Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/4gRJ_n9LLPH3_WcOWC68yX5F9_8.mft
File: 4gRJ_n9LLPH3_WcOWC68yX5F9_8.mft (raw, json)
Hash identifier: aNXRzXk1Eq26Dm4c5AoFNzGWyePEI8tmZtB1GW+V9Ac=
Subject key identifier: 6A:BF:48:AD:3B:A2:BB:0F:64:94:E9:21:64:AA:AD:1A:DC:8A:12:3D
Authority key identifier: E2:04:49:FE:7F:4B:2C:F1:F7:FD:67:0E:58:2E:BC:C9:7E:45:F7:FF
Certificate issuer: /CN=e20449fe7f4b2cf1f7fd670e582ebcc97e45f7ff
Certificate serial: 0199FD3416DA93CDC2DAD8510C40AA1E550B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gRJ_n9LLPH3_WcOWC68yX5F9_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/4gRJ_n9LLPH3_WcOWC68yX5F9_8.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 16:01:13 +0000
Manifest this update: Sun 19 Oct 2025 16:01:13 +0000
Manifest next update: Mon 20 Oct 2025 16:01:13 +0000
Files and hashes: 1: 4gRJ_n9LLPH3_WcOWC68yX5F9_8.crl (hash: nsekATdZcnzAVVPdeJdoXjZMGCFslLcRtBXBwdLujXQ=)
2: GfCJvI9nayXOG-c9-kNZYMtGvRY.roa (hash: iErUIkofrDIWovm2VEktlTu0LGFlXqiT+Jb2IEFCjN4=)
3: b6PxSRMMpYMDelZhlHVJswnGzlY.roa (hash: 2hbPovorwIzKGKG+8Z0PbXVcSz91V4CX1uoPUPOxcMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/4gRJ_n9LLPH3_WcOWC68yX5F9_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/4gRJ_n9LLPH3_WcOWC68yX5F9_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4gRJ_n9LLPH3_WcOWC68yX5F9_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 16:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:16:da:93:cd:c2:da:d8:51:0c:40:aa:1e:55:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e20449fe7f4b2cf1f7fd670e582ebcc97e45f7ff
Validity
Not Before: Oct 19 16:01:13 2025 GMT
Not After : Oct 20 16:01:13 2025 GMT
Subject: CN=6abf48ad3ba2bb0f6494e92164aaad1adc8a123d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:97:71:3d:a2:67:be:4d:63:a8:3e:57:ec:d1:
38:e1:00:85:38:63:d5:6a:ab:c4:ae:5a:1e:9a:af:
6b:80:cd:d9:fe:38:f3:e6:77:13:71:ce:6c:20:03:
0f:8e:d3:31:7d:63:1e:f9:d3:15:a1:4f:af:19:f3:
c5:c3:f8:97:55:e8:7f:7f:ee:a8:d9:e8:d3:52:03:
69:44:ce:d8:14:c9:02:61:f3:b6:a4:f4:f9:e7:c4:
8c:d4:c6:37:e9:7f:ff:44:ab:57:8b:8e:79:05:0f:
9b:6c:cc:5a:33:4e:b6:e3:cc:06:4e:24:22:c2:87:
e9:f5:a7:42:aa:31:8e:a0:22:87:e9:2d:c6:28:20:
36:40:84:6a:16:42:4b:25:0f:1a:ec:16:d4:da:c3:
fb:1c:e2:73:86:fa:a2:ed:e0:2b:78:04:c5:de:d2:
7d:5c:23:70:f8:c1:24:81:f4:71:1e:39:f0:a6:9a:
9b:30:19:ca:07:9d:6a:4c:ec:77:e1:c6:bb:a9:e2:
60:8d:8a:f3:b6:e4:1a:7b:05:c4:d3:e8:a0:5c:be:
fd:37:20:c2:ed:88:6b:a8:0c:8b:26:9c:5c:4a:39:
3f:fa:c4:f9:c6:44:88:13:b2:63:e0:16:f8:ec:db:
22:dc:46:e3:d3:e4:b5:7d:f5:e5:30:1f:15:b7:f4:
2f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:BF:48:AD:3B:A2:BB:0F:64:94:E9:21:64:AA:AD:1A:DC:8A:12:3D
X509v3 Authority Key Identifier:
keyid:E2:04:49:FE:7F:4B:2C:F1:F7:FD:67:0E:58:2E:BC:C9:7E:45:F7:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gRJ_n9LLPH3_WcOWC68yX5F9_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/4gRJ_n9LLPH3_WcOWC68yX5F9_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/4gRJ_n9LLPH3_WcOWC68yX5F9_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:50:f5:3e:2b:9c:45:e5:17:28:5e:25:44:b7:af:8a:43:9a:
92:91:76:3f:10:e8:a3:60:4e:fc:a8:b3:21:3c:f4:b6:6f:33:
fd:74:50:59:fd:6c:fd:f5:9b:3a:82:f5:4c:c1:9a:61:db:6e:
b9:7f:67:68:91:81:bd:89:d2:fb:fc:04:8f:02:71:16:13:f8:
07:2e:c2:11:d4:ab:29:2a:5f:6e:19:44:f4:2e:11:e1:6a:c3:
3c:e4:65:38:b5:27:1b:c9:6c:44:96:7a:89:e4:90:ca:37:11:
17:43:9f:d1:bf:39:4e:c1:c3:bc:40:19:c4:44:ea:84:58:9a:
9b:18:5c:11:e3:46:45:88:b7:f0:8f:2a:8a:97:c1:5b:14:73:
6e:97:d8:65:1c:4d:e1:7e:4c:85:b6:ac:a6:31:4a:20:4d:fb:
16:15:36:d8:c6:cf:fb:28:ef:5a:76:b7:37:67:85:61:f7:f9:
ca:20:98:9e:70:42:68:21:78:2d:b4:c4:a0:23:90:1b:51:23:
e8:97:cd:e5:89:d8:59:45:e8:7f:2b:43:b7:7d:53:a0:ea:6c:
73:d3:1a:0f:c3:8f:69:2b:a5:59:3e:e7:b1:90:de:22:ae:39:
93:5b:72:83:3d:e9:24:b3:83:5f:7f:48:b8:3e:0d:e0:7b:8b:
e9:f8:01:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NBbak83C2thRDECqHlULMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyMDQ0OWZlN2Y0YjJjZjFmN2ZkNjcwZTU4MmViY2M5N2U0
NWY3ZmYwHhcNMjUxMDE5MTYwMTEzWhcNMjUxMDIwMTYwMTEzWjAzMTEwLwYDVQQD
Eyg2YWJmNDhhZDNiYTJiYjBmNjQ5NGU5MjE2NGFhYWQxYWRjOGExMjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5dxPaJnvk1jqD5X7NE44QCFOGPV
aqvErloemq9rgM3Z/jjz5ncTcc5sIAMPjtMxfWMe+dMVoU+vGfPFw/iXVeh/f+6o
2ejTUgNpRM7YFMkCYfO2pPT558SM1MY36X//RKtXi455BQ+bbMxaM06248wGTiQi
wofp9adCqjGOoCKH6S3GKCA2QIRqFkJLJQ8a7BbU2sP7HOJzhvqi7eAreATF3tJ9
XCNw+MEkgfRxHjnwppqbMBnKB51qTOx34ca7qeJgjYrztuQaewXE0+igXL79NyDC
7YhrqAyLJpxcSjk/+sT5xkSIE7Jj4Bb47Nsi3Ebj0+S1ffXlMB8Vt/Qv6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGq/SK07orsPZJTpIWSqrRrcihI9MB8GA1UdIwQY
MBaAFOIESf5/Syzx9/1nDlguvMl+Rff/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGdSSl9uOUxMUEgzX1djT1dDNjh5WDVGOV84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zZGM4NzktMTFiOS00ZmE2LTg0MWQt
OTA2YTkxZWU5ZmU0LzEvNGdSSl9uOUxMUEgzX1djT1dDNjh5WDVGOV84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zZGM4NzktMTFiOS00ZmE2LTg0MWQtOTA2YTkxZWU5ZmU0
LzEvNGdSSl9uOUxMUEgzX1djT1dDNjh5WDVGOV84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoFD1Piuc
ReUXKF4lRLevikOakpF2PxDoo2BO/KizITz0tm8z/XRQWf1s/fWbOoL1TMGaYdtu
uX9naJGBvYnS+/wEjwJxFhP4By7CEdSrKSpfbhlE9C4R4WrDPORlOLUnG8lsRJZ6
ieSQyjcRF0Of0b85TsHDvEAZxETqhFiamxhcEeNGRYi38I8qipfBWxRzbpfYZRxN
4X5MhbaspjFKIE37FhU22MbP+yjvWna3N2eFYff5yiCYnnBCaCF4LbTEoCOQG1Ej
6JfN5YnYWUXofytDt31ToOpsc9MaD8OPaSulWT7nsZDeIq45k1tygz3pJLODX39I
uD4N4HuL6fgB9Q==
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:23:29 2025 by rpki-client