Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.mft
File: rOzREmnuoGcmJ3zjYatRzkIEnjY.mft (raw, json)
Hash identifier: pXBaj49FTN4mY+lTIxf46F1SUILVKg40BjPvkoOiq7Y=
Subject key identifier: 4F:34:57:D3:AE:7D:33:B6:2A:9A:81:BF:4D:5C:B3:12:04:ED:2C:87
Authority key identifier: AC:EC:D1:12:69:EE:A0:67:26:27:7C:E3:61:AB:51:CE:42:04:9E:36
Certificate issuer: /CN=acecd11269eea06726277ce361ab51ce42049e36
Certificate serial: 0199FC21599C4C637B004E2A586616143119
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOzREmnuoGcmJ3zjYatRzkIEnjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.mft
Manifest number: 4E
Signing time: Sun 19 Oct 2025 11:01:07 +0000
Manifest this update: Sun 19 Oct 2025 11:01:07 +0000
Manifest next update: Mon 20 Oct 2025 11:01:07 +0000
Files and hashes: 1: HS0o75LHBm7unTvkxSvYhKKCqOg.roa (hash: LFboYZcKhi2PcYZ1VtUF+QlXoMKEVErQ5pYjshCCFZM=)
2: mzUvfgVLoqjl_Pu4e_7hdH0g4tQ.roa (hash: nM7KewQVEjtLO/Upjj+aZLO5RewYm9AF+8kFiREJ2Jc=)
3: rOzREmnuoGcmJ3zjYatRzkIEnjY.crl (hash: DF1FNDDl2R5x9mucmuAuYS57MFSK5d0lj5YQ2zRn930=)
4: uAH4xPc9AhtK2Uy6SZDxCuii3xg.roa (hash: 7Lk71krqRJUVDRdcZl5XdOrWogQR7yqjHZ+KkfQmj9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rOzREmnuoGcmJ3zjYatRzkIEnjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:59:9c:4c:63:7b:00:4e:2a:58:66:16:14:31:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acecd11269eea06726277ce361ab51ce42049e36
Validity
Not Before: Oct 19 11:01:07 2025 GMT
Not After : Oct 20 11:01:07 2025 GMT
Subject: CN=4f3457d3ae7d33b62a9a81bf4d5cb31204ed2c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:66:2f:4c:54:33:a5:9d:a2:04:16:48:b4:17:
a7:46:90:49:cd:24:e2:2f:0c:52:bd:0a:5f:a1:e6:
54:f2:a2:d9:03:43:3a:2e:eb:c8:9d:2f:40:c0:ba:
2b:65:40:a9:29:dc:5d:7e:a2:77:8b:86:99:74:ea:
45:8a:f9:06:c4:ff:42:7b:9b:30:28:fe:6d:e5:9c:
0d:f7:28:4b:fb:cc:95:30:a7:be:ce:7f:ec:42:0f:
aa:e0:ec:37:81:e8:54:a6:ef:4f:6d:a1:da:a3:9d:
0a:fa:f1:0e:20:a2:b5:d4:fe:db:47:37:de:cc:55:
8c:fb:72:5b:9a:87:be:36:b3:f9:b5:17:c6:67:bd:
cf:14:83:01:aa:ac:28:58:c6:35:39:cb:52:28:b2:
d3:38:18:9b:52:b3:2f:73:87:4d:21:3c:ad:16:80:
46:3b:79:03:66:79:32:cf:97:94:9d:bc:52:a4:75:
e7:fe:dd:b0:53:cf:7e:a4:59:ae:36:28:9f:10:03:
69:db:94:72:dc:d7:78:3e:79:88:e5:f5:68:a4:76:
e3:28:ea:2b:6a:72:ae:63:38:6a:5c:3d:73:5b:be:
f9:5a:91:9b:dd:41:82:50:30:c6:d9:ec:29:68:fb:
87:94:7d:62:e8:02:37:52:f1:15:74:a2:d5:1a:3f:
ef:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:34:57:D3:AE:7D:33:B6:2A:9A:81:BF:4D:5C:B3:12:04:ED:2C:87
X509v3 Authority Key Identifier:
keyid:AC:EC:D1:12:69:EE:A0:67:26:27:7C:E3:61:AB:51:CE:42:04:9E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOzREmnuoGcmJ3zjYatRzkIEnjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:48:89:c2:8b:d7:45:db:7d:01:d4:a1:20:53:24:74:c1:34:
3e:b1:ea:bf:2d:98:45:b9:70:3c:e4:2f:ee:99:5a:cd:68:e4:
66:e2:42:45:6c:9b:b3:6b:8c:60:99:98:17:84:69:f3:d3:cc:
4e:f6:f6:91:e1:a9:d6:f3:32:bd:0c:d9:70:08:41:14:d1:b8:
65:68:e5:c1:20:9b:22:26:0f:a9:dd:08:23:0b:4a:4c:0b:97:
7d:c4:8b:8e:19:7d:c5:53:7c:70:9f:27:2c:0e:2c:d9:18:2f:
46:13:c8:74:a8:d1:b1:57:2c:cf:29:28:80:fd:b0:6d:41:61:
28:f8:21:4e:c6:69:29:dd:c5:6b:6a:c4:cf:87:39:b6:0b:34:
41:31:35:c1:64:d8:39:7e:47:d8:b8:64:23:2d:b5:0e:49:2a:
f3:d9:3b:cc:fd:6c:b5:67:67:d5:d1:0d:96:fd:69:53:2f:20:
32:b0:42:e9:8f:f7:ed:6e:80:3e:6e:71:dd:bb:e5:30:5e:10:
49:7b:ed:2c:a8:d3:0c:ac:9e:4c:81:9e:f3:70:58:18:96:7f:
f8:cc:99:9b:21:d3:15:dd:4d:f0:09:b6:57:d1:28:0f:a9:7b:
2f:2b:0f:c7:35:a8:0a:20:3f:6e:ab:00:71:e0:93:65:93:bf:
ee:4c:14:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IVmcTGN7AE4qWGYWFDEZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjZWNkMTEyNjllZWEwNjcyNjI3N2NlMzYxYWI1MWNlNDIw
NDllMzYwHhcNMjUxMDE5MTEwMTA3WhcNMjUxMDIwMTEwMTA3WjAzMTEwLwYDVQQD
Eyg0ZjM0NTdkM2FlN2QzM2I2MmE5YTgxYmY0ZDVjYjMxMjA0ZWQyYzg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmYvTFQzpZ2iBBZItBenRpBJzSTi
LwxSvQpfoeZU8qLZA0M6LuvInS9AwLorZUCpKdxdfqJ3i4aZdOpFivkGxP9Ce5sw
KP5t5ZwN9yhL+8yVMKe+zn/sQg+q4Ow3gehUpu9PbaHao50K+vEOIKK11P7bRzfe
zFWM+3Jbmoe+NrP5tRfGZ73PFIMBqqwoWMY1OctSKLLTOBibUrMvc4dNITytFoBG
O3kDZnkyz5eUnbxSpHXn/t2wU89+pFmuNiifEANp25Ry3Nd4PnmI5fVopHbjKOor
anKuYzhqXD1zW775WpGb3UGCUDDG2ewpaPuHlH1i6AI3UvEVdKLVGj/vawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE80V9OufTO2KpqBv01csxIE7SyHMB8GA1UdIwQY
MBaAFKzs0RJp7qBnJid842GrUc5CBJ42MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvck96UkVtbnVvR2NtSjN6allhdFJ6a0lFbmpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84NmVlOGYtMGM3Yi00OTIxLWJmZjUt
NDA0N2UwZmJlOWNiLzEvck96UkVtbnVvR2NtSjN6allhdFJ6a0lFbmpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84NmVlOGYtMGM3Yi00OTIxLWJmZjUtNDA0N2UwZmJlOWNi
LzEvck96UkVtbnVvR2NtSjN6allhdFJ6a0lFbmpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASUiJwovX
Rdt9AdShIFMkdME0PrHqvy2YRblwPOQv7plazWjkZuJCRWybs2uMYJmYF4Rp89PM
Tvb2keGp1vMyvQzZcAhBFNG4ZWjlwSCbIiYPqd0IIwtKTAuXfcSLjhl9xVN8cJ8n
LA4s2RgvRhPIdKjRsVcszykogP2wbUFhKPghTsZpKd3Fa2rEz4c5tgs0QTE1wWTY
OX5H2LhkIy21Dkkq89k7zP1stWdn1dENlv1pUy8gMrBC6Y/37W6APm5x3bvlMF4Q
SXvtLKjTDKyeTIGe83BYGJZ/+MyZmyHTFd1N8Am2V9EoD6l7LysPxzWoCiA/bqsA
ceCTZZO/7kwU7A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:15 2025 by rpki-client