Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft
File: 4ddWkNOcgwGAs_VcSdFAoqBNORc.mft (raw, json)
Hash identifier: eqHJnrOgTunQ8i0TnPt1mkeKfYyl0wonbJ1MTLCHIko=
Subject key identifier: BC:54:C1:EE:E9:A6:B0:BB:4D:2B:44:92:6F:F7:88:EE:0E:12:AB:49
Authority key identifier: E1:D7:56:90:D3:9C:83:01:80:B3:F5:5C:49:D1:40:A2:A0:4D:39:17
Certificate issuer: /CN=e1d75690d39c830180b3f55c49d140a2a04d3917
Certificate serial: 0199FBEBFB341305366204AED942FEAE1C40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ddWkNOcgwGAs_VcSdFAoqBNORc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 10:02:50 +0000
Manifest this update: Sun 19 Oct 2025 10:02:50 +0000
Manifest next update: Mon 20 Oct 2025 10:02:50 +0000
Files and hashes: 1: 4ddWkNOcgwGAs_VcSdFAoqBNORc.crl (hash: XDs5DPcW6/5F2N8TEmUjFtRq4anNiNtB2fK7vxJxJJY=)
2: PdBwCNjRTwQhBka9QYTFJ85Levw.roa (hash: 1UzFJNiL/xWD/Kmj2JG8FjTPHthfJspZ/00KC7jKNXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ddWkNOcgwGAs_VcSdFAoqBNORc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:fb:34:13:05:36:62:04:ae:d9:42:fe:ae:1c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1d75690d39c830180b3f55c49d140a2a04d3917
Validity
Not Before: Oct 19 10:02:50 2025 GMT
Not After : Oct 20 10:02:50 2025 GMT
Subject: CN=bc54c1eee9a6b0bb4d2b44926ff788ee0e12ab49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:92:28:30:09:f6:31:a6:f7:09:5f:87:b0:3a:
13:c1:60:20:19:45:73:87:7a:96:68:de:83:c8:62:
4b:c3:ef:e7:f9:90:a0:b7:f2:f0:ee:fb:4f:95:0f:
c6:43:74:c5:36:fd:c0:e0:69:30:ae:a5:ae:a4:e1:
28:00:41:c7:5f:5a:f0:ed:60:cb:df:f0:ba:96:e9:
90:9d:0f:06:fb:0d:64:36:fd:8d:44:04:77:76:d6:
46:1b:01:1f:b8:02:99:fd:0a:c0:c6:e6:f8:cd:52:
5a:5a:d1:d3:f2:f0:31:01:a7:f5:8c:5f:18:ee:b9:
a4:62:62:3a:64:9b:80:43:f6:f6:8f:4d:d9:73:26:
d8:43:90:b0:e9:7b:0b:1d:7a:74:49:b9:15:01:7f:
54:81:be:cd:f5:bd:e7:16:9e:2b:c3:72:3e:df:25:
a4:6a:ca:d9:dc:af:2c:d4:58:e2:bb:40:ac:b9:d4:
df:41:c6:0c:14:f7:19:46:63:46:be:ed:18:ef:fc:
4c:6a:4c:5c:bd:4f:e6:d6:54:81:6d:95:58:8f:35:
47:f3:b3:b9:54:ef:15:9e:fd:54:c8:2e:14:71:e2:
48:d0:8c:cb:5e:1d:54:a6:39:09:e5:f7:31:75:95:
2c:0e:0d:bc:ac:b2:be:0a:3e:08:ab:41:42:59:52:
c2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:54:C1:EE:E9:A6:B0:BB:4D:2B:44:92:6F:F7:88:EE:0E:12:AB:49
X509v3 Authority Key Identifier:
keyid:E1:D7:56:90:D3:9C:83:01:80:B3:F5:5C:49:D1:40:A2:A0:4D:39:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ddWkNOcgwGAs_VcSdFAoqBNORc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:c6:0a:68:00:3c:da:b7:33:7f:b8:64:85:58:b4:fb:81:7d:
f9:2c:43:f4:87:3b:14:85:89:bf:c9:29:bd:90:fe:47:cd:0f:
88:78:dd:43:43:ee:27:e0:ac:84:d5:20:7c:ce:67:33:40:75:
5f:2e:20:ca:ea:8e:30:13:24:06:de:c7:f6:66:2f:59:67:c7:
64:ea:ec:09:2b:bd:66:b0:36:c8:f3:98:3f:c7:0d:64:37:ec:
2f:e7:d6:1a:f9:33:fc:ad:76:c9:3a:a1:02:ea:f7:ce:16:b4:
f9:37:d4:7e:ec:ac:f6:b3:84:bf:48:cb:c2:be:25:b2:0c:06:
77:fc:3f:be:3c:15:fa:a1:7f:b3:2c:bd:8e:3c:66:fb:3b:e1:
3c:ce:9e:8e:7b:e5:99:52:8c:db:d5:8a:87:54:34:18:39:6e:
ed:f8:47:a5:e2:4e:b8:80:1c:fd:43:09:4e:6f:40:5d:0e:cd:
6a:9a:c8:fd:52:18:6e:ba:f5:75:36:6e:b3:3b:22:08:d1:2d:
0a:7a:f8:28:88:c1:00:7c:87:06:84:66:5d:fb:63:67:dc:5d:
d4:bc:42:84:02:d6:a1:fd:04:04:4c:95:23:56:2e:60:a2:ca:
c3:5b:fe:c6:ce:d9:59:67:10:ac:25:0a:c2:7b:6a:25:34:a2:
7a:65:15:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76/s0EwU2YgSu2UL+rhxAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxZDc1NjkwZDM5YzgzMDE4MGIzZjU1YzQ5ZDE0MGEyYTA0
ZDM5MTcwHhcNMjUxMDE5MTAwMjUwWhcNMjUxMDIwMTAwMjUwWjAzMTEwLwYDVQQD
EyhiYzU0YzFlZWU5YTZiMGJiNGQyYjQ0OTI2ZmY3ODhlZTBlMTJhYjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5IoMAn2Mab3CV+HsDoTwWAgGUVz
h3qWaN6DyGJLw+/n+ZCgt/Lw7vtPlQ/GQ3TFNv3A4GkwrqWupOEoAEHHX1rw7WDL
3/C6lumQnQ8G+w1kNv2NRAR3dtZGGwEfuAKZ/QrAxub4zVJaWtHT8vAxAaf1jF8Y
7rmkYmI6ZJuAQ/b2j03ZcybYQ5Cw6XsLHXp0SbkVAX9Ugb7N9b3nFp4rw3I+3yWk
asrZ3K8s1Fjiu0CsudTfQcYMFPcZRmNGvu0Y7/xMakxcvU/m1lSBbZVYjzVH87O5
VO8Vnv1UyC4UceJI0IzLXh1UpjkJ5fcxdZUsDg28rLK+Cj4Iq0FCWVLC/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLxUwe7pprC7TStEkm/3iO4OEqtJMB8GA1UdIwQY
MBaAFOHXVpDTnIMBgLP1XEnRQKKgTTkXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGRkV2tOT2Nnd0dBc19WY1NkRkFvcUJOT1JjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8yZGFkMzUtZGQwYS00ZDYzLThjMWUt
YjlhMzZlYjllZTIxLzEvNGRkV2tOT2Nnd0dBc19WY1NkRkFvcUJOT1JjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8yZGFkMzUtZGQwYS00ZDYzLThjMWUtYjlhMzZlYjllZTIx
LzEvNGRkV2tOT2Nnd0dBc19WY1NkRkFvcUJOT1JjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJsYKaAA8
2rczf7hkhVi0+4F9+SxD9Ic7FIWJv8kpvZD+R80PiHjdQ0PuJ+CshNUgfM5nM0B1
Xy4gyuqOMBMkBt7H9mYvWWfHZOrsCSu9ZrA2yPOYP8cNZDfsL+fWGvkz/K12yTqh
Aur3zha0+TfUfuys9rOEv0jLwr4lsgwGd/w/vjwV+qF/syy9jjxm+zvhPM6ejnvl
mVKM29WKh1Q0GDlu7fhHpeJOuIAc/UMJTm9AXQ7NaprI/VIYbrr1dTZuszsiCNEt
Cnr4KIjBAHyHBoRmXftjZ9xd1LxChALWof0EBEyVI1YuYKLKw1v+xs7ZWWcQrCUK
wntqJTSiemUViw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:55 2025 by rpki-client