Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft
File: 4g44BaG09bYc_nMBDoOMLw0ltEs.mft (raw, json)
Hash identifier: l1lcRuAvehMauDLmwPs/HjhlHm/9n6vRcYZcM2Dn4wU=
Subject key identifier: 47:7A:26:6E:A5:B0:55:14:78:32:55:AA:A6:3F:94:8F:25:BD:AF:84
Authority key identifier: E2:0E:38:05:A1:B4:F5:B6:1C:FE:73:01:0E:83:8C:2F:0D:25:B4:4B
Certificate issuer: /CN=e20e3805a1b4f5b61cfe73010e838c2f0d25b44b
Certificate serial: 0199FDD9F1A3B2328DE51397C06237FEF603
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4g44BaG09bYc_nMBDoOMLw0ltEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft
Manifest number: 0DF5
Signing time: Sun 19 Oct 2025 19:02:22 +0000
Manifest this update: Sun 19 Oct 2025 19:02:22 +0000
Manifest next update: Mon 20 Oct 2025 19:02:22 +0000
Files and hashes: 1: 4g44BaG09bYc_nMBDoOMLw0ltEs.crl (hash: H5j+NsT8UvtaOM/fm7h6cDkNIqSC1Y3ft+kxDIhjgwA=)
2: BD04oGhJezcKgfhBVSPLxiCwx-U.roa (hash: 6BJW9GRsg9XqwBDaRIKZatrd81rOIFw+haS77P869vM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/4g44BaG09bYc_nMBDoOMLw0ltEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:f1:a3:b2:32:8d:e5:13:97:c0:62:37:fe:f6:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e20e3805a1b4f5b61cfe73010e838c2f0d25b44b
Validity
Not Before: Oct 19 19:02:22 2025 GMT
Not After : Oct 20 19:02:22 2025 GMT
Subject: CN=477a266ea5b05514783255aaa63f948f25bdaf84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6e:eb:6e:83:08:b7:41:8a:6c:98:c0:5a:f3:
d9:e2:dc:40:9c:f7:b3:f3:68:1e:a1:be:76:81:6e:
7a:4d:53:64:3e:f9:90:98:d9:4c:91:90:d0:08:a8:
03:33:b1:8f:c9:41:87:d3:de:d2:94:f3:8b:30:40:
fe:30:e6:46:7e:b8:74:92:f6:ef:b5:5a:95:96:30:
63:88:39:b6:31:fb:fd:19:e4:e7:82:ea:f2:62:89:
be:d3:68:8a:5b:39:3d:12:26:c6:12:2a:2a:97:8c:
70:80:88:b4:9a:23:3f:0c:0e:36:05:9e:22:7c:9d:
bd:c0:b7:f6:b4:f4:e4:cc:e0:b4:24:97:48:f3:a9:
e0:50:78:be:85:be:1d:7a:97:fa:83:83:03:fa:0f:
b8:b9:fe:fa:ca:da:f6:77:94:04:86:65:18:a0:69:
1d:07:51:4b:9f:20:f7:8e:75:09:6c:2a:6a:db:c0:
f2:7c:97:40:45:7a:84:e2:55:33:3c:d3:35:e7:f5:
b2:44:4d:7a:cc:40:e6:3e:23:bc:ba:3a:48:fd:8a:
85:17:a6:07:9d:3c:25:4e:28:83:67:f4:6e:26:54:
a1:a3:e2:f2:0d:85:ed:eb:c4:5e:fc:55:5f:62:90:
4a:7e:b6:67:4c:54:7a:29:f9:34:e7:b3:4b:cd:1f:
3a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:7A:26:6E:A5:B0:55:14:78:32:55:AA:A6:3F:94:8F:25:BD:AF:84
X509v3 Authority Key Identifier:
keyid:E2:0E:38:05:A1:B4:F5:B6:1C:FE:73:01:0E:83:8C:2F:0D:25:B4:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4g44BaG09bYc_nMBDoOMLw0ltEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:40:6f:4b:99:ad:bb:5a:ce:ba:4c:44:6c:6e:9a:8d:01:7c:
6c:5e:e0:fd:7a:8a:d9:a3:b9:6a:1e:61:fe:84:92:e4:47:84:
b3:70:d1:f1:5e:87:20:2a:61:4a:5b:97:45:dd:30:88:c2:b8:
8e:17:7b:ef:94:6f:fc:36:1d:6e:27:e3:cf:f0:e5:31:f2:33:
14:f2:33:46:fe:67:47:6c:25:aa:a0:4f:e7:b1:85:3c:5a:05:
2b:78:1c:5c:51:f5:53:f6:04:73:2e:7d:03:70:21:e5:df:b8:
48:8b:34:15:12:98:43:45:c0:eb:04:9e:33:1d:9c:b8:0d:ce:
24:3b:58:82:b7:43:37:a4:d0:4a:06:73:88:7b:c2:e2:87:66:
39:bf:da:b6:10:28:e9:97:be:48:34:1d:ff:04:e5:75:aa:2f:
93:b6:6e:55:9b:ca:f6:54:70:76:a7:e8:b5:ac:e5:fa:e1:e2:
9b:5a:a3:4f:c4:97:53:01:e7:57:a1:4e:1c:77:0f:86:64:44:
d9:59:d6:7e:2e:24:0a:0a:b2:ad:6a:66:68:52:62:b9:a6:8d:
f4:f1:54:7d:9f:6d:07:8d:15:a2:5e:10:0a:e7:e5:ed:fe:74:
d7:f5:ca:3a:e5:e7:18:4a:bb:24:8d:b4:8d:3a:30:44:29:40:
24:c4:4c:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92fGjsjKN5ROXwGI3/vYDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyMGUzODA1YTFiNGY1YjYxY2ZlNzMwMTBlODM4YzJmMGQy
NWI0NGIwHhcNMjUxMDE5MTkwMjIyWhcNMjUxMDIwMTkwMjIyWjAzMTEwLwYDVQQD
Eyg0NzdhMjY2ZWE1YjA1NTE0NzgzMjU1YWFhNjNmOTQ4ZjI1YmRhZjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA227rboMIt0GKbJjAWvPZ4txAnPez
82geob52gW56TVNkPvmQmNlMkZDQCKgDM7GPyUGH097SlPOLMED+MOZGfrh0kvbv
tVqVljBjiDm2Mfv9GeTnguryYom+02iKWzk9EibGEioql4xwgIi0miM/DA42BZ4i
fJ29wLf2tPTkzOC0JJdI86ngUHi+hb4depf6g4MD+g+4uf76ytr2d5QEhmUYoGkd
B1FLnyD3jnUJbCpq28DyfJdARXqE4lUzPNM15/WyRE16zEDmPiO8ujpI/YqFF6YH
nTwlTiiDZ/RuJlSho+LyDYXt68Re/FVfYpBKfrZnTFR6Kfk057NLzR866QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEd6Jm6lsFUUeDJVqqY/lI8lva+EMB8GA1UdIwQY
MBaAFOIOOAWhtPW2HP5zAQ6DjC8NJbRLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGc0NEJhRzA5YlljX25NQkRvT01MdzBsdEVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9kMTZlM2UtZWIwOS00ZmI5LTkwODEt
YmQzZTdhZGRlOGRlLzEvNGc0NEJhRzA5YlljX25NQkRvT01MdzBsdEVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi9kMTZlM2UtZWIwOS00ZmI5LTkwODEtYmQzZTdhZGRlOGRl
LzEvNGc0NEJhRzA5YlljX25NQkRvT01MdzBsdEVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXEBvS5mt
u1rOukxEbG6ajQF8bF7g/XqK2aO5ah5h/oSS5EeEs3DR8V6HICphSluXRd0wiMK4
jhd775Rv/DYdbifjz/DlMfIzFPIzRv5nR2wlqqBP57GFPFoFK3gcXFH1U/YEcy59
A3Ah5d+4SIs0FRKYQ0XA6wSeMx2cuA3OJDtYgrdDN6TQSgZziHvC4odmOb/athAo
6Ze+SDQd/wTldaovk7ZuVZvK9lRwdqfotazl+uHim1qjT8SXUwHnV6FOHHcPhmRE
2VnWfi4kCgqyrWpmaFJiuaaN9PFUfZ9tB40Vol4QCufl7f501/XKOuXnGEq7JI20
jTowRClAJMRMiw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:59:48 2025 by rpki-client