Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.mft
File: r4Tj0j_2C4KeFG69q0oK5h3g9Ps.mft (raw, json)
Hash identifier: OHvTZCQP4fep3tAmZWvCghfoGadPkSUQ9YRi209bCMk=
Subject key identifier: 33:E5:8D:F9:DD:CD:32:5C:8E:25:CD:01:72:8B:7B:9B:D9:E1:30:20
Authority key identifier: AF:84:E3:D2:3F:F6:0B:82:9E:14:6E:BD:AB:4A:0A:E6:1D:E0:F4:FB
Certificate issuer: /CN=af84e3d23ff60b829e146ebdab4a0ae61de0f4fb
Certificate serial: 0199FBEBCB4874F06B91019CE173E1E41203
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.mft
Manifest number: 0182
Signing time: Sun 19 Oct 2025 10:02:38 +0000
Manifest this update: Sun 19 Oct 2025 10:02:38 +0000
Manifest next update: Mon 20 Oct 2025 10:02:38 +0000
Files and hashes: 1: Sj_-Ptmp5l-zNzTgHXDKWr6DNsQ.roa (hash: S/l02EQhWoa3TBsVB+OnLc92uLdAeVgn7Z4178pnmT4=)
2: r4Tj0j_2C4KeFG69q0oK5h3g9Ps.crl (hash: 2vNgX/AB3IbwhxeE5P4LLrbEtNyAqRiaU4UeaQNCpCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:cb:48:74:f0:6b:91:01:9c:e1:73:e1:e4:12:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af84e3d23ff60b829e146ebdab4a0ae61de0f4fb
Validity
Not Before: Oct 19 10:02:38 2025 GMT
Not After : Oct 20 10:02:38 2025 GMT
Subject: CN=33e58df9ddcd325c8e25cd01728b7b9bd9e13020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:41:86:36:0d:77:41:cb:57:d8:f8:30:58:ea:
b3:d9:21:0e:08:57:66:83:19:27:f4:a1:da:1f:2c:
31:8e:35:18:39:57:fd:93:3d:4d:af:ef:68:da:54:
d4:f6:21:a9:5b:03:93:61:f7:6c:07:1e:7f:ce:f7:
84:15:42:a9:b3:92:c5:79:d6:a7:78:6c:bc:cb:9c:
0c:e9:39:e7:3b:ec:e2:6d:13:73:7a:3c:ca:65:0a:
3f:55:c6:ca:63:2f:93:49:8f:2a:52:46:75:5a:2c:
52:76:7e:46:b7:a6:5f:f2:28:6f:2c:c8:10:65:0a:
9a:af:00:ea:84:bf:2f:3e:0a:8f:6d:1a:6c:74:c8:
c6:cc:05:c9:d0:a0:91:9b:4f:aa:32:a6:f9:bd:2c:
6e:7f:6c:a7:bf:a2:75:32:83:ba:21:9d:1e:7f:d9:
f7:7f:56:d6:a8:a7:5e:33:df:aa:e2:55:b3:12:22:
f6:9e:1d:0a:8b:a3:38:dd:b1:70:5a:18:54:b8:fc:
42:4b:4b:10:15:70:00:f1:bf:7c:7d:09:46:5f:38:
1f:27:e5:b3:f6:7c:a5:b7:6a:8a:36:02:f8:f4:8b:
3e:b1:54:5d:80:15:db:52:76:84:4a:b5:d4:e7:22:
d4:79:d2:b2:58:ea:8f:3d:97:93:a9:e9:1a:8a:4a:
9a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E5:8D:F9:DD:CD:32:5C:8E:25:CD:01:72:8B:7B:9B:D9:E1:30:20
X509v3 Authority Key Identifier:
keyid:AF:84:E3:D2:3F:F6:0B:82:9E:14:6E:BD:AB:4A:0A:E6:1D:E0:F4:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:17:b7:95:8a:6a:b4:fe:f8:a0:38:ab:2d:e8:15:38:49:10:
1a:0a:36:e7:65:26:80:d1:a3:3c:01:50:d9:94:94:9d:a1:46:
ee:02:aa:d5:77:39:0c:a7:01:ad:58:86:52:4c:55:8b:6a:1c:
42:b3:4f:67:52:ec:4b:0e:0b:a6:ee:46:98:b6:5c:5c:ea:8c:
eb:ad:ec:68:8e:01:ae:a3:bf:f1:dc:9d:ba:16:4f:61:28:51:
7a:d7:23:73:8c:7d:41:3f:c1:95:a8:bc:9e:0d:3f:5e:53:44:
b4:b7:9c:ea:d3:ce:23:13:b1:99:1b:d4:14:9d:e0:a2:77:3b:
a1:d7:49:60:13:48:9c:a9:10:4d:52:86:ae:4a:5c:1a:34:5c:
8d:ad:25:bc:4d:78:dc:c8:7c:f9:38:e5:c3:6f:6e:b5:2d:ae:
54:88:7f:b8:2b:8e:30:1f:1f:81:45:70:ef:0a:f2:a9:22:61:
bc:d8:47:bb:95:19:2b:7c:bd:15:da:8d:22:64:e8:05:27:5e:
b3:0d:f4:71:e7:c0:ba:7a:f6:2f:f1:9a:f6:a5:41:0c:06:96:
54:dd:5e:22:6b:5c:77:7b:57:82:ca:cd:12:c1:e8:19:af:0c:
4d:c0:9f:e1:98:90:27:5e:09:c5:e0:94:38:2f:86:a1:3b:96:
40:14:06:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn768tIdPBrkQGc4XPh5BIDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmODRlM2QyM2ZmNjBiODI5ZTE0NmViZGFiNGEwYWU2MWRl
MGY0ZmIwHhcNMjUxMDE5MTAwMjM4WhcNMjUxMDIwMTAwMjM4WjAzMTEwLwYDVQQD
EygzM2U1OGRmOWRkY2QzMjVjOGUyNWNkMDE3MjhiN2I5YmQ5ZTEzMDIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UGGNg13QctX2PgwWOqz2SEOCFdm
gxkn9KHaHywxjjUYOVf9kz1Nr+9o2lTU9iGpWwOTYfdsBx5/zveEFUKps5LFedan
eGy8y5wM6TnnO+zibRNzejzKZQo/VcbKYy+TSY8qUkZ1WixSdn5Gt6Zf8ihvLMgQ
ZQqarwDqhL8vPgqPbRpsdMjGzAXJ0KCRm0+qMqb5vSxuf2ynv6J1MoO6IZ0ef9n3
f1bWqKdeM9+q4lWzEiL2nh0Ki6M43bFwWhhUuPxCS0sQFXAA8b98fQlGXzgfJ+Wz
9nylt2qKNgL49Is+sVRdgBXbUnaESrXU5yLUedKyWOqPPZeTqekaikqaHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDPljfndzTJcjiXNAXKLe5vZ4TAgMB8GA1UdIwQY
MBaAFK+E49I/9guCnhRuvatKCuYd4PT7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjRUajBqXzJDNEtlRkc2OXEwb0s1aDNnOVBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9iYTIzOTEtMDVhMS00YmNiLWE2MWQt
ZTVkOGUzNzUwMDA5LzEvcjRUajBqXzJDNEtlRkc2OXEwb0s1aDNnOVBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9iYTIzOTEtMDVhMS00YmNiLWE2MWQtZTVkOGUzNzUwMDA5
LzEvcjRUajBqXzJDNEtlRkc2OXEwb0s1aDNnOVBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANhe3lYpq
tP74oDirLegVOEkQGgo252UmgNGjPAFQ2ZSUnaFG7gKq1Xc5DKcBrViGUkxVi2oc
QrNPZ1LsSw4Lpu5GmLZcXOqM663saI4BrqO/8dyduhZPYShRetcjc4x9QT/Blai8
ng0/XlNEtLec6tPOIxOxmRvUFJ3gonc7oddJYBNInKkQTVKGrkpcGjRcja0lvE14
3Mh8+Tjlw29utS2uVIh/uCuOMB8fgUVw7wryqSJhvNhHu5UZK3y9FdqNImToBSde
sw30cefAunr2L/Ga9qVBDAaWVN1eImtcd3tXgsrNEsHoGa8MTcCf4ZiQJ14JxeCU
OC+GoTuWQBQGvQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:22 2025 by rpki-client