Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/8762f5-fae3-45f6-a79b-caedbd7140e9/1/4npTBThB5i83hzAr07PcF66DR6M.mft
File: 4npTBThB5i83hzAr07PcF66DR6M.mft (raw, json)
Hash identifier: MrC04yJSjiM7QcbwJrLzS7Nnmk6eBXj2Dnssdw4fm/o=
Subject key identifier: 84:A4:73:2C:D6:68:A4:55:87:46:DC:81:FD:C9:1D:93:18:F7:03:6A
Authority key identifier: E2:7A:53:05:38:41:E6:2F:37:87:30:2B:D3:B3:DC:17:AE:83:47:A3
Certificate issuer: /CN=e27a53053841e62f3787302bd3b3dc17ae8347a3
Certificate serial: 0199FCC615C6D52B4D478F695BFFDC652CF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4npTBThB5i83hzAr07PcF66DR6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/8762f5-fae3-45f6-a79b-caedbd7140e9/1/4npTBThB5i83hzAr07PcF66DR6M.mft
Manifest number: 0A42
Signing time: Sun 19 Oct 2025 14:01:04 +0000
Manifest this update: Sun 19 Oct 2025 14:01:04 +0000
Manifest next update: Mon 20 Oct 2025 14:01:04 +0000
Files and hashes: 1: 4npTBThB5i83hzAr07PcF66DR6M.crl (hash: Nd5keHQfYjXVPBJgi239WyAxt2aQr1kffkphna9B8O4=)
2: uZUj605EbQuLLmDhIGYJBIbMOqc.roa (hash: 50VcK1tqnjE/JlOLPdg4sk24p7Wrw6D6UQSl3XM780U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/8762f5-fae3-45f6-a79b-caedbd7140e9/1/4npTBThB5i83hzAr07PcF66DR6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/8762f5-fae3-45f6-a79b-caedbd7140e9/1/4npTBThB5i83hzAr07PcF66DR6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/4npTBThB5i83hzAr07PcF66DR6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:15:c6:d5:2b:4d:47:8f:69:5b:ff:dc:65:2c:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e27a53053841e62f3787302bd3b3dc17ae8347a3
Validity
Not Before: Oct 19 14:01:04 2025 GMT
Not After : Oct 20 14:01:04 2025 GMT
Subject: CN=84a4732cd668a4558746dc81fdc91d9318f7036a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0e:5e:f9:53:31:a4:2f:83:58:da:eb:b0:22:
01:5e:14:22:5a:7d:0b:02:03:2e:de:96:35:e1:9e:
dc:a4:37:ea:15:18:db:e4:68:9d:7d:78:db:19:f0:
3a:2f:1f:8e:1f:13:7a:89:f0:f9:ab:8b:1a:27:88:
f2:18:28:01:0c:39:35:86:c1:a0:42:4e:90:bc:f4:
e7:ee:55:d4:16:39:27:ce:8c:f7:70:dd:79:04:ca:
b4:f1:da:6b:34:40:2e:c5:7f:07:fb:ff:e6:c7:f5:
2b:ec:1f:fd:97:a0:19:8e:86:69:f7:1d:8c:6b:36:
29:b2:60:2b:eb:94:73:12:39:c9:66:fb:1b:0c:98:
0a:00:26:23:76:a5:84:97:c1:48:7a:22:ad:00:2f:
26:a5:df:0a:76:b7:b2:1f:16:34:d7:44:ef:14:41:
fc:dc:b6:be:96:40:d2:23:14:8b:e1:f4:1a:49:a7:
1b:ad:ba:33:91:9c:22:27:e7:48:4b:05:2a:61:ff:
ff:fb:6d:3f:bb:37:0d:d9:a3:a9:7c:61:a0:f9:05:
5c:3e:fd:a0:49:37:32:17:72:47:be:e6:78:b1:d5:
38:f7:ae:cb:6f:8e:63:cb:19:3f:41:19:07:51:e7:
82:20:d1:be:a9:15:55:c4:df:30:5c:be:c9:c6:9d:
be:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A4:73:2C:D6:68:A4:55:87:46:DC:81:FD:C9:1D:93:18:F7:03:6A
X509v3 Authority Key Identifier:
keyid:E2:7A:53:05:38:41:E6:2F:37:87:30:2B:D3:B3:DC:17:AE:83:47:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4npTBThB5i83hzAr07PcF66DR6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8762f5-fae3-45f6-a79b-caedbd7140e9/1/4npTBThB5i83hzAr07PcF66DR6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8762f5-fae3-45f6-a79b-caedbd7140e9/1/4npTBThB5i83hzAr07PcF66DR6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:45:b6:62:85:85:70:0e:e4:f8:d7:f9:b5:3d:8d:80:1b:df:
fa:c5:40:13:3a:17:e9:48:0d:f4:9f:ab:94:a9:56:3c:6b:8c:
f4:29:d8:43:21:e7:a2:5c:d0:d4:d5:24:1f:e1:d5:96:c4:43:
58:7e:0b:ab:65:b4:e4:ec:63:ff:fc:d0:6f:d9:b5:3c:3c:07:
d3:bf:aa:92:09:5b:14:9f:07:6a:60:e9:dc:a2:6e:4c:c0:7e:
df:a2:25:23:2f:de:8e:ed:03:b8:af:d0:f4:20:ff:2c:c9:74:
07:72:13:1e:32:a8:3e:6c:26:88:ae:f4:a9:e4:ad:98:5c:9c:
f8:90:ac:00:9c:37:f1:67:38:82:6e:5b:ec:10:4f:9c:cd:42:
1d:06:e0:5b:e3:56:c8:0b:97:27:99:7d:9a:aa:ac:b5:1f:58:
2c:8b:ae:b9:a8:a4:d1:8b:45:6e:61:72:60:c7:26:28:69:46:
82:a3:d6:8f:71:ed:21:dc:bd:cb:a8:d0:b0:0e:5a:a5:d4:b7:
ad:47:cb:19:49:2a:7c:5f:92:19:89:92:d6:2f:80:bc:b3:fe:
05:67:7b:f3:51:d6:67:89:e0:1f:3f:c3:df:fd:a0:51:da:25:
29:47:09:ad:86:73:87:27:a6:49:2a:ed:6b:86:0d:3d:f0:be:
0d:11:de:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xhXG1StNR49pW//cZSz5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyN2E1MzA1Mzg0MWU2MmYzNzg3MzAyYmQzYjNkYzE3YWU4
MzQ3YTMwHhcNMjUxMDE5MTQwMTA0WhcNMjUxMDIwMTQwMTA0WjAzMTEwLwYDVQQD
Eyg4NGE0NzMyY2Q2NjhhNDU1ODc0NmRjODFmZGM5MWQ5MzE4ZjcwMzZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQ5e+VMxpC+DWNrrsCIBXhQiWn0L
AgMu3pY14Z7cpDfqFRjb5GidfXjbGfA6Lx+OHxN6ifD5q4saJ4jyGCgBDDk1hsGg
Qk6QvPTn7lXUFjknzoz3cN15BMq08dprNEAuxX8H+//mx/Ur7B/9l6AZjoZp9x2M
azYpsmAr65RzEjnJZvsbDJgKACYjdqWEl8FIeiKtAC8mpd8KdreyHxY010TvFEH8
3La+lkDSIxSL4fQaSacbrbozkZwiJ+dISwUqYf//+20/uzcN2aOpfGGg+QVcPv2g
STcyF3JHvuZ4sdU4967Lb45jyxk/QRkHUeeCING+qRVVxN8wXL7Jxp2+zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFISkcyzWaKRVh0bcgf3JHZMY9wNqMB8GA1UdIwQY
MBaAFOJ6UwU4QeYvN4cwK9Oz3Beug0ejMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNG5wVEJUaEI1aTgzaHpBcjA3UGNGNjZEUjZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny84NzYyZjUtZmFlMy00NWY2LWE3OWIt
Y2FlZGJkNzE0MGU5LzEvNG5wVEJUaEI1aTgzaHpBcjA3UGNGNjZEUjZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny84NzYyZjUtZmFlMy00NWY2LWE3OWItY2FlZGJkNzE0MGU5
LzEvNG5wVEJUaEI1aTgzaHpBcjA3UGNGNjZEUjZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgkW2YoWF
cA7k+Nf5tT2NgBvf+sVAEzoX6UgN9J+rlKlWPGuM9CnYQyHnolzQ1NUkH+HVlsRD
WH4Lq2W05Oxj//zQb9m1PDwH07+qkglbFJ8HamDp3KJuTMB+36IlIy/eju0DuK/Q
9CD/LMl0B3ITHjKoPmwmiK70qeStmFyc+JCsAJw38Wc4gm5b7BBPnM1CHQbgW+NW
yAuXJ5l9mqqstR9YLIuuuaik0YtFbmFyYMcmKGlGgqPWj3HtIdy9y6jQsA5apdS3
rUfLGUkqfF+SGYmS1i+AvLP+BWd781HWZ4ngHz/D3/2gUdolKUcJrYZzhyemSSrt
a4YNPfC+DRHe0A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:51 2025 by rpki-client