Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.mft
File: 4uQkJWNHPN8ULMt8zjwsw26j1GU.mft (raw, json)
Hash identifier: 0NSt2hLibyoAyJKx/o1xQXmVjrDizd4jO9XETuRO0c4=
Subject key identifier: 7E:A3:27:90:47:06:ED:CA:DE:79:E8:14:ED:7E:28:14:A2:C7:C7:6F
Authority key identifier: E2:E4:24:25:63:47:3C:DF:14:2C:CB:7C:CE:3C:2C:C3:6E:A3:D4:65
Certificate issuer: /CN=e2e4242563473cdf142ccb7cce3c2cc36ea3d465
Certificate serial: 0199FCFDA9F530F5962597D712BDEDD18943
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uQkJWNHPN8ULMt8zjwsw26j1GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.mft
Manifest number: 0CE1
Signing time: Sun 19 Oct 2025 15:01:46 +0000
Manifest this update: Sun 19 Oct 2025 15:01:46 +0000
Manifest next update: Mon 20 Oct 2025 15:01:46 +0000
Files and hashes: 1: 4uQkJWNHPN8ULMt8zjwsw26j1GU.crl (hash: NqyGCU1hwR60ffogNFwOK8P5ZtibI4AuZTAysZVD5LE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4uQkJWNHPN8ULMt8zjwsw26j1GU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:a9:f5:30:f5:96:25:97:d7:12:bd:ed:d1:89:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e4242563473cdf142ccb7cce3c2cc36ea3d465
Validity
Not Before: Oct 19 15:01:46 2025 GMT
Not After : Oct 20 15:01:46 2025 GMT
Subject: CN=7ea327904706edcade79e814ed7e2814a2c7c76f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:41:f7:04:48:af:66:24:68:8a:79:af:a6:c1:
9e:eb:61:fa:3b:2c:58:95:17:53:5f:d5:87:5b:7a:
62:7a:f1:b8:f0:07:ca:e8:92:e2:3d:9f:10:92:0b:
9a:d6:26:ac:79:a3:27:c6:7f:8b:32:d9:2a:de:9d:
ae:65:10:05:22:c5:d8:a8:ea:90:32:81:d0:a0:8e:
51:19:67:90:3c:83:75:57:f9:d2:1d:78:94:ab:ab:
a6:fd:21:d1:bb:4e:61:b0:b3:61:32:ad:d8:41:e1:
8c:d8:c3:65:1f:f7:50:13:c8:c9:df:0d:93:0e:a0:
2a:f0:09:9a:ec:a2:1c:a3:17:de:3e:33:b0:62:2c:
bd:47:58:a8:fc:df:4a:8a:2d:62:8a:d7:6d:2e:7a:
7d:77:e1:3d:11:23:23:c7:d8:09:bb:a5:d8:7b:02:
60:a4:e5:39:00:5b:e1:ca:f9:fd:90:67:db:da:40:
9c:d8:d8:54:a7:aa:64:71:f9:6c:bf:b7:62:e6:b2:
13:1e:7e:c6:f6:11:7f:d4:fb:22:49:86:15:e2:36:
ab:f9:2e:5e:6f:bd:a2:e2:26:28:ad:47:29:aa:3a:
b2:be:cc:7b:2d:ae:19:51:12:d4:4a:f3:23:17:df:
c6:60:04:eb:1c:fe:26:f3:0b:24:84:21:8c:15:d7:
71:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A3:27:90:47:06:ED:CA:DE:79:E8:14:ED:7E:28:14:A2:C7:C7:6F
X509v3 Authority Key Identifier:
keyid:E2:E4:24:25:63:47:3C:DF:14:2C:CB:7C:CE:3C:2C:C3:6E:A3:D4:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uQkJWNHPN8ULMt8zjwsw26j1GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:48:99:a3:47:60:f7:1f:03:67:3d:d7:83:27:db:64:39:5e:
01:9b:b8:31:41:ed:c6:92:68:6c:2b:ef:e4:5e:be:f1:0f:d1:
eb:10:d1:88:ff:1b:01:eb:f1:1c:bf:f9:99:c5:1f:de:d6:62:
0c:1a:52:58:9f:ed:c0:00:93:d0:7c:b1:ab:27:fc:34:0b:31:
88:e3:0d:57:be:d7:6b:5a:10:86:ed:e3:05:cb:33:6d:36:9b:
99:6a:1f:c6:b3:c3:33:97:b4:2b:66:00:a1:1a:70:90:37:9f:
92:7a:7f:4b:8a:84:bf:cd:e8:36:d4:9d:40:c4:ce:d9:3f:fc:
80:ba:74:0b:79:90:0c:3c:0b:46:2d:bb:05:9b:bc:f8:23:04:
46:01:31:fd:2e:fc:92:20:31:b1:54:bc:80:a7:3a:20:e1:80:
2a:bb:05:59:d8:4a:19:c5:4d:37:93:7e:66:b5:e8:c1:2f:a6:
d0:40:15:0b:b3:6b:e6:3c:ed:e4:df:10:e7:d6:60:a4:b1:1b:
b6:a4:55:a7:7e:43:82:3b:cf:18:cb:d8:9b:ff:f7:e1:54:67:
da:c5:01:26:1c:cc:74:f7:3a:43:09:a4:f1:d2:a6:de:e0:a2:
e9:94:1b:55:f8:17:16:cb:41:ec:fe:77:7a:5f:3c:3b:05:06:
fb:c9:e7:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/an1MPWWJZfXEr3t0YlDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZTQyNDI1NjM0NzNjZGYxNDJjY2I3Y2NlM2MyY2MzNmVh
M2Q0NjUwHhcNMjUxMDE5MTUwMTQ2WhcNMjUxMDIwMTUwMTQ2WjAzMTEwLwYDVQQD
Eyg3ZWEzMjc5MDQ3MDZlZGNhZGU3OWU4MTRlZDdlMjgxNGEyYzdjNzZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkH3BEivZiRoinmvpsGe62H6OyxY
lRdTX9WHW3pievG48AfK6JLiPZ8Qkgua1iaseaMnxn+LMtkq3p2uZRAFIsXYqOqQ
MoHQoI5RGWeQPIN1V/nSHXiUq6um/SHRu05hsLNhMq3YQeGM2MNlH/dQE8jJ3w2T
DqAq8Ama7KIcoxfePjOwYiy9R1io/N9Kii1iitdtLnp9d+E9ESMjx9gJu6XYewJg
pOU5AFvhyvn9kGfb2kCc2NhUp6pkcflsv7di5rITHn7G9hF/1PsiSYYV4jar+S5e
b72i4iYorUcpqjqyvsx7La4ZURLUSvMjF9/GYATrHP4m8wskhCGMFddxowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH6jJ5BHBu3K3nnoFO1+KBSix8dvMB8GA1UdIwQY
MBaAFOLkJCVjRzzfFCzLfM48LMNuo9RlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHVRa0pXTkhQTjhVTE10OHpqd3N3MjZqMUdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80MGZiNzgtNDE4OS00OTdkLWIwNmIt
OGU3YjcwOWRhNjUzLzEvNHVRa0pXTkhQTjhVTE10OHpqd3N3MjZqMUdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80MGZiNzgtNDE4OS00OTdkLWIwNmItOGU3YjcwOWRhNjUz
LzEvNHVRa0pXTkhQTjhVTE10OHpqd3N3MjZqMUdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVEiZo0dg
9x8DZz3XgyfbZDleAZu4MUHtxpJobCvv5F6+8Q/R6xDRiP8bAevxHL/5mcUf3tZi
DBpSWJ/twACT0Hyxqyf8NAsxiOMNV77Xa1oQhu3jBcszbTabmWofxrPDM5e0K2YA
oRpwkDefknp/S4qEv83oNtSdQMTO2T/8gLp0C3mQDDwLRi27BZu8+CMERgEx/S78
kiAxsVS8gKc6IOGAKrsFWdhKGcVNN5N+ZrXowS+m0EAVC7Nr5jzt5N8Q59ZgpLEb
tqRVp35DgjvPGMvYm//34VRn2sUBJhzMdPc6Qwmk8dKm3uCi6ZQbVfgXFstB7P53
el88OwUG+8nndw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:55:41 2025 by rpki-client