Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft
File: r4j95vrbtrLB22_kH4KdHyAVvgs.mft (raw, json)
Hash identifier: YKcqLKu2sLN00TZu/Qt9UCgNftn4+Fg3bDs45iKF4O4=
Subject key identifier: F4:10:EC:CA:CB:40:7E:94:60:9B:7B:00:65:58:F2:E8:11:08:90:91
Authority key identifier: AF:88:FD:E6:FA:DB:B6:B2:C1:DB:6F:E4:1F:82:9D:1F:20:15:BE:0B
Certificate issuer: /CN=af88fde6fadbb6b2c1db6fe41f829d1f2015be0b
Certificate serial: 0199FCC67F4F830273A93BA0B60922A55789
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft
Manifest number: 0D7C
Signing time: Sun 19 Oct 2025 14:01:31 +0000
Manifest this update: Sun 19 Oct 2025 14:01:31 +0000
Manifest next update: Mon 20 Oct 2025 14:01:31 +0000
Files and hashes: 1: RHreYh0WmNugHNPOVP5GHBEiSQE.roa (hash: lDEy9crc1E/w31v0jSsa/vEhnHdpcWtnPtxtDbNUjjc=)
2: r4j95vrbtrLB22_kH4KdHyAVvgs.crl (hash: RsPLX67i9O/73Tu5JJc0J3JpPt3sSO4Ja5CkmsDAqHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:7f:4f:83:02:73:a9:3b:a0:b6:09:22:a5:57:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af88fde6fadbb6b2c1db6fe41f829d1f2015be0b
Validity
Not Before: Oct 19 14:01:31 2025 GMT
Not After : Oct 20 14:01:31 2025 GMT
Subject: CN=f410eccacb407e94609b7b006558f2e811089091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fc:0c:5a:ad:c7:92:a6:84:65:2a:55:43:ae:
92:ca:53:81:fe:70:29:85:80:44:02:9e:36:e0:52:
60:72:b1:90:9b:b5:ae:82:4c:86:b2:64:81:ec:d4:
e9:81:f7:49:60:e0:72:95:55:81:fe:3c:f3:88:06:
d2:bf:b9:91:3c:64:d9:ab:06:3f:21:e4:a4:e1:9d:
a1:c6:da:6a:6e:99:21:f7:96:5b:67:c8:14:a8:8d:
a4:f2:4c:9b:7b:41:e9:d6:31:e8:b8:8f:b6:e8:7b:
26:18:dc:36:b2:63:40:3a:94:62:e5:58:94:b5:dd:
41:6c:65:4f:8b:0f:d1:a5:cd:bf:7e:e1:f5:c4:79:
80:f5:6f:38:44:0b:6d:e5:50:1e:4f:7a:ed:8c:dc:
a4:d9:2a:3c:6c:c7:cc:1b:e7:0a:fb:93:a8:3d:5a:
15:2b:f4:37:bd:ae:ea:ba:ec:24:03:86:c4:49:92:
aa:8f:f9:1d:4a:5a:e7:f1:53:9d:0f:6f:a5:8d:0a:
a5:9a:45:39:20:61:fb:ab:f6:00:8d:e1:34:33:62:
87:6e:55:0e:69:07:0d:9e:55:16:1b:32:6a:6a:dd:
5e:12:5c:c8:01:8b:59:d2:76:96:4d:c3:05:43:b3:
f8:47:08:a1:5e:b6:6c:87:ca:4a:15:61:e0:37:cf:
90:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:10:EC:CA:CB:40:7E:94:60:9B:7B:00:65:58:F2:E8:11:08:90:91
X509v3 Authority Key Identifier:
keyid:AF:88:FD:E6:FA:DB:B6:B2:C1:DB:6F:E4:1F:82:9D:1F:20:15:BE:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:4f:2a:0d:1d:c3:21:ea:ad:ec:28:01:c5:a2:7d:e1:b2:4a:
16:78:f5:4e:b5:1a:41:16:2f:46:7a:3f:61:7e:60:6b:32:32:
c4:0c:dc:86:d5:3d:b9:f6:cc:5a:10:33:b9:f3:2a:75:63:10:
bd:08:09:1f:27:1c:28:52:38:50:71:02:50:e2:51:c2:94:52:
91:7e:2f:1c:d1:3a:d5:22:65:74:58:ce:7b:59:9f:a4:43:54:
5d:d7:7a:8a:76:61:f0:7d:26:3e:ab:c3:7a:00:34:6d:e5:ec:
bc:b2:82:c3:2e:e5:03:29:72:d4:b0:16:ca:bd:74:20:1f:c5:
ed:fd:01:fc:30:80:e0:27:aa:47:de:0d:1e:7c:82:66:f6:38:
d1:78:0f:13:1e:4f:0c:84:9f:6e:a4:36:2b:d4:01:12:4d:ed:
43:96:37:54:96:91:a6:d2:31:fc:16:87:e3:39:8d:9b:bd:cd:
4e:4a:d0:39:64:68:1d:e3:e1:af:53:d5:1e:b8:29:c2:17:cb:
d4:bd:24:44:81:70:bf:b1:19:47:a0:0f:77:91:77:81:89:6c:
88:c2:d0:22:cf:e0:b1:17:1c:10:e3:b2:63:45:8e:ca:e4:29:
bb:87:a9:27:c0:17:27:2b:5e:01:c9:06:10:85:8a:82:5f:72:
0d:8d:a5:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xn9PgwJzqTugtgkipVeJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmODhmZGU2ZmFkYmI2YjJjMWRiNmZlNDFmODI5ZDFmMjAx
NWJlMGIwHhcNMjUxMDE5MTQwMTMxWhcNMjUxMDIwMTQwMTMxWjAzMTEwLwYDVQQD
EyhmNDEwZWNjYWNiNDA3ZTk0NjA5YjdiMDA2NTU4ZjJlODExMDg5MDkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/wMWq3HkqaEZSpVQ66SylOB/nAp
hYBEAp424FJgcrGQm7WugkyGsmSB7NTpgfdJYOBylVWB/jzziAbSv7mRPGTZqwY/
IeSk4Z2hxtpqbpkh95ZbZ8gUqI2k8kybe0Hp1jHouI+26HsmGNw2smNAOpRi5ViU
td1BbGVPiw/Rpc2/fuH1xHmA9W84RAtt5VAeT3rtjNyk2So8bMfMG+cK+5OoPVoV
K/Q3va7quuwkA4bESZKqj/kdSlrn8VOdD2+ljQqlmkU5IGH7q/YAjeE0M2KHblUO
aQcNnlUWGzJqat1eElzIAYtZ0naWTcMFQ7P4RwihXrZsh8pKFWHgN8+QwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPQQ7MrLQH6UYJt7AGVY8ugRCJCRMB8GA1UdIwQY
MBaAFK+I/eb627aywdtv5B+CnR8gFb4LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjRqOTV2cmJ0ckxCMjJfa0g0S2RIeUFWdmdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9mZDU5NmEtM2Y1NC00ZTA2LTg2MjAt
NmUwZDIxM2Y0ODRhLzEvcjRqOTV2cmJ0ckxCMjJfa0g0S2RIeUFWdmdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9mZDU5NmEtM2Y1NC00ZTA2LTg2MjAtNmUwZDIxM2Y0ODRh
LzEvcjRqOTV2cmJ0ckxCMjJfa0g0S2RIeUFWdmdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFE8qDR3D
Ieqt7CgBxaJ94bJKFnj1TrUaQRYvRno/YX5gazIyxAzchtU9ufbMWhAzufMqdWMQ
vQgJHyccKFI4UHECUOJRwpRSkX4vHNE61SJldFjOe1mfpENUXdd6inZh8H0mPqvD
egA0beXsvLKCwy7lAyly1LAWyr10IB/F7f0B/DCA4CeqR94NHnyCZvY40XgPEx5P
DISfbqQ2K9QBEk3tQ5Y3VJaRptIx/BaH4zmNm73NTkrQOWRoHePhr1PVHrgpwhfL
1L0kRIFwv7EZR6APd5F3gYlsiMLQIs/gsRccEOOyY0WOyuQpu4epJ8AXJyteAckG
EIWKgl9yDY2lsA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:30:26 2025 by rpki-client