Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
File: 4f9iX0oY0E1ZCludc7JVGkNbcXI.mft (raw, json)
Hash identifier: b2v/Zr/IQT5H0l/ULXPirBCZINE02knCAlt9Od2Q+rY=
Subject key identifier: 57:87:3A:DB:6C:B7:AA:89:5D:8A:DC:1A:BD:7E:46:8B:4E:69:46:F6
Authority key identifier: E1:FF:62:5F:4A:18:D0:4D:59:0A:5B:9D:73:B2:55:1A:43:5B:71:72
Certificate issuer: /CN=e1ff625f4a18d04d590a5b9d73b2551a435b7172
Certificate serial: 019A00352CF77D4A2A3433C7412EB11BE0EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
Manifest number: 10A2
Signing time: Mon 20 Oct 2025 06:01:15 +0000
Manifest this update: Mon 20 Oct 2025 06:01:15 +0000
Manifest next update: Tue 21 Oct 2025 06:01:15 +0000
Files and hashes: 1: 4f9iX0oY0E1ZCludc7JVGkNbcXI.crl (hash: ON/z2N8ZyhlaBK0uzQjUdKurHtVXmM6iPJaPMU2/934=)
2: v-UIauQZjW8hDMdx3w3tSE6IDRc.roa (hash: uCYTkmd7Ahc37aZdyBrq8T1Px2W2MX7+A97XE/19qf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:2c:f7:7d:4a:2a:34:33:c7:41:2e:b1:1b:e0:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ff625f4a18d04d590a5b9d73b2551a435b7172
Validity
Not Before: Oct 20 06:01:15 2025 GMT
Not After : Oct 21 06:01:15 2025 GMT
Subject: CN=57873adb6cb7aa895d8adc1abd7e468b4e6946f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:da:ff:b1:6d:5a:ff:00:66:01:0f:a2:95:4c:
55:6b:44:65:c9:ee:55:f6:3e:8c:e3:3f:17:5a:6d:
88:dc:c2:29:8a:86:98:e7:c2:74:68:f5:58:5c:dd:
f0:9b:f5:27:85:cc:ea:aa:72:d6:54:c0:f5:79:7d:
5f:71:af:e6:a3:9f:6d:be:e8:d0:dd:8e:8b:b3:b8:
56:c0:5d:6b:aa:a8:53:d6:68:b3:70:37:64:af:0d:
be:0f:b4:49:02:14:92:b6:79:9c:ce:63:df:68:44:
e1:3c:ab:56:39:14:49:04:cc:80:c1:ae:4d:9a:14:
fe:98:10:07:e6:63:4f:76:c4:d7:04:05:9a:91:2b:
a4:52:27:2a:14:0c:07:87:ba:3a:b3:38:32:68:55:
f5:43:d1:0b:76:53:43:c3:49:2b:aa:bc:99:d9:a6:
d9:bc:25:79:52:af:66:44:ae:cf:36:8f:f5:30:09:
4e:19:7a:82:fc:e4:31:b8:5c:8a:18:44:ec:03:f8:
04:29:ba:cf:73:09:b9:4f:2a:3d:9f:b6:af:81:f1:
0c:98:67:d5:a2:cb:68:e6:64:6f:06:6a:fb:64:97:
a1:49:c3:7d:2e:6b:a2:ac:d6:59:7d:30:43:0e:4c:
33:f9:43:79:40:d0:71:a6:12:82:92:ca:0c:b8:ef:
76:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:87:3A:DB:6C:B7:AA:89:5D:8A:DC:1A:BD:7E:46:8B:4E:69:46:F6
X509v3 Authority Key Identifier:
keyid:E1:FF:62:5F:4A:18:D0:4D:59:0A:5B:9D:73:B2:55:1A:43:5B:71:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:5d:c3:25:f0:dd:c2:93:e5:ea:c5:c3:c8:62:08:12:2c:9c:
81:d4:bf:23:e1:ee:93:bd:4a:18:ac:91:d2:59:cd:ee:38:33:
ee:f5:c5:89:68:e1:08:f2:94:84:c7:8d:a5:2f:e8:68:06:43:
af:46:68:20:13:66:4a:f8:8c:15:12:29:77:50:ac:b3:49:fb:
44:e6:96:4c:12:36:f9:5f:f1:f0:10:20:31:a6:5c:6c:52:0a:
2e:4d:20:b2:a3:e4:a1:fd:ac:4e:55:10:09:aa:22:56:13:35:
5e:ee:4e:81:f8:68:35:1c:bd:d1:e3:a9:cb:63:55:f4:cc:39:
e5:b1:22:ab:5f:7f:91:61:6b:75:83:f3:96:8e:c0:b8:f3:4e:
56:46:01:42:d6:d4:4c:50:5e:e3:5a:8b:01:b0:98:c9:bf:88:
36:01:00:42:96:72:27:6b:a3:ff:33:2c:f8:ab:8c:7f:16:06:
69:95:a0:19:15:94:d0:fb:9e:d9:89:0d:8b:69:12:24:aa:8c:
97:e5:69:b0:1a:54:28:38:71:28:56:97:10:4a:6b:91:a3:59:
99:d4:1c:84:6d:37:1c:33:09:90:e0:75:a4:70:56:05:eb:a3:
bd:94:14:3a:bc:ae:81:0f:b3:0d:ed:54:d2:af:e4:1d:88:cf:
dd:b2:44:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoANSz3fUoqNDPHQS6xG+DrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxZmY2MjVmNGExOGQwNGQ1OTBhNWI5ZDczYjI1NTFhNDM1
YjcxNzIwHhcNMjUxMDIwMDYwMTE1WhcNMjUxMDIxMDYwMTE1WjAzMTEwLwYDVQQD
Eyg1Nzg3M2FkYjZjYjdhYTg5NWQ4YWRjMWFiZDdlNDY4YjRlNjk0NmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotr/sW1a/wBmAQ+ilUxVa0Rlye5V
9j6M4z8XWm2I3MIpioaY58J0aPVYXN3wm/UnhczqqnLWVMD1eX1fca/mo59tvujQ
3Y6Ls7hWwF1rqqhT1mizcDdkrw2+D7RJAhSStnmczmPfaEThPKtWORRJBMyAwa5N
mhT+mBAH5mNPdsTXBAWakSukUicqFAwHh7o6szgyaFX1Q9ELdlNDw0krqryZ2abZ
vCV5Uq9mRK7PNo/1MAlOGXqC/OQxuFyKGETsA/gEKbrPcwm5Tyo9n7avgfEMmGfV
osto5mRvBmr7ZJehScN9LmuirNZZfTBDDkwz+UN5QNBxphKCksoMuO92bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFeHOttst6qJXYrcGr1+RotOaUb2MB8GA1UdIwQY
MBaAFOH/Yl9KGNBNWQpbnXOyVRpDW3FyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGY5aVgwb1kwRTFaQ2x1ZGM3SlZHa05iY1hJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC84ZjkwYTUtYzg3OC00ZGQ0LWIyZGIt
NGU1ODYxMTg3YzRmLzEvNGY5aVgwb1kwRTFaQ2x1ZGM3SlZHa05iY1hJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC84ZjkwYTUtYzg3OC00ZGQ0LWIyZGItNGU1ODYxMTg3YzRm
LzEvNGY5aVgwb1kwRTFaQ2x1ZGM3SlZHa05iY1hJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYF3DJfDd
wpPl6sXDyGIIEiycgdS/I+Huk71KGKyR0lnN7jgz7vXFiWjhCPKUhMeNpS/oaAZD
r0ZoIBNmSviMFRIpd1Css0n7ROaWTBI2+V/x8BAgMaZcbFIKLk0gsqPkof2sTlUQ
CaoiVhM1Xu5OgfhoNRy90eOpy2NV9Mw55bEiq19/kWFrdYPzlo7AuPNOVkYBQtbU
TFBe41qLAbCYyb+INgEAQpZyJ2uj/zMs+KuMfxYGaZWgGRWU0Pue2YkNi2kSJKqM
l+VpsBpUKDhxKFaXEEprkaNZmdQchG03HDMJkOB1pHBWBeujvZQUOryugQ+zDe1U
0q/kHYjP3bJErg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:03:00 2025 by rpki-client