Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft
File: 4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft (raw, json)
Hash identifier: JuFBhQOuRV8XjtRb/k0h0LvYyhmuvEkrvqLT7gEV4vU=
Subject key identifier: DD:34:CC:4C:78:33:EE:FF:70:A9:02:54:13:03:B1:5A:ED:05:83:7C
Authority key identifier: E0:77:6B:08:38:FA:0E:1D:A1:BE:4E:DC:CF:89:24:BD:41:3B:1D:B7
Certificate issuer: /CN=e0776b0838fa0e1da1be4edccf8924bd413b1db7
Certificate serial: 0199FD6B277B4DAB292301D095FE915226C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft
Manifest number: 0278
Signing time: Sun 19 Oct 2025 17:01:22 +0000
Manifest this update: Sun 19 Oct 2025 17:01:22 +0000
Manifest next update: Mon 20 Oct 2025 17:01:22 +0000
Files and hashes: 1: 4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.crl (hash: D/8PNyyPmVV9wSVtpxtf/fxZsAbQBhzh/M9GqhGzWq0=)
2: U8sue3gZLueOLUNHI3zh7NTbaBA.roa (hash: aGzdRWMTM0/YLdPvutTc1s3WsmhuwZtks1XpZ/1ew6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:27:7b:4d:ab:29:23:01:d0:95:fe:91:52:26:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0776b0838fa0e1da1be4edccf8924bd413b1db7
Validity
Not Before: Oct 19 17:01:22 2025 GMT
Not After : Oct 20 17:01:22 2025 GMT
Subject: CN=dd34cc4c7833eeff70a902541303b15aed05837c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:77:75:93:ac:df:c0:20:55:f0:78:e0:83:b4:
52:07:77:e8:bf:41:29:5f:67:12:bf:0a:89:f9:0b:
2a:66:03:8a:7a:32:c9:2a:d7:7a:c8:97:78:1a:7f:
1c:da:d4:13:92:29:f9:c9:f9:db:bd:b3:f9:e1:8c:
8d:a7:f0:d1:8c:aa:dd:ff:ef:5f:a7:a5:b8:00:48:
50:95:32:ee:8c:34:d6:65:bf:c0:c5:fe:77:00:1d:
bf:0b:e7:4f:24:ba:49:cc:54:a1:34:be:2e:b5:f0:
57:f5:50:c5:96:e2:7b:fa:75:50:ef:b2:6a:a8:28:
09:3d:11:83:01:44:9e:6d:30:4f:d7:44:1b:40:b6:
75:a8:6e:05:a8:ad:ee:fa:6d:53:5c:27:e1:fd:d4:
e3:dd:4d:7a:ba:dd:f7:6a:0a:a4:15:be:a8:cb:bd:
6a:3b:01:58:7c:41:6c:77:c6:b9:d3:ec:c6:cc:cf:
ee:4a:63:43:78:9e:78:5b:f4:25:bb:9e:95:c8:d9:
a3:03:ef:3b:e5:ea:c9:96:7e:20:72:de:44:fc:dc:
ee:42:b1:9e:86:b2:bd:69:eb:02:5b:ae:03:7a:dc:
87:93:31:ad:99:49:b4:10:c7:a3:b9:1e:1d:96:d8:
0e:08:ab:78:b3:56:ea:8b:0c:d6:8d:46:17:ed:42:
8c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:34:CC:4C:78:33:EE:FF:70:A9:02:54:13:03:B1:5A:ED:05:83:7C
X509v3 Authority Key Identifier:
keyid:E0:77:6B:08:38:FA:0E:1D:A1:BE:4E:DC:CF:89:24:BD:41:3B:1D:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:7d:98:80:55:ec:47:e6:e7:df:ad:24:d6:ab:50:58:c9:69:
b9:ca:d6:24:2e:e0:4e:72:59:b4:5c:50:7b:62:1d:9b:44:17:
d3:b5:72:3a:f6:31:e8:f5:e9:8a:2c:67:9c:1a:e7:df:cc:1e:
36:f0:82:31:b5:ba:7f:cc:82:0d:01:c1:d0:1e:7e:8c:c1:a9:
af:a6:03:26:58:3c:ff:a7:31:dd:95:57:79:70:19:fc:2d:6f:
ca:86:58:5b:8d:0c:3e:63:b1:5a:10:e7:79:d9:a0:53:79:d3:
df:ae:29:33:aa:cc:1a:30:c5:a6:cc:14:5d:3d:e4:4a:54:10:
92:c4:0d:4f:8f:9f:d7:73:b3:1b:f4:9d:93:da:f1:c3:36:7e:
e6:30:4b:42:df:b8:f0:13:8a:d1:91:16:da:4f:5b:c5:37:85:
ae:47:74:61:3b:7d:f7:0b:12:ce:e3:f9:ed:8e:35:04:ee:cc:
cc:75:ad:c6:0b:12:ef:29:3a:64:cf:72:af:e9:43:4c:b3:4d:
a7:30:12:9b:34:b1:cc:3a:c7:0e:f4:61:81:cc:ff:51:97:32:
e4:03:96:64:c8:f5:64:f9:7d:9d:02:dd:ee:13:7c:17:c0:62:
61:e7:2f:3a:cb:5f:60:b0:26:9c:8c:f4:76:23:4a:68:eb:de:
ff:b0:ff:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9ayd7TaspIwHQlf6RUibEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNzc2YjA4MzhmYTBlMWRhMWJlNGVkY2NmODkyNGJkNDEz
YjFkYjcwHhcNMjUxMDE5MTcwMTIyWhcNMjUxMDIwMTcwMTIyWjAzMTEwLwYDVQQD
EyhkZDM0Y2M0Yzc4MzNlZWZmNzBhOTAyNTQxMzAzYjE1YWVkMDU4MzdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnd1k6zfwCBV8Hjgg7RSB3fov0Ep
X2cSvwqJ+QsqZgOKejLJKtd6yJd4Gn8c2tQTkin5yfnbvbP54YyNp/DRjKrd/+9f
p6W4AEhQlTLujDTWZb/Axf53AB2/C+dPJLpJzFShNL4utfBX9VDFluJ7+nVQ77Jq
qCgJPRGDAUSebTBP10QbQLZ1qG4FqK3u+m1TXCfh/dTj3U16ut33agqkFb6oy71q
OwFYfEFsd8a50+zGzM/uSmNDeJ54W/Qlu56VyNmjA+875erJln4gct5E/NzuQrGe
hrK9aesCW64DetyHkzGtmUm0EMejuR4dltgOCKt4s1bqiwzWjUYX7UKMYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN00zEx4M+7/cKkCVBMDsVrtBYN8MB8GA1UdIwQY
MBaAFOB3awg4+g4dob5O3M+JJL1BOx23MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEhkckNEajZEaDJodms3Y3o0a2t2VUU3SGJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9iZTlkYWItNWYyNy00M2NlLWFiMjIt
NzM5YTkxYzYyMGFjLzEvNEhkckNEajZEaDJodms3Y3o0a2t2VUU3SGJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9iZTlkYWItNWYyNy00M2NlLWFiMjItNzM5YTkxYzYyMGFj
LzEvNEhkckNEajZEaDJodms3Y3o0a2t2VUU3SGJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARX2YgFXs
R+bn360k1qtQWMlpucrWJC7gTnJZtFxQe2Idm0QX07VyOvYx6PXpiixnnBrn38we
NvCCMbW6f8yCDQHB0B5+jMGpr6YDJlg8/6cx3ZVXeXAZ/C1vyoZYW40MPmOxWhDn
edmgU3nT364pM6rMGjDFpswUXT3kSlQQksQNT4+f13OzG/Sdk9rxwzZ+5jBLQt+4
8BOK0ZEW2k9bxTeFrkd0YTt99wsSzuP57Y41BO7MzHWtxgsS7yk6ZM9yr+lDTLNN
pzASmzSxzDrHDvRhgcz/UZcy5AOWZMj1ZPl9nQLd7hN8F8BiYecvOstfYLAmnIz0
diNKaOve/7D/hg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:21:14 2025 by rpki-client