Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft
File: 4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft (raw, json)
Hash identifier: hitTAm7ZZkOZy10bnFiWsQgP3RRbHEKsuUUybiYmS1k=
Subject key identifier: C2:06:A7:3C:0F:59:A3:F9:64:12:04:11:C7:DA:42:6C:12:83:FA:6A
Authority key identifier: E1:15:1D:48:9B:36:69:41:92:AC:BF:CA:A5:E0:BB:46:FC:9E:5B:E0
Certificate issuer: /CN=e1151d489b36694192acbfcaa5e0bb46fc9e5be0
Certificate serial: 0199FBEAEB529A319AA5742AF3FA9E313C1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4RUdSJs2aUGSrL_KpeC7RvyeW-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft
Manifest number: 070D
Signing time: Sun 19 Oct 2025 10:01:40 +0000
Manifest this update: Sun 19 Oct 2025 10:01:40 +0000
Manifest next update: Mon 20 Oct 2025 10:01:40 +0000
Files and hashes: 1: 4RUdSJs2aUGSrL_KpeC7RvyeW-A.crl (hash: CbkjhNZWNJPie+OzfQsrkHO8n5HIoRgsukF8YXEi3k0=)
2: HYom0-kciwsBpHtG02N8IppZ_kA.roa (hash: gd8Ptnlp+eybQYq2eGs8Iys0wttljsxiJW6GYdz0ar4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/4RUdSJs2aUGSrL_KpeC7RvyeW-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:eb:52:9a:31:9a:a5:74:2a:f3:fa:9e:31:3c:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1151d489b36694192acbfcaa5e0bb46fc9e5be0
Validity
Not Before: Oct 19 10:01:40 2025 GMT
Not After : Oct 20 10:01:40 2025 GMT
Subject: CN=c206a73c0f59a3f964120411c7da426c1283fa6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b1:72:01:e5:16:f1:87:6c:5c:b3:fd:3b:a7:
d6:59:c3:10:eb:54:d5:12:d5:5a:72:89:99:ab:aa:
8f:fe:25:0e:9e:11:9f:8b:d6:3e:3a:a7:93:62:68:
cd:4b:94:6a:db:f0:52:dd:7a:c9:a4:7a:05:4d:21:
a8:20:59:48:7a:d8:70:1c:7d:0c:35:d0:07:3e:f7:
70:2a:b0:3b:42:73:4e:50:30:ae:69:2b:b8:3b:4b:
a4:1f:d9:7a:a2:80:18:be:2e:c2:4b:6b:f1:9b:7b:
87:a6:00:2a:71:89:8b:45:38:b0:9f:1d:2f:76:02:
fd:01:f8:90:9b:26:c9:1a:88:30:d1:f4:22:e1:4d:
59:b2:32:0e:48:b0:3a:40:30:05:35:53:9e:ad:06:
9b:a1:6f:44:82:94:f2:c3:36:95:ef:e0:25:5a:ec:
33:21:a2:82:61:42:88:5c:87:0f:0b:31:5a:3f:59:
7d:22:8c:7f:d8:f4:7b:9f:b0:b7:7e:3a:56:0e:1c:
b7:06:e0:5c:0c:78:86:11:3c:1e:08:8d:88:f0:aa:
03:b3:bb:86:98:9f:8c:1f:78:b4:26:7f:37:d4:79:
68:28:aa:c2:be:26:9b:c8:af:e9:78:14:76:99:8e:
03:ad:0c:32:53:5b:dd:ab:99:3b:b4:eb:96:c8:39:
67:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:06:A7:3C:0F:59:A3:F9:64:12:04:11:C7:DA:42:6C:12:83:FA:6A
X509v3 Authority Key Identifier:
keyid:E1:15:1D:48:9B:36:69:41:92:AC:BF:CA:A5:E0:BB:46:FC:9E:5B:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4RUdSJs2aUGSrL_KpeC7RvyeW-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:c1:16:b6:c9:42:00:72:1c:8c:18:c0:ca:a9:3a:38:9f:9d:
b2:4b:67:27:33:c7:49:8a:1c:e3:8f:86:2b:84:c8:c7:a0:80:
7a:ab:ad:82:3a:2a:0e:ee:c3:ec:1b:35:83:ed:cb:0d:2d:e8:
20:65:87:ab:f7:16:c4:8b:2b:b9:f3:b1:3d:b1:83:0a:ca:25:
c7:86:e3:47:c2:b2:c9:07:72:33:a4:42:7d:29:36:68:00:13:
ff:ee:2f:f3:2b:7e:6a:26:ca:fa:79:c1:eb:78:cc:00:6c:b0:
98:2d:e5:f6:1e:11:85:78:a9:39:e9:57:07:05:65:36:c5:0b:
ca:2a:cd:34:15:5e:50:68:cc:96:ba:5e:08:fb:9d:5b:33:b8:
aa:18:39:cb:f5:81:f8:3b:82:36:f6:b7:37:cb:8d:56:bd:7f:
c5:32:7a:e7:46:b4:91:d1:a3:8a:66:e5:e1:7c:86:00:13:ba:
e9:f7:d5:66:d4:ec:3e:86:fe:bf:93:36:33:1b:02:a0:5c:70:
d3:b8:f2:12:88:b3:73:81:c5:a0:0c:06:15:bf:75:0e:9a:fa:
ad:b7:d6:d1:69:62:17:c8:4e:56:4b:5a:2d:df:82:85:a0:f9:
ad:08:d4:65:b4:be:e1:7f:cd:11:b1:e9:9d:28:e3:48:00:2d:
29:e2:b5:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76utSmjGapXQq8/qeMTwdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMTUxZDQ4OWIzNjY5NDE5MmFjYmZjYWE1ZTBiYjQ2ZmM5
ZTViZTAwHhcNMjUxMDE5MTAwMTQwWhcNMjUxMDIwMTAwMTQwWjAzMTEwLwYDVQQD
EyhjMjA2YTczYzBmNTlhM2Y5NjQxMjA0MTFjN2RhNDI2YzEyODNmYTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybFyAeUW8YdsXLP9O6fWWcMQ61TV
EtVacomZq6qP/iUOnhGfi9Y+OqeTYmjNS5Rq2/BS3XrJpHoFTSGoIFlIethwHH0M
NdAHPvdwKrA7QnNOUDCuaSu4O0ukH9l6ooAYvi7CS2vxm3uHpgAqcYmLRTiwnx0v
dgL9AfiQmybJGogw0fQi4U1ZsjIOSLA6QDAFNVOerQaboW9EgpTywzaV7+AlWuwz
IaKCYUKIXIcPCzFaP1l9Iox/2PR7n7C3fjpWDhy3BuBcDHiGETweCI2I8KoDs7uG
mJ+MH3i0Jn831HloKKrCviabyK/peBR2mY4DrQwyU1vdq5k7tOuWyDln4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMIGpzwPWaP5ZBIEEcfaQmwSg/pqMB8GA1UdIwQY
MBaAFOEVHUibNmlBkqy/yqXgu0b8nlvgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFJVZFNKczJhVUdTckxfS3BlQzdSdnllVy1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9lMzRjZDUtMDExYS00MDRhLTlhZDUt
OTNiNTc4ZDE4YzhjLzEvNFJVZFNKczJhVUdTckxfS3BlQzdSdnllVy1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9lMzRjZDUtMDExYS00MDRhLTlhZDUtOTNiNTc4ZDE4Yzhj
LzEvNFJVZFNKczJhVUdTckxfS3BlQzdSdnllVy1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASMEWtslC
AHIcjBjAyqk6OJ+dsktnJzPHSYoc44+GK4TIx6CAequtgjoqDu7D7Bs1g+3LDS3o
IGWHq/cWxIsrufOxPbGDCsolx4bjR8KyyQdyM6RCfSk2aAAT/+4v8yt+aibK+nnB
63jMAGywmC3l9h4RhXipOelXBwVlNsULyirNNBVeUGjMlrpeCPudWzO4qhg5y/WB
+DuCNva3N8uNVr1/xTJ650a0kdGjimbl4XyGABO66ffVZtTsPob+v5M2MxsCoFxw
07jyEoizc4HFoAwGFb91Dpr6rbfW0WliF8hOVktaLd+ChaD5rQjUZbS+4X/NEbHp
nSjjSAAtKeK1Pw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:37:51 2025 by rpki-client