Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft
File: 4fP23EYQ9sm7qkUyERc45JO2rfA.mft (raw, json)
Hash identifier: b06nPRL7BoBkU9w/mk155g8pRfNSXYihUAQWkYLZNe4=
Subject key identifier: 79:C8:A1:A1:EB:C6:C0:04:63:36:D4:D6:B8:59:0A:62:74:ED:70:05
Authority key identifier: E1:F3:F6:DC:46:10:F6:C9:BB:AA:45:32:11:17:38:E4:93:B6:AD:F0
Certificate issuer: /CN=e1f3f6dc4610f6c9bbaa4532111738e493b6adf0
Certificate serial: 019A0592FFEA34DE8FF24B1FF6148F52F255
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fP23EYQ9sm7qkUyERc45JO2rfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft
Manifest number: 04E9
Signing time: Tue 21 Oct 2025 07:01:51 +0000
Manifest this update: Tue 21 Oct 2025 07:01:51 +0000
Manifest next update: Wed 22 Oct 2025 07:01:51 +0000
Files and hashes: 1: 0jdBY_E5YLyLUu_FzsB8buFy_Wg.roa (hash: m69bij1M0dFLciXpzKZZy7Clt1a/35aqA5PNXsZojag=)
2: 4fP23EYQ9sm7qkUyERc45JO2rfA.crl (hash: hsiIW/BgsTxEMQeK7Kvm9q6a7rGqaUZsavurcW/4mtU=)
3: xDz5khWz84DZoygENZz9smDY9DE.roa (hash: ImBhN/9eW34k/DBkodgK0kDXEWCtP6C29MLbYuo8Lq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fP23EYQ9sm7qkUyERc45JO2rfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 07:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:92:ff:ea:34:de:8f:f2:4b:1f:f6:14:8f:52:f2:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f3f6dc4610f6c9bbaa4532111738e493b6adf0
Validity
Not Before: Oct 21 07:01:51 2025 GMT
Not After : Oct 22 07:01:51 2025 GMT
Subject: CN=79c8a1a1ebc6c0046336d4d6b8590a6274ed7005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:92:0c:a2:5c:86:0a:23:46:a1:60:a7:cc:31:
5e:17:2f:c6:43:2f:b1:56:86:ff:8d:1f:88:c9:cf:
84:80:3a:d5:53:c8:8b:f4:c7:c9:d4:74:b8:10:b0:
6a:5c:d0:36:42:c6:34:2d:16:b3:62:18:e1:63:c9:
de:ef:0d:79:87:aa:c9:1b:7f:0d:77:bb:b9:50:60:
07:fb:65:81:53:09:1b:c3:16:b7:73:19:1f:97:bc:
28:1c:d8:b6:53:75:42:2c:44:21:f8:30:5d:8d:a0:
24:72:12:ed:ed:87:19:54:9e:0b:8e:c7:db:e4:df:
8a:95:e9:8a:56:f5:10:9b:9d:1b:64:74:d6:a8:48:
75:95:6a:ef:03:08:b9:9a:72:a4:04:32:fb:07:ae:
97:65:6b:6c:01:3f:56:9b:02:7e:09:c7:99:bc:6c:
f9:5b:a3:41:02:0c:b2:05:eb:e8:15:87:5f:74:8f:
74:f1:b1:a7:e5:c9:d7:63:cb:f4:09:ca:0e:60:9e:
ca:fa:dc:f8:99:7d:8d:0a:3d:d4:7f:42:3a:16:9b:
c9:c7:43:6e:3f:d7:4c:e4:8a:79:ae:1a:ee:26:b9:
c7:1d:ce:73:2d:3c:47:2e:64:c9:7b:a1:b1:50:60:
ac:da:d6:43:ef:8d:61:26:3c:21:d8:cc:9e:b9:7d:
08:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:C8:A1:A1:EB:C6:C0:04:63:36:D4:D6:B8:59:0A:62:74:ED:70:05
X509v3 Authority Key Identifier:
keyid:E1:F3:F6:DC:46:10:F6:C9:BB:AA:45:32:11:17:38:E4:93:B6:AD:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fP23EYQ9sm7qkUyERc45JO2rfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:0c:e7:db:04:60:b6:dd:d7:e0:5c:08:bf:f1:f3:10:85:d5:
e9:94:8b:75:04:f9:88:9d:74:ab:e8:15:09:04:8b:4d:13:54:
1e:fc:eb:f5:a1:1a:6d:a1:ae:67:cd:8e:c6:b4:ca:01:3d:cf:
c6:27:88:13:11:15:f2:5b:c3:02:a6:a3:c0:c9:52:da:94:4c:
ef:37:17:94:c0:b4:68:c0:6f:4e:2c:ac:07:9e:6b:2e:bb:58:
b7:8b:24:c2:32:86:e5:46:9f:d5:4e:ec:fb:f6:74:d4:e7:ec:
ca:5c:41:5e:8d:e2:07:72:85:1e:8d:17:53:5e:d7:b0:c0:a9:
9b:2a:29:37:c3:1b:b3:7e:dc:44:70:af:fe:48:51:82:95:24:
35:9f:74:ef:f9:56:4d:9a:64:d4:2b:65:89:a1:35:2f:4f:6b:
d6:f6:27:4a:57:55:a0:cf:0a:cf:c1:02:82:a0:77:34:0b:70:
b2:03:80:96:ad:a3:05:51:a5:12:fd:d9:a2:c7:2d:b9:8d:cd:
98:5a:2e:d9:d7:09:26:f8:ce:74:47:36:e2:80:f3:09:73:aa:
59:bb:88:ce:52:b3:ae:7b:77:ba:20:72:33:f8:4d:e4:01:a0:
90:d1:9d:7a:7f:76:be:20:18:60:cf:6a:25:88:53:e0:65:3e:
82:2f:2f:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoFkv/qNN6P8ksf9hSPUvJVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxZjNmNmRjNDYxMGY2YzliYmFhNDUzMjExMTczOGU0OTNi
NmFkZjAwHhcNMjUxMDIxMDcwMTUxWhcNMjUxMDIyMDcwMTUxWjAzMTEwLwYDVQQD
Eyg3OWM4YTFhMWViYzZjMDA0NjMzNmQ0ZDZiODU5MGE2Mjc0ZWQ3MDA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpIMolyGCiNGoWCnzDFeFy/GQy+x
Vob/jR+Iyc+EgDrVU8iL9MfJ1HS4ELBqXNA2QsY0LRazYhjhY8ne7w15h6rJG38N
d7u5UGAH+2WBUwkbwxa3cxkfl7woHNi2U3VCLEQh+DBdjaAkchLt7YcZVJ4Ljsfb
5N+KlemKVvUQm50bZHTWqEh1lWrvAwi5mnKkBDL7B66XZWtsAT9WmwJ+CceZvGz5
W6NBAgyyBevoFYdfdI908bGn5cnXY8v0CcoOYJ7K+tz4mX2NCj3Uf0I6FpvJx0Nu
P9dM5Ip5rhruJrnHHc5zLTxHLmTJe6GxUGCs2tZD741hJjwh2MyeuX0IDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHnIoaHrxsAEYzbU1rhZCmJ07XAFMB8GA1UdIwQY
MBaAFOHz9txGEPbJu6pFMhEXOOSTtq3wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGZQMjNFWVE5c203cWtVeUVSYzQ1Sk8ycmZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iMzYxMzItY2E3Ny00NTg0LThkN2It
MjkxYjdhZDA5M2JmLzEvNGZQMjNFWVE5c203cWtVeUVSYzQ1Sk8ycmZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9iMzYxMzItY2E3Ny00NTg0LThkN2ItMjkxYjdhZDA5M2Jm
LzEvNGZQMjNFWVE5c203cWtVeUVSYzQ1Sk8ycmZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHAzn2wRg
tt3X4FwIv/HzEIXV6ZSLdQT5iJ10q+gVCQSLTRNUHvzr9aEabaGuZ82OxrTKAT3P
xieIExEV8lvDAqajwMlS2pRM7zcXlMC0aMBvTiysB55rLrtYt4skwjKG5Uaf1U7s
+/Z01OfsylxBXo3iB3KFHo0XU17XsMCpmyopN8Mbs37cRHCv/khRgpUkNZ907/lW
TZpk1CtliaE1L09r1vYnSldVoM8Kz8ECgqB3NAtwsgOAlq2jBVGlEv3ZosctuY3N
mFou2dcJJvjOdEc24oDzCXOqWbuIzlKzrnt3uiByM/hN5AGgkNGden92viAYYM9q
JYhT4GU+gi8vNg==
-----END CERTIFICATE-----
Generated at Tue Oct 21 10:59:50 2025 by rpki-client