Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
File: 4oqGzL9We9migv3fdfC39VQiItI.mft (raw, json)
Hash identifier: 5CiBbru3cRqdagoRPci7p0a+rAQQsKtlWeeLvruBDtQ=
Subject key identifier: BB:3B:91:1A:C7:F8:E5:47:55:5B:56:B6:33:38:37:3B:90:92:78:F8
Authority key identifier: E2:8A:86:CC:BF:56:7B:D9:A2:82:FD:DF:75:F0:B7:F5:54:22:22:D2
Certificate issuer: /CN=e28a86ccbf567bd9a282fddf75f0b7f5542222d2
Certificate serial: 0199FEB485131157519BECA30755809B7F44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
Manifest number: 0699
Signing time: Sun 19 Oct 2025 23:01:07 +0000
Manifest this update: Sun 19 Oct 2025 23:01:07 +0000
Manifest next update: Mon 20 Oct 2025 23:01:07 +0000
Files and hashes: 1: 4oqGzL9We9migv3fdfC39VQiItI.crl (hash: R9tB2DAamKxAR3a5IZvEGAwMC9XkeWdMcaPmT6/xd5c=)
2: YqAFoc5kTd7Z4_KKDQIoEbzTXXs.roa (hash: 5bYNmgtpiY7zEyVHWvNikpnw6RjJjGyTau2g1VZIDwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 23:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:85:13:11:57:51:9b:ec:a3:07:55:80:9b:7f:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e28a86ccbf567bd9a282fddf75f0b7f5542222d2
Validity
Not Before: Oct 19 23:01:07 2025 GMT
Not After : Oct 20 23:01:07 2025 GMT
Subject: CN=bb3b911ac7f8e547555b56b63338373b909278f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:32:d2:40:3a:f7:61:49:d7:22:97:6f:c0:ed:
f9:db:bd:42:cc:6f:66:67:97:83:8e:62:d5:9f:06:
de:8e:0a:67:b2:17:f3:48:e4:07:eb:b7:d5:df:2c:
ef:77:7e:80:5f:7b:8b:bf:e3:f0:4c:51:a8:cf:d3:
da:77:0e:af:9d:06:93:0c:93:93:13:30:c6:82:5a:
b1:dc:57:d6:ed:98:15:63:02:eb:07:cb:ee:82:5b:
5c:c1:02:ad:4c:f9:12:fc:35:b4:18:89:62:d7:b4:
df:48:e5:80:ea:ba:e2:f1:80:05:a9:91:e3:5a:57:
85:76:55:0b:46:23:36:7e:2b:7b:d5:ef:05:4d:e3:
e2:40:2e:6a:36:a9:aa:43:53:53:53:e1:34:6b:4d:
49:4d:37:fc:1e:23:31:8e:6f:f6:ba:cb:ea:d0:ef:
9c:11:05:42:7c:1f:0a:0a:28:07:ca:cb:7e:bb:19:
9e:e1:6e:ff:b6:89:2d:be:82:01:dd:13:18:fc:bb:
09:c5:6a:2e:fc:af:18:64:ca:4f:e6:03:3e:21:f2:
b5:fd:b5:d3:31:c2:5c:5a:ff:f1:9b:f5:fa:3b:ca:
68:22:2c:7e:57:f5:88:10:aa:5e:83:5a:90:24:9d:
12:74:e8:9c:bf:2c:51:f5:a9:3f:2c:c0:46:78:d3:
49:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:3B:91:1A:C7:F8:E5:47:55:5B:56:B6:33:38:37:3B:90:92:78:F8
X509v3 Authority Key Identifier:
keyid:E2:8A:86:CC:BF:56:7B:D9:A2:82:FD:DF:75:F0:B7:F5:54:22:22:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:93:6e:77:cb:2b:39:64:77:bb:fc:52:62:3f:ea:7c:bb:7a:
d6:0c:02:8d:87:34:a5:73:9c:64:73:85:25:31:09:0f:2a:7c:
ba:a0:18:1d:97:a3:ff:3a:6d:ef:31:0e:fb:c4:56:26:89:7e:
6d:b4:1e:c3:aa:ad:cc:0e:09:3c:0b:ca:13:7f:53:fd:23:50:
3c:ac:6a:c9:07:be:f2:ff:7e:7f:f8:2a:3d:0a:3e:7d:ea:23:
c0:ac:43:6c:33:1d:35:5e:19:fb:ea:33:53:2e:b1:ea:34:24:
31:5c:79:d7:55:05:3c:e4:5d:c1:46:7c:48:8d:bf:50:47:28:
df:3e:e3:9a:85:24:fe:d7:ba:40:bd:72:3f:ad:0e:eb:c5:a1:
8b:21:f0:94:0c:79:d0:a3:32:bf:c3:92:3d:78:81:26:4b:37:
3d:e2:93:a5:54:a7:72:c5:8b:65:34:77:b9:05:a7:51:54:f9:
ad:36:c6:43:e4:fb:4e:68:98:ff:2f:3f:5f:ee:06:8f:34:a0:
2a:9a:89:c8:a9:55:d0:39:31:24:fc:6e:03:73:1b:1b:59:b0:
11:83:f8:86:ce:3c:ad:33:bf:3d:4f:74:95:02:7e:5e:0f:40:
bc:c8:8f:7d:d8:5d:93:b7:3f:7c:32:7c:dc:03:cc:08:a4:54:
80:0c:28:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+tIUTEVdRm+yjB1WAm39EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyOGE4NmNjYmY1NjdiZDlhMjgyZmRkZjc1ZjBiN2Y1NTQy
MjIyZDIwHhcNMjUxMDE5MjMwMTA3WhcNMjUxMDIwMjMwMTA3WjAzMTEwLwYDVQQD
EyhiYjNiOTExYWM3ZjhlNTQ3NTU1YjU2YjYzMzM4MzczYjkwOTI3OGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTLSQDr3YUnXIpdvwO35271CzG9m
Z5eDjmLVnwbejgpnshfzSOQH67fV3yzvd36AX3uLv+PwTFGoz9Padw6vnQaTDJOT
EzDGglqx3FfW7ZgVYwLrB8vugltcwQKtTPkS/DW0GIli17TfSOWA6rri8YAFqZHj
WleFdlULRiM2fit71e8FTePiQC5qNqmqQ1NTU+E0a01JTTf8HiMxjm/2usvq0O+c
EQVCfB8KCigHyst+uxme4W7/toktvoIB3RMY/LsJxWou/K8YZMpP5gM+IfK1/bXT
McJcWv/xm/X6O8poIix+V/WIEKpeg1qQJJ0SdOicvyxR9ak/LMBGeNNJHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLs7kRrH+OVHVVtWtjM4NzuQknj4MB8GA1UdIwQY
MBaAFOKKhsy/VnvZooL933Xwt/VUIiLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNG9xR3pMOVdlOW1pZ3YzZmRmQzM5VlFpSXRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9jODkwMGMtZjNkMi00NTdjLWIzOGIt
NmQ3NjUwY2EzZDA0LzEvNG9xR3pMOVdlOW1pZ3YzZmRmQzM5VlFpSXRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9jODkwMGMtZjNkMi00NTdjLWIzOGItNmQ3NjUwY2EzZDA0
LzEvNG9xR3pMOVdlOW1pZ3YzZmRmQzM5VlFpSXRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiZNud8sr
OWR3u/xSYj/qfLt61gwCjYc0pXOcZHOFJTEJDyp8uqAYHZej/zpt7zEO+8RWJol+
bbQew6qtzA4JPAvKE39T/SNQPKxqyQe+8v9+f/gqPQo+feojwKxDbDMdNV4Z++oz
Uy6x6jQkMVx511UFPORdwUZ8SI2/UEco3z7jmoUk/te6QL1yP60O68WhiyHwlAx5
0KMyv8OSPXiBJks3PeKTpVSncsWLZTR3uQWnUVT5rTbGQ+T7TmiY/y8/X+4GjzSg
KpqJyKlV0DkxJPxuA3MbG1mwEYP4hs48rTO/PU90lQJ+Xg9AvMiPfdhdk7c/fDJ8
3APMCKRUgAwoiw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:52:37 2025 by rpki-client