 04:00:19 2025 GMT
Subject: CN=9162bd360381348a654880952dbb27e0cbc4edb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:ac:ee:f5:ab:05:fd:39:3a:1c:bb:81:57:5f:
26:cc:9d:78:85:49:d1:2f:61:4f:4e:5e:37:ee:56:
bf:b4:a6:e7:64:80:b9:bb:76:f4:c2:15:1d:24:d6:
75:0b:2a:47:b2:21:ea:a9:60:f0:49:10:1e:9a:a8:
41:6d:22:71:43:9b:9a:be:30:f6:fa:78:15:f7:09:
dc:e8:7e:f6:af:25:52:3f:90:93:f0:14:3b:cf:c3:
b1:ca:be:5c:0b:1b:36:66:49:13:f2:22:09:b1:45:
fd:c0:8f:9a:b6:c3:fe:e4:e1:c3:e4:16:07:54:e4:
cd:34:48:1a:3b:5f:72:59:03:30:e4:01:d0:50:fe:
22:53:2e:f6:37:04:bf:1e:ba:eb:57:e8:67:01:69:
35:a9:df:43:bb:ee:c2:c0:67:e0:aa:c6:70:5a:0c:
64:4a:d5:05:c9:82:6f:75:15:aa:cd:49:20:b0:9f:
e2:64:83:19:43:d1:4c:ba:63:7a:f0:8f:e1:9d:f7:
ba:63:a8:dd:ef:c3:fd:7f:f3:f9:2a:ad:8b:ee:0c:
12:99:e4:7c:bb:64:6a:ea:2c:71:3a:da:0a:28:81:
0c:08:c2:bc:ba:0c:19:ae:19:44:77:9a:a0:e0:66:
cd:6e:e0:e0:31:47:2a:1d:64:06:51:e6:1c:63:5a:
c1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:62:BD:36:03:81:34:8A:65:48:80:95:2D:BB:27:E0:CB:C4:ED:B9
X509v3 Authority Key Identifier:
keyid:E2:9F:49:64:00:9C:74:BB:81:AE:D9:C6:70:78:01:3D:C8:68:EF:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:1c:82:75:c3:5e:fb:4a:a6:70:e1:e5:8a:f9:98:43:65:6c:
3a:e4:e6:5e:a2:e1:b1:74:ab:4f:5b:c0:be:25:33:2d:e0:96:
85:d4:77:62:4e:16:27:54:52:f0:6f:f8:ca:75:5c:0f:cc:d6:
64:d9:9f:79:65:f7:18:0b:52:e4:74:63:75:7d:f9:7c:d3:6c:
fd:43:fd:c4:41:b4:25:dc:f8:45:b4:09:44:de:0e:ac:d6:d9:
b0:2a:f5:13:8a:66:5d:d3:f1:7b:af:7a:0d:b0:44:23:ce:3a:
fb:7d:76:7b:4c:77:bd:11:bc:f7:53:64:7d:26:36:e3:f1:06:
d7:88:d1:83:9e:7f:5e:7e:83:71:cb:8b:fa:17:15:51:8a:a8:
f5:b4:ac:ad:f0:08:9f:cb:9e:84:dc:79:d3:c4:41:3a:62:c7:
8c:55:8b:2c:05:50:04:6d:9b:35:ca:70:1b:93:be:3f:87:55:
bb:b7:32:8f:33:bb:24:c2:37:3c:89:be:39:46:f9:48:98:a5:
6d:ce:46:8a:22:06:ea:aa:81:fd:16:d2:10:c5:ab:42:39:b1:
93:96:51:3d:a6:28:f5:6e:0a:f6:e2:f7:7e:18:7e:dd:ac:5d:
a2:73:f4:e2:10:ef:f3:2b:3e:75:e4:81:c1:b0:75:d1:de:a2:
b6:ca:42:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpSLDL3xg9G5YxDAgI63r5BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyOWY0OTY0MDA5Yzc0YmI4MWFlZDljNjcwNzgwMTNkYzg2
OGVmMTcwHhcNMjUxMTA1MDQwMDE5WhcNMjUxMTA2MDQwMDE5WjAzMTEwLwYDVQQD
Eyg5MTYyYmQzNjAzODEzNDhhNjU0ODgwOTUyZGJiMjdlMGNiYzRlZGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8qzu9asF/Tk6HLuBV18mzJ14hUnR
L2FPTl437la/tKbnZIC5u3b0whUdJNZ1CypHsiHqqWDwSRAemqhBbSJxQ5uavjD2
+ngV9wnc6H72ryVSP5CT8BQ7z8Oxyr5cCxs2ZkkT8iIJsUX9wI+atsP+5OHD5BYH
VOTNNEgaO19yWQMw5AHQUP4iUy72NwS/HrrrV+hnAWk1qd9Du+7CwGfgqsZwWgxk
StUFyYJvdRWqzUkgsJ/iZIMZQ9FMumN68I/hnfe6Y6jd78P9f/P5Kq2L7gwSmeR8
u2Rq6ixxOtoKKIEMCMK8ugwZrhlEd5qg4GbNbuDgMUcqHWQGUeYcY1rBYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJFivTYDgTSKZUiAlS27J+DLxO25MB8GA1UdIwQY
MBaAFOKfSWQAnHS7ga7ZxnB4AT3IaO8XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHA5SlpBQ2NkTHVCcnRuR2NIZ0JQY2hvN3hjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS82NTVhMWMtYmFmNS00NzVmLWEzMDgt
OTMyYWIzNDFhMzY3LzEvNHA5SlpBQ2NkTHVCcnRuR2NIZ0JQY2hvN3hjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS82NTVhMWMtYmFmNS00NzVmLWEzMDgtOTMyYWIzNDFhMzY3
LzEvNHA5SlpBQ2NkTHVCcnRuR2NIZ0JQY2hvN3hjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMxyCdcNe
+0qmcOHlivmYQ2VsOuTmXqLhsXSrT1vAviUzLeCWhdR3Yk4WJ1RS8G/4ynVcD8zW
ZNmfeWX3GAtS5HRjdX35fNNs/UP9xEG0Jdz4RbQJRN4OrNbZsCr1E4pmXdPxe696
DbBEI846+312e0x3vRG891NkfSY24/EG14jRg55/Xn6DccuL+hcVUYqo9bSsrfAI
n8uehNx508RBOmLHjFWLLAVQBG2bNcpwG5O+P4dVu7cyjzO7JMI3PIm+OUb5SJil
bc5GiiIG6qqB/RbSEMWrQjmxk5ZRPaYo9W4K9uL3fhh+3axdonP04hDv8ys+deSB
wbB10d6itspCHw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 14:32:07 2025 by rpki-client