Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft
File: 4VuQ_9-gqyhUheeERrhxmYsk3MA.mft (raw, json)
Hash identifier: efPasXfUbiGMzG/GsOrDqC+mBpBzZpvt+dfAVS7VAN0=
Subject key identifier: A7:F7:88:AA:F1:18:15:72:98:33:32:5D:9C:6B:12:3F:E0:3D:DB:9E
Authority key identifier: E1:5B:90:FF:DF:A0:AB:28:54:85:E7:84:46:B8:71:99:8B:24:DC:C0
Certificate issuer: /CN=e15b90ffdfa0ab285485e78446b871998b24dcc0
Certificate serial: 0199FDD93B50A70AC51CDAB277B500B70CA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft
Manifest number: 02B8
Signing time: Sun 19 Oct 2025 19:01:36 +0000
Manifest this update: Sun 19 Oct 2025 19:01:36 +0000
Manifest next update: Mon 20 Oct 2025 19:01:36 +0000
Files and hashes: 1: 2wr3VnHPGzlL2arFNUC9_MLTdaY.roa (hash: riabhN7uUC9dX01WplUZkRt4qxUdWnv+rCQJ9LvkhhE=)
2: 4VuQ_9-gqyhUheeERrhxmYsk3MA.crl (hash: N3WvN4r+MTNTa83Fx2IX5v+CiImKYBYjoZOZmfz3xL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:3b:50:a7:0a:c5:1c:da:b2:77:b5:00:b7:0c:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15b90ffdfa0ab285485e78446b871998b24dcc0
Validity
Not Before: Oct 19 19:01:36 2025 GMT
Not After : Oct 20 19:01:36 2025 GMT
Subject: CN=a7f788aaf11815729833325d9c6b123fe03ddb9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2a:e0:8f:72:cb:b4:43:55:3e:11:35:7c:89:
57:ae:0f:e3:66:1c:6e:b4:ea:71:3e:36:8f:10:a4:
96:9f:dd:43:74:72:42:40:0a:32:9b:b1:65:06:5f:
a5:35:69:42:98:b3:86:ed:3b:37:1b:d7:4f:28:ee:
dc:a9:ad:c3:45:2e:c5:a1:e7:cb:a5:72:0f:f7:4d:
6b:58:f4:33:01:29:43:42:2d:30:90:2b:9b:37:e4:
c1:35:b5:b6:9c:4b:ea:8d:5e:84:f1:cb:11:9a:c2:
85:d9:0a:c7:69:75:2d:85:2e:dc:fe:3f:f3:f1:3a:
86:a9:21:ae:f3:16:83:50:75:83:bc:22:51:94:d3:
7f:92:e7:a0:73:67:ff:c0:4a:7e:dd:b3:b8:6d:af:
f3:fb:22:17:4c:1d:83:a4:ad:39:ca:32:b0:d2:97:
ee:ea:01:ef:2a:a5:58:c7:26:a4:1b:f5:b1:eb:05:
52:8e:34:60:7a:b6:33:0b:7a:b4:d5:92:5d:81:c8:
3b:2d:e1:8d:fa:fe:4a:25:b3:fb:1e:26:4d:bd:b7:
39:9a:ce:6a:50:7b:21:cf:bf:23:d0:5d:20:21:a9:
56:dd:7e:45:c0:ba:c7:63:7d:dc:34:19:c3:28:ab:
9c:84:49:3f:33:17:c2:ec:73:9f:01:0e:1c:f0:76:
1b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F7:88:AA:F1:18:15:72:98:33:32:5D:9C:6B:12:3F:E0:3D:DB:9E
X509v3 Authority Key Identifier:
keyid:E1:5B:90:FF:DF:A0:AB:28:54:85:E7:84:46:B8:71:99:8B:24:DC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:b3:e3:34:ec:ae:97:30:ee:f4:f8:f2:68:e3:34:ec:be:79:
8f:f3:0b:db:aa:76:03:84:b1:cb:da:62:10:2c:d9:27:6e:20:
5e:aa:2f:51:99:a5:b6:15:99:20:3f:28:66:47:39:2f:d5:aa:
d1:e3:09:63:79:8d:34:8b:77:49:8c:6b:68:ea:6e:03:74:4c:
24:d6:25:ea:a3:29:76:6b:93:8a:d2:2e:da:77:1b:41:d9:5d:
14:fe:65:fd:cf:c0:93:c6:db:e6:04:a6:1a:61:39:ff:e1:02:
74:7e:e9:84:ee:f7:17:4f:ae:d2:18:29:ff:fb:89:bc:08:64:
7d:cc:39:c5:c3:e6:af:1f:d4:c5:d1:e7:d0:ce:e3:c0:d4:f8:
e8:64:73:1c:3b:8e:6b:ac:18:9c:d4:4d:c7:1e:ac:83:93:74:
22:9c:95:3b:73:b9:a8:4f:13:53:c3:91:79:11:cf:46:c2:ea:
b4:b3:c8:cd:ea:0e:8a:a0:6b:90:62:c2:73:79:c3:c1:5a:f3:
ad:e3:61:61:73:c6:72:3b:b3:46:49:1f:ea:ab:87:33:d5:4f:
3c:fc:d9:9c:5a:4b:a6:da:b9:4a:9a:2d:58:4b:d0:12:22:42:
83:d3:87:07:c9:8d:89:5a:27:9d:1e:7a:56:b1:0c:ee:29:b1:
50:d8:b3:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92TtQpwrFHNqyd7UAtwyjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNWI5MGZmZGZhMGFiMjg1NDg1ZTc4NDQ2Yjg3MTk5OGIy
NGRjYzAwHhcNMjUxMDE5MTkwMTM2WhcNMjUxMDIwMTkwMTM2WjAzMTEwLwYDVQQD
EyhhN2Y3ODhhYWYxMTgxNTcyOTgzMzMyNWQ5YzZiMTIzZmUwM2RkYjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArirgj3LLtENVPhE1fIlXrg/jZhxu
tOpxPjaPEKSWn91DdHJCQAoym7FlBl+lNWlCmLOG7Ts3G9dPKO7cqa3DRS7FoefL
pXIP901rWPQzASlDQi0wkCubN+TBNbW2nEvqjV6E8csRmsKF2QrHaXUthS7c/j/z
8TqGqSGu8xaDUHWDvCJRlNN/kuegc2f/wEp+3bO4ba/z+yIXTB2DpK05yjKw0pfu
6gHvKqVYxyakG/Wx6wVSjjRgerYzC3q01ZJdgcg7LeGN+v5KJbP7HiZNvbc5ms5q
UHshz78j0F0gIalW3X5FwLrHY33cNBnDKKuchEk/MxfC7HOfAQ4c8HYbWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKf3iKrxGBVymDMyXZxrEj/gPdueMB8GA1UdIwQY
MBaAFOFbkP/foKsoVIXnhEa4cZmLJNzAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFZ1UV85LWdxeWhVaGVlRVJyaHhtWXNrM01BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS81ZjNlMjEtNmI0MS00OTY0LWJmZGEt
Y2JiZmRhOTI0MTlkLzEvNFZ1UV85LWdxeWhVaGVlRVJyaHhtWXNrM01BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS81ZjNlMjEtNmI0MS00OTY0LWJmZGEtY2JiZmRhOTI0MTlk
LzEvNFZ1UV85LWdxeWhVaGVlRVJyaHhtWXNrM01BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq7PjNOyu
lzDu9PjyaOM07L55j/ML26p2A4Sxy9piECzZJ24gXqovUZmlthWZID8oZkc5L9Wq
0eMJY3mNNIt3SYxraOpuA3RMJNYl6qMpdmuTitIu2ncbQdldFP5l/c/Ak8bb5gSm
GmE5/+ECdH7phO73F0+u0hgp//uJvAhkfcw5xcPmrx/UxdHn0M7jwNT46GRzHDuO
a6wYnNRNxx6sg5N0IpyVO3O5qE8TU8OReRHPRsLqtLPIzeoOiqBrkGLCc3nDwVrz
reNhYXPGcjuzRkkf6quHM9VPPPzZnFpLptq5SpotWEvQEiJCg9OHB8mNiVonnR56
VrEM7imxUNizQA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 21:01:45 2025 by rpki-client