Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft
File: RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft (raw, json)
Hash identifier: pkqqR6o4tsijviN6yzmfH8SFjLscVPEA004NxZn91Lg=
Subject key identifier: E3:44:A2:C9:76:5E:28:21:25:E4:EA:AA:C0:BE:84:F8:A3:D8:E7:89
Authority key identifier: 46:03:C6:56:C1:97:46:1A:49:CA:A1:FF:D7:20:D1:8B:EE:AC:80:76
Certificate issuer: /CN=4603c656c197461a49caa1ffd720d18beeac8076
Certificate serial: 0199FD6B1D04A3DCD1F413BFABCED1D69508
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RgPGVsGXRhpJyqH_1yDRi-6sgHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft
Manifest number: 04AB
Signing time: Sun 19 Oct 2025 17:01:19 +0000
Manifest this update: Sun 19 Oct 2025 17:01:19 +0000
Manifest next update: Mon 20 Oct 2025 17:01:19 +0000
Files and hashes: 1: RgPGVsGXRhpJyqH_1yDRi-6sgHY.crl (hash: /NwkPGNx09xcwdNeU86ueMSNNYhJOIEOkjsXE/GXFi8=)
2: etkRbnW9ryrJ6e3ywwJ1q9bD7Xw.roa (hash: JMmWgxd8mijwpLVsPTeG3AKA8OAxDNzyK+lSzQE8/U0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RgPGVsGXRhpJyqH_1yDRi-6sgHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:1d:04:a3:dc:d1:f4:13:bf:ab:ce:d1:d6:95:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4603c656c197461a49caa1ffd720d18beeac8076
Validity
Not Before: Oct 19 17:01:19 2025 GMT
Not After : Oct 20 17:01:19 2025 GMT
Subject: CN=e344a2c9765e282125e4eaaac0be84f8a3d8e789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ba:24:03:cd:1c:7f:21:6e:ee:59:89:cd:3e:
73:12:2a:3a:1d:68:56:a5:54:9c:6e:5b:e1:ac:35:
d3:b9:88:56:84:e2:14:83:2d:82:46:bb:6c:28:74:
48:83:1a:c0:86:eb:76:32:c5:77:80:12:77:9f:bf:
55:eb:b0:85:6e:a8:40:99:19:04:70:0a:be:04:75:
e5:44:65:f0:44:48:32:1f:c7:39:7e:d7:f8:92:3a:
bf:e2:c1:90:c6:20:2f:fa:59:c1:cc:cb:37:38:dd:
7f:73:66:ce:56:61:0b:e3:28:d6:e1:0c:b8:3b:f4:
c9:ad:6d:39:34:98:a3:25:4f:d0:31:b8:c2:c2:09:
1a:2e:f1:e1:8d:dc:7e:c0:af:f0:82:88:17:d1:d4:
8f:7b:9f:69:8a:7c:c7:41:b8:16:cf:6f:f7:00:19:
a4:a8:d5:27:75:36:b2:e7:26:e1:20:de:88:ae:e1:
da:72:a1:5c:fb:52:fa:76:e5:dc:64:49:ce:88:43:
bf:80:68:74:e8:11:2a:db:56:4d:b9:39:f2:2c:2f:
61:0c:54:f4:aa:e7:34:84:0b:34:03:75:c5:91:41:
28:20:00:38:84:f9:59:9a:59:e8:85:8d:db:b2:61:
a3:2f:1b:ed:5f:39:d3:fa:10:6d:cd:ef:f6:3c:dc:
cc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:44:A2:C9:76:5E:28:21:25:E4:EA:AA:C0:BE:84:F8:A3:D8:E7:89
X509v3 Authority Key Identifier:
keyid:46:03:C6:56:C1:97:46:1A:49:CA:A1:FF:D7:20:D1:8B:EE:AC:80:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgPGVsGXRhpJyqH_1yDRi-6sgHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:67:cf:f6:d2:b7:38:67:51:a8:a4:ce:8d:11:21:1a:c5:de:
c3:81:0f:f2:d6:b1:0e:60:10:6d:84:28:81:93:fb:44:b3:a1:
1f:f4:7a:02:08:9c:36:d0:1a:6d:f5:11:7f:a3:be:06:1f:d7:
2e:7c:7d:d3:93:ef:4d:68:be:01:5c:95:9b:d6:c9:cf:78:6b:
6c:10:e2:0a:59:c5:15:37:e6:65:f2:fa:c9:c3:d6:b5:0c:64:
5d:5d:b5:b5:9f:2d:4b:a4:77:6a:61:67:be:04:49:7c:2d:47:
3f:3b:99:2f:28:6c:cf:75:29:7a:9f:e9:a2:68:3f:5b:ff:56:
d5:1f:65:f2:70:a7:ac:c7:cb:d1:98:89:e7:9c:27:67:54:ac:
17:47:13:3a:4e:50:c6:54:24:a6:57:96:1a:c4:66:79:26:5f:
69:42:06:f7:2c:c4:f6:8c:13:85:bf:66:7a:dc:46:5a:94:eb:
23:95:fb:32:8b:e4:a6:e5:a0:c6:90:70:c7:ef:a4:b8:e7:49:
15:7d:68:22:90:84:8d:04:17:0a:b3:05:b4:45:42:e5:ab:e2:
e5:89:a7:23:30:b8:f8:af:35:d3:18:30:79:cb:c8:bf:61:6c:
a5:d0:ac:ef:aa:1f:52:d3:c7:c2:c5:2c:4a:0d:ac:95:1a:88:
94:6b:8a:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9ax0Eo9zR9BO/q87R1pUIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MDNjNjU2YzE5NzQ2MWE0OWNhYTFmZmQ3MjBkMThiZWVh
YzgwNzYwHhcNMjUxMDE5MTcwMTE5WhcNMjUxMDIwMTcwMTE5WjAzMTEwLwYDVQQD
EyhlMzQ0YTJjOTc2NWUyODIxMjVlNGVhYWFjMGJlODRmOGEzZDhlNzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5rokA80cfyFu7lmJzT5zEio6HWhW
pVScblvhrDXTuYhWhOIUgy2CRrtsKHRIgxrAhut2MsV3gBJ3n79V67CFbqhAmRkE
cAq+BHXlRGXwREgyH8c5ftf4kjq/4sGQxiAv+lnBzMs3ON1/c2bOVmEL4yjW4Qy4
O/TJrW05NJijJU/QMbjCwgkaLvHhjdx+wK/wgogX0dSPe59pinzHQbgWz2/3ABmk
qNUndTay5ybhIN6IruHacqFc+1L6duXcZEnOiEO/gGh06BEq21ZNuTnyLC9hDFT0
quc0hAs0A3XFkUEoIAA4hPlZmlnohY3bsmGjLxvtXznT+hBtze/2PNzMtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFONEosl2XighJeTqqsC+hPij2OeJMB8GA1UdIwQY
MBaAFEYDxlbBl0YaScqh/9cg0YvurIB2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmdQR1ZzR1hSaHBKeXFIXzF5RFJpLTZzZ0hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy84MWFjNzEtMGYyYS00ODYxLTk1OWIt
YWZhNGZkMzUwNmQwLzEvUmdQR1ZzR1hSaHBKeXFIXzF5RFJpLTZzZ0hZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy84MWFjNzEtMGYyYS00ODYxLTk1OWItYWZhNGZkMzUwNmQw
LzEvUmdQR1ZzR1hSaHBKeXFIXzF5RFJpLTZzZ0hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHGfP9tK3
OGdRqKTOjREhGsXew4EP8taxDmAQbYQogZP7RLOhH/R6AgicNtAabfURf6O+Bh/X
Lnx905PvTWi+AVyVm9bJz3hrbBDiClnFFTfmZfL6ycPWtQxkXV21tZ8tS6R3amFn
vgRJfC1HPzuZLyhsz3Upep/pomg/W/9W1R9l8nCnrMfL0ZiJ55wnZ1SsF0cTOk5Q
xlQkpleWGsRmeSZfaUIG9yzE9owThb9metxGWpTrI5X7MovkpuWgxpBwx++kuOdJ
FX1oIpCEjQQXCrMFtEVC5avi5YmnIzC4+K810xgwecvIv2FspdCs76ofUtPHwsUs
Sg2slRqIlGuK+w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:40:34 2025 by rpki-client