Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.mft
File: 4RlTX6w_pId5V5vOj8O0At7yy0Q.mft (raw, json)
Hash identifier: IFkahbOB0fk/5nXatlTBWCQgOUkhFKwx9T4Klz3h5RI=
Subject key identifier: 18:F7:B6:1F:26:38:B3:0F:C5:96:F7:4F:B8:97:1D:2E:B6:25:89:A8
Authority key identifier: E1:19:53:5F:AC:3F:A4:87:79:57:9B:CE:8F:C3:B4:02:DE:F2:CB:44
Certificate issuer: /CN=e119535fac3fa48779579bce8fc3b402def2cb44
Certificate serial: 019A4EF5BCFA272F74D719995DF255387F72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4RlTX6w_pId5V5vOj8O0At7yy0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.mft
Manifest number: 06E4
Signing time: Tue 04 Nov 2025 13:01:58 +0000
Manifest this update: Tue 04 Nov 2025 13:01:58 +0000
Manifest next update: Wed 05 Nov 2025 13:01:58 +0000
Files and hashes: 1: 4RlTX6w_pId5V5vOj8O0At7yy0Q.crl (hash: 9xOVpExEXbNIghGNVxeKyzpwRHYkR9hYoL2EtHuhGOE=)
2: soe--L3Zv3Ab_c4ax7SKPcclEEk.roa (hash: EM4MaU25MU3aJWehslBE3y3dfKuyrb7A7eUnc8kofN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/4RlTX6w_pId5V5vOj8O0At7yy0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:bc:fa:27:2f:74:d7:19:99:5d:f2:55:38:7f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e119535fac3fa48779579bce8fc3b402def2cb44
Validity
Not Before: Nov 4 13:01:58 2025 GMT
Not After : Nov 5 13:01:58 2025 GMT
Subject: CN=18f7b61f2638b30fc596f74fb8971d2eb62589a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4b:86:7b:78:8d:1a:5a:f7:38:50:93:0a:c2:
7c:94:af:32:f1:d9:7c:b2:82:95:51:3f:55:ab:c5:
bf:db:19:e0:4b:65:67:1d:e4:6a:b7:ce:3f:f5:7f:
65:e1:66:e9:b9:23:0c:d0:cd:11:5a:f2:62:e9:d3:
83:98:e8:91:f6:02:2b:55:93:6e:7a:de:e1:9c:82:
d5:5b:b1:05:c3:18:b2:4c:a3:ed:4c:eb:b6:89:3e:
8f:29:91:4c:5b:ff:58:39:4a:36:fa:37:bc:27:e4:
e7:bb:3e:cc:cc:1d:a7:25:29:05:df:a2:48:19:a1:
27:3d:6a:89:00:74:24:49:63:cc:9e:4a:0b:d5:9d:
e9:a0:d0:1d:05:d1:67:81:c8:fb:c3:ae:62:e8:3c:
30:80:9e:0b:ba:58:11:af:b6:09:a1:20:9a:94:4d:
c5:4e:fd:58:6f:14:37:05:17:6c:51:44:e6:69:ad:
95:5f:04:7d:e0:24:02:5c:ec:d2:f0:30:e9:ae:0c:
8b:ce:9b:1d:e8:32:57:e0:63:b1:a0:53:db:48:1d:
aa:99:bb:db:69:29:85:a6:fb:d9:3c:cb:7f:4a:ee:
9a:e6:c3:22:75:80:fb:eb:2d:1a:69:58:fa:cf:e2:
fa:08:d6:e0:14:88:58:fd:27:3d:da:88:37:0d:58:
cc:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F7:B6:1F:26:38:B3:0F:C5:96:F7:4F:B8:97:1D:2E:B6:25:89:A8
X509v3 Authority Key Identifier:
keyid:E1:19:53:5F:AC:3F:A4:87:79:57:9B:CE:8F:C3:B4:02:DE:F2:CB:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4RlTX6w_pId5V5vOj8O0At7yy0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:22:fe:9b:24:2a:2f:dc:b8:98:f9:37:97:96:bd:db:52:55:
5c:e1:ef:25:cc:3e:3e:b1:d9:2e:eb:3d:c4:09:aa:5c:ce:0f:
82:6c:eb:f0:a6:28:aa:7a:8b:a6:19:d0:c7:e8:ad:32:94:9d:
20:b4:f1:47:31:85:96:b8:60:7d:f5:ae:80:c6:20:7d:d7:b2:
e0:88:3e:a5:7d:89:6a:b3:60:5a:4a:61:d7:92:f4:6f:97:46:
9a:c2:0b:94:2f:d9:99:7f:1f:5b:f5:1c:25:ea:ce:03:1c:fb:
db:5f:d4:a3:a0:87:ce:a3:0f:90:0f:70:8d:15:ac:ca:d1:52:
da:ab:ad:00:1f:b9:7a:e2:93:d5:b6:89:1c:8f:85:5f:65:43:
52:bc:bb:c7:f4:8b:06:2c:3b:1f:38:a6:4f:95:cc:86:b1:f0:
bf:80:85:20:35:8c:cc:3e:7a:1c:7e:ba:21:ab:92:73:ea:7e:
d8:14:67:dd:41:f7:f9:09:ff:6f:ab:ab:85:d6:b2:92:a3:71:
e8:a1:0a:35:48:8f:b9:ba:4d:2a:f8:6f:7e:1b:64:0a:a1:35:
a1:18:31:45:de:71:b5:e9:1c:e1:f7:15:61:ae:36:6c:ed:38:
08:3c:04:42:49:5d:11:88:e1:15:e3:f1:36:3c:23:9f:18:cc:
96:ca:02:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9bz6Jy901xmZXfJVOH9yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMTk1MzVmYWMzZmE0ODc3OTU3OWJjZThmYzNiNDAyZGVm
MmNiNDQwHhcNMjUxMTA0MTMwMTU4WhcNMjUxMTA1MTMwMTU4WjAzMTEwLwYDVQQD
EygxOGY3YjYxZjI2MzhiMzBmYzU5NmY3NGZiODk3MWQyZWI2MjU4OWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkuGe3iNGlr3OFCTCsJ8lK8y8dl8
soKVUT9Vq8W/2xngS2VnHeRqt84/9X9l4WbpuSMM0M0RWvJi6dODmOiR9gIrVZNu
et7hnILVW7EFwxiyTKPtTOu2iT6PKZFMW/9YOUo2+je8J+Tnuz7MzB2nJSkF36JI
GaEnPWqJAHQkSWPMnkoL1Z3poNAdBdFngcj7w65i6DwwgJ4LulgRr7YJoSCalE3F
Tv1YbxQ3BRdsUUTmaa2VXwR94CQCXOzS8DDprgyLzpsd6DJX4GOxoFPbSB2qmbvb
aSmFpvvZPMt/Su6a5sMidYD76y0aaVj6z+L6CNbgFIhY/Sc92og3DVjM6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBj3th8mOLMPxZb3T7iXHS62JYmoMB8GA1UdIwQY
MBaAFOEZU1+sP6SHeVebzo/DtALe8stEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFJsVFg2d19wSWQ1VjV2T2o4TzBBdDd5eTBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi85Yjg3ZDQtZTBmOS00MjNkLWFmOWQt
ZGU5ZTI3ZWJiMjVkLzEvNFJsVFg2d19wSWQ1VjV2T2o4TzBBdDd5eTBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi85Yjg3ZDQtZTBmOS00MjNkLWFmOWQtZGU5ZTI3ZWJiMjVk
LzEvNFJsVFg2d19wSWQ1VjV2T2o4TzBBdDd5eTBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfyL+myQq
L9y4mPk3l5a921JVXOHvJcw+PrHZLus9xAmqXM4Pgmzr8KYoqnqLphnQx+itMpSd
ILTxRzGFlrhgffWugMYgfdey4Ig+pX2JarNgWkph15L0b5dGmsILlC/ZmX8fW/Uc
JerOAxz721/Uo6CHzqMPkA9wjRWsytFS2qutAB+5euKT1baJHI+FX2VDUry7x/SL
Biw7HzimT5XMhrHwv4CFIDWMzD56HH66IauSc+p+2BRn3UH3+Qn/b6urhdaykqNx
6KEKNUiPubpNKvhvfhtkCqE1oRgxRd5xtekc4fcVYa42bO04CDwEQkldEYjhFePx
NjwjnxjMlsoCUA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 23:40:27 2025 by rpki-client