Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft
File: 4aWhf1DBNbGFHOwsdrD9cPncx54.mft (raw, json)
Hash identifier: 62KEbcjnK8fSzrfrhn5BXWUDjSG/rKu4CSFk6WYivNk=
Subject key identifier: E4:80:AD:86:DF:62:76:7E:88:79:A2:7A:9E:A4:D5:5F:83:0E:C6:7F
Authority key identifier: E1:A5:A1:7F:50:C1:35:B1:85:1C:EC:2C:76:B0:FD:70:F9:DC:C7:9E
Certificate issuer: /CN=e1a5a17f50c135b1851cec2c76b0fd70f9dcc79e
Certificate serial: 0199FBEB595526842FCD7DB4792EA5AA4569
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4aWhf1DBNbGFHOwsdrD9cPncx54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft
Manifest number: 055C
Signing time: Sun 19 Oct 2025 10:02:09 +0000
Manifest this update: Sun 19 Oct 2025 10:02:09 +0000
Manifest next update: Mon 20 Oct 2025 10:02:09 +0000
Files and hashes: 1: 4aWhf1DBNbGFHOwsdrD9cPncx54.crl (hash: MyO6ENcdgzyMeb594nMb8D4jtwa2CqzFE1L9orVmWxk=)
2: hfRFZKITz5hu-gPvGNJloOjkOMc.roa (hash: D3UvYF9mG8nUIanHUFk48MzJyJwGvptN1rrytDvh8Eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft
rsync://rpki.ripe.net/repository/DEFAULT/4aWhf1DBNbGFHOwsdrD9cPncx54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:59:55:26:84:2f:cd:7d:b4:79:2e:a5:aa:45:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1a5a17f50c135b1851cec2c76b0fd70f9dcc79e
Validity
Not Before: Oct 19 10:02:09 2025 GMT
Not After : Oct 20 10:02:09 2025 GMT
Subject: CN=e480ad86df62767e8879a27a9ea4d55f830ec67f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ab:3d:8f:71:12:ee:b1:69:9a:7c:22:02:8e:
aa:89:16:5f:27:ac:ac:14:77:15:9e:cb:dc:97:3c:
2c:0c:94:53:20:b4:61:a2:86:3d:5b:2f:86:bb:74:
cf:35:b1:a2:7f:e7:9e:f7:86:d6:2c:cd:1c:4c:88:
3b:d2:3e:36:86:91:ba:2e:e1:78:90:b2:34:a0:19:
ae:a2:df:fe:0b:25:53:a8:03:ab:5f:f5:7f:8a:96:
68:26:32:20:6d:cb:3b:bd:86:8c:c9:72:99:8a:c5:
ed:af:c3:86:2f:c7:ef:fc:92:6b:94:6c:83:8d:0a:
f2:51:73:a8:7f:47:97:b5:9c:4e:ac:db:f7:d8:19:
04:03:9b:82:c6:b1:13:d5:23:77:d0:6d:20:b6:0e:
e4:06:08:d5:66:a1:08:f9:11:d8:33:2b:57:b4:40:
7e:20:5b:c0:5f:f5:fc:96:13:1e:5c:6b:85:1d:0b:
ba:d3:c4:2d:f1:23:0c:a2:c2:fe:fc:01:c4:64:b3:
b7:1e:42:c1:a4:dd:c8:35:96:8e:39:f3:16:45:b3:
48:52:58:23:f9:9b:8f:c2:af:ff:57:f9:bc:29:45:
61:fd:f0:23:d1:c5:a2:f0:f9:b2:5a:9e:80:fa:14:
62:7f:f1:d0:b2:ca:d7:37:4c:6f:37:2a:8a:e8:25:
3f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:80:AD:86:DF:62:76:7E:88:79:A2:7A:9E:A4:D5:5F:83:0E:C6:7F
X509v3 Authority Key Identifier:
keyid:E1:A5:A1:7F:50:C1:35:B1:85:1C:EC:2C:76:B0:FD:70:F9:DC:C7:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4aWhf1DBNbGFHOwsdrD9cPncx54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:ac:0f:22:59:58:3b:50:f2:15:59:36:91:86:37:d9:ad:a8:
d4:05:9d:df:99:42:d9:d0:76:7d:69:77:0c:51:07:4c:b1:3d:
f0:a5:ab:8e:9b:5a:2f:31:98:5a:c6:52:f7:27:0c:3b:89:29:
ed:39:f6:0d:45:98:8a:38:05:f5:25:b8:85:37:12:ab:01:22:
7b:ab:2e:bd:bb:03:18:14:ec:ea:55:14:58:3d:87:7e:6f:1b:
54:b2:27:91:2d:f2:9d:fc:f0:88:97:ee:2d:52:35:51:46:29:
db:60:f2:b4:42:19:80:95:ef:03:d6:b7:c4:0a:b2:15:6f:e4:
ab:f2:31:ab:4f:9e:70:3c:ab:e7:2a:38:9a:9a:97:38:32:cc:
9f:28:83:25:8a:88:db:af:8c:57:69:be:9c:37:12:3e:1f:bc:
10:34:bc:98:8f:3b:15:c3:a5:60:95:38:06:64:e8:3c:36:ea:
8a:ae:87:13:67:79:70:df:aa:bf:db:02:87:4d:d7:04:27:be:
a7:cc:2b:c1:90:b3:d1:c5:e5:e3:2a:c2:8e:d9:5b:f9:9d:a8:
86:29:0a:39:90:0b:83:45:9a:8f:d4:4f:58:be:55:eb:7a:bc:
fa:6b:08:71:23:66:72:18:2e:a6:c1:ca:a0:4a:a9:a5:96:64:
24:6b:29:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn761lVJoQvzX20eS6lqkVpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxYTVhMTdmNTBjMTM1YjE4NTFjZWMyYzc2YjBmZDcwZjlk
Y2M3OWUwHhcNMjUxMDE5MTAwMjA5WhcNMjUxMDIwMTAwMjA5WjAzMTEwLwYDVQQD
EyhlNDgwYWQ4NmRmNjI3NjdlODg3OWEyN2E5ZWE0ZDU1ZjgzMGVjNjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKs9j3ES7rFpmnwiAo6qiRZfJ6ys
FHcVnsvclzwsDJRTILRhooY9Wy+Gu3TPNbGif+ee94bWLM0cTIg70j42hpG6LuF4
kLI0oBmuot/+CyVTqAOrX/V/ipZoJjIgbcs7vYaMyXKZisXtr8OGL8fv/JJrlGyD
jQryUXOof0eXtZxOrNv32BkEA5uCxrET1SN30G0gtg7kBgjVZqEI+RHYMytXtEB+
IFvAX/X8lhMeXGuFHQu608Qt8SMMosL+/AHEZLO3HkLBpN3INZaOOfMWRbNIUlgj
+ZuPwq//V/m8KUVh/fAj0cWi8PmyWp6A+hRif/HQssrXN0xvNyqK6CU/HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOSArYbfYnZ+iHmiep6k1V+DDsZ/MB8GA1UdIwQY
MBaAFOGloX9QwTWxhRzsLHaw/XD53MeeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGFXaGYxREJOYkdGSE93c2RyRDljUG5jeDU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9mOWY4ZmEtMjk4OC00NDVjLWJlOTQt
OTEzNTc1YzU4ZjRhLzEvNGFXaGYxREJOYkdGSE93c2RyRDljUG5jeDU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9mOWY4ZmEtMjk4OC00NDVjLWJlOTQtOTEzNTc1YzU4ZjRh
LzEvNGFXaGYxREJOYkdGSE93c2RyRDljUG5jeDU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYKwPIllY
O1DyFVk2kYY32a2o1AWd35lC2dB2fWl3DFEHTLE98KWrjptaLzGYWsZS9ycMO4kp
7Tn2DUWYijgF9SW4hTcSqwEie6suvbsDGBTs6lUUWD2Hfm8bVLInkS3ynfzwiJfu
LVI1UUYp22DytEIZgJXvA9a3xAqyFW/kq/Ixq0+ecDyr5yo4mpqXODLMnyiDJYqI
26+MV2m+nDcSPh+8EDS8mI87FcOlYJU4BmToPDbqiq6HE2d5cN+qv9sCh03XBCe+
p8wrwZCz0cXl4yrCjtlb+Z2ohikKOZALg0Waj9RPWL5V63q8+msIcSNmchgupsHK
oEqppZZkJGspjw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:51:11 2025 by rpki-client