Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/46f147-173f-4260-aa7b-3a6bf890a01d/1/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.mft
File: 4KAQbNKFfvEyNIZ8t_FqI6k_qpM.mft (raw, json)
Hash identifier: 4kIgOzK4D2K1ydWxd9DZ8OQocnjj5APHjUBRuhv3H3c=
Subject key identifier: DE:69:1F:94:8C:52:98:C4:52:97:FE:BD:73:DC:24:82:33:FE:01:6A
Authority key identifier: E0:A0:10:6C:D2:85:7E:F1:32:34:86:7C:B7:F1:6A:23:A9:3F:AA:93
Certificate issuer: /CN=e0a0106cd2857ef13234867cb7f16a23a93faa93
Certificate serial: 0199FFC7E7EB1754C1D7144850BE27C684EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/46f147-173f-4260-aa7b-3a6bf890a01d/1/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.mft
Manifest number: 16E7
Signing time: Mon 20 Oct 2025 04:01:55 +0000
Manifest this update: Mon 20 Oct 2025 04:01:55 +0000
Manifest next update: Tue 21 Oct 2025 04:01:55 +0000
Files and hashes: 1: 4KAQbNKFfvEyNIZ8t_FqI6k_qpM.crl (hash: IZatdf6BVpv24HnuVzCnrWYrpATWifGn5BKTq0NNbtA=)
2: BiNIPlrjeE3rdm2XK22vRf-wuzQ.roa (hash: ezcE9QgtvtC5wwnkaiaobICKGA7cBVTWIAYbMzMm22U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/46f147-173f-4260-aa7b-3a6bf890a01d/1/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/46f147-173f-4260-aa7b-3a6bf890a01d/1/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:e7:eb:17:54:c1:d7:14:48:50:be:27:c6:84:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0a0106cd2857ef13234867cb7f16a23a93faa93
Validity
Not Before: Oct 20 04:01:55 2025 GMT
Not After : Oct 21 04:01:55 2025 GMT
Subject: CN=de691f948c5298c45297febd73dc248233fe016a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d6:b3:90:5f:4e:7f:d0:3b:44:de:5f:80:6d:
a4:2f:0a:a2:d0:15:f4:4c:c4:11:8e:a0:df:57:7c:
d8:f2:36:2d:fe:da:85:63:31:d1:a1:7d:03:d7:d4:
58:b1:82:c2:ed:28:de:36:63:67:75:ee:76:79:45:
a4:4c:bb:9f:cc:5c:3f:17:d7:c2:88:e5:95:a1:bc:
1f:1a:d6:93:2d:be:7b:60:26:f2:6d:54:c6:7b:33:
68:ad:5b:89:2f:0f:ff:25:94:bf:dc:93:f4:91:4a:
44:25:b2:e9:82:e3:17:30:ef:52:9b:b7:6d:cf:0e:
1f:8b:25:ea:2c:7c:ff:a0:d7:e0:69:ac:d8:fe:a8:
f3:89:08:29:77:48:e6:9f:71:62:1e:39:14:f7:b6:
e6:21:cd:0c:ce:2e:6a:e9:f3:00:1e:37:41:87:37:
e2:50:06:7b:02:13:8a:53:6d:bc:0a:c9:20:be:68:
b8:ba:31:d2:e8:ee:9c:54:57:cd:fc:1b:77:6b:00:
57:96:d7:66:b4:14:32:9e:8e:05:38:88:38:e5:1b:
ff:31:0b:68:66:3b:9b:1a:24:dc:52:5a:1b:da:7c:
88:77:16:6c:a6:f1:a1:7d:0b:6f:10:62:4b:8f:f7:
c6:7d:ab:3d:72:f4:17:6d:49:2f:26:8a:bf:a6:af:
5e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:69:1F:94:8C:52:98:C4:52:97:FE:BD:73:DC:24:82:33:FE:01:6A
X509v3 Authority Key Identifier:
keyid:E0:A0:10:6C:D2:85:7E:F1:32:34:86:7C:B7:F1:6A:23:A9:3F:AA:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/46f147-173f-4260-aa7b-3a6bf890a01d/1/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/46f147-173f-4260-aa7b-3a6bf890a01d/1/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:1a:24:f7:55:5a:ed:ca:9d:ed:da:ad:91:fd:07:b8:b8:fd:
09:29:90:cc:96:0d:a4:e2:b4:29:d4:86:d8:80:f5:ef:cc:30:
16:63:22:8e:55:7e:6e:63:f6:2c:5c:84:91:7f:be:31:25:60:
c1:87:88:75:18:1e:cb:35:92:df:17:ef:0f:3c:b9:77:aa:ee:
a7:64:a9:36:1f:22:21:8d:a5:dd:6b:1c:aa:91:85:5e:ec:1d:
81:fe:fb:dd:39:1f:ce:1c:5b:17:b3:c2:99:d5:1e:5f:0f:cb:
cf:b6:7a:b9:fe:41:db:8e:81:a3:b8:6b:21:cc:4a:8d:8a:ea:
94:08:cd:4c:bd:a9:19:00:ce:06:53:28:88:f7:de:2b:e7:73:
ed:a7:2c:6e:b5:d7:ae:91:da:bc:2c:d5:84:f0:85:ed:93:42:
da:38:9a:fb:4b:8b:e8:ff:3c:b2:1d:15:2f:3f:60:aa:07:d5:
c4:90:9c:a4:56:be:27:51:89:4d:ed:49:b6:72:04:0e:5c:25:
aa:9a:47:73:33:25:25:88:69:8c:27:ff:19:e9:69:95:10:51:
73:2b:c2:a9:7f:ca:e7:f4:cd:16:3d:e4:63:80:c2:5e:ab:a6:
68:1c:69:f6:45:fe:23:5f:b0:eb:61:f1:58:10:f6:ec:8d:8f:
3b:bf:af:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/x+frF1TB1xRIUL4nxoTrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwYTAxMDZjZDI4NTdlZjEzMjM0ODY3Y2I3ZjE2YTIzYTkz
ZmFhOTMwHhcNMjUxMDIwMDQwMTU1WhcNMjUxMDIxMDQwMTU1WjAzMTEwLwYDVQQD
EyhkZTY5MWY5NDhjNTI5OGM0NTI5N2ZlYmQ3M2RjMjQ4MjMzZmUwMTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09azkF9Of9A7RN5fgG2kLwqi0BX0
TMQRjqDfV3zY8jYt/tqFYzHRoX0D19RYsYLC7SjeNmNnde52eUWkTLufzFw/F9fC
iOWVobwfGtaTLb57YCbybVTGezNorVuJLw//JZS/3JP0kUpEJbLpguMXMO9Sm7dt
zw4fiyXqLHz/oNfgaazY/qjziQgpd0jmn3FiHjkU97bmIc0Mzi5q6fMAHjdBhzfi
UAZ7AhOKU228Cskgvmi4ujHS6O6cVFfN/Bt3awBXltdmtBQyno4FOIg45Rv/MQto
ZjubGiTcUlob2nyIdxZspvGhfQtvEGJLj/fGfas9cvQXbUkvJoq/pq9e7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN5pH5SMUpjEUpf+vXPcJIIz/gFqMB8GA1UdIwQY
MBaAFOCgEGzShX7xMjSGfLfxaiOpP6qTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEtBUWJOS0ZmdkV5TklaOHRfRnFJNmtfcXBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi80NmYxNDctMTczZi00MjYwLWFhN2It
M2E2YmY4OTBhMDFkLzEvNEtBUWJOS0ZmdkV5TklaOHRfRnFJNmtfcXBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi80NmYxNDctMTczZi00MjYwLWFhN2ItM2E2YmY4OTBhMDFk
LzEvNEtBUWJOS0ZmdkV5TklaOHRfRnFJNmtfcXBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWRok91Va
7cqd7dqtkf0HuLj9CSmQzJYNpOK0KdSG2ID178wwFmMijlV+bmP2LFyEkX++MSVg
wYeIdRgeyzWS3xfvDzy5d6rup2SpNh8iIY2l3WscqpGFXuwdgf773TkfzhxbF7PC
mdUeXw/Lz7Z6uf5B246Bo7hrIcxKjYrqlAjNTL2pGQDOBlMoiPfeK+dz7acsbrXX
rpHavCzVhPCF7ZNC2jia+0uL6P88sh0VLz9gqgfVxJCcpFa+J1GJTe1JtnIEDlwl
qppHczMlJYhpjCf/GelplRBRcyvCqX/K5/TNFj3kY4DCXqumaBxp9kX+I1+w62Hx
WBD27I2PO7+vtw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:52:43 2025 by rpki-client