Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft
File: 4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft (raw, json)
Hash identifier: 84UMOxXORstVnTbaea9ypwPfGEyVP9cEhM4qsp0sawU=
Subject key identifier: FB:76:6C:99:A3:52:35:3C:A0:05:39:AA:88:3C:59:AC:1E:45:61:7F
Authority key identifier: E3:1C:01:0E:95:01:5C:21:23:64:1D:33:12:0A:7E:9C:90:08:00:2D
Certificate issuer: /CN=e31c010e95015c2123641d33120a7e9c9008002d
Certificate serial: 0199FDDA21DD3399C04F2CD0A989F9B21097
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xwBDpUBXCEjZB0zEgp-nJAIAC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft
Manifest number: 0E
Signing time: Sun 19 Oct 2025 19:02:35 +0000
Manifest this update: Sun 19 Oct 2025 19:02:35 +0000
Manifest next update: Mon 20 Oct 2025 19:02:35 +0000
Files and hashes: 1: 4xwBDpUBXCEjZB0zEgp-nJAIAC0.crl (hash: sxWIEvPF95q0vCMeuHRQjsZj7Is4Rp73uhf3bipmTAQ=)
2: NxyC245LfoIGu7NVTJi-_dDCgvs.roa (hash: Suj+SVX/zjejO/imh+c1lgrmaGy+Ijth/7DtIkk94wQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xwBDpUBXCEjZB0zEgp-nJAIAC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:21:dd:33:99:c0:4f:2c:d0:a9:89:f9:b2:10:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e31c010e95015c2123641d33120a7e9c9008002d
Validity
Not Before: Oct 19 19:02:35 2025 GMT
Not After : Oct 20 19:02:35 2025 GMT
Subject: CN=fb766c99a352353ca00539aa883c59ac1e45617f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:87:e9:d3:4a:c2:75:ee:39:5e:82:e3:11:32:
d5:d9:95:37:92:fc:cb:35:26:fd:5d:d7:72:4e:d5:
d9:04:dd:4b:84:9a:25:02:34:80:6c:d5:c1:ff:83:
c7:39:af:d9:f0:64:6f:55:39:e5:6c:53:11:2b:0d:
65:a4:c7:56:18:01:f5:ce:dd:d0:eb:38:07:89:b1:
c4:09:27:bb:29:b6:bc:6b:1f:80:06:27:87:4f:b6:
cc:70:34:74:48:0f:5e:ef:7a:4e:2a:bd:4d:4f:dd:
19:a0:0a:a7:55:12:47:0f:94:4b:c6:41:21:4e:1f:
6a:c5:39:e6:14:ae:1a:57:4d:f9:dd:a2:1c:e5:50:
df:d9:a9:54:a9:3b:be:2c:09:87:16:10:3a:70:76:
59:5d:da:e7:b8:47:3b:1f:fe:98:65:f1:74:6e:3f:
48:bb:a0:44:f3:17:c3:5a:f8:35:03:6d:07:a4:ff:
93:78:55:1b:f6:13:77:b6:94:a6:aa:d6:42:1c:19:
14:e7:23:9b:36:0a:d3:20:ee:b8:1a:54:10:76:44:
49:bb:f2:ab:bc:f0:d5:8c:d3:f9:31:8a:61:99:86:
8d:b7:d0:b7:96:26:ef:07:fc:35:23:1b:21:92:ec:
44:ed:5a:5f:73:2a:4f:6d:ad:66:fd:68:17:80:b1:
96:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:76:6C:99:A3:52:35:3C:A0:05:39:AA:88:3C:59:AC:1E:45:61:7F
X509v3 Authority Key Identifier:
keyid:E3:1C:01:0E:95:01:5C:21:23:64:1D:33:12:0A:7E:9C:90:08:00:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xwBDpUBXCEjZB0zEgp-nJAIAC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:8a:af:1b:36:d8:21:49:96:2f:fd:5a:78:12:3a:6b:9a:6b:
af:0b:03:86:e4:73:5a:f3:00:38:29:52:fc:e6:26:8a:cf:09:
9a:30:df:d7:04:18:1d:5d:f9:ae:c4:70:d6:70:c6:34:43:cf:
e0:58:b2:e1:00:5a:4d:89:7b:6e:74:c1:07:f0:d8:2c:50:40:
17:24:88:63:54:42:3d:c7:0d:a0:5b:58:bd:04:95:36:a4:f2:
66:cc:db:50:61:2a:83:0f:9b:40:4f:62:c1:15:f2:07:7b:28:
35:ef:28:df:1a:f5:c8:6b:14:5d:b6:6f:8d:5e:a2:18:c8:14:
00:35:cc:3d:47:85:fb:6a:0b:e3:ba:57:9c:52:73:d1:17:3b:
68:cf:52:d9:3e:34:bc:4e:0b:00:ca:5e:41:de:6a:e3:f0:e0:
7c:02:1b:17:ea:35:d9:c5:b0:7a:a2:9f:61:ff:9b:3d:b9:68:
d0:cb:56:76:4e:a5:1b:29:d8:6c:03:ad:47:ed:3c:16:70:8b:
c5:a7:1e:66:d5:a8:95:d2:8f:ef:12:79:37:3b:61:cd:86:c7:
30:60:8b:b5:fc:c4:09:34:d6:42:d2:d2:d3:1f:a1:2b:5e:18:
95:65:ff:be:a8:4b:68:f7:83:f3:db:6a:1a:14:d7:3d:91:c4:
a5:53:37:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92iHdM5nATyzQqYn5shCXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMWMwMTBlOTUwMTVjMjEyMzY0MWQzMzEyMGE3ZTljOTAw
ODAwMmQwHhcNMjUxMDE5MTkwMjM1WhcNMjUxMDIwMTkwMjM1WjAzMTEwLwYDVQQD
EyhmYjc2NmM5OWEzNTIzNTNjYTAwNTM5YWE4ODNjNTlhYzFlNDU2MTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4fp00rCde45XoLjETLV2ZU3kvzL
NSb9XddyTtXZBN1LhJolAjSAbNXB/4PHOa/Z8GRvVTnlbFMRKw1lpMdWGAH1zt3Q
6zgHibHECSe7Kba8ax+ABieHT7bMcDR0SA9e73pOKr1NT90ZoAqnVRJHD5RLxkEh
Th9qxTnmFK4aV0353aIc5VDf2alUqTu+LAmHFhA6cHZZXdrnuEc7H/6YZfF0bj9I
u6BE8xfDWvg1A20HpP+TeFUb9hN3tpSmqtZCHBkU5yObNgrTIO64GlQQdkRJu/Kr
vPDVjNP5MYphmYaNt9C3libvB/w1IxshkuxE7VpfcypPba1m/WgXgLGWTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPt2bJmjUjU8oAU5qog8WaweRWF/MB8GA1UdIwQY
MBaAFOMcAQ6VAVwhI2QdMxIKfpyQCAAtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHh3QkRwVUJYQ0VqWkIwekVncC1uSkFJQUMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS80ODM4MDYtMDQ1ZC00ODU2LWI1Mjkt
YjQ3ZTc0ZWQ0ZTdlLzEvNHh3QkRwVUJYQ0VqWkIwekVncC1uSkFJQUMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS80ODM4MDYtMDQ1ZC00ODU2LWI1MjktYjQ3ZTc0ZWQ0ZTdl
LzEvNHh3QkRwVUJYQ0VqWkIwekVncC1uSkFJQUMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANYqvGzbY
IUmWL/1aeBI6a5prrwsDhuRzWvMAOClS/OYmis8JmjDf1wQYHV35rsRw1nDGNEPP
4Fiy4QBaTYl7bnTBB/DYLFBAFySIY1RCPccNoFtYvQSVNqTyZszbUGEqgw+bQE9i
wRXyB3soNe8o3xr1yGsUXbZvjV6iGMgUADXMPUeF+2oL47pXnFJz0Rc7aM9S2T40
vE4LAMpeQd5q4/DgfAIbF+o12cWweqKfYf+bPblo0MtWdk6lGynYbAOtR+08FnCL
xaceZtWoldKP7xJ5NzthzYbHMGCLtfzECTTWQtLS0x+hK14YlWX/vqhLaPeD89tq
GhTXPZHEpVM3fg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:18:00 2025 by rpki-client