Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.mft
File: 0L1A7zQGZHFcjCz6UOPWG6KG4Dc.mft (raw, json)
Hash identifier: cf6HJ+S/Ts/PurPYzo5OFMcs7eB1SKEeVNpu2joKHNc=
Subject key identifier: 67:39:38:36:EF:0D:49:BC:1C:A6:C8:19:4D:EE:FC:8B:DC:8E:6C:56
Authority key identifier: D0:BD:40:EF:34:06:64:71:5C:8C:2C:FA:50:E3:D6:1B:A2:86:E0:37
Certificate issuer: /CN=d0bd40ef340664715c8c2cfa50e3d61ba286e037
Certificate serial: 0199FCC6CFB413E97A87031333BC2C6F2B3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 14:01:51 +0000
Manifest this update: Sun 19 Oct 2025 14:01:51 +0000
Manifest next update: Mon 20 Oct 2025 14:01:51 +0000
Files and hashes: 1: 0L1A7zQGZHFcjCz6UOPWG6KG4Dc.crl (hash: /XA/QSpjWkDpzSjIl5Y/JJ8VracnjBJBPdkoiRAvZT8=)
2: 0rKi7U6MqI1r_Vs3kaCLYTfsLSY.roa (hash: 8QsFJSNtdZfQAAQzebOppMUtF/t29sf8g4pkzx7Cv9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:cf:b4:13:e9:7a:87:03:13:33:bc:2c:6f:2b:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0bd40ef340664715c8c2cfa50e3d61ba286e037
Validity
Not Before: Oct 19 14:01:51 2025 GMT
Not After : Oct 20 14:01:51 2025 GMT
Subject: CN=67393836ef0d49bc1ca6c8194deefc8bdc8e6c56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:80:d5:05:2b:81:2c:5d:32:a2:74:f6:7f:aa:
41:74:6b:45:f3:a8:53:3b:39:32:88:be:1b:88:2a:
d7:21:56:62:bf:3c:6f:54:70:f4:6a:cf:9e:dc:af:
4c:34:45:9d:a6:fc:54:52:9f:cd:50:c8:57:ef:cd:
4a:30:ad:ac:4d:d8:98:b9:87:94:76:c4:b3:32:fb:
d4:72:a2:c5:46:2b:b9:e4:96:60:26:78:ba:ed:98:
e1:b2:4c:a9:a5:3b:9d:d6:23:e5:6e:62:c2:46:9d:
eb:7d:0b:de:e7:e0:70:f0:c8:4a:bf:43:5b:f5:3b:
24:23:3f:7b:c3:66:d8:c9:ba:b1:3e:d3:dd:ab:03:
2a:87:b4:14:9f:c0:75:2d:e3:b2:32:e1:c5:1b:50:
7d:0d:0c:48:07:5c:ac:45:84:57:5a:fa:8d:f7:cf:
ce:93:92:4a:21:3c:a2:f6:12:e0:16:f5:df:6b:7e:
ac:aa:a5:e9:de:e4:4a:ca:ca:93:60:c3:c3:ee:85:
42:52:dd:80:b5:05:f4:ac:3a:d3:21:a8:58:99:57:
fd:d3:5f:bb:23:6b:2b:85:ca:a8:c8:1d:c6:7d:d6:
6a:b3:80:05:53:9e:57:ed:c1:5a:42:56:c4:07:e8:
56:a6:9a:3e:f4:bc:3b:27:89:d6:82:44:c4:4d:2b:
77:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:39:38:36:EF:0D:49:BC:1C:A6:C8:19:4D:EE:FC:8B:DC:8E:6C:56
X509v3 Authority Key Identifier:
keyid:D0:BD:40:EF:34:06:64:71:5C:8C:2C:FA:50:E3:D6:1B:A2:86:E0:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:81:f5:6d:dc:3f:2f:d1:d7:8b:29:2f:d4:f5:96:5f:f6:dc:
86:76:0f:e1:c0:5e:4a:ea:f0:37:44:ac:de:41:f6:e9:d7:c3:
47:37:d4:cf:79:3d:a1:59:54:0e:1c:0b:ba:bb:bc:e6:5e:b7:
2d:63:41:e8:2a:8f:ea:95:87:72:69:b4:93:b9:d8:fd:36:cc:
04:4a:85:a9:5d:07:48:d5:c5:4f:87:d6:19:3e:42:c8:b1:1f:
ed:19:73:f6:15:f9:c8:24:75:ca:b6:b6:e7:90:d8:24:12:43:
2f:b8:12:09:ce:6b:77:11:ac:39:de:26:ae:94:ed:99:d0:bf:
99:eb:0b:e3:98:35:b3:a9:09:66:9e:89:ba:c5:cb:69:c3:5f:
26:96:25:b8:19:66:4a:9e:d3:6f:41:78:44:4f:a4:7a:23:23:
6c:ba:18:4d:e0:43:64:c2:ca:ba:fe:99:41:b0:46:4a:43:d7:
06:b4:04:0b:2b:8f:f3:61:4f:65:51:2c:f8:fc:48:94:33:08:
fc:a4:84:0c:71:d8:36:b3:c4:3b:ba:2f:9b:10:7a:fb:f3:2e:
42:f8:65:09:57:56:67:9d:05:b4:ae:c9:b7:b1:64:1b:4d:c9:
41:90:ec:16:00:06:21:99:76:ee:5f:d0:59:e4:f0:19:3b:b1:
1d:db:db:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xs+0E+l6hwMTM7wsbys6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwYmQ0MGVmMzQwNjY0NzE1YzhjMmNmYTUwZTNkNjFiYTI4
NmUwMzcwHhcNMjUxMDE5MTQwMTUxWhcNMjUxMDIwMTQwMTUxWjAzMTEwLwYDVQQD
Eyg2NzM5MzgzNmVmMGQ0OWJjMWNhNmM4MTk0ZGVlZmM4YmRjOGU2YzU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4DVBSuBLF0yonT2f6pBdGtF86hT
OzkyiL4biCrXIVZivzxvVHD0as+e3K9MNEWdpvxUUp/NUMhX781KMK2sTdiYuYeU
dsSzMvvUcqLFRiu55JZgJni67ZjhskyppTud1iPlbmLCRp3rfQve5+Bw8MhKv0Nb
9TskIz97w2bYybqxPtPdqwMqh7QUn8B1LeOyMuHFG1B9DQxIB1ysRYRXWvqN98/O
k5JKITyi9hLgFvXfa36sqqXp3uRKysqTYMPD7oVCUt2AtQX0rDrTIahYmVf901+7
I2srhcqoyB3GfdZqs4AFU55X7cFaQlbEB+hWppo+9Lw7J4nWgkTETSt3ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGc5ODbvDUm8HKbIGU3u/IvcjmxWMB8GA1UdIwQY
MBaAFNC9QO80BmRxXIws+lDj1huihuA3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEwxQTd6UUdaSEZjakN6NlVPUFdHNktHNERjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi80ZDRkOWMtZmJhZi00MmZkLTk4YWEt
MmNkMDliNTc3MDY2LzEvMEwxQTd6UUdaSEZjakN6NlVPUFdHNktHNERjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi80ZDRkOWMtZmJhZi00MmZkLTk4YWEtMmNkMDliNTc3MDY2
LzEvMEwxQTd6UUdaSEZjakN6NlVPUFdHNktHNERjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh4H1bdw/
L9HXiykv1PWWX/bchnYP4cBeSurwN0Ss3kH26dfDRzfUz3k9oVlUDhwLuru85l63
LWNB6CqP6pWHcmm0k7nY/TbMBEqFqV0HSNXFT4fWGT5CyLEf7Rlz9hX5yCR1yra2
55DYJBJDL7gSCc5rdxGsOd4mrpTtmdC/mesL45g1s6kJZp6JusXLacNfJpYluBlm
Sp7Tb0F4RE+keiMjbLoYTeBDZMLKuv6ZQbBGSkPXBrQECyuP82FPZVEs+PxIlDMI
/KSEDHHYNrPEO7ovmxB6+/MuQvhlCVdWZ50FtK7Jt7FkG03JQZDsFgAGIZl27l/Q
WeTwGTuxHdvbPA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:07:31 2025 by rpki-client