Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4d2928-c636-40c0-9c9b-7990e3d1ddaa/1/4r7xjk9w0I3z-zD-5QfltakZb5k.mft
File: 4r7xjk9w0I3z-zD-5QfltakZb5k.mft (raw, json)
Hash identifier: xcQ7Oc2NvZRQ6UC0524+BKc6j6WJoYOebmdo0cI6TwE=
Subject key identifier: 94:A6:D1:62:3B:A3:9A:3D:E0:F7:3D:AF:07:D0:DC:33:3F:5C:46:B9
Authority key identifier: E2:BE:F1:8E:4F:70:D0:8D:F3:FB:30:FE:E5:07:E5:B5:A9:19:6F:99
Certificate issuer: /CN=e2bef18e4f70d08df3fb30fee507e5b5a9196f99
Certificate serial: 019A4EF54AEFEDDB983FE8DEEE926DEEEE9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4r7xjk9w0I3z-zD-5QfltakZb5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4d2928-c636-40c0-9c9b-7990e3d1ddaa/1/4r7xjk9w0I3z-zD-5QfltakZb5k.mft
Manifest number: 0972
Signing time: Tue 04 Nov 2025 13:01:29 +0000
Manifest this update: Tue 04 Nov 2025 13:01:29 +0000
Manifest next update: Wed 05 Nov 2025 13:01:29 +0000
Files and hashes: 1: 4r7xjk9w0I3z-zD-5QfltakZb5k.crl (hash: r9mSRpUPa38lUIeF9346UQNc19cqXKG5ySX3vTkIKI0=)
2: MiW57nOg30xLDqZY9OOUVNFKZQY.roa (hash: 2YBiQuBVr6rbcdD+nTl7ci5JjnWlTA1kLFdMgjGPElQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/4d2928-c636-40c0-9c9b-7990e3d1ddaa/1/4r7xjk9w0I3z-zD-5QfltakZb5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/4d2928-c636-40c0-9c9b-7990e3d1ddaa/1/4r7xjk9w0I3z-zD-5QfltakZb5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/4r7xjk9w0I3z-zD-5QfltakZb5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:4a:ef:ed:db:98:3f:e8:de:ee:92:6d:ee:ee:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2bef18e4f70d08df3fb30fee507e5b5a9196f99
Validity
Not Before: Nov 4 13:01:29 2025 GMT
Not After : Nov 5 13:01:29 2025 GMT
Subject: CN=94a6d1623ba39a3de0f73daf07d0dc333f5c46b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ce:86:bb:0b:81:d5:66:29:c5:25:69:2f:a6:
44:a7:5c:aa:02:02:8c:2a:6e:e1:2c:7b:c9:c6:86:
f5:f4:0b:bc:9d:d6:dc:cb:1d:25:99:2a:db:cf:65:
70:a2:70:9d:f7:d5:11:86:d6:48:95:2e:d3:fb:71:
38:6b:42:30:fd:38:e3:7e:ec:36:a8:2b:b3:ec:48:
f9:2f:40:fa:f8:64:40:6f:3c:51:f3:dc:32:58:6a:
9c:ce:53:9d:e5:88:b1:71:36:e0:40:9e:61:e1:53:
6f:76:e9:91:14:85:02:d2:b3:be:fc:86:98:38:b9:
b2:8d:0d:a4:89:49:de:f2:ec:27:25:e4:05:e6:f4:
65:7f:80:17:c9:ff:fb:e2:b5:e9:b7:b7:78:7d:c4:
fe:6d:e3:2c:8f:a6:d9:31:39:d5:ea:4e:fb:39:05:
7a:c7:ae:f7:b0:23:de:f8:82:fa:95:31:55:2c:f0:
29:18:13:3e:cf:b9:45:ed:a3:5b:b2:fe:29:6d:58:
cf:a2:da:c4:da:a6:8d:49:73:16:4a:b0:48:4e:28:
e0:65:77:18:a8:24:67:df:e5:69:ce:63:00:45:dc:
4f:a1:d4:fa:e0:d9:88:4b:d3:05:04:ea:c4:2e:78:
cb:5b:a1:51:a4:d4:b0:52:89:4f:f4:58:ec:be:ce:
fb:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A6:D1:62:3B:A3:9A:3D:E0:F7:3D:AF:07:D0:DC:33:3F:5C:46:B9
X509v3 Authority Key Identifier:
keyid:E2:BE:F1:8E:4F:70:D0:8D:F3:FB:30:FE:E5:07:E5:B5:A9:19:6F:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4r7xjk9w0I3z-zD-5QfltakZb5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4d2928-c636-40c0-9c9b-7990e3d1ddaa/1/4r7xjk9w0I3z-zD-5QfltakZb5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4d2928-c636-40c0-9c9b-7990e3d1ddaa/1/4r7xjk9w0I3z-zD-5QfltakZb5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:d6:cb:45:c7:d4:b1:3a:fd:3a:84:91:fe:2a:99:33:42:39:
fd:d7:df:5d:32:fd:4e:64:86:7a:d7:70:1d:4d:8b:1b:7e:81:
6b:69:a6:8b:07:6d:09:40:29:a0:4d:f8:77:d8:38:b1:27:08:
7a:5a:db:d3:d8:4e:3a:71:d2:1e:a0:56:85:3a:e4:5e:60:53:
38:c1:39:58:68:2d:02:cb:0b:c7:27:98:d9:33:6f:38:71:9b:
b3:c7:79:d9:0d:95:ea:54:d5:22:d3:de:fb:ed:0b:bd:12:7e:
01:e6:8e:35:d2:d8:07:bf:c7:e2:fe:b3:66:16:68:8f:81:48:
e6:70:e0:62:37:e4:54:b3:c9:b7:8c:57:d7:73:41:69:73:bc:
f3:90:e3:73:cd:fd:57:ed:fe:60:81:81:21:43:68:e2:71:d0:
00:e0:3a:14:d8:c8:87:41:71:8b:a6:3b:65:aa:70:7e:8e:09:
48:a9:19:a9:6e:9a:97:1a:1f:85:1b:ce:12:0a:75:66:1b:07:
60:a2:a4:26:dc:f9:95:e6:03:71:88:7a:04:e5:e5:93:2a:1c:
02:66:a8:d8:96:93:e5:2e:f8:03:1a:f6:05:aa:02:1d:bd:55:
f0:76:44:fb:de:3c:14:69:ea:aa:a9:f1:dc:d0:ae:a3:85:49:
9c:81:20:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9Urv7duYP+je7pJt7u6fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYmVmMThlNGY3MGQwOGRmM2ZiMzBmZWU1MDdlNWI1YTkx
OTZmOTkwHhcNMjUxMTA0MTMwMTI5WhcNMjUxMTA1MTMwMTI5WjAzMTEwLwYDVQQD
Eyg5NGE2ZDE2MjNiYTM5YTNkZTBmNzNkYWYwN2QwZGMzMzNmNWM0NmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAks6GuwuB1WYpxSVpL6ZEp1yqAgKM
Km7hLHvJxob19Au8ndbcyx0lmSrbz2VwonCd99URhtZIlS7T+3E4a0Iw/Tjjfuw2
qCuz7Ej5L0D6+GRAbzxR89wyWGqczlOd5YixcTbgQJ5h4VNvdumRFIUC0rO+/IaY
OLmyjQ2kiUne8uwnJeQF5vRlf4AXyf/74rXpt7d4fcT+beMsj6bZMTnV6k77OQV6
x673sCPe+IL6lTFVLPApGBM+z7lF7aNbsv4pbVjPotrE2qaNSXMWSrBITijgZXcY
qCRn3+VpzmMARdxPodT64NmIS9MFBOrELnjLW6FRpNSwUolP9Fjsvs77pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJSm0WI7o5o94Pc9rwfQ3DM/XEa5MB8GA1UdIwQY
MBaAFOK+8Y5PcNCN8/sw/uUH5bWpGW+ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHI3eGprOXcwSTN6LXpELTVRZmx0YWtaYjVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy80ZDI5MjgtYzYzNi00MGMwLTljOWIt
Nzk5MGUzZDFkZGFhLzEvNHI3eGprOXcwSTN6LXpELTVRZmx0YWtaYjVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy80ZDI5MjgtYzYzNi00MGMwLTljOWItNzk5MGUzZDFkZGFh
LzEvNHI3eGprOXcwSTN6LXpELTVRZmx0YWtaYjVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEdbLRcfU
sTr9OoSR/iqZM0I5/dffXTL9TmSGetdwHU2LG36Ba2mmiwdtCUApoE34d9g4sScI
elrb09hOOnHSHqBWhTrkXmBTOME5WGgtAssLxyeY2TNvOHGbs8d52Q2V6lTVItPe
++0LvRJ+AeaONdLYB7/H4v6zZhZoj4FI5nDgYjfkVLPJt4xX13NBaXO885Djc839
V+3+YIGBIUNo4nHQAOA6FNjIh0Fxi6Y7Zapwfo4JSKkZqW6alxofhRvOEgp1ZhsH
YKKkJtz5leYDcYh6BOXlkyocAmao2JaT5S74Axr2BaoCHb1V8HZE+948FGnqqqnx
3NCuo4VJnIEgCA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 23:38:47 2025 by rpki-client