Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
File: 4IFCtC45SABI0fzqWHo2k9pMC4o.mft (raw, json)
Hash identifier: pOZCf5UYm5xRzRvFRX/jMoaBBfWUvn/iU8DzFT6eMUs=
Subject key identifier: D7:4E:38:16:24:78:E4:B9:51:01:68:73:DB:00:02:A9:06:8B:9D:93
Authority key identifier: E0:81:42:B4:2E:39:48:00:48:D1:FC:EA:58:7A:36:93:DA:4C:0B:8A
Certificate issuer: /CN=e08142b42e39480048d1fcea587a3693da4c0b8a
Certificate serial: 019A4DAA9721D482966144E731212014773C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IFCtC45SABI0fzqWHo2k9pMC4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
Manifest number: 04F7
Signing time: Tue 04 Nov 2025 07:00:16 +0000
Manifest this update: Tue 04 Nov 2025 07:00:16 +0000
Manifest next update: Wed 05 Nov 2025 07:00:16 +0000
Files and hashes: 1: 4IFCtC45SABI0fzqWHo2k9pMC4o.crl (hash: VBJlPiCSojkMRoZt3nT+X5e5OxXE3wfZJZHbTf0fWFw=)
2: SkmMZcDmD4tfD5IJGWfT10a999s.roa (hash: FtSYkAppozDXy+VqyVeW2kon4HMuVtycn1oxBmmVVwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4IFCtC45SABI0fzqWHo2k9pMC4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:97:21:d4:82:96:61:44:e7:31:21:20:14:77:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e08142b42e39480048d1fcea587a3693da4c0b8a
Validity
Not Before: Nov 4 07:00:16 2025 GMT
Not After : Nov 5 07:00:16 2025 GMT
Subject: CN=d74e38162478e4b951016873db0002a9068b9d93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f2:5c:e1:06:8a:7b:ae:18:50:50:9e:4f:29:
a0:7f:d3:6b:25:05:01:20:06:cd:2b:dc:86:0f:7d:
1e:15:79:97:f2:4b:a9:c4:45:42:e0:79:41:e3:8d:
23:50:fd:93:dc:21:23:f4:7b:87:20:58:f1:62:a4:
55:15:e6:74:b2:92:76:e1:ee:a2:31:ea:f5:24:d1:
82:7a:c2:5f:3f:62:6c:10:70:29:7f:33:cf:39:83:
08:3f:c3:27:8a:26:20:0d:bc:d4:a4:06:91:68:ab:
ac:e5:da:0f:56:2a:6b:e3:8a:55:86:9f:86:2f:45:
1b:98:7c:aa:db:87:69:fd:aa:7d:8e:2b:de:d5:84:
10:85:0e:43:22:6c:71:15:ce:59:3f:4c:7f:32:b7:
67:26:90:35:7c:36:3a:fa:3b:28:6c:5b:ec:2e:f3:
9c:ca:f5:00:f8:f3:ca:06:ae:57:4c:eb:94:65:ec:
6b:24:91:19:25:7e:43:97:6b:9b:c7:00:9a:d2:27:
d1:6d:14:8a:d1:32:30:f7:e9:b0:25:00:e3:6a:a0:
ce:37:65:ea:9c:4a:8f:28:be:b2:23:7b:8d:76:57:
58:a4:fc:49:32:4c:13:e6:c3:e1:d7:5b:c5:02:be:
8c:64:91:81:a2:f2:18:d1:2e:4e:2d:f0:ee:01:45:
ec:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:4E:38:16:24:78:E4:B9:51:01:68:73:DB:00:02:A9:06:8B:9D:93
X509v3 Authority Key Identifier:
keyid:E0:81:42:B4:2E:39:48:00:48:D1:FC:EA:58:7A:36:93:DA:4C:0B:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IFCtC45SABI0fzqWHo2k9pMC4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:a0:fd:e0:df:48:9b:25:b8:35:83:76:c9:b5:7e:29:af:eb:
a9:95:14:8b:5f:09:04:14:ed:15:26:4f:63:14:b8:3a:b8:9a:
32:9e:d4:c0:ef:51:08:ba:10:ee:e2:9f:2d:9e:fe:d3:d7:f9:
bd:ae:8c:b0:dd:2a:f6:8f:c2:73:27:78:9e:1c:c9:be:c0:77:
08:23:94:d2:0d:a7:62:0d:36:13:03:92:dc:3a:8b:2b:f4:1a:
80:a1:ad:85:1d:d4:98:65:b5:ea:c8:92:50:42:a2:1e:8d:31:
64:58:bc:a3:f6:e6:e0:97:5e:c9:5d:9d:50:47:fd:a3:64:3a:
cd:05:e1:72:41:18:d3:41:d5:8e:16:00:c4:73:6b:5a:6f:2b:
e3:83:5d:b5:37:1f:e9:d2:15:59:cc:cb:f0:88:a5:12:e5:b9:
f0:11:7d:97:1e:f3:5a:0d:85:ec:b2:76:36:a2:a5:90:a8:2f:
36:17:5d:4a:7b:80:97:a0:79:10:2d:4a:35:65:de:c8:35:32:
38:c9:ca:e7:5b:00:15:0b:6d:c7:19:9a:3c:5e:e3:90:1e:f1:
b2:1a:56:81:9f:3e:66:f1:1b:b9:fe:86:d4:aa:6a:6a:a3:66:
de:8e:c9:57:9e:b1:1d:5a:6e:33:ba:5a:9a:7d:84:fe:23:85:
a9:ff:fa:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNqpch1IKWYUTnMSEgFHc8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwODE0MmI0MmUzOTQ4MDA0OGQxZmNlYTU4N2EzNjkzZGE0
YzBiOGEwHhcNMjUxMTA0MDcwMDE2WhcNMjUxMTA1MDcwMDE2WjAzMTEwLwYDVQQD
EyhkNzRlMzgxNjI0NzhlNGI5NTEwMTY4NzNkYjAwMDJhOTA2OGI5ZDkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PJc4QaKe64YUFCeTymgf9NrJQUB
IAbNK9yGD30eFXmX8kupxEVC4HlB440jUP2T3CEj9HuHIFjxYqRVFeZ0spJ24e6i
Mer1JNGCesJfP2JsEHApfzPPOYMIP8MniiYgDbzUpAaRaKus5doPVipr44pVhp+G
L0UbmHyq24dp/ap9jive1YQQhQ5DImxxFc5ZP0x/MrdnJpA1fDY6+jsobFvsLvOc
yvUA+PPKBq5XTOuUZexrJJEZJX5Dl2ubxwCa0ifRbRSK0TIw9+mwJQDjaqDON2Xq
nEqPKL6yI3uNdldYpPxJMkwT5sPh11vFAr6MZJGBovIY0S5OLfDuAUXsSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNdOOBYkeOS5UQFoc9sAAqkGi52TMB8GA1UdIwQY
MBaAFOCBQrQuOUgASNH86lh6NpPaTAuKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNElGQ3RDNDVTQUJJMGZ6cVdIbzJrOXBNQzRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8yODJhYzYtNzJjNi00YjJjLTlkZjkt
OGYxZjJjOTE0ZjA0LzEvNElGQ3RDNDVTQUJJMGZ6cVdIbzJrOXBNQzRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8yODJhYzYtNzJjNi00YjJjLTlkZjktOGYxZjJjOTE0ZjA0
LzEvNElGQ3RDNDVTQUJJMGZ6cVdIbzJrOXBNQzRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeqD94N9I
myW4NYN2ybV+Ka/rqZUUi18JBBTtFSZPYxS4OriaMp7UwO9RCLoQ7uKfLZ7+09f5
va6MsN0q9o/Ccyd4nhzJvsB3CCOU0g2nYg02EwOS3DqLK/QagKGthR3UmGW16siS
UEKiHo0xZFi8o/bm4JdeyV2dUEf9o2Q6zQXhckEY00HVjhYAxHNrWm8r44NdtTcf
6dIVWczL8IilEuW58BF9lx7zWg2F7LJ2NqKlkKgvNhddSnuAl6B5EC1KNWXeyDUy
OMnK51sAFQttxxmaPF7jkB7xshpWgZ8+ZvEbuf6G1KpqaqNm3o7JV56xHVpuM7pa
mn2E/iOFqf/6+A==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:36:24 2025 by rpki-client