Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
File: 4-dxd2XkvMcZGyXRpOZtOIycU9k.mft (raw, json)
Hash identifier: L2dglO3qqTZbZEm5zL8rMwp0unj4TKGMS9Q2TPIMENw=
Subject key identifier: F6:12:59:AD:C5:8E:60:E3:6F:83:1F:07:FD:7D:1D:E8:38:DB:6F:16
Authority key identifier: E3:E7:71:77:65:E4:BC:C7:19:1B:25:D1:A4:E6:6D:38:8C:9C:53:D9
Certificate issuer: /CN=e3e7717765e4bcc7191b25d1a4e66d388c9c53d9
Certificate serial: 019A0035B2A618147692A77884BFFBD771D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
Manifest number: 0869
Signing time: Mon 20 Oct 2025 06:01:50 +0000
Manifest this update: Mon 20 Oct 2025 06:01:50 +0000
Manifest next update: Tue 21 Oct 2025 06:01:50 +0000
Files and hashes: 1: 4-dxd2XkvMcZGyXRpOZtOIycU9k.crl (hash: /Ex1cdBgEXVEV7rhu10HbCEcVKSfzW/UiipscT8vVmA=)
2: NNXpk59D8TzuvrFY-C-H2t3-Azg.roa (hash: blHgWyvU6BLEqGgFxNZ3azxZxMbkiPWVvdBh5N+A+CQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:b2:a6:18:14:76:92:a7:78:84:bf:fb:d7:71:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3e7717765e4bcc7191b25d1a4e66d388c9c53d9
Validity
Not Before: Oct 20 06:01:50 2025 GMT
Not After : Oct 21 06:01:50 2025 GMT
Subject: CN=f61259adc58e60e36f831f07fd7d1de838db6f16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fb:d1:22:24:82:8d:ea:90:e7:4f:ed:af:5e:
c9:b7:7c:72:a4:49:1d:40:5a:a7:5a:48:34:41:a4:
4c:ae:35:6d:97:74:2e:e8:1e:5c:32:ef:c1:15:c6:
ce:ea:59:5e:69:9a:72:4d:e6:2f:b5:b6:f7:41:aa:
f5:0d:8c:ab:cf:68:d2:8a:6a:cd:35:40:e4:07:b0:
e5:6c:ee:e3:dd:db:cf:2d:3a:74:34:af:ad:06:54:
81:54:37:fe:bb:ab:ec:bc:35:4b:46:f2:e5:47:c1:
6e:cc:59:6c:fb:60:35:81:f5:9f:14:73:16:d9:d6:
e2:e5:b7:02:93:de:cf:40:fd:4b:30:0b:0a:3c:21:
a1:01:cd:12:6e:8d:48:26:21:ef:ce:c5:3f:1b:6e:
7b:4a:02:00:b3:bc:aa:01:02:87:36:d6:79:27:49:
e3:0a:6e:32:75:b1:1a:20:db:c7:7d:6c:6e:33:ee:
1b:24:52:72:0d:cf:f8:72:32:eb:9a:f9:af:50:73:
e3:58:ad:3e:57:94:76:51:a7:19:ef:b3:e7:5e:29:
71:28:c1:a1:fb:df:9c:7f:3b:c2:39:1c:d2:0b:ed:
ed:51:90:9f:5b:9b:62:90:93:6e:b1:9b:66:05:42:
96:06:88:c0:99:e1:0e:86:9f:f5:21:92:3d:e3:fb:
a7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:12:59:AD:C5:8E:60:E3:6F:83:1F:07:FD:7D:1D:E8:38:DB:6F:16
X509v3 Authority Key Identifier:
keyid:E3:E7:71:77:65:E4:BC:C7:19:1B:25:D1:A4:E6:6D:38:8C:9C:53:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:1a:96:76:95:49:ee:6a:15:a4:ef:09:b8:7e:d8:32:5b:f4:
41:d8:14:76:f9:6e:3e:f3:5c:4a:3c:e6:2f:9e:40:81:03:cf:
01:65:cd:da:ab:b1:77:61:43:d4:4e:36:9a:9b:73:04:cd:90:
4c:db:85:ec:a6:d2:04:b9:e6:6a:07:74:f3:b7:54:93:6a:15:
ed:34:c9:37:70:7b:96:2b:3b:ad:ca:fc:7d:e9:89:3c:b1:84:
ff:88:17:47:a8:8e:d2:b1:11:4d:7f:b0:f6:ea:cd:a5:d6:4d:
79:f7:7d:c0:aa:87:e8:7d:57:6f:0e:23:f1:fb:7e:c3:57:32:
f1:1e:07:a4:4f:33:64:b8:25:d8:8e:f3:64:22:a4:42:54:07:
8f:38:0b:f2:61:24:e2:87:95:da:d8:ad:01:f7:25:a9:a0:8f:
1a:7f:a5:32:08:c7:ed:21:ef:01:7b:77:80:28:c6:20:58:ae:
e6:e9:26:b8:c5:26:2a:58:ab:ac:db:6a:0a:d2:11:59:c1:8c:
8e:1e:02:42:fa:07:c6:af:64:38:d8:19:ee:99:c7:a2:bb:9b:
6b:ab:38:e9:d5:8f:8a:06:4f:98:8e:74:c2:09:6c:66:67:0f:
26:a5:0e:e2:42:9e:bd:8a:d8:c5:ba:25:1e:2e:ff:85:63:eb:
c8:e4:2f:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoANbKmGBR2kqd4hL/713HUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZTc3MTc3NjVlNGJjYzcxOTFiMjVkMWE0ZTY2ZDM4OGM5
YzUzZDkwHhcNMjUxMDIwMDYwMTUwWhcNMjUxMDIxMDYwMTUwWjAzMTEwLwYDVQQD
EyhmNjEyNTlhZGM1OGU2MGUzNmY4MzFmMDdmZDdkMWRlODM4ZGI2ZjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfvRIiSCjeqQ50/tr17Jt3xypEkd
QFqnWkg0QaRMrjVtl3Qu6B5cMu/BFcbO6lleaZpyTeYvtbb3Qar1DYyrz2jSimrN
NUDkB7DlbO7j3dvPLTp0NK+tBlSBVDf+u6vsvDVLRvLlR8FuzFls+2A1gfWfFHMW
2dbi5bcCk97PQP1LMAsKPCGhAc0Sbo1IJiHvzsU/G257SgIAs7yqAQKHNtZ5J0nj
Cm4ydbEaINvHfWxuM+4bJFJyDc/4cjLrmvmvUHPjWK0+V5R2UacZ77PnXilxKMGh
+9+cfzvCORzSC+3tUZCfW5tikJNusZtmBUKWBojAmeEOhp/1IZI94/uniQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPYSWa3FjmDjb4MfB/19Heg4228WMB8GA1UdIwQY
MBaAFOPncXdl5LzHGRsl0aTmbTiMnFPZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNC1keGQyWGt2TWNaR3lYUnBPWnRPSXljVTlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8zOTYwNGUtOTc0OC00YzdkLWFkNWQt
NTYzZDQ3YTdhYjYxLzEvNC1keGQyWGt2TWNaR3lYUnBPWnRPSXljVTlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8zOTYwNGUtOTc0OC00YzdkLWFkNWQtNTYzZDQ3YTdhYjYx
LzEvNC1keGQyWGt2TWNaR3lYUnBPWnRPSXljVTlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdxqWdpVJ
7moVpO8JuH7YMlv0QdgUdvluPvNcSjzmL55AgQPPAWXN2quxd2FD1E42mptzBM2Q
TNuF7KbSBLnmagd087dUk2oV7TTJN3B7lis7rcr8femJPLGE/4gXR6iO0rERTX+w
9urNpdZNefd9wKqH6H1Xbw4j8ft+w1cy8R4HpE8zZLgl2I7zZCKkQlQHjzgL8mEk
4oeV2titAfclqaCPGn+lMgjH7SHvAXt3gCjGIFiu5ukmuMUmKlirrNtqCtIRWcGM
jh4CQvoHxq9kONgZ7pnHoruba6s46dWPigZPmI50wglsZmcPJqUO4kKevYrYxbol
Hi7/hWPryOQvbA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:39:16 2025 by rpki-client