Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft
File: 4NQ1eE2owhjg_xB83P4kykVpyUk.mft (raw, json)
Hash identifier: mqcqcHXy1Lc7cdQ5kLsyqbM4ulsKY/wNgGVVxavnnic=
Subject key identifier: 1F:69:49:93:A6:EE:5E:3F:30:F9:D8:1E:97:F1:51:10:35:A4:E5:04
Authority key identifier: E0:D4:35:78:4D:A8:C2:18:E0:FF:10:7C:DC:FE:24:CA:45:69:C9:49
Certificate issuer: /CN=e0d435784da8c218e0ff107cdcfe24ca4569c949
Certificate serial: 0199FC5879BDE2FBA939534ADBD95EAB056B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 12:01:20 +0000
Manifest this update: Sun 19 Oct 2025 12:01:20 +0000
Manifest next update: Mon 20 Oct 2025 12:01:20 +0000
Files and hashes: 1: 4NQ1eE2owhjg_xB83P4kykVpyUk.crl (hash: JQyE1cFCGoUiReFc7iMOxvUpPOaXRi4oPXRtb8UgobQ=)
2: PCU_z8etHMahQn2RAV03QXEYQNY.roa (hash: u3wh2VwTq9MZxicFM5jtw2aPgJCWNRgfQ4wq8HW2GwA=)
3: dzbMTYGCieBVBPgENTHt9L5KJ8M.roa (hash: ujry7yejU+h1f7YJVtPloSSU466DjjsHF906b9LbjBg=)
4: iFRT7pIErYyjSrvBoxfFD5pxtGQ.roa (hash: 5ByeZ/21OPrr4ys4yOkH+9BugOf167l7MKLoGEfw+nA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:79:bd:e2:fb:a9:39:53:4a:db:d9:5e:ab:05:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0d435784da8c218e0ff107cdcfe24ca4569c949
Validity
Not Before: Oct 19 12:01:20 2025 GMT
Not After : Oct 20 12:01:20 2025 GMT
Subject: CN=1f694993a6ee5e3f30f9d81e97f1511035a4e504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1b:23:46:cf:3e:30:55:ea:ce:b9:ab:5f:67:
12:e9:9a:3e:64:ea:a5:0c:3e:1d:d6:e6:79:fe:60:
02:20:eb:6b:d2:13:3b:e9:f7:e7:d2:0d:2a:0c:e7:
f5:c4:b9:3e:64:bc:1d:75:68:18:5d:70:ec:97:0f:
9c:1a:bd:a3:b1:d0:37:fa:ec:97:f8:85:81:6c:a2:
d0:bf:65:48:3d:88:5f:2c:c8:55:fd:98:f5:f8:1e:
11:52:03:68:cd:37:01:14:d6:2f:85:c0:b0:5f:50:
98:ba:e8:ff:24:ca:b0:fa:5b:37:0b:e3:54:67:fc:
60:01:08:47:9d:16:a2:1d:e6:2a:39:e3:6f:a9:d2:
41:01:37:80:46:1d:c7:f5:aa:c4:b5:3c:9a:99:0c:
e2:34:62:ea:2a:eb:b3:e3:5d:17:85:86:7a:7e:0e:
8c:e3:b2:f7:14:55:3e:d8:5b:85:b6:c9:17:a9:7f:
d1:91:01:ed:1b:aa:78:a6:fd:b0:8d:a8:a1:1b:72:
ab:b7:c1:d9:2b:0d:da:91:c6:1d:ea:95:9e:b8:cd:
1b:9a:56:db:f6:fb:c1:eb:f0:70:d5:f6:87:e8:71:
34:26:a4:bc:47:aa:40:44:48:07:ec:0e:44:e4:4c:
aa:a1:22:cd:13:40:f1:5c:63:50:15:56:f4:5f:e1:
c8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:69:49:93:A6:EE:5E:3F:30:F9:D8:1E:97:F1:51:10:35:A4:E5:04
X509v3 Authority Key Identifier:
keyid:E0:D4:35:78:4D:A8:C2:18:E0:FF:10:7C:DC:FE:24:CA:45:69:C9:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:07:02:19:78:c2:39:a5:a9:e6:0b:fc:46:94:10:86:f7:7b:
2d:6d:df:c1:8a:37:af:ad:e2:f7:3b:7e:78:d6:74:d1:5c:fe:
38:bb:52:8a:17:02:4a:22:76:d0:ff:7a:9e:e2:35:bc:c9:26:
97:5b:54:1e:f4:34:7b:c0:29:e4:63:fc:47:de:1f:9e:42:58:
f5:7d:80:f2:5e:ed:73:8d:a2:0b:a3:24:f7:f0:fb:57:16:8a:
8c:12:bb:ab:99:13:fb:b6:78:35:d0:d0:31:02:ac:c4:c6:a7:
6c:5d:0b:a2:27:89:de:81:ee:c8:d9:f5:f1:35:cb:26:3d:07:
2b:9f:94:cd:67:e2:74:48:4d:b3:41:55:8f:5a:e7:51:d3:8a:
b2:ea:2c:05:73:d6:fd:f0:99:23:83:ce:b9:79:9a:70:50:49:
94:f7:b1:03:c2:65:e8:a3:76:a5:aa:8c:55:42:4f:0c:ba:5b:
47:2c:41:1f:e8:d8:49:aa:dc:6f:ce:af:17:8a:67:c4:df:95:
86:5a:a5:79:1b:01:48:c1:5e:bc:4f:2f:32:f4:79:11:e7:95:
9d:a9:dd:3f:0d:1d:5d:f0:3f:7a:98:58:0e:e5:de:8c:e7:d3:
ab:b8:2b:3f:9f:bb:e5:8c:e3:11:26:98:ae:74:93:4a:ac:5b:
93:1d:32:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WHm94vupOVNK29leqwVrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwZDQzNTc4NGRhOGMyMThlMGZmMTA3Y2RjZmUyNGNhNDU2
OWM5NDkwHhcNMjUxMDE5MTIwMTIwWhcNMjUxMDIwMTIwMTIwWjAzMTEwLwYDVQQD
EygxZjY5NDk5M2E2ZWU1ZTNmMzBmOWQ4MWU5N2YxNTExMDM1YTRlNTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxsjRs8+MFXqzrmrX2cS6Zo+ZOql
DD4d1uZ5/mACIOtr0hM76ffn0g0qDOf1xLk+ZLwddWgYXXDslw+cGr2jsdA3+uyX
+IWBbKLQv2VIPYhfLMhV/Zj1+B4RUgNozTcBFNYvhcCwX1CYuuj/JMqw+ls3C+NU
Z/xgAQhHnRaiHeYqOeNvqdJBATeARh3H9arEtTyamQziNGLqKuuz410XhYZ6fg6M
47L3FFU+2FuFtskXqX/RkQHtG6p4pv2wjaihG3Krt8HZKw3akcYd6pWeuM0bmlbb
9vvB6/Bw1faH6HE0JqS8R6pAREgH7A5E5EyqoSLNE0DxXGNQFVb0X+HITwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB9pSZOm7l4/MPnYHpfxURA1pOUEMB8GA1UdIwQY
MBaAFODUNXhNqMIY4P8QfNz+JMpFaclJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNE5RMWVFMm93aGpnX3hCODNQNGt5a1ZweVVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hMDVlYmEtOWQ4NS00ODliLWFlYzct
ZWQ0MmQzYTYyNWE0LzEvNE5RMWVFMm93aGpnX3hCODNQNGt5a1ZweVVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9hMDVlYmEtOWQ4NS00ODliLWFlYzctZWQ0MmQzYTYyNWE0
LzEvNE5RMWVFMm93aGpnX3hCODNQNGt5a1ZweVVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArAcCGXjC
OaWp5gv8RpQQhvd7LW3fwYo3r63i9zt+eNZ00Vz+OLtSihcCSiJ20P96nuI1vMkm
l1tUHvQ0e8Ap5GP8R94fnkJY9X2A8l7tc42iC6Mk9/D7VxaKjBK7q5kT+7Z4NdDQ
MQKsxManbF0LoieJ3oHuyNn18TXLJj0HK5+UzWfidEhNs0FVj1rnUdOKsuosBXPW
/fCZI4POuXmacFBJlPexA8Jl6KN2paqMVUJPDLpbRyxBH+jYSarcb86vF4pnxN+V
hlqleRsBSMFevE8vMvR5EeeVnandPw0dXfA/ephYDuXejOfTq7grP5+75YzjESaY
rnSTSqxbkx0y+w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:21 2025 by rpki-client