Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.mft
File: 4COOIod_cwOWQAfOPjQG9frZSWI.mft (raw, json)
Hash identifier: cXrppxU9Z7TT45lGgE8l6GtSWzm096gcmHuu4pqtro0=
Subject key identifier: 5F:6A:71:FC:3C:55:A6:C3:F6:21:3F:F4:24:98:EE:99:1F:EF:1A:59
Authority key identifier: E0:23:8E:22:87:7F:73:03:96:40:07:CE:3E:34:06:F5:FA:D9:49:62
Certificate issuer: /CN=e0238e22877f7303964007ce3e3406f5fad94962
Certificate serial: 0199FDD910D53ADD894C0B14E9578C58ACD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4COOIod_cwOWQAfOPjQG9frZSWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 19:01:25 +0000
Manifest this update: Sun 19 Oct 2025 19:01:25 +0000
Manifest next update: Mon 20 Oct 2025 19:01:25 +0000
Files and hashes: 1: 4COOIod_cwOWQAfOPjQG9frZSWI.crl (hash: MCKqadBatPEc/pS511nmkcdJGteUBVDnG0OglkgGLak=)
2: VBkUSdd8HhC9ylebW4iiyCK4E-Q.roa (hash: /Z8ymu6jIj7elvCMahyZD4nXriuKXl4fYbvc0S8rJdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4COOIod_cwOWQAfOPjQG9frZSWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:10:d5:3a:dd:89:4c:0b:14:e9:57:8c:58:ac:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0238e22877f7303964007ce3e3406f5fad94962
Validity
Not Before: Oct 19 19:01:25 2025 GMT
Not After : Oct 20 19:01:25 2025 GMT
Subject: CN=5f6a71fc3c55a6c3f6213ff42498ee991fef1a59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:de:92:cb:93:c8:a8:c8:ed:5f:8c:88:db:f9:
2c:83:0c:93:59:a2:dd:73:39:43:5b:bf:ad:fe:d2:
bf:1f:17:60:a7:cd:66:15:de:fa:3b:b0:41:62:d5:
38:c3:2b:bb:f1:24:b8:00:c9:a3:86:0d:85:ed:9a:
7e:aa:d0:2e:31:06:ef:ed:9d:3c:d5:c5:09:80:07:
b9:6c:6e:83:8a:57:5c:46:67:6c:78:27:68:00:43:
42:06:58:a9:d5:30:5b:5b:3e:33:f3:af:57:82:10:
ac:c2:ad:d8:de:1f:b8:bd:73:72:61:2b:77:7c:d6:
d6:db:c5:47:fe:af:44:53:28:eb:5e:23:13:bf:aa:
5f:e8:e1:23:c6:95:6d:f2:80:c3:92:8d:97:54:8d:
f3:66:54:5b:7d:df:14:01:84:af:07:3c:fb:88:5c:
eb:4d:1c:04:b3:80:33:26:39:ed:8b:e3:ec:9e:54:
5b:87:94:d0:4b:d3:e7:86:d0:1b:f3:ee:e1:67:90:
88:ce:89:a4:c8:79:ce:4f:d7:16:f7:d1:f5:0b:a2:
ad:56:89:7a:2a:b3:60:39:e6:75:09:23:f8:eb:18:
73:21:a2:82:4d:4f:ba:fc:c4:65:38:de:09:72:6a:
25:0b:9e:24:24:8c:2b:33:cd:7c:c6:28:31:fc:42:
fe:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:6A:71:FC:3C:55:A6:C3:F6:21:3F:F4:24:98:EE:99:1F:EF:1A:59
X509v3 Authority Key Identifier:
keyid:E0:23:8E:22:87:7F:73:03:96:40:07:CE:3E:34:06:F5:FA:D9:49:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4COOIod_cwOWQAfOPjQG9frZSWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:5a:49:c9:66:50:06:19:17:65:ea:29:67:17:50:32:b7:78:
62:b1:2b:d7:fe:9e:1a:a6:e9:81:e2:31:ce:5f:72:0c:8b:ea:
c6:5a:42:8c:ce:82:6f:3c:ea:52:1d:ac:07:c4:1a:c0:d2:c9:
66:4f:06:8f:1c:19:8b:45:c0:7d:8a:7a:92:64:f8:a7:8b:91:
ff:60:5d:fc:12:bb:8c:22:ad:5c:8b:75:be:9f:fa:7e:e9:10:
87:53:0a:25:4d:b0:3b:4c:fe:7c:23:17:6b:a0:23:62:b2:e2:
ed:0f:5b:ae:ce:ea:47:dc:0a:9a:dc:98:00:93:61:a6:81:5c:
e9:50:d7:1c:3b:55:c5:67:65:c0:18:bc:0b:27:1b:ca:b4:98:
52:79:3f:2b:19:d8:1c:0a:d6:34:97:12:3e:98:dd:c3:2c:42:
c8:f5:b4:d8:52:6f:21:9d:cd:02:79:5d:65:7f:50:66:ed:3c:
7f:4a:b4:01:13:f4:2f:dc:c5:1c:5a:48:7f:45:53:a0:94:0c:
3f:36:09:9f:4f:9a:e1:63:3d:45:73:74:43:f4:08:7a:22:0c:
67:d2:7d:51:df:65:48:87:fe:c5:42:3b:76:92:0f:47:fb:38:
bc:53:48:4c:de:bb:64:99:98:8c:df:b7:ae:6f:2c:93:fa:b9:
9f:32:04:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92RDVOt2JTAsU6VeMWKzZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwMjM4ZTIyODc3ZjczMDM5NjQwMDdjZTNlMzQwNmY1ZmFk
OTQ5NjIwHhcNMjUxMDE5MTkwMTI1WhcNMjUxMDIwMTkwMTI1WjAzMTEwLwYDVQQD
Eyg1ZjZhNzFmYzNjNTVhNmMzZjYyMTNmZjQyNDk4ZWU5OTFmZWYxYTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkd6Sy5PIqMjtX4yI2/ksgwyTWaLd
czlDW7+t/tK/Hxdgp81mFd76O7BBYtU4wyu78SS4AMmjhg2F7Zp+qtAuMQbv7Z08
1cUJgAe5bG6DildcRmdseCdoAENCBlip1TBbWz4z869XghCswq3Y3h+4vXNyYSt3
fNbW28VH/q9EUyjrXiMTv6pf6OEjxpVt8oDDko2XVI3zZlRbfd8UAYSvBzz7iFzr
TRwEs4AzJjnti+PsnlRbh5TQS9PnhtAb8+7hZ5CIzomkyHnOT9cW99H1C6KtVol6
KrNgOeZ1CSP46xhzIaKCTU+6/MRlON4JcmolC54kJIwrM818xigx/EL+rwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF9qcfw8VabD9iE/9CSY7pkf7xpZMB8GA1UdIwQY
MBaAFOAjjiKHf3MDlkAHzj40BvX62UliMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNENPT0lvZF9jd09XUUFmT1BqUUc5ZnJaU1dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9kYTIyNzYtNmRiZi00MjJlLTllYmIt
NTYxMTc1ZjA0ZDhlLzEvNENPT0lvZF9jd09XUUFmT1BqUUc5ZnJaU1dJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9kYTIyNzYtNmRiZi00MjJlLTllYmItNTYxMTc1ZjA0ZDhl
LzEvNENPT0lvZF9jd09XUUFmT1BqUUc5ZnJaU1dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb1pJyWZQ
BhkXZeopZxdQMrd4YrEr1/6eGqbpgeIxzl9yDIvqxlpCjM6CbzzqUh2sB8QawNLJ
Zk8GjxwZi0XAfYp6kmT4p4uR/2Bd/BK7jCKtXIt1vp/6fukQh1MKJU2wO0z+fCMX
a6AjYrLi7Q9brs7qR9wKmtyYAJNhpoFc6VDXHDtVxWdlwBi8CycbyrSYUnk/KxnY
HArWNJcSPpjdwyxCyPW02FJvIZ3NAnldZX9QZu08f0q0ARP0L9zFHFpIf0VToJQM
PzYJn0+a4WM9RXN0Q/QIeiIMZ9J9Ud9lSIf+xUI7dpIPR/s4vFNITN67ZJmYjN+3
rm8sk/q5nzIECQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:41:38 2025 by rpki-client