Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
File: 4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft (raw, json)
Hash identifier: pXYOFnlFJPZ+DWP/JvqQNK/j4cKfzz9vJXqkrdePQIU=
Subject key identifier: 1B:70:D9:8D:7B:E3:4E:CC:C8:09:12:50:5D:C0:DB:83:32:EE:41:3F
Authority key identifier: E2:45:4C:45:6C:E6:8B:A8:FE:CA:D5:42:AA:B9:61:0B:1E:CC:12:E2
Certificate issuer: /CN=e2454c456ce68ba8fecad542aab9610b1ecc12e2
Certificate serial: 0199FC583EBA06997D91F2E303094B3EFD20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 12:01:05 +0000
Manifest this update: Sun 19 Oct 2025 12:01:05 +0000
Manifest next update: Mon 20 Oct 2025 12:01:05 +0000
Files and hashes: 1: 4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl (hash: +ZhYiSXVmNlqwdYMnpa+WcQCZKgO+I7jRbN/IRsUXB8=)
2: 9wiAjxQ8cKdQoI4k97phXcqjm0U.roa (hash: aw34neSnWmkzi+er/oSuocGYd5WKHEhdmA5jFSEL7u8=)
3: VHke2dRAU413gG-qOq91BqFotnA.roa (hash: tCtViRscoxX/FUXZsRP79cmOS8/23LI5c9CHWFx8Vhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:3e:ba:06:99:7d:91:f2:e3:03:09:4b:3e:fd:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2454c456ce68ba8fecad542aab9610b1ecc12e2
Validity
Not Before: Oct 19 12:01:05 2025 GMT
Not After : Oct 20 12:01:05 2025 GMT
Subject: CN=1b70d98d7be34eccc80912505dc0db8332ee413f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:90:0d:fe:76:ec:a7:c5:e3:99:7b:a0:c5:16:
9b:a6:e1:3a:e7:19:0a:98:52:7f:e1:98:7f:a3:0e:
ce:a5:35:8c:66:3f:95:09:79:54:28:25:73:ab:56:
51:fa:b4:16:04:79:53:9f:f6:91:8d:e3:b6:ac:01:
aa:bb:dc:b5:c8:0a:fe:92:d8:2c:b9:0b:58:73:3e:
d3:99:f3:b7:a9:29:e9:ac:20:b4:f8:90:f7:7c:1f:
de:9b:6e:60:64:ab:2a:58:a3:7d:79:b4:17:b5:d6:
77:d7:e0:27:b5:e6:6d:c3:9a:b7:b6:09:84:66:0c:
5b:a3:2b:6a:31:88:34:27:f6:0f:fd:cd:ec:9b:f8:
a8:67:bd:e2:bc:17:fc:26:7b:a2:4c:86:31:f5:e6:
a5:e2:9d:f5:f2:8e:29:d7:d9:e9:b8:d8:7a:6d:53:
ae:9a:00:69:c9:97:59:cc:e9:27:f8:cb:4c:f6:b9:
fd:61:1e:c4:6b:ce:f7:8a:b8:69:e5:bc:09:eb:43:
35:0b:9a:c0:f1:4c:b1:56:eb:01:06:29:f1:52:1b:
14:f9:4e:06:e1:b6:f9:26:9d:97:d9:6e:42:a1:30:
0b:dc:74:c2:65:93:ac:7e:47:23:8a:8a:2a:06:67:
2d:95:34:ff:27:3e:d7:92:f9:e7:9e:6e:e1:07:7c:
52:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:70:D9:8D:7B:E3:4E:CC:C8:09:12:50:5D:C0:DB:83:32:EE:41:3F
X509v3 Authority Key Identifier:
keyid:E2:45:4C:45:6C:E6:8B:A8:FE:CA:D5:42:AA:B9:61:0B:1E:CC:12:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:d6:69:9c:9b:5c:75:72:1d:10:11:25:24:61:9f:9e:65:72:
c5:42:12:5f:c6:33:8f:7a:94:4c:01:a8:74:c7:63:1e:b5:46:
a6:62:f3:45:26:59:21:01:2d:34:ef:a0:da:88:3d:60:a0:fe:
95:23:80:13:eb:38:eb:64:56:54:1a:9f:6c:33:6f:b0:db:39:
0e:ee:ea:d8:9e:82:93:c0:18:70:f1:4b:89:ac:d4:dc:4c:bb:
2b:b4:4f:00:56:bc:9f:42:bc:4b:63:b2:ba:bd:33:46:9f:89:
97:2b:3a:41:b7:20:51:63:7e:2c:d4:80:a2:5c:2d:1e:69:20:
bc:f0:4a:80:ad:a0:bd:e9:8b:6c:bf:2e:ca:b8:7e:78:96:92:
cd:c3:5f:dc:17:a2:4e:fc:44:77:81:31:bc:4a:9e:a2:83:42:
b0:d1:44:ae:7d:de:55:f4:5a:fe:45:e7:ae:c0:30:0b:09:cb:
e5:78:c6:33:fd:b2:79:95:ff:1f:84:54:f6:fc:21:68:59:13:
62:6f:cf:f8:1f:80:17:cd:b3:5d:a8:51:4f:41:36:88:b1:19:
32:56:f1:94:19:03:78:e0:6d:72:60:39:4a:cf:7b:25:4a:a1:
d1:b6:de:4c:a8:19:49:29:61:ac:86:02:d7:bf:a8:da:4d:84:
84:50:fb:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WD66Bpl9kfLjAwlLPv0gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyNDU0YzQ1NmNlNjhiYThmZWNhZDU0MmFhYjk2MTBiMWVj
YzEyZTIwHhcNMjUxMDE5MTIwMTA1WhcNMjUxMDIwMTIwMTA1WjAzMTEwLwYDVQQD
EygxYjcwZDk4ZDdiZTM0ZWNjYzgwOTEyNTA1ZGMwZGI4MzMyZWU0MTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pAN/nbsp8XjmXugxRabpuE65xkK
mFJ/4Zh/ow7OpTWMZj+VCXlUKCVzq1ZR+rQWBHlTn/aRjeO2rAGqu9y1yAr+ktgs
uQtYcz7TmfO3qSnprCC0+JD3fB/em25gZKsqWKN9ebQXtdZ31+AnteZtw5q3tgmE
ZgxboytqMYg0J/YP/c3sm/ioZ73ivBf8JnuiTIYx9eal4p318o4p19npuNh6bVOu
mgBpyZdZzOkn+MtM9rn9YR7Ea873irhp5bwJ60M1C5rA8UyxVusBBinxUhsU+U4G
4bb5Jp2X2W5CoTAL3HTCZZOsfkcjiooqBmctlTT/Jz7Xkvnnnm7hB3xSxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBtw2Y17407MyAkSUF3A24My7kE/MB8GA1UdIwQY
MBaAFOJFTEVs5ouo/srVQqq5YQsezBLiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGtWTVJXem1pNmoteXRWQ3FybGhDeDdNRXVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS82NGVkNjItYThlZi00ODAyLWExYjQt
OWY5N2IwZmM0ODMyLzEvNGtWTVJXem1pNmoteXRWQ3FybGhDeDdNRXVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS82NGVkNjItYThlZi00ODAyLWExYjQtOWY5N2IwZmM0ODMy
LzEvNGtWTVJXem1pNmoteXRWQ3FybGhDeDdNRXVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAadZpnJtc
dXIdEBElJGGfnmVyxUISX8Yzj3qUTAGodMdjHrVGpmLzRSZZIQEtNO+g2og9YKD+
lSOAE+s462RWVBqfbDNvsNs5Du7q2J6Ck8AYcPFLiazU3Ey7K7RPAFa8n0K8S2Oy
ur0zRp+Jlys6QbcgUWN+LNSAolwtHmkgvPBKgK2gvemLbL8uyrh+eJaSzcNf3Bei
TvxEd4ExvEqeooNCsNFErn3eVfRa/kXnrsAwCwnL5XjGM/2yeZX/H4RU9vwhaFkT
Ym/P+B+AF82zXahRT0E2iLEZMlbxlBkDeOBtcmA5Ss97JUqh0bbeTKgZSSlhrIYC
17+o2k2EhFD7FQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:15:39 2025 by rpki-client