Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
File: 4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft (raw, json)
Hash identifier: eXGZgFxsCzHTbDPvykrtV6Geua16mWqWWCa57AA5X+Q=
Subject key identifier: A5:36:BF:01:EC:97:4A:4B:A8:A5:5D:79:A5:11:62:20:60:EB:6F:24
Authority key identifier: E1:9D:B0:C5:B2:D9:61:0E:F5:86:E9:7F:BA:1F:CA:87:50:06:F3:DA
Certificate issuer: /CN=e19db0c5b2d9610ef586e97fba1fca875006f3da
Certificate serial: 0199FD6ADB54DADDD8E2B764DFA7EFC4B353
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Z2wxbLZYQ71hul_uh_Kh1AG89o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
Manifest number: 1213
Signing time: Sun 19 Oct 2025 17:01:02 +0000
Manifest this update: Sun 19 Oct 2025 17:01:02 +0000
Manifest next update: Mon 20 Oct 2025 17:01:02 +0000
Files and hashes: 1: 4Z2wxbLZYQ71hul_uh_Kh1AG89o.crl (hash: secjwuDMzAWwz2UmI/skMmMAwJ2szrvenpLXhHmPCcE=)
2: WX9ifdPc509PIWH1MshzaQ9gKs4.roa (hash: N2NEfXL50JrESYal+4AtaFkCctqevfpLSA3CNFTMaFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Z2wxbLZYQ71hul_uh_Kh1AG89o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:db:54:da:dd:d8:e2:b7:64:df:a7:ef:c4:b3:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e19db0c5b2d9610ef586e97fba1fca875006f3da
Validity
Not Before: Oct 19 17:01:02 2025 GMT
Not After : Oct 20 17:01:02 2025 GMT
Subject: CN=a536bf01ec974a4ba8a55d79a511622060eb6f24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:93:d7:56:bb:4d:cc:43:3e:52:f5:ff:c6:d6:
35:16:e0:7d:39:cf:4f:9b:92:e9:a4:ab:4c:fa:29:
3e:63:e1:37:8e:e7:cc:4e:75:06:ab:c3:2e:81:a4:
51:3f:c6:07:2d:b1:9f:e2:f3:6a:94:0b:85:b1:f2:
eb:bb:cf:96:a9:ac:2b:5f:97:39:28:ef:27:6a:5c:
fb:a4:24:b2:14:34:56:32:b2:22:3e:02:4d:b0:18:
d9:78:5e:18:d0:ba:14:4b:c6:37:8a:fc:6e:d5:8e:
cb:eb:aa:79:96:43:ce:75:0f:a3:e5:aa:59:ac:b1:
fc:7d:b5:b5:3f:f6:15:aa:f8:ed:1d:a0:ff:06:e8:
cb:7b:4f:19:c1:de:e4:62:95:a2:5a:f8:cb:df:d0:
3e:26:4d:ee:e2:88:52:62:5e:a1:9f:21:5e:05:f4:
d7:23:cc:71:ae:b9:19:0d:95:dc:9f:ef:16:cd:8e:
58:a7:a1:75:39:2d:be:01:97:8e:8e:9e:1a:47:65:
e0:89:24:49:f7:e0:3c:5a:4a:5f:31:c0:6a:9c:9c:
e5:e8:d3:59:c4:2a:00:27:91:f8:54:53:1b:99:45:
7e:41:77:95:77:4b:e5:bc:c8:8d:cd:4a:84:95:32:
36:5e:e4:92:6f:f7:d3:8e:96:65:fb:47:e6:5f:4f:
c1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:36:BF:01:EC:97:4A:4B:A8:A5:5D:79:A5:11:62:20:60:EB:6F:24
X509v3 Authority Key Identifier:
keyid:E1:9D:B0:C5:B2:D9:61:0E:F5:86:E9:7F:BA:1F:CA:87:50:06:F3:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Z2wxbLZYQ71hul_uh_Kh1AG89o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:47:e1:57:5a:46:30:d0:1b:ac:ea:4d:d4:63:b8:dc:f0:8c:
c2:de:a7:72:07:77:32:28:4e:db:e1:d6:d6:52:3c:5b:00:aa:
62:7f:78:36:eb:0a:6f:75:3a:6d:25:a9:ea:3e:d7:ef:19:44:
c7:04:f0:ce:c0:c3:14:65:92:66:1f:1d:8d:f8:ad:53:bd:45:
3f:4a:a0:53:3d:9c:47:6b:88:c7:9f:09:56:4b:ed:23:9b:67:
09:3c:af:63:99:f5:9f:b5:f4:9a:aa:3d:11:71:51:4d:0f:33:
58:5a:5f:b1:0e:92:5d:c6:8c:e0:9e:14:5a:89:1e:74:f4:09:
20:af:a7:e4:1b:3e:44:8f:2e:e6:d7:9a:87:9c:7f:a4:8d:55:
2a:17:8b:83:76:ea:41:61:c6:2f:82:88:93:9f:1b:f2:91:5b:
5b:b6:30:94:82:a0:96:76:9e:71:46:c0:04:3a:0e:48:8e:62:
66:25:07:fd:9e:1f:73:37:85:c2:51:6c:b7:78:ac:e6:25:35:
26:06:3c:32:a8:29:0e:8a:87:e1:f4:d0:45:26:73:59:39:1a:
52:26:63:13:58:23:12:6b:f5:f6:70:ce:22:54:01:0f:41:68:
95:85:6e:19:dc:83:42:59:fc:90:33:ac:f7:6a:fe:28:0f:c3:
f1:95:2c:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9attU2t3Y4rdk36fvxLNTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxOWRiMGM1YjJkOTYxMGVmNTg2ZTk3ZmJhMWZjYTg3NTAw
NmYzZGEwHhcNMjUxMDE5MTcwMTAyWhcNMjUxMDIwMTcwMTAyWjAzMTEwLwYDVQQD
EyhhNTM2YmYwMWVjOTc0YTRiYThhNTVkNzlhNTExNjIyMDYwZWI2ZjI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5PXVrtNzEM+UvX/xtY1FuB9Oc9P
m5LppKtM+ik+Y+E3jufMTnUGq8MugaRRP8YHLbGf4vNqlAuFsfLru8+WqawrX5c5
KO8nalz7pCSyFDRWMrIiPgJNsBjZeF4Y0LoUS8Y3ivxu1Y7L66p5lkPOdQ+j5apZ
rLH8fbW1P/YVqvjtHaD/BujLe08Zwd7kYpWiWvjL39A+Jk3u4ohSYl6hnyFeBfTX
I8xxrrkZDZXcn+8WzY5Yp6F1OS2+AZeOjp4aR2XgiSRJ9+A8WkpfMcBqnJzl6NNZ
xCoAJ5H4VFMbmUV+QXeVd0vlvMiNzUqElTI2XuSSb/fTjpZl+0fmX0/BWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKU2vwHsl0pLqKVdeaURYiBg628kMB8GA1UdIwQY
MBaAFOGdsMWy2WEO9Ybpf7ofyodQBvPaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFoyd3hiTFpZUTcxaHVsX3VoX0toMUFHODlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC82Yjc4YTUtNGM1Yy00MzgzLTg3ZmQt
MGNmNzRiZTMwM2ZmLzEvNFoyd3hiTFpZUTcxaHVsX3VoX0toMUFHODlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC82Yjc4YTUtNGM1Yy00MzgzLTg3ZmQtMGNmNzRiZTMwM2Zm
LzEvNFoyd3hiTFpZUTcxaHVsX3VoX0toMUFHODlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwUfhV1pG
MNAbrOpN1GO43PCMwt6ncgd3MihO2+HW1lI8WwCqYn94NusKb3U6bSWp6j7X7xlE
xwTwzsDDFGWSZh8djfitU71FP0qgUz2cR2uIx58JVkvtI5tnCTyvY5n1n7X0mqo9
EXFRTQ8zWFpfsQ6SXcaM4J4UWokedPQJIK+n5Bs+RI8u5teah5x/pI1VKheLg3bq
QWHGL4KIk58b8pFbW7YwlIKglnaecUbABDoOSI5iZiUH/Z4fczeFwlFst3is5iU1
JgY8MqgpDoqH4fTQRSZzWTkaUiZjE1gjEmv19nDOIlQBD0FolYVuGdyDQln8kDOs
92r+KA/D8ZUskQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 21:01:16 2025 by rpki-client