Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
File: 4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft (raw, json)
Hash identifier: a3lFVoVQ9VDukbCwmRVXcsaLijzNWaxDas8+PxOGpQA=
Subject key identifier: D0:DE:AB:33:F1:8D:BE:9F:C8:B8:60:7E:63:93:B3:5B:D1:DE:D7:E9
Authority key identifier: E2:24:E4:50:EA:FE:D4:C2:59:B6:DC:0A:34:E3:06:F1:AD:28:4B:C4
Certificate issuer: /CN=e224e450eafed4c259b6dc0a34e306f1ad284bc4
Certificate serial: 0199FE46C96D517799517A82DA0C3C9AE134
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
Manifest number: 16E7
Signing time: Sun 19 Oct 2025 21:01:15 +0000
Manifest this update: Sun 19 Oct 2025 21:01:15 +0000
Manifest next update: Mon 20 Oct 2025 21:01:15 +0000
Files and hashes: 1: 4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl (hash: Ge74DdAeJwwWUb03bGcc6lblOx/p9usLq5trsr/z7sM=)
2: SifsSXB3IxM773oq0Xz9LePnp8I.roa (hash: zgIEbQQ5tBYSjxuoWIlb12GUFr1oCylWnPsgULnZLUs=)
3: pe-h0g6N0Y23HKrAKsDD9huS1mE.roa (hash: ylxKfNsAYg9jbE4bG9j7buLcVQFIUsPKCa1+TwgGN2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:c9:6d:51:77:99:51:7a:82:da:0c:3c:9a:e1:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e224e450eafed4c259b6dc0a34e306f1ad284bc4
Validity
Not Before: Oct 19 21:01:15 2025 GMT
Not After : Oct 20 21:01:15 2025 GMT
Subject: CN=d0deab33f18dbe9fc8b8607e6393b35bd1ded7e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:95:84:40:83:e3:91:af:42:0d:f9:7f:47:c4:
04:d4:f0:83:d6:01:12:9b:e4:46:e2:fc:ba:9b:16:
27:b6:cc:40:59:74:42:d2:a1:23:8a:2b:85:04:57:
82:6a:51:0f:8a:76:5e:c1:2b:b8:52:ca:f6:ce:f4:
f9:b0:9e:ce:1e:34:bb:7b:40:a5:a7:88:1f:f5:14:
54:e2:6c:5e:ec:43:6b:8a:ee:e8:e4:b3:78:af:9f:
d8:72:88:06:95:57:52:08:a7:4d:c8:80:ff:a4:15:
ce:86:80:8f:51:1e:af:69:78:35:1f:8f:3d:48:cd:
b7:b5:ec:93:70:76:ea:77:75:2b:93:3b:cb:a0:fe:
05:f9:bb:8f:da:25:19:69:ff:ae:d5:49:61:3b:35:
81:ae:8a:f3:38:8e:49:72:96:4c:5a:32:82:05:a1:
d2:80:ee:a0:b1:b9:ec:4a:c4:0c:42:ef:9b:10:55:
e2:4a:b7:8d:73:27:45:36:fb:98:fb:27:5f:8f:05:
0a:66:68:99:93:fb:f1:5f:c8:60:5b:a6:c4:cd:4c:
8a:8b:46:3c:2b:dc:08:6e:f2:13:f9:99:3e:70:a5:
e3:63:2d:26:50:0e:00:06:1a:da:4d:c0:1b:b0:1f:
55:c6:a6:cb:cc:de:4c:29:ef:2c:99:4d:dd:60:59:
1c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:DE:AB:33:F1:8D:BE:9F:C8:B8:60:7E:63:93:B3:5B:D1:DE:D7:E9
X509v3 Authority Key Identifier:
keyid:E2:24:E4:50:EA:FE:D4:C2:59:B6:DC:0A:34:E3:06:F1:AD:28:4B:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:48:59:39:83:7c:bc:d8:a4:09:95:95:d9:e7:ae:7e:a4:37:
3d:dd:dd:00:10:c7:27:26:11:e2:4b:e9:f7:c7:cb:58:08:a2:
9b:8c:7b:05:1a:4e:b5:d9:7f:a2:2a:76:4f:c7:f4:d4:fa:ca:
52:6f:5a:cd:83:65:a4:4f:0a:32:ca:3c:f3:22:01:da:53:8c:
c1:62:04:3b:4a:5c:1e:11:ff:19:08:f6:8d:16:09:a3:fe:f1:
45:9c:df:1c:20:d1:23:e3:aa:e1:89:a5:f4:48:61:91:91:fb:
b6:d7:35:35:0f:23:56:a3:87:e9:bf:d0:06:5a:b9:c7:78:35:
59:0b:6f:93:1b:84:15:57:93:96:00:d6:76:59:b9:e1:56:18:
e4:7f:00:0f:7f:d1:2c:4d:a8:20:aa:65:df:40:bb:7a:a4:c0:
96:e7:65:8f:c3:db:c5:d2:9f:6f:3e:5f:59:5d:1b:d8:76:3b:
90:fe:44:63:c9:65:af:85:19:39:f6:40:79:91:2f:da:c0:ff:
ad:10:2b:26:21:bb:ca:5d:f3:91:57:ba:d3:b4:a4:18:0a:13:
16:49:45:6d:ac:4b:97:d3:e6:95:83:10:c0:10:7e:4b:d7:40:
9d:cd:cd:9c:8d:10:e9:f1:56:f3:a1:ff:e9:5e:36:95:3b:ef:
d7:ac:87:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+RsltUXeZUXqC2gw8muE0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyMjRlNDUwZWFmZWQ0YzI1OWI2ZGMwYTM0ZTMwNmYxYWQy
ODRiYzQwHhcNMjUxMDE5MjEwMTE1WhcNMjUxMDIwMjEwMTE1WjAzMTEwLwYDVQQD
EyhkMGRlYWIzM2YxOGRiZTlmYzhiODYwN2U2MzkzYjM1YmQxZGVkN2U5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZWEQIPjka9CDfl/R8QE1PCD1gES
m+RG4vy6mxYntsxAWXRC0qEjiiuFBFeCalEPinZewSu4Usr2zvT5sJ7OHjS7e0Cl
p4gf9RRU4mxe7ENriu7o5LN4r5/YcogGlVdSCKdNyID/pBXOhoCPUR6vaXg1H489
SM23teyTcHbqd3UrkzvLoP4F+buP2iUZaf+u1UlhOzWBrorzOI5JcpZMWjKCBaHS
gO6gsbnsSsQMQu+bEFXiSreNcydFNvuY+ydfjwUKZmiZk/vxX8hgW6bEzUyKi0Y8
K9wIbvIT+Zk+cKXjYy0mUA4ABhraTcAbsB9VxqbLzN5MKe8smU3dYFkcSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNDeqzPxjb6fyLhgfmOTs1vR3tfpMB8GA1UdIwQY
MBaAFOIk5FDq/tTCWbbcCjTjBvGtKEvEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGlUa1VPci0xTUpadHR3S05PTUc4YTBvUzhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9iOTE3OGItYzdiYS00ZDRlLWFmOWUt
NmFjZDIxZDRiYWY4LzEvNGlUa1VPci0xTUpadHR3S05PTUc4YTBvUzhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9iOTE3OGItYzdiYS00ZDRlLWFmOWUtNmFjZDIxZDRiYWY4
LzEvNGlUa1VPci0xTUpadHR3S05PTUc4YTBvUzhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgEhZOYN8
vNikCZWV2eeufqQ3Pd3dABDHJyYR4kvp98fLWAiim4x7BRpOtdl/oip2T8f01PrK
Um9azYNlpE8KMso88yIB2lOMwWIEO0pcHhH/GQj2jRYJo/7xRZzfHCDRI+Oq4Yml
9EhhkZH7ttc1NQ8jVqOH6b/QBlq5x3g1WQtvkxuEFVeTlgDWdlm54VYY5H8AD3/R
LE2oIKpl30C7eqTAludlj8PbxdKfbz5fWV0b2HY7kP5EY8llr4UZOfZAeZEv2sD/
rRArJiG7yl3zkVe607SkGAoTFklFbaxLl9PmlYMQwBB+S9dAnc3NnI0Q6fFW86H/
6V42lTvv16yHlA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:58:56 2025 by rpki-client