
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.mft
File: 04m0GNo0qjk07N4rcx3x1O1-yA4.mft (raw, json)
Hash identifier: rdbfWXD12TwdJ/Ny/1goHgdW0wpXWk98xHp5EJ+fm+8=
Subject key identifier: 29:42:D9:E8:15:CB:A7:3F:B2:E8:73:A0:76:40:60:9F:C8:DE:F9:A2
Authority key identifier: D3:89:B4:18:DA:34:AA:39:34:EC:DE:2B:73:1D:F1:D4:ED:7E:C8:0E
Certificate issuer: /CN=d389b418da34aa3934ecde2b731df1d4ed7ec80e
Certificate serial: 0199FAD7CB10D85EF3D6430D3F508A384865
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04m0GNo0qjk07N4rcx3x1O1-yA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.mft
Manifest number: 13F3
Signing time: Sun 19 Oct 2025 05:01:10 +0000
Manifest this update: Sun 19 Oct 2025 05:01:10 +0000
Manifest next update: Mon 20 Oct 2025 05:01:10 +0000
Files and hashes: 1: 04m0GNo0qjk07N4rcx3x1O1-yA4.crl (hash: ISK7zNrzR3LyJjkAAJwUpdPFBXpnoOMxYq52FVRr358=)
2: cWwT1szK5NdnVm06LjbXvG6eYg4.roa (hash: W4zwG2oQXcpZIEG+6MYSyZ5G6TI/ulbfB+7HQbWQK/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/04m0GNo0qjk07N4rcx3x1O1-yA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:cb:10:d8:5e:f3:d6:43:0d:3f:50:8a:38:48:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d389b418da34aa3934ecde2b731df1d4ed7ec80e
Validity
Not Before: Oct 19 05:01:10 2025 GMT
Not After : Oct 20 05:01:10 2025 GMT
Subject: CN=2942d9e815cba73fb2e873a07640609fc8def9a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:84:61:d9:90:6d:62:e5:a6:41:d6:e3:50:3e:
4b:66:0a:18:6f:f0:49:6c:4e:ed:2c:2d:0b:82:a5:
bb:80:44:80:84:c6:48:c6:d1:3d:22:dd:f2:22:14:
07:ce:0c:f4:99:43:62:72:d8:df:45:87:d1:ef:6f:
bf:6f:a8:ea:2d:f7:b0:9a:ba:36:81:76:94:5c:a7:
20:e7:5e:ac:a9:f3:71:67:b0:5b:66:09:16:a5:7b:
f6:a7:6a:a1:89:32:58:06:c8:17:ad:3e:46:d2:7a:
dc:c0:16:2a:99:d9:8b:70:fd:7d:b0:7a:a8:b9:25:
2a:63:f4:07:5b:47:19:d0:aa:3c:1a:fb:11:54:ef:
d5:11:ae:70:3e:3e:a3:0d:ce:dd:53:d4:ec:ae:85:
e8:41:07:b4:e8:f8:e1:d1:b5:bf:1c:8b:82:80:72:
a8:10:20:16:d9:ed:eb:a9:16:bd:72:ad:eb:f1:9b:
e3:90:85:4e:e2:6e:af:80:53:d1:3d:a3:ad:21:aa:
2e:6f:60:a3:48:05:21:a2:fa:45:0c:85:0e:80:8c:
bb:a9:0c:f9:1a:17:18:41:03:b9:49:24:3b:97:40:
10:9f:2d:42:0b:84:6a:4c:b7:ab:3a:fc:91:cd:f6:
b7:20:31:30:f4:d1:5f:a2:6c:1b:97:d2:0a:d1:96:
f6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:42:D9:E8:15:CB:A7:3F:B2:E8:73:A0:76:40:60:9F:C8:DE:F9:A2
X509v3 Authority Key Identifier:
keyid:D3:89:B4:18:DA:34:AA:39:34:EC:DE:2B:73:1D:F1:D4:ED:7E:C8:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04m0GNo0qjk07N4rcx3x1O1-yA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:27:5b:9b:95:5a:e9:ec:d2:50:f0:87:cf:5b:bd:52:cc:b9:
be:71:3e:a4:38:6e:e7:0b:20:99:14:ed:57:e1:10:bf:b6:68:
17:c2:46:7d:63:74:dd:95:ac:a5:ce:c8:78:a2:b5:72:52:fe:
c4:ca:a3:d6:9c:34:c7:44:45:9c:80:33:37:9c:a7:2f:02:8c:
88:09:41:fd:51:cc:da:8f:1b:97:5b:6c:c9:19:c6:39:62:63:
a6:bc:88:d0:e6:09:c9:d4:a9:48:76:0c:12:03:b0:2b:b5:00:
8f:2d:4c:95:df:f4:2e:71:2b:63:bf:da:bc:d4:10:07:65:ce:
08:9c:d1:de:fc:f3:0d:1a:b9:be:16:fe:0b:86:0c:53:70:28:
27:bc:b5:51:f4:b7:c6:69:6f:59:c9:f7:1f:79:63:55:a2:a1:
7b:35:c4:43:82:5e:88:39:84:8f:e7:bc:52:f7:f5:45:f2:42:
45:76:47:d8:ad:a9:17:99:33:7e:6f:7c:c7:94:b4:4e:bb:5e:
47:66:7e:39:e8:14:1f:34:ef:a1:a7:ef:72:64:e8:80:32:fa:
d9:6d:58:fe:96:1b:e2:6c:21:6a:ba:7e:62:9e:fd:20:73:b8:
43:72:50:bb:53:e8:ef:fb:3f:1f:7e:b8:38:65:4e:fa:40:2d:
c7:66:3b:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn618sQ2F7z1kMNP1CKOEhlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzODliNDE4ZGEzNGFhMzkzNGVjZGUyYjczMWRmMWQ0ZWQ3
ZWM4MGUwHhcNMjUxMDE5MDUwMTEwWhcNMjUxMDIwMDUwMTEwWjAzMTEwLwYDVQQD
EygyOTQyZDllODE1Y2JhNzNmYjJlODczYTA3NjQwNjA5ZmM4ZGVmOWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIRh2ZBtYuWmQdbjUD5LZgoYb/BJ
bE7tLC0LgqW7gESAhMZIxtE9It3yIhQHzgz0mUNictjfRYfR72+/b6jqLfewmro2
gXaUXKcg516sqfNxZ7BbZgkWpXv2p2qhiTJYBsgXrT5G0nrcwBYqmdmLcP19sHqo
uSUqY/QHW0cZ0Ko8GvsRVO/VEa5wPj6jDc7dU9TsroXoQQe06Pjh0bW/HIuCgHKo
ECAW2e3rqRa9cq3r8ZvjkIVO4m6vgFPRPaOtIaoub2CjSAUhovpFDIUOgIy7qQz5
GhcYQQO5SSQ7l0AQny1CC4RqTLerOvyRzfa3IDEw9NFfomwbl9IK0Zb2UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFClC2egVy6c/suhzoHZAYJ/I3vmiMB8GA1UdIwQY
MBaAFNOJtBjaNKo5NOzeK3Md8dTtfsgOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDRtMEdObzBxamswN040cmN4M3gxTzEteUE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9kNDcxNjMtODBlYS00NDRhLWE3OWYt
MDNhYTI5YjZhNzZhLzEvMDRtMEdObzBxamswN040cmN4M3gxTzEteUE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9kNDcxNjMtODBlYS00NDRhLWE3OWYtMDNhYTI5YjZhNzZh
LzEvMDRtMEdObzBxamswN040cmN4M3gxTzEteUE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPCdbm5Va
6ezSUPCHz1u9Usy5vnE+pDhu5wsgmRTtV+EQv7ZoF8JGfWN03ZWspc7IeKK1clL+
xMqj1pw0x0RFnIAzN5ynLwKMiAlB/VHM2o8bl1tsyRnGOWJjpryI0OYJydSpSHYM
EgOwK7UAjy1Mld/0LnErY7/avNQQB2XOCJzR3vzzDRq5vhb+C4YMU3AoJ7y1UfS3
xmlvWcn3H3ljVaKhezXEQ4JeiDmEj+e8Uvf1RfJCRXZH2K2pF5kzfm98x5S0Trte
R2Z+OegUHzTvoafvcmTogDL62W1Y/pYb4mwharp+Yp79IHO4Q3JQu1Po7/s/H364
OGVO+kAtx2Y7rg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:52 2025 by rpki-client