Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.mft
File: 4oPErS_YckqMfV6vQxgUyz0VEn4.mft (raw, json)
Hash identifier: /K2NzH3oJTx3LaPV9ioN+Tje//EYHD+inu1bUR2VvQo=
Subject key identifier: B3:20:BF:DD:52:51:31:2C:7E:54:14:20:20:86:4F:37:08:7A:0D:CF
Authority key identifier: E2:83:C4:AD:2F:D8:72:4A:8C:7D:5E:AF:43:18:14:CB:3D:15:12:7E
Certificate issuer: /CN=e283c4ad2fd8724a8c7d5eaf431814cb3d15127e
Certificate serial: 0199FD33FCEB81AFAB20EE979FBE57DAA4AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oPErS_YckqMfV6vQxgUyz0VEn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.mft
Manifest number: 0527
Signing time: Sun 19 Oct 2025 16:01:06 +0000
Manifest this update: Sun 19 Oct 2025 16:01:06 +0000
Manifest next update: Mon 20 Oct 2025 16:01:06 +0000
Files and hashes: 1: 4oPErS_YckqMfV6vQxgUyz0VEn4.crl (hash: Z2wlHelYx1SIlkliaZtqYQGLWORPi1ps/quNdFiDxsk=)
2: f-egB3l-EDxvsW6G_3sHcV0KHX4.roa (hash: JtBE12d9bxExTSrRbQgShdNCUpSoJH+tA4uA0zrPLYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4oPErS_YckqMfV6vQxgUyz0VEn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:fc:eb:81:af:ab:20:ee:97:9f:be:57:da:a4:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e283c4ad2fd8724a8c7d5eaf431814cb3d15127e
Validity
Not Before: Oct 19 16:01:06 2025 GMT
Not After : Oct 20 16:01:06 2025 GMT
Subject: CN=b320bfdd5251312c7e54142020864f37087a0dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d3:15:52:b5:d4:b6:f7:2c:34:26:91:5e:19:
ba:db:3a:c9:f9:ba:6a:cb:21:1f:3a:ad:b8:a2:56:
e0:33:7c:48:89:62:87:b4:cb:e4:b5:6a:7f:0b:16:
88:53:43:61:3e:39:d0:db:fb:ab:83:75:44:fe:1e:
0d:1f:85:6a:11:17:8f:f0:0d:22:19:0a:fd:8d:45:
c0:78:7f:f6:00:18:8c:b7:01:f2:44:4c:b2:d2:6c:
c6:03:d6:c3:b6:7b:53:60:26:73:cc:47:04:44:b1:
c3:5b:4b:c2:2d:1c:04:23:64:cc:18:02:de:bc:7c:
82:80:3c:c5:97:9a:ea:1a:3e:0c:ac:75:0a:9e:05:
5f:ea:13:4e:f8:84:54:dc:22:23:c9:c0:13:23:54:
e1:57:03:12:d6:31:91:29:fe:ca:8a:60:30:ba:21:
2c:e7:00:2e:c6:3a:8b:6b:88:bd:07:dd:91:6f:c7:
f7:93:71:01:c8:65:cf:86:05:b2:28:be:74:eb:af:
26:5a:ed:ec:c7:b4:ab:f1:37:ed:ac:b6:ca:c3:f8:
0c:93:95:92:34:9f:ed:51:5e:a1:00:cc:dc:19:ad:
6b:06:b8:19:33:71:f3:de:d0:0f:37:d3:7f:63:25:
30:4f:cf:83:dd:3b:2a:c0:37:2a:cf:15:c4:7e:2c:
15:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:20:BF:DD:52:51:31:2C:7E:54:14:20:20:86:4F:37:08:7A:0D:CF
X509v3 Authority Key Identifier:
keyid:E2:83:C4:AD:2F:D8:72:4A:8C:7D:5E:AF:43:18:14:CB:3D:15:12:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oPErS_YckqMfV6vQxgUyz0VEn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:b6:4b:d8:8d:09:57:19:8c:24:db:04:15:3b:06:b6:42:71:
ad:37:92:09:f3:e9:ae:8b:a1:ff:9f:8c:e0:11:7e:a0:02:a6:
55:e2:00:87:7b:4b:35:67:65:89:93:d2:48:5a:4f:f7:f2:c2:
c2:66:f4:c4:7f:ba:fe:67:9e:cb:07:8e:28:56:2a:c4:49:a5:
d3:aa:17:51:68:20:24:79:74:ad:2d:bf:f6:18:1d:c5:14:57:
ad:7a:bb:14:e4:a2:df:2d:2a:c1:b1:1a:14:1b:a9:59:f4:2d:
24:41:67:e5:e1:31:df:61:49:3c:bf:90:f6:d5:1d:06:d3:47:
b4:dc:08:bf:6d:ab:8e:82:c8:65:e6:7b:38:b0:0f:bd:a6:93:
af:9a:12:7d:34:4b:2b:f4:3b:21:19:eb:ed:5f:94:db:6e:14:
8c:5a:28:d9:49:a0:37:ea:da:55:5a:88:a5:f8:d8:5a:73:ef:
7f:ea:a0:61:ab:86:ae:5f:87:3d:f0:3a:f8:9f:68:4d:ed:d9:
31:a9:7e:36:bf:41:83:74:f5:39:3b:23:48:ef:0c:cd:3c:6f:
a8:b9:b1:0a:a8:e6:82:53:ca:55:73:c3:d9:10:0b:f8:57:6c:
07:a2:49:75:a8:8d:ad:9b:2d:28:e7:54:83:ef:58:9e:56:f1:
a3:d5:dd:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9M/zrga+rIO6Xn75X2qSuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyODNjNGFkMmZkODcyNGE4YzdkNWVhZjQzMTgxNGNiM2Qx
NTEyN2UwHhcNMjUxMDE5MTYwMTA2WhcNMjUxMDIwMTYwMTA2WjAzMTEwLwYDVQQD
EyhiMzIwYmZkZDUyNTEzMTJjN2U1NDE0MjAyMDg2NGYzNzA4N2EwZGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNMVUrXUtvcsNCaRXhm62zrJ+bpq
yyEfOq24olbgM3xIiWKHtMvktWp/CxaIU0NhPjnQ2/urg3VE/h4NH4VqEReP8A0i
GQr9jUXAeH/2ABiMtwHyREyy0mzGA9bDtntTYCZzzEcERLHDW0vCLRwEI2TMGALe
vHyCgDzFl5rqGj4MrHUKngVf6hNO+IRU3CIjycATI1ThVwMS1jGRKf7KimAwuiEs
5wAuxjqLa4i9B92Rb8f3k3EByGXPhgWyKL50668mWu3sx7Sr8TftrLbKw/gMk5WS
NJ/tUV6hAMzcGa1rBrgZM3Hz3tAPN9N/YyUwT8+D3TsqwDcqzxXEfiwVrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLMgv91SUTEsflQUICCGTzcIeg3PMB8GA1UdIwQY
MBaAFOKDxK0v2HJKjH1er0MYFMs9FRJ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNG9QRXJTX1lja3FNZlY2dlF4Z1V5ejBWRW40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9iOGNjNjYtY2M2NS00ZGMyLWFlODYt
NjFjMWVjYWFiNTVmLzEvNG9QRXJTX1lja3FNZlY2dlF4Z1V5ejBWRW40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9iOGNjNjYtY2M2NS00ZGMyLWFlODYtNjFjMWVjYWFiNTVm
LzEvNG9QRXJTX1lja3FNZlY2dlF4Z1V5ejBWRW40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx7ZL2I0J
VxmMJNsEFTsGtkJxrTeSCfPprouh/5+M4BF+oAKmVeIAh3tLNWdliZPSSFpP9/LC
wmb0xH+6/meeyweOKFYqxEml06oXUWggJHl0rS2/9hgdxRRXrXq7FOSi3y0qwbEa
FBupWfQtJEFn5eEx32FJPL+Q9tUdBtNHtNwIv22rjoLIZeZ7OLAPvaaTr5oSfTRL
K/Q7IRnr7V+U224UjFoo2UmgN+raVVqIpfjYWnPvf+qgYauGrl+HPfA6+J9oTe3Z
Mal+Nr9Bg3T1OTsjSO8MzTxvqLmxCqjmglPKVXPD2RAL+FdsB6JJdaiNrZstKOdU
g+9Ynlbxo9XdsQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:07:34 2025 by rpki-client