Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft
File: 4I6QfA_lCJGna9mbKQhwCmrGLjg.mft (raw, json)
Hash identifier: iJ7s95hHyNlLJb/wM1P/BAIi2mIukCNpNYzlt+qirC4=
Subject key identifier: 2B:11:E0:2E:3F:94:19:F5:0E:13:5A:3F:AB:2F:0D:48:68:E4:A7:6A
Authority key identifier: E0:8E:90:7C:0F:E5:08:91:A7:6B:D9:9B:29:08:70:0A:6A:C6:2E:38
Certificate issuer: /CN=e08e907c0fe50891a76bd99b2908700a6ac62e38
Certificate serial: 0199FFC724D5D12F91D9E6FAAD6765E89F91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4I6QfA_lCJGna9mbKQhwCmrGLjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 04:01:05 +0000
Manifest this update: Mon 20 Oct 2025 04:01:05 +0000
Manifest next update: Tue 21 Oct 2025 04:01:05 +0000
Files and hashes: 1: 4I6QfA_lCJGna9mbKQhwCmrGLjg.crl (hash: ianhPdvqe23Dx5eZHjDeKyRxUwp3jFQSyBKGsq3yxuY=)
2: STK2SAlRO7jYy3vcEqTR9ikjblA.roa (hash: k6oW+GQsDjU/vILzjfv+z+LTQhLzDJ0y7rBRC2wvlVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4I6QfA_lCJGna9mbKQhwCmrGLjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:24:d5:d1:2f:91:d9:e6:fa:ad:67:65:e8:9f:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e08e907c0fe50891a76bd99b2908700a6ac62e38
Validity
Not Before: Oct 20 04:01:05 2025 GMT
Not After : Oct 21 04:01:05 2025 GMT
Subject: CN=2b11e02e3f9419f50e135a3fab2f0d4868e4a76a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:18:3b:81:26:9e:cc:e2:69:40:cf:b3:00:55:
71:64:d2:6d:b4:90:8c:2d:96:b3:7b:b1:09:17:dc:
46:7b:a3:d1:c9:fd:4c:4e:47:72:8b:3f:5c:0d:13:
6b:e4:db:6d:9a:63:6d:e0:9d:b6:3f:de:88:85:e3:
1a:d6:a1:55:b3:1a:98:fc:c3:59:7f:f3:4b:6a:e0:
5d:c0:c4:a3:e9:76:c9:ca:67:e4:33:14:cd:b4:68:
e1:6c:c9:5c:30:d0:75:3d:7a:2e:94:2d:04:3e:df:
3c:4d:1e:de:e8:65:e1:75:ae:46:1a:9b:55:6e:ad:
13:5e:88:20:14:ba:da:a6:31:c8:93:7d:18:1c:4f:
d4:bd:c5:6b:b5:ef:ae:39:f2:cd:40:29:9b:ed:45:
da:2d:be:21:ea:fb:46:1c:f2:6e:5f:1d:88:e6:8b:
8d:0d:8a:b0:c2:66:c8:32:04:aa:77:63:e7:e7:14:
01:df:57:0c:f2:80:54:ba:50:4b:43:ef:1e:14:ee:
79:17:ee:df:4a:64:b2:b0:52:b7:ef:20:28:c0:0d:
bc:0c:06:b5:23:96:22:ec:de:e5:1f:8e:81:89:b0:
b7:24:b9:a1:9f:c0:92:79:d2:7d:1b:bf:f8:24:8a:
ed:8b:f4:38:3e:21:e2:f2:77:9b:15:7d:dc:54:ce:
33:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:11:E0:2E:3F:94:19:F5:0E:13:5A:3F:AB:2F:0D:48:68:E4:A7:6A
X509v3 Authority Key Identifier:
keyid:E0:8E:90:7C:0F:E5:08:91:A7:6B:D9:9B:29:08:70:0A:6A:C6:2E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4I6QfA_lCJGna9mbKQhwCmrGLjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:30:9c:31:72:2a:d1:57:b8:b5:7d:d3:7f:79:65:d8:ea:f2:
30:b9:ac:a2:21:43:2b:e4:3a:dc:3e:57:ae:78:4c:07:52:64:
53:37:b1:82:40:e8:97:d4:86:01:bd:fd:5a:c9:f9:32:38:02:
0c:b9:b3:4c:f6:d1:86:51:fc:94:7a:97:5c:7b:22:bb:0e:2a:
71:b9:44:84:66:91:79:ef:fc:96:70:02:e3:be:1f:fc:7e:a6:
41:33:29:a7:04:72:de:15:4b:b7:9f:c3:14:dc:a2:72:eb:0b:
94:94:63:dc:a2:b7:8e:b4:72:01:27:e3:13:b0:a9:39:64:90:
9b:b2:a7:08:6d:cf:af:6b:90:37:76:db:9b:94:e8:2b:b9:1e:
86:8d:44:bf:48:69:0d:49:1d:52:f8:12:a2:e0:ab:3c:77:11:
e0:bf:91:7a:47:4a:39:a2:c0:c8:a0:69:8d:6f:4b:8a:4b:66:
2d:4e:05:6d:9c:91:32:5f:5a:2b:c5:b4:22:6e:90:e2:91:0c:
71:5b:3a:dd:a9:65:d3:89:4c:ec:78:45:9e:90:e1:bf:00:ca:
67:1c:6f:f6:98:04:84:cb:ac:1f:cf:1d:dc:4c:d5:41:e2:c6:
46:40:e4:1b:1f:3c:50:b9:c4:c5:8b:7f:06:e3:f1:a7:8b:e0:
e1:20:a6:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/xyTV0S+R2eb6rWdl6J+RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwOGU5MDdjMGZlNTA4OTFhNzZiZDk5YjI5MDg3MDBhNmFj
NjJlMzgwHhcNMjUxMDIwMDQwMTA1WhcNMjUxMDIxMDQwMTA1WjAzMTEwLwYDVQQD
EygyYjExZTAyZTNmOTQxOWY1MGUxMzVhM2ZhYjJmMGQ0ODY4ZTRhNzZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8hg7gSaezOJpQM+zAFVxZNJttJCM
LZaze7EJF9xGe6PRyf1MTkdyiz9cDRNr5NttmmNt4J22P96IheMa1qFVsxqY/MNZ
f/NLauBdwMSj6XbJymfkMxTNtGjhbMlcMNB1PXoulC0EPt88TR7e6GXhda5GGptV
bq0TXoggFLrapjHIk30YHE/UvcVrte+uOfLNQCmb7UXaLb4h6vtGHPJuXx2I5ouN
DYqwwmbIMgSqd2Pn5xQB31cM8oBUulBLQ+8eFO55F+7fSmSysFK37yAowA28DAa1
I5Yi7N7lH46BibC3JLmhn8CSedJ9G7/4JIrti/Q4PiHi8nebFX3cVM4zRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCsR4C4/lBn1DhNaP6svDUho5KdqMB8GA1UdIwQY
MBaAFOCOkHwP5QiRp2vZmykIcApqxi44MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEk2UWZBX2xDSkduYTltYktRaHdDbXJHTGpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9jMjhlMjctZDA1Yi00NzhhLTliMGIt
ZGI5Nzg5MmE1MWZkLzEvNEk2UWZBX2xDSkduYTltYktRaHdDbXJHTGpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9jMjhlMjctZDA1Yi00NzhhLTliMGItZGI5Nzg5MmE1MWZk
LzEvNEk2UWZBX2xDSkduYTltYktRaHdDbXJHTGpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbDCcMXIq
0Ve4tX3Tf3ll2OryMLmsoiFDK+Q63D5XrnhMB1JkUzexgkDol9SGAb39Wsn5MjgC
DLmzTPbRhlH8lHqXXHsiuw4qcblEhGaRee/8lnAC474f/H6mQTMppwRy3hVLt5/D
FNyicusLlJRj3KK3jrRyASfjE7CpOWSQm7KnCG3Pr2uQN3bbm5ToK7keho1Ev0hp
DUkdUvgSouCrPHcR4L+RekdKOaLAyKBpjW9LiktmLU4FbZyRMl9aK8W0Im6Q4pEM
cVs63all04lM7HhFnpDhvwDKZxxv9pgEhMusH88d3EzVQeLGRkDkGx88ULnExYt/
BuPxp4vg4SCmiw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:01:24 2025 by rpki-client