Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft
File: 4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft (raw, json)
Hash identifier: ikl5UzzY/VmmfMsCg1IWuWS2hY3F9ohuv0g4t4Vncxw=
Subject key identifier: EA:45:E2:50:ED:A6:01:CE:C8:D3:0D:58:42:22:D9:59:4E:FF:05:11
Authority key identifier: E1:9A:3B:AE:48:C9:55:66:31:4D:60:EF:A8:89:F3:D6:5F:9B:DD:41
Certificate issuer: /CN=e19a3bae48c95566314d60efa889f3d65f9bdd41
Certificate serial: 0199FD341F672946D5C2700973B51A046A3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Zo7rkjJVWYxTWDvqInz1l-b3UE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft
Manifest number: 0320
Signing time: Sun 19 Oct 2025 16:01:15 +0000
Manifest this update: Sun 19 Oct 2025 16:01:15 +0000
Manifest next update: Mon 20 Oct 2025 16:01:15 +0000
Files and hashes: 1: 4Zo7rkjJVWYxTWDvqInz1l-b3UE.crl (hash: t/2ffXPHgn50x4+Na7DpP2ivWtzHpHyvc76hqgKuWdU=)
2: tfMhyoCAwef_h-Z6sHOqruchZBw.roa (hash: Vm4p9lWk+dyS8xUI43ELEZzmPF8LCOKJ52R2v1+j6j0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Zo7rkjJVWYxTWDvqInz1l-b3UE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:1f:67:29:46:d5:c2:70:09:73:b5:1a:04:6a:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e19a3bae48c95566314d60efa889f3d65f9bdd41
Validity
Not Before: Oct 19 16:01:15 2025 GMT
Not After : Oct 20 16:01:15 2025 GMT
Subject: CN=ea45e250eda601cec8d30d584222d9594eff0511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:44:9a:b0:ee:db:d6:6b:c9:90:c7:5c:f2:0f:
7f:79:80:0f:48:1f:c9:0e:f7:e2:4b:7c:4b:48:f1:
a6:85:af:fe:15:c1:7f:e0:f4:74:5d:c2:2b:3b:47:
47:53:67:7c:41:e0:6b:10:98:a2:2e:08:50:e8:57:
60:8a:bd:fa:01:9a:9f:9c:e6:a4:df:4e:22:11:e4:
51:9b:ab:0f:d0:83:41:68:7d:25:c3:32:42:9b:e2:
6a:d2:ec:6f:eb:93:5d:47:d9:fb:3b:85:96:d4:2e:
27:61:bd:b9:e1:dc:60:01:af:c1:c6:4a:2f:80:0e:
38:34:29:a9:f7:f3:a5:1f:84:ce:d5:c8:08:8d:0d:
8a:28:93:d6:e7:56:45:49:5d:a1:71:90:1c:03:cf:
67:7c:9e:3d:a3:7a:80:c6:80:3c:35:1c:0e:3a:36:
b4:ba:01:e6:ee:8c:6e:ab:1d:29:8f:f1:78:ad:34:
51:aa:fd:9f:ba:10:b5:4c:89:2c:ca:bb:f0:9f:ea:
55:b9:49:96:c5:d3:89:d1:71:e0:c0:18:a3:14:88:
b3:ce:1e:93:fb:b2:25:69:9d:e6:59:98:3d:2a:bf:
72:7a:ff:91:0f:68:06:b1:78:ae:cd:05:0d:e6:c0:
3d:dc:5d:7f:29:f8:96:5d:f3:04:40:09:c6:91:c1:
ba:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:45:E2:50:ED:A6:01:CE:C8:D3:0D:58:42:22:D9:59:4E:FF:05:11
X509v3 Authority Key Identifier:
keyid:E1:9A:3B:AE:48:C9:55:66:31:4D:60:EF:A8:89:F3:D6:5F:9B:DD:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Zo7rkjJVWYxTWDvqInz1l-b3UE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:f9:f3:b1:37:5d:83:3d:68:92:43:a7:ea:fe:2f:b6:b3:76:
ed:39:d9:29:3b:ae:8a:4f:d9:98:27:8c:5d:af:9b:2c:31:e1:
65:34:fe:bf:b6:b9:75:ff:a1:1b:6f:5c:d2:ab:5a:2e:55:d4:
ce:c4:6a:e9:a7:97:2a:59:52:eb:44:f9:8d:80:6c:70:d4:d4:
61:c2:bd:4c:0e:8c:c8:cf:1f:c0:48:ee:10:97:ee:d9:2a:51:
12:dc:2f:6b:5d:d4:48:7d:e8:d0:ca:3c:0a:92:73:dd:73:74:
7e:82:a9:a4:21:1e:1d:06:e8:9c:a5:3b:71:0f:c4:59:06:7a:
2d:9a:7d:75:9c:55:b0:80:50:90:d5:8d:22:19:0c:fd:1e:2a:
07:83:49:da:cd:5f:ba:68:c6:ba:80:6c:ab:61:f0:eb:1d:19:
ca:4f:f3:a8:ff:97:26:84:27:07:16:ce:8c:26:b5:23:25:26:
2f:2f:2d:68:3d:5b:27:50:57:b7:c3:08:a5:e7:6a:f3:68:e5:
1b:dd:8c:13:c0:57:bf:11:72:8c:9c:43:fc:0a:9b:5d:c0:1b:
ce:b7:43:44:e4:c4:e3:6e:18:0e:17:ee:31:b0:63:6b:d2:7a:
76:df:91:a5:63:36:0d:ad:2b:be:5d:e5:53:e5:a4:ca:b8:aa:
d1:e7:81:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NB9nKUbVwnAJc7UaBGo6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxOWEzYmFlNDhjOTU1NjYzMTRkNjBlZmE4ODlmM2Q2NWY5
YmRkNDEwHhcNMjUxMDE5MTYwMTE1WhcNMjUxMDIwMTYwMTE1WjAzMTEwLwYDVQQD
EyhlYTQ1ZTI1MGVkYTYwMWNlYzhkMzBkNTg0MjIyZDk1OTRlZmYwNTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkSasO7b1mvJkMdc8g9/eYAPSB/J
DvfiS3xLSPGmha/+FcF/4PR0XcIrO0dHU2d8QeBrEJiiLghQ6Fdgir36AZqfnOak
304iEeRRm6sP0INBaH0lwzJCm+Jq0uxv65NdR9n7O4WW1C4nYb254dxgAa/Bxkov
gA44NCmp9/OlH4TO1cgIjQ2KKJPW51ZFSV2hcZAcA89nfJ49o3qAxoA8NRwOOja0
ugHm7oxuqx0pj/F4rTRRqv2fuhC1TIksyrvwn+pVuUmWxdOJ0XHgwBijFIizzh6T
+7IlaZ3mWZg9Kr9yev+RD2gGsXiuzQUN5sA93F1/KfiWXfMEQAnGkcG6GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOpF4lDtpgHOyNMNWEIi2VlO/wURMB8GA1UdIwQY
MBaAFOGaO65IyVVmMU1g76iJ89Zfm91BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFpvN3JrakpWV1l4VFdEdnFJbnoxbC1iM1VFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy82MzBkMGEtNDViOC00NmM0LThjMDIt
OTE4NGE5MWI4YWUxLzEvNFpvN3JrakpWV1l4VFdEdnFJbnoxbC1iM1VFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy82MzBkMGEtNDViOC00NmM0LThjMDItOTE4NGE5MWI4YWUx
LzEvNFpvN3JrakpWV1l4VFdEdnFJbnoxbC1iM1VFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa/nzsTdd
gz1okkOn6v4vtrN27TnZKTuuik/ZmCeMXa+bLDHhZTT+v7a5df+hG29c0qtaLlXU
zsRq6aeXKllS60T5jYBscNTUYcK9TA6MyM8fwEjuEJfu2SpREtwva13USH3o0Mo8
CpJz3XN0foKppCEeHQbonKU7cQ/EWQZ6LZp9dZxVsIBQkNWNIhkM/R4qB4NJ2s1f
umjGuoBsq2Hw6x0Zyk/zqP+XJoQnBxbOjCa1IyUmLy8taD1bJ1BXt8MIpedq82jl
G92ME8BXvxFyjJxD/AqbXcAbzrdDROTE424YDhfuMbBja9J6dt+RpWM2Da0rvl3l
U+Wkyriq0eeBqw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:49:45 2025 by rpki-client