Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft
File: 4ndTjewu_NLxHMY3GX0dmm_a6dk.mft (raw, json)
Hash identifier: M9OEPP6Mkoi42b5fJmYeeNnZ0+Rf5bjP8lNSvmtM5A8=
Subject key identifier: 21:0A:DD:36:00:43:2F:77:CD:7B:5B:0D:87:53:97:AC:61:16:CD:6D
Authority key identifier: E2:77:53:8D:EC:2E:FC:D2:F1:1C:C6:37:19:7D:1D:9A:6F:DA:E9:D9
Certificate issuer: /CN=e277538dec2efcd2f11cc637197d1d9a6fdae9d9
Certificate serial: 0199FAD7CC258CF8C2D32C2D73D37612E0BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ndTjewu_NLxHMY3GX0dmm_a6dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft
Manifest number: 139A
Signing time: Sun 19 Oct 2025 05:01:10 +0000
Manifest this update: Sun 19 Oct 2025 05:01:10 +0000
Manifest next update: Mon 20 Oct 2025 05:01:10 +0000
Files and hashes: 1: 4ndTjewu_NLxHMY3GX0dmm_a6dk.crl (hash: f5RDUg4RoT09n3ETmKBQeXwUo/SnP1gD+tK2SLw+PGo=)
2: i1C2_03VF6U3TLTnhfWa-hdk8nE.roa (hash: 4u0sP/VUO27djDGleUL6lxDzjUMPiLw8ur/+xoa5LIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ndTjewu_NLxHMY3GX0dmm_a6dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:cc:25:8c:f8:c2:d3:2c:2d:73:d3:76:12:e0:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e277538dec2efcd2f11cc637197d1d9a6fdae9d9
Validity
Not Before: Oct 19 05:01:10 2025 GMT
Not After : Oct 20 05:01:10 2025 GMT
Subject: CN=210add3600432f77cd7b5b0d875397ac6116cd6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6f:77:89:17:32:58:6d:a6:99:2e:cf:e8:8b:
fe:01:44:d5:95:43:b9:85:a4:f9:c8:83:c8:d0:bb:
86:0b:e6:cd:99:f3:25:f3:f9:87:c3:7d:e0:68:f2:
df:21:13:ed:57:ac:cf:82:84:27:bd:e4:44:e7:7d:
35:43:9d:e3:a8:68:51:92:ab:fa:59:c6:19:ab:51:
99:a0:53:d3:ee:11:33:7e:ec:69:60:9c:08:d8:ba:
29:14:91:f1:27:75:ce:5e:34:e2:c3:b1:2d:e5:25:
39:a4:0d:32:31:27:70:95:86:45:cd:e2:05:42:fa:
d0:3f:29:a5:78:b6:56:ff:f3:f2:3f:1c:fa:46:5d:
fd:dc:16:c3:dc:d7:af:c7:ce:83:1e:07:43:ec:1b:
fb:13:e5:d8:03:59:b5:25:fa:c3:8d:f8:ad:fe:b2:
73:9d:6a:c0:e2:4a:44:78:f9:1e:b9:13:53:ec:cc:
5e:7e:68:7d:d6:1c:66:44:00:aa:98:95:66:2c:e8:
d6:96:25:e2:d9:67:6e:9e:b0:80:2a:64:87:2b:e6:
11:e2:0f:ea:8b:a5:e2:b3:da:e1:c7:2a:c3:12:21:
7d:c2:47:c2:41:73:d1:04:26:1b:59:06:b9:be:f7:
bb:38:e9:5f:8a:12:35:ee:7c:04:51:1b:0d:6c:48:
ee:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:0A:DD:36:00:43:2F:77:CD:7B:5B:0D:87:53:97:AC:61:16:CD:6D
X509v3 Authority Key Identifier:
keyid:E2:77:53:8D:EC:2E:FC:D2:F1:1C:C6:37:19:7D:1D:9A:6F:DA:E9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ndTjewu_NLxHMY3GX0dmm_a6dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:b4:04:5b:e5:ec:45:27:1f:cc:63:81:29:62:41:07:91:43:
5a:3a:5d:5e:04:63:a6:48:7d:ca:ae:4d:e8:29:74:be:9d:4a:
bf:61:de:3d:fd:b5:dc:4d:a2:fc:37:ea:f7:52:5d:17:a3:b7:
9c:af:ab:ea:5e:e0:04:55:e4:13:fb:b8:66:bc:33:91:e7:5c:
b5:f8:93:fe:d1:ca:f9:48:42:34:64:59:5b:88:d0:ff:67:82:
c2:d8:52:8b:b2:77:fa:ab:a8:c7:5f:5e:6a:22:b5:29:fe:0d:
6b:f6:03:75:51:57:24:36:e5:28:92:c1:14:3e:7a:2b:63:b1:
66:c6:6f:a2:e5:2e:a5:e5:20:3f:21:b1:b3:9a:f5:32:e5:aa:
cc:20:5a:3e:d9:27:6b:c1:78:1f:a5:e5:d5:30:67:81:77:ad:
d8:84:36:55:71:b5:43:b3:aa:46:70:17:d8:c3:99:e9:04:ea:
34:80:52:40:f5:e6:69:70:2e:06:2e:68:67:6e:ec:a4:43:6f:
56:a2:ef:4a:ca:6e:68:d3:81:ac:e1:c7:8f:50:5f:15:bb:e0:
6a:6a:0a:ee:5a:e3:76:dc:29:36:5f:34:20:8a:8f:35:b3:aa:
d6:4f:0b:26:2c:d7:9b:4e:8a:f2:74:e9:f1:50:b8:5b:e2:80:
24:ad:b8:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn618wljPjC0ywtc9N2EuC9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyNzc1MzhkZWMyZWZjZDJmMTFjYzYzNzE5N2QxZDlhNmZk
YWU5ZDkwHhcNMjUxMDE5MDUwMTEwWhcNMjUxMDIwMDUwMTEwWjAzMTEwLwYDVQQD
EygyMTBhZGQzNjAwNDMyZjc3Y2Q3YjViMGQ4NzUzOTdhYzYxMTZjZDZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArW93iRcyWG2mmS7P6Iv+AUTVlUO5
haT5yIPI0LuGC+bNmfMl8/mHw33gaPLfIRPtV6zPgoQnveRE5301Q53jqGhRkqv6
WcYZq1GZoFPT7hEzfuxpYJwI2LopFJHxJ3XOXjTiw7Et5SU5pA0yMSdwlYZFzeIF
QvrQPymleLZW//PyPxz6Rl393BbD3Nevx86DHgdD7Bv7E+XYA1m1JfrDjfit/rJz
nWrA4kpEePkeuRNT7Mxefmh91hxmRACqmJVmLOjWliXi2WdunrCAKmSHK+YR4g/q
i6Xis9rhxyrDEiF9wkfCQXPRBCYbWQa5vve7OOlfihI17nwEURsNbEjuOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCEK3TYAQy93zXtbDYdTl6xhFs1tMB8GA1UdIwQY
MBaAFOJ3U43sLvzS8RzGNxl9HZpv2unZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNG5kVGpld3VfTkx4SE1ZM0dYMGRtbV9hNmRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9hMzFkZGItMWZkMi00NjFjLWJmZWIt
ODJlZTJkMmI0Mjg5LzEvNG5kVGpld3VfTkx4SE1ZM0dYMGRtbV9hNmRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9hMzFkZGItMWZkMi00NjFjLWJmZWItODJlZTJkMmI0Mjg5
LzEvNG5kVGpld3VfTkx4SE1ZM0dYMGRtbV9hNmRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlbQEW+Xs
RScfzGOBKWJBB5FDWjpdXgRjpkh9yq5N6Cl0vp1Kv2HePf213E2i/Dfq91JdF6O3
nK+r6l7gBFXkE/u4ZrwzkedctfiT/tHK+UhCNGRZW4jQ/2eCwthSi7J3+quox19e
aiK1Kf4Na/YDdVFXJDblKJLBFD56K2OxZsZvouUupeUgPyGxs5r1MuWqzCBaPtkn
a8F4H6Xl1TBngXet2IQ2VXG1Q7OqRnAX2MOZ6QTqNIBSQPXmaXAuBi5oZ27spENv
VqLvSspuaNOBrOHHj1BfFbvgamoK7lrjdtwpNl80IIqPNbOq1k8LJizXm06K8nTp
8VC4W+KAJK24qw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:29 2025 by rpki-client