Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/eb7f7e-a880-497b-b54c-b708c40a667f/1/P4Go6MdbWPfR79TD5lItJ4Y_nM8.mft
File: P4Go6MdbWPfR79TD5lItJ4Y_nM8.mft (raw, json)
Hash identifier: 8s9DlCTlH2OuWBrZXXOvRfwSt5LDbPzurmxtlbFoEos=
Subject key identifier: 79:0B:86:FD:4B:3B:05:25:08:C3:A9:C9:24:5F:29:DD:1E:03:9A:0E
Authority key identifier: 3F:81:A8:E8:C7:5B:58:F7:D1:EF:D4:C3:E6:52:2D:27:86:3F:9C:CF
Certificate issuer: /CN=3f81a8e8c75b58f7d1efd4c3e6522d27863f9ccf
Certificate serial: 019A4F2B141D934CDFE4E686714527E0FE6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P4Go6MdbWPfR79TD5lItJ4Y_nM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/eb7f7e-a880-497b-b54c-b708c40a667f/1/P4Go6MdbWPfR79TD5lItJ4Y_nM8.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 14:00:14 +0000
Manifest this update: Tue 04 Nov 2025 14:00:14 +0000
Manifest next update: Wed 05 Nov 2025 14:00:14 +0000
Files and hashes: 1: P4Go6MdbWPfR79TD5lItJ4Y_nM8.crl (hash: 9fjIF/3TLY7Mh1wQD6Ig+hJDScC2J72Oa+Mwy23b4/4=)
2: xxFhvD1_C6pipJEBTKl033yHEF0.roa (hash: wMvUINT+XWfdQDveaENdYgbkPPqi3fpmXNh+RaQEiM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/eb7f7e-a880-497b-b54c-b708c40a667f/1/P4Go6MdbWPfR79TD5lItJ4Y_nM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/eb7f7e-a880-497b-b54c-b708c40a667f/1/P4Go6MdbWPfR79TD5lItJ4Y_nM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/P4Go6MdbWPfR79TD5lItJ4Y_nM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:14:1d:93:4c:df:e4:e6:86:71:45:27:e0:fe:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f81a8e8c75b58f7d1efd4c3e6522d27863f9ccf
Validity
Not Before: Nov 4 14:00:14 2025 GMT
Not After : Nov 5 14:00:14 2025 GMT
Subject: CN=790b86fd4b3b052508c3a9c9245f29dd1e039a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f1:31:2a:1c:58:09:a7:5b:3f:d2:40:89:7c:
7c:f2:43:ef:49:76:61:d0:b7:20:c1:15:21:0e:64:
cd:14:14:5f:fb:b4:35:f7:76:f1:20:88:9f:6e:20:
a4:9b:2d:80:7e:51:fb:4f:9b:ed:ba:8e:07:02:16:
01:dc:59:6a:dd:3d:05:aa:ac:52:ea:0c:7b:3f:7b:
9e:8d:a5:06:5d:f1:95:01:57:fc:e4:b2:8d:38:4d:
9a:f9:5c:1c:55:cb:bd:99:30:0c:da:23:ed:6b:5c:
f1:7e:b4:c0:e3:82:d3:80:90:d1:39:dc:07:1f:c1:
43:36:cd:8f:0d:47:b7:d2:8d:a3:6f:7f:2c:30:21:
14:06:75:67:a2:76:67:14:6b:61:88:97:67:0d:c3:
de:6f:c6:13:ac:cb:76:a6:19:d8:7f:43:53:a9:ac:
8b:e8:10:a8:5b:64:10:ca:1a:45:99:5f:d4:cf:4c:
f6:db:58:94:d6:c7:c5:e3:dc:6b:19:c2:ff:82:f0:
10:c6:ff:26:43:14:d7:8e:8f:38:34:d3:77:d0:9a:
e1:08:06:dc:7a:33:58:76:9b:d0:8a:63:3c:f3:03:
40:81:b7:b0:ee:12:0a:01:46:3f:39:c8:ac:c1:36:
c5:e7:31:9c:5d:e4:79:4b:9f:1d:b6:8c:92:48:8f:
8b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:0B:86:FD:4B:3B:05:25:08:C3:A9:C9:24:5F:29:DD:1E:03:9A:0E
X509v3 Authority Key Identifier:
keyid:3F:81:A8:E8:C7:5B:58:F7:D1:EF:D4:C3:E6:52:2D:27:86:3F:9C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P4Go6MdbWPfR79TD5lItJ4Y_nM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/eb7f7e-a880-497b-b54c-b708c40a667f/1/P4Go6MdbWPfR79TD5lItJ4Y_nM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/eb7f7e-a880-497b-b54c-b708c40a667f/1/P4Go6MdbWPfR79TD5lItJ4Y_nM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:18:a6:23:a7:06:0f:da:d8:37:6f:b2:44:a8:2f:4a:7d:db:
a4:66:4a:ca:e3:d3:27:cb:12:54:fc:94:a2:c7:90:73:bb:1f:
01:bd:47:70:01:dc:a2:2a:eb:b0:15:e0:cd:7b:77:4d:8c:3b:
9f:06:98:98:0d:8d:ca:29:7f:76:c5:55:5b:92:86:70:56:54:
88:b4:e5:54:dd:75:19:17:32:a5:ef:dc:c8:af:3a:41:be:95:
33:c0:53:ac:34:4f:cd:5c:0d:81:61:70:d4:ab:fa:7d:4c:84:
dd:8c:cd:fb:07:48:a7:e9:02:b9:bf:7f:10:21:4c:56:78:73:
e6:59:68:14:0c:e4:c2:f1:18:61:4d:fb:4c:96:2e:27:57:84:
9c:c7:d1:75:d5:fd:aa:80:cb:ec:e5:a1:99:fd:b4:c2:dc:15:
a0:8b:76:f8:9a:cb:d4:46:41:0b:19:b1:2d:cb:6b:23:f4:ca:
5b:ed:08:3a:38:42:84:4a:38:46:3e:f1:3e:5e:81:80:b7:87:
46:33:4f:94:87:77:16:08:e1:6c:e5:6e:ef:85:52:02:5b:0d:
ba:b3:34:73:48:08:11:f7:ee:4f:0c:c7:c6:c4:2e:ef:da:cf:
3c:b2:a0:39:18:ee:4d:89:15:24:7d:1c:ea:8a:ee:ee:1e:6a:
ba:eb:b3:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPKxQdk0zf5OaGcUUn4P5uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmODFhOGU4Yzc1YjU4ZjdkMWVmZDRjM2U2NTIyZDI3ODYz
ZjljY2YwHhcNMjUxMTA0MTQwMDE0WhcNMjUxMTA1MTQwMDE0WjAzMTEwLwYDVQQD
Eyg3OTBiODZmZDRiM2IwNTI1MDhjM2E5YzkyNDVmMjlkZDFlMDM5YTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/ExKhxYCadbP9JAiXx88kPvSXZh
0LcgwRUhDmTNFBRf+7Q193bxIIifbiCkmy2AflH7T5vtuo4HAhYB3Flq3T0FqqxS
6gx7P3uejaUGXfGVAVf85LKNOE2a+VwcVcu9mTAM2iPta1zxfrTA44LTgJDROdwH
H8FDNs2PDUe30o2jb38sMCEUBnVnonZnFGthiJdnDcPeb8YTrMt2phnYf0NTqayL
6BCoW2QQyhpFmV/Uz0z221iU1sfF49xrGcL/gvAQxv8mQxTXjo84NNN30JrhCAbc
ejNYdpvQimM88wNAgbew7hIKAUY/OciswTbF5zGcXeR5S58dtoySSI+L0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHkLhv1LOwUlCMOpySRfKd0eA5oOMB8GA1UdIwQY
MBaAFD+BqOjHW1j30e/Uw+ZSLSeGP5zPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDRHbzZNZGJXUGZSNzlURDVsSXRKNFlfbk04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9lYjdmN2UtYTg4MC00OTdiLWI1NGMt
YjcwOGM0MGE2NjdmLzEvUDRHbzZNZGJXUGZSNzlURDVsSXRKNFlfbk04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9lYjdmN2UtYTg4MC00OTdiLWI1NGMtYjcwOGM0MGE2Njdm
LzEvUDRHbzZNZGJXUGZSNzlURDVsSXRKNFlfbk04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADhimI6cG
D9rYN2+yRKgvSn3bpGZKyuPTJ8sSVPyUoseQc7sfAb1HcAHcoirrsBXgzXt3TYw7
nwaYmA2Nyil/dsVVW5KGcFZUiLTlVN11GRcype/cyK86Qb6VM8BTrDRPzVwNgWFw
1Kv6fUyE3YzN+wdIp+kCub9/ECFMVnhz5lloFAzkwvEYYU37TJYuJ1eEnMfRddX9
qoDL7OWhmf20wtwVoIt2+JrL1EZBCxmxLctrI/TKW+0IOjhChEo4Rj7xPl6BgLeH
RjNPlId3FgjhbOVu74VSAlsNurM0c0gIEffuTwzHxsQu79rPPLKgORjuTYkVJH0c
6oru7h5quuuzKw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:37:07 2025 by rpki-client