Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.mft
File: C_4rJzg320FmbWipe8esN9zJbyA.mft (raw, json)
Hash identifier: gdc/6/tdye04CQiCHedp37HJ+ePyCgaBOTjaV6gnFj8=
Subject key identifier: 95:71:B9:F4:67:BD:22:47:C8:9E:3A:F1:00:88:BF:26:89:97:E8:46
Authority key identifier: 0B:FE:2B:27:38:37:DB:41:66:6D:68:A9:7B:C7:AC:37:DC:C9:6F:20
Certificate issuer: /CN=0bfe2b273837db41666d68a97bc7ac37dcc96f20
Certificate serial: 0199FCC6C46A4A40AEFB4A28A4C1A6963D38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_4rJzg320FmbWipe8esN9zJbyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.mft
Manifest number: 04B0
Signing time: Sun 19 Oct 2025 14:01:48 +0000
Manifest this update: Sun 19 Oct 2025 14:01:48 +0000
Manifest next update: Mon 20 Oct 2025 14:01:48 +0000
Files and hashes: 1: C_4rJzg320FmbWipe8esN9zJbyA.crl (hash: +mqKTpmp08/0kIQGAC8QILW1LzRtwXMN9Pz7OaZzmBo=)
2: GN1cEGtzhGUtNVwPMehD-Lj4N1Q.roa (hash: C8P5r4sDxFHAMG8SatPLslHel1irs4/AKLXy4El1DWk=)
3: lBowDCcGSdkP56eGU0lPL4u_SEM.roa (hash: j0fleVV6sjY4GNZzRXgYAIbJa3v2es0FQGzI6ZY2suc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_4rJzg320FmbWipe8esN9zJbyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:c4:6a:4a:40:ae:fb:4a:28:a4:c1:a6:96:3d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bfe2b273837db41666d68a97bc7ac37dcc96f20
Validity
Not Before: Oct 19 14:01:48 2025 GMT
Not After : Oct 20 14:01:48 2025 GMT
Subject: CN=9571b9f467bd2247c89e3af10088bf268997e846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7b:35:e1:ea:d6:f4:9a:62:29:3a:70:5f:b1:
46:53:55:af:b0:e3:65:2d:ce:16:7b:96:6c:c3:73:
37:cb:9d:73:72:6e:86:bf:b4:7f:fd:cc:9f:3a:57:
e0:46:68:50:aa:ea:7f:61:90:9c:cc:f0:16:59:07:
32:ce:84:20:e2:63:17:40:b3:ab:ea:1b:d1:28:55:
27:7d:42:57:d7:45:44:33:c1:4c:98:c0:a1:9a:a6:
aa:be:27:bb:9e:1e:b1:3f:0a:fe:9a:e1:36:18:48:
6b:a0:c3:29:96:5c:de:1e:f1:85:b3:d2:1d:c3:2b:
0c:47:cc:00:80:32:05:42:21:1e:1e:74:3a:a6:36:
02:77:ed:75:ea:2e:08:d3:d9:79:3b:2b:af:20:54:
19:84:5c:37:f6:9c:2c:56:7e:bb:0f:8a:de:c7:e8:
e2:b8:fc:3e:b9:75:d2:3b:b0:88:ab:91:c7:95:3c:
3b:11:c5:aa:d4:b5:33:62:a7:98:c9:2a:b2:ca:9d:
35:2d:94:a9:3c:2e:5d:77:1c:19:2b:a2:ed:4b:c7:
93:15:4a:19:eb:df:ce:21:ad:38:e0:e5:47:73:7f:
17:4b:dd:3a:12:20:f3:fe:0f:fd:99:dc:eb:1f:e5:
2d:88:2d:9d:2e:1b:8d:e7:c6:8d:9e:c4:05:26:f0:
75:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:71:B9:F4:67:BD:22:47:C8:9E:3A:F1:00:88:BF:26:89:97:E8:46
X509v3 Authority Key Identifier:
keyid:0B:FE:2B:27:38:37:DB:41:66:6D:68:A9:7B:C7:AC:37:DC:C9:6F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_4rJzg320FmbWipe8esN9zJbyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:f9:d0:f8:ac:6d:db:4e:c1:e9:c5:b4:13:82:5c:84:c2:39:
d2:2a:be:55:79:ee:18:c1:60:21:76:46:fe:05:a7:81:9d:4e:
50:69:14:00:e0:45:b7:46:c8:fb:e3:24:33:81:cc:9a:13:5c:
c1:21:1a:1f:dc:69:f8:3f:d8:ae:44:44:81:18:01:10:a7:6b:
95:2f:7f:33:cb:ab:84:d9:c2:ed:56:d9:e5:13:60:23:a3:24:
a8:4f:e1:5f:fa:66:b4:5b:52:7d:53:69:60:e9:59:4a:31:dd:
0e:e4:83:7b:f0:ce:ca:5f:62:c5:3a:6f:ee:9c:a9:b7:bf:35:
dd:b0:98:92:eb:2d:18:b0:b0:1b:4c:40:b0:34:26:3c:9c:1c:
54:a2:da:ee:36:4b:aa:cd:f9:24:f6:f9:ae:e6:d7:62:ad:86:
c9:f2:a8:d9:bc:b9:0b:b6:43:2b:36:8a:4e:05:0f:1f:72:9f:
43:b2:30:e9:0b:19:9a:59:c6:09:fd:d5:e7:d4:78:74:19:29:
70:9a:2b:55:89:33:3d:ec:82:2f:5a:52:a4:41:31:43:be:a4:
6a:da:e8:cd:29:7b:04:b3:6e:24:da:6f:4b:02:43:ad:78:46:
87:51:c3:c1:51:c8:88:1f:7c:b0:81:97:73:57:32:fb:cc:96:
a3:46:e2:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xsRqSkCu+0oopMGmlj04MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZmUyYjI3MzgzN2RiNDE2NjZkNjhhOTdiYzdhYzM3ZGNj
OTZmMjAwHhcNMjUxMDE5MTQwMTQ4WhcNMjUxMDIwMTQwMTQ4WjAzMTEwLwYDVQQD
Eyg5NTcxYjlmNDY3YmQyMjQ3Yzg5ZTNhZjEwMDg4YmYyNjg5OTdlODQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxns14erW9JpiKTpwX7FGU1WvsONl
Lc4We5Zsw3M3y51zcm6Gv7R//cyfOlfgRmhQqup/YZCczPAWWQcyzoQg4mMXQLOr
6hvRKFUnfUJX10VEM8FMmMChmqaqvie7nh6xPwr+muE2GEhroMMpllzeHvGFs9Id
wysMR8wAgDIFQiEeHnQ6pjYCd+116i4I09l5OyuvIFQZhFw39pwsVn67D4rex+ji
uPw+uXXSO7CIq5HHlTw7EcWq1LUzYqeYySqyyp01LZSpPC5ddxwZK6LtS8eTFUoZ
69/OIa044OVHc38XS906EiDz/g/9mdzrH+UtiC2dLhuN58aNnsQFJvB1EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJVxufRnvSJHyJ468QCIvyaJl+hGMB8GA1UdIwQY
MBaAFAv+Kyc4N9tBZm1oqXvHrDfcyW8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ180ckp6ZzMyMEZtYldpcGU4ZXNOOXpKYnlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9mZWI5MjctN2E4My00MDNhLWExYzEt
ZWIxZTkxNjQ0ZjJkLzEvQ180ckp6ZzMyMEZtYldpcGU4ZXNOOXpKYnlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9mZWI5MjctN2E4My00MDNhLWExYzEtZWIxZTkxNjQ0ZjJk
LzEvQ180ckp6ZzMyMEZtYldpcGU4ZXNOOXpKYnlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApvnQ+Kxt
207B6cW0E4JchMI50iq+VXnuGMFgIXZG/gWngZ1OUGkUAOBFt0bI++MkM4HMmhNc
wSEaH9xp+D/YrkREgRgBEKdrlS9/M8urhNnC7VbZ5RNgI6MkqE/hX/pmtFtSfVNp
YOlZSjHdDuSDe/DOyl9ixTpv7pypt7813bCYkustGLCwG0xAsDQmPJwcVKLa7jZL
qs35JPb5rubXYq2GyfKo2by5C7ZDKzaKTgUPH3KfQ7Iw6QsZmlnGCf3V59R4dBkp
cJorVYkzPeyCL1pSpEExQ76katrozSl7BLNuJNpvSwJDrXhGh1HDwVHIiB98sIGX
c1cy+8yWo0bicQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:40 2025 by rpki-client