Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
File: 4FotrPXdTpv6LS2bLTw_lnh0WEE.mft (raw, json)
Hash identifier: Z4wW6caIhTxXc2Fw/qw9Gbw16DBxOSfx4CVGfkB8Avg=
Subject key identifier: 5B:65:EE:74:EB:AB:0B:82:26:BE:77:DF:23:D2:12:BC:53:C4:8A:8F
Authority key identifier: E0:5A:2D:AC:F5:DD:4E:9B:FA:2D:2D:9B:2D:3C:3F:96:78:74:58:41
Certificate issuer: /CN=e05a2dacf5dd4e9bfa2d2d9b2d3c3f9678745841
Certificate serial: 0199FD6B6A979CE57ADCD356A8B8F3C91E31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 17:01:39 +0000
Manifest this update: Sun 19 Oct 2025 17:01:39 +0000
Manifest next update: Mon 20 Oct 2025 17:01:39 +0000
Files and hashes: 1: 4FotrPXdTpv6LS2bLTw_lnh0WEE.crl (hash: CMxcJmMCpD88Eyo8eyOZSTTNuEXCrqEoSF6XmsGJeQA=)
2: BS790JJGQ7DZlNZUL_em5Su64B4.roa (hash: VVqWBTRMk3+7j4zbJrp8La5lSHjcZGiKvxZueV8Sl7A=)
3: UJGm2ryO8HuvxtqrnMckm6HvQuw.roa (hash: LmIHTI0l7Czq42uu144MFysAfpmWgQRM3SWHkhVtvVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:6a:97:9c:e5:7a:dc:d3:56:a8:b8:f3:c9:1e:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e05a2dacf5dd4e9bfa2d2d9b2d3c3f9678745841
Validity
Not Before: Oct 19 17:01:39 2025 GMT
Not After : Oct 20 17:01:39 2025 GMT
Subject: CN=5b65ee74ebab0b8226be77df23d212bc53c48a8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b0:a3:64:dc:44:ec:9a:80:db:50:0e:30:01:
74:4b:1e:16:ba:8e:09:e3:2b:54:eb:db:8f:6e:b9:
34:c4:f8:16:3f:20:ce:6e:3b:d9:c0:49:23:be:c9:
a1:b4:30:3d:24:e4:c3:4b:e3:a4:4c:09:9b:83:eb:
75:f6:d2:5b:59:c6:dc:c4:34:9b:03:86:46:30:39:
a5:32:5b:78:fa:07:08:d7:ad:fa:df:d0:81:7c:44:
ec:23:5f:d9:ad:50:ad:8b:61:ae:74:78:d2:dd:65:
d5:91:91:7e:6a:f4:5f:b6:59:c3:c0:74:3c:9d:55:
61:ce:26:31:c7:34:c0:d5:fa:7d:ca:de:9d:ee:9e:
4d:32:5f:e2:a9:34:3a:37:59:23:26:ff:6e:5e:37:
ba:93:fd:34:f5:ef:7b:28:27:9b:d8:d8:0c:06:97:
a1:47:ac:5f:14:77:1e:3a:cb:db:8e:38:33:43:30:
c5:cb:83:9f:db:0a:9e:4f:65:f3:ba:a0:b3:78:38:
31:4b:20:01:3d:b2:35:1c:44:e8:af:ab:02:69:b5:
4d:28:87:b4:cd:83:c8:51:e1:80:62:51:71:e6:79:
38:87:f7:47:6c:46:ec:ce:89:0f:24:47:9e:03:aa:
16:1e:36:44:03:23:11:6b:6d:ac:da:e5:43:39:fc:
16:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:65:EE:74:EB:AB:0B:82:26:BE:77:DF:23:D2:12:BC:53:C4:8A:8F
X509v3 Authority Key Identifier:
keyid:E0:5A:2D:AC:F5:DD:4E:9B:FA:2D:2D:9B:2D:3C:3F:96:78:74:58:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:ce:8c:c3:c6:d4:9c:7d:6a:11:bd:d2:36:5b:70:14:14:d5:
02:a0:f2:45:9e:61:5a:96:5e:52:f0:05:bb:a6:91:de:a7:97:
42:9a:3b:4c:f1:2a:93:28:cf:3e:dd:9a:a6:2d:19:55:c2:e8:
e0:5f:52:5a:4d:6f:e1:00:e3:62:85:d1:fe:56:ab:24:60:67:
a9:28:7c:1e:37:fa:1f:cb:49:e5:41:35:cd:53:61:5e:c9:c7:
bb:e4:bf:4b:ba:e4:3a:8d:a0:72:8f:2c:8b:51:c7:d2:4b:bd:
37:39:50:16:69:c6:1b:ae:db:fa:e3:2d:82:fe:1a:8d:4c:5b:
99:86:c0:38:bf:44:a2:6f:a5:86:6f:e1:bd:9b:3f:03:91:90:
af:90:b9:aa:66:c7:9d:a0:64:9f:a9:6a:e4:8e:c0:08:3b:ff:
04:93:70:cc:9d:1f:ee:00:3c:49:98:3b:69:f4:bb:c8:31:84:
44:38:fa:ee:d8:34:92:83:c5:85:50:ab:88:7d:77:16:ed:96:
88:d3:0b:d0:4c:a1:31:59:cf:0f:bb:fb:b2:4b:f9:12:06:1e:
05:03:77:d1:b6:9b:dc:3d:6e:6f:44:4d:e3:62:9d:35:b6:fc:
d4:07:1b:01:28:a2:15:ea:d1:3e:e2:03:5f:5f:e3:f3:a5:96:
bb:7e:85:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9a2qXnOV63NNWqLjzyR4xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNWEyZGFjZjVkZDRlOWJmYTJkMmQ5YjJkM2MzZjk2Nzg3
NDU4NDEwHhcNMjUxMDE5MTcwMTM5WhcNMjUxMDIwMTcwMTM5WjAzMTEwLwYDVQQD
Eyg1YjY1ZWU3NGViYWIwYjgyMjZiZTc3ZGYyM2QyMTJiYzUzYzQ4YThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLCjZNxE7JqA21AOMAF0Sx4Wuo4J
4ytU69uPbrk0xPgWPyDObjvZwEkjvsmhtDA9JOTDS+OkTAmbg+t19tJbWcbcxDSb
A4ZGMDmlMlt4+gcI163639CBfETsI1/ZrVCti2GudHjS3WXVkZF+avRftlnDwHQ8
nVVhziYxxzTA1fp9yt6d7p5NMl/iqTQ6N1kjJv9uXje6k/009e97KCeb2NgMBpeh
R6xfFHceOsvbjjgzQzDFy4Of2wqeT2XzuqCzeDgxSyABPbI1HETor6sCabVNKIe0
zYPIUeGAYlFx5nk4h/dHbEbszokPJEeeA6oWHjZEAyMRa22s2uVDOfwWkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFtl7nTrqwuCJr533yPSErxTxIqPMB8GA1UdIwQY
MBaAFOBaLaz13U6b+i0tmy08P5Z4dFhBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEZvdHJQWGRUcHY2TFMyYkxUd19sbmgwV0VFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8wMTAwMGItYWE5Ni00YmM2LThjYzEt
YWYwN2E5ZTg3ZmMwLzEvNEZvdHJQWGRUcHY2TFMyYkxUd19sbmgwV0VFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS8wMTAwMGItYWE5Ni00YmM2LThjYzEtYWYwN2E5ZTg3ZmMw
LzEvNEZvdHJQWGRUcHY2TFMyYkxUd19sbmgwV0VFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmM6Mw8bU
nH1qEb3SNltwFBTVAqDyRZ5hWpZeUvAFu6aR3qeXQpo7TPEqkyjPPt2api0ZVcLo
4F9SWk1v4QDjYoXR/larJGBnqSh8Hjf6H8tJ5UE1zVNhXsnHu+S/S7rkOo2gco8s
i1HH0ku9NzlQFmnGG67b+uMtgv4ajUxbmYbAOL9Eom+lhm/hvZs/A5GQr5C5qmbH
naBkn6lq5I7ACDv/BJNwzJ0f7gA8SZg7afS7yDGERDj67tg0koPFhVCriH13Fu2W
iNML0EyhMVnPD7v7skv5EgYeBQN30bab3D1ub0RN42KdNbb81AcbASiiFerRPuID
X1/j86WWu36FEg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 19:54:35 2025 by rpki-client