Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.mft
File: 4jp0YwqEJMzV9bsPYCIIlFJ9cyw.mft (raw, json)
Hash identifier: mlsJGrnEzGwxOBBrGDHrF7BIDyqn+gNST9hs9BZ19Ng=
Subject key identifier: 83:A7:C4:B9:F5:C9:3C:28:16:B9:01:B6:9C:60:C8:C2:CD:25:4C:76
Authority key identifier: E2:3A:74:63:0A:84:24:CC:D5:F5:BB:0F:60:22:08:94:52:7D:73:2C
Certificate issuer: /CN=e23a74630a8424ccd5f5bb0f60220894527d732c
Certificate serial: 0199FD33E9BD7313CC1F012672F3F72C6FAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.mft
Manifest number: 117A
Signing time: Sun 19 Oct 2025 16:01:01 +0000
Manifest this update: Sun 19 Oct 2025 16:01:01 +0000
Manifest next update: Mon 20 Oct 2025 16:01:01 +0000
Files and hashes: 1: 4jp0YwqEJMzV9bsPYCIIlFJ9cyw.crl (hash: kSRwGTaWH25GAWxwwsv4J/CbOZIbAPZuCarc0QMaXdU=)
2: MQ8RZspaKkEig8cCCF7-zec3ZHI.roa (hash: TWPrc2azmEsVYvz4zvYsbEnxkist2uhLkvy3lSkFipY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:e9:bd:73:13:cc:1f:01:26:72:f3:f7:2c:6f:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e23a74630a8424ccd5f5bb0f60220894527d732c
Validity
Not Before: Oct 19 16:01:01 2025 GMT
Not After : Oct 20 16:01:01 2025 GMT
Subject: CN=83a7c4b9f5c93c2816b901b69c60c8c2cd254c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c8:05:a7:31:7d:71:b7:2e:31:83:40:ee:da:
5e:78:67:c5:81:14:b9:88:73:26:d1:5b:33:6f:e0:
62:2d:b2:64:b8:b7:3c:b4:75:50:8c:09:0e:4c:10:
5e:9f:a2:b1:5d:78:7a:64:a9:47:50:75:2c:3d:58:
cb:9f:ba:b8:c3:da:24:61:e7:1d:b4:fe:bb:4a:49:
56:ea:c0:ac:3c:81:49:0d:35:30:52:1a:c1:02:76:
47:91:b7:9a:50:bf:d3:d8:99:9d:de:04:f7:64:71:
83:ed:61:4f:7c:a3:56:d6:ee:20:cc:4d:57:f8:b5:
29:eb:3d:c1:a5:bd:9b:c5:43:ae:a7:05:64:ab:f1:
95:c6:63:0b:76:c4:7b:f3:d1:30:37:21:d8:b5:d8:
41:7d:bf:3c:22:44:2c:55:e4:02:66:bd:ac:83:e2:
90:86:93:43:0f:22:06:b3:78:94:53:32:82:d1:13:
73:c7:cb:28:f9:b6:5c:b2:d3:9b:4c:ae:7d:2b:78:
2e:d9:3f:47:43:aa:4d:79:1d:96:e4:58:69:5f:62:
19:b9:01:2d:4f:ab:fc:ce:8b:1d:15:76:90:90:fd:
9e:08:75:5a:d4:6f:6c:43:d2:7c:ce:9c:f1:ae:04:
b7:9c:17:ef:a1:d6:54:1d:8c:26:eb:16:3d:34:0e:
0e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:A7:C4:B9:F5:C9:3C:28:16:B9:01:B6:9C:60:C8:C2:CD:25:4C:76
X509v3 Authority Key Identifier:
keyid:E2:3A:74:63:0A:84:24:CC:D5:F5:BB:0F:60:22:08:94:52:7D:73:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:3b:76:99:41:eb:2c:4a:c5:45:11:cf:fd:21:f6:48:fb:73:
50:fd:8f:db:67:6f:bb:10:c6:08:14:b1:e6:e2:de:77:09:5d:
1e:06:44:c4:56:f5:de:7e:e6:58:c9:16:fd:50:e7:4a:f9:b5:
9b:78:2e:70:c7:c6:49:93:54:ba:25:69:b6:04:9d:c1:41:7a:
74:de:b9:01:bf:35:ad:5e:1d:17:04:00:f6:51:aa:ec:93:6e:
d8:54:8a:8f:e3:09:23:fe:ae:c6:c7:62:a9:1d:c6:15:ba:2b:
89:b7:cd:ca:16:b9:89:9d:ec:fc:52:97:d0:a2:3d:9d:c4:1a:
13:e2:95:b4:4a:ce:ed:2f:5f:56:27:12:0d:35:45:2b:e3:15:
8e:12:25:59:1a:c9:c7:57:94:de:5c:47:43:01:d8:d5:b8:42:
d1:92:92:68:af:40:7f:9a:ad:5a:40:81:0c:b2:7d:d8:3d:17:
3b:dd:65:14:1a:7c:7a:77:6a:8e:05:0b:39:7b:e7:18:0a:c9:
26:de:7d:8e:95:fa:02:46:56:ce:68:6c:f5:ad:9a:1d:43:dd:
fb:82:f5:ed:f0:ff:09:cc:54:b4:f0:5f:ce:74:45:69:4e:a7:
a7:c8:b0:ba:7d:df:45:63:3f:87:87:c3:51:f1:5d:81:19:e0:
ff:98:65:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9M+m9cxPMHwEmcvP3LG+tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyM2E3NDYzMGE4NDI0Y2NkNWY1YmIwZjYwMjIwODk0NTI3
ZDczMmMwHhcNMjUxMDE5MTYwMTAxWhcNMjUxMDIwMTYwMTAxWjAzMTEwLwYDVQQD
Eyg4M2E3YzRiOWY1YzkzYzI4MTZiOTAxYjY5YzYwYzhjMmNkMjU0Yzc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8gFpzF9cbcuMYNA7tpeeGfFgRS5
iHMm0Vszb+BiLbJkuLc8tHVQjAkOTBBen6KxXXh6ZKlHUHUsPVjLn7q4w9okYecd
tP67SklW6sCsPIFJDTUwUhrBAnZHkbeaUL/T2Jmd3gT3ZHGD7WFPfKNW1u4gzE1X
+LUp6z3Bpb2bxUOupwVkq/GVxmMLdsR789EwNyHYtdhBfb88IkQsVeQCZr2sg+KQ
hpNDDyIGs3iUUzKC0RNzx8so+bZcstObTK59K3gu2T9HQ6pNeR2W5FhpX2IZuQEt
T6v8zosdFXaQkP2eCHVa1G9sQ9J8zpzxrgS3nBfvodZUHYwm6xY9NA4O4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIOnxLn1yTwoFrkBtpxgyMLNJUx2MB8GA1UdIwQY
MBaAFOI6dGMKhCTM1fW7D2AiCJRSfXMsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGpwMFl3cUVKTXpWOWJzUFlDSUlsRko5Y3l3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi81NDA4OTctZjRiNy00ODQ4LWIwN2It
OTZhYjIxNjk2OTc0LzEvNGpwMFl3cUVKTXpWOWJzUFlDSUlsRko5Y3l3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi81NDA4OTctZjRiNy00ODQ4LWIwN2ItOTZhYjIxNjk2OTc0
LzEvNGpwMFl3cUVKTXpWOWJzUFlDSUlsRko5Y3l3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbzt2mUHr
LErFRRHP/SH2SPtzUP2P22dvuxDGCBSx5uLedwldHgZExFb13n7mWMkW/VDnSvm1
m3gucMfGSZNUuiVptgSdwUF6dN65Ab81rV4dFwQA9lGq7JNu2FSKj+MJI/6uxsdi
qR3GFboribfNyha5iZ3s/FKX0KI9ncQaE+KVtErO7S9fVicSDTVFK+MVjhIlWRrJ
x1eU3lxHQwHY1bhC0ZKSaK9Af5qtWkCBDLJ92D0XO91lFBp8endqjgULOXvnGArJ
Jt59jpX6AkZWzmhs9a2aHUPd+4L17fD/CcxUtPBfznRFaU6np8iwun3fRWM/h4fD
UfFdgRng/5hltA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:20:14 2025 by rpki-client