Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/eee521-25fa-4006-9531-1e044814518f/1/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.mft
File: 4LhnExEAwV3okBEAY-Y4pfAjZ8Q.mft (raw, json)
Hash identifier: cm/qubdndYpfwmdi++9X6p6TdRNHRLielIayrM3j8MM=
Subject key identifier: FE:E6:14:26:EA:D1:12:B0:0E:C5:20:08:C2:5F:4B:9C:F9:07:FB:7B
Authority key identifier: E0:B8:67:13:11:00:C1:5D:E8:90:11:00:63:E6:38:A5:F0:23:67:C4
Certificate issuer: /CN=e0b867131100c15de890110063e638a5f02367c4
Certificate serial: 0199FCC644E68D199791670251557B832530
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/eee521-25fa-4006-9531-1e044814518f/1/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 14:01:16 +0000
Manifest this update: Sun 19 Oct 2025 14:01:16 +0000
Manifest next update: Mon 20 Oct 2025 14:01:16 +0000
Files and hashes: 1: 4LhnExEAwV3okBEAY-Y4pfAjZ8Q.crl (hash: qXv6z6kWQk14AJeVYBh1wkVXsYFacV4Rt/SbVG5LefI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/eee521-25fa-4006-9531-1e044814518f/1/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/eee521-25fa-4006-9531-1e044814518f/1/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:44:e6:8d:19:97:91:67:02:51:55:7b:83:25:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0b867131100c15de890110063e638a5f02367c4
Validity
Not Before: Oct 19 14:01:16 2025 GMT
Not After : Oct 20 14:01:16 2025 GMT
Subject: CN=fee61426ead112b00ec52008c25f4b9cf907fb7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:03:86:02:64:c4:5f:1b:84:08:00:df:3a:22:
7a:8d:85:d8:38:4f:56:be:de:df:49:71:53:07:7f:
5a:5d:dc:00:2f:51:61:0e:12:69:b8:ce:c1:90:fb:
94:a8:f6:e4:19:6b:0d:17:02:f1:b7:11:6a:28:ef:
2f:60:cd:25:54:23:6a:3b:bd:57:b9:ef:d1:8c:38:
37:80:de:50:44:53:47:20:53:fb:5d:3e:97:91:a9:
69:34:ab:01:23:ca:6f:63:a4:47:45:9c:9d:d8:34:
cb:bc:fb:36:c3:78:f6:00:4f:de:81:ac:c4:ee:71:
60:76:c2:98:63:14:5f:72:e2:1d:b8:d0:14:6f:80:
a1:a8:2e:0d:f6:60:de:ee:75:ff:f8:79:b4:a4:21:
3b:5c:17:94:c7:f2:60:ff:cd:c8:f2:b9:7f:c5:66:
96:23:db:a8:76:96:48:43:56:a6:e2:e5:c6:ab:d0:
ac:21:bf:90:ec:66:9d:38:af:33:27:50:6a:dd:42:
52:f1:40:11:2b:15:bb:c0:0f:78:32:9e:15:19:93:
33:b2:55:86:6c:64:28:56:6f:d3:fd:5c:f4:a4:72:
6a:a0:f0:92:d0:dd:6f:94:c9:37:51:1a:34:6b:1e:
f7:1c:d1:1b:ef:1a:44:ef:d5:64:b7:ae:5c:b1:68:
04:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E6:14:26:EA:D1:12:B0:0E:C5:20:08:C2:5F:4B:9C:F9:07:FB:7B
X509v3 Authority Key Identifier:
keyid:E0:B8:67:13:11:00:C1:5D:E8:90:11:00:63:E6:38:A5:F0:23:67:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/eee521-25fa-4006-9531-1e044814518f/1/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/eee521-25fa-4006-9531-1e044814518f/1/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:29:78:fe:11:a6:ea:a7:7f:4d:9d:78:81:df:3f:4d:8a:13:
be:0a:d6:ef:42:60:dc:d1:18:d9:13:78:16:5d:16:37:a0:d8:
e6:db:2a:5f:e8:8f:8c:e6:77:a6:90:28:c0:d0:9f:99:a2:3b:
69:21:17:77:43:4d:15:76:c8:a5:c8:32:95:a0:70:02:a5:e6:
8f:c5:26:71:bd:43:13:ee:06:07:50:96:e6:18:ff:a1:7d:46:
81:8d:67:fa:ee:c9:7e:9e:16:71:9e:00:88:1b:d2:5b:89:96:
a9:04:e2:c3:2f:67:28:a1:c1:c5:3b:0a:62:cf:a8:ac:bf:d7:
82:84:18:8c:85:72:e2:60:ad:6a:c6:61:64:33:5b:b7:c0:02:
d1:c7:81:b0:07:8f:1f:cf:9b:bf:f5:1c:aa:4f:e6:9f:33:f5:
a9:f4:da:ca:e6:90:6f:88:c1:fc:49:5d:c9:b9:a1:85:1e:ed:
8b:f7:07:27:48:c9:f5:5b:76:bb:91:56:7f:2c:cc:2d:13:ab:
39:db:9d:08:d2:95:38:d9:e5:ae:a0:3e:9a:3e:d6:86:01:66:
31:01:1f:ca:85:af:65:36:0f:74:de:19:1a:84:8f:3d:ff:b8:
7b:5d:6e:0a:36:fb:54:ea:45:ee:d3:ae:3d:a8:e6:3b:61:19:
29:4f:0f:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xkTmjRmXkWcCUVV7gyUwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwYjg2NzEzMTEwMGMxNWRlODkwMTEwMDYzZTYzOGE1ZjAy
MzY3YzQwHhcNMjUxMDE5MTQwMTE2WhcNMjUxMDIwMTQwMTE2WjAzMTEwLwYDVQQD
EyhmZWU2MTQyNmVhZDExMmIwMGVjNTIwMDhjMjVmNGI5Y2Y5MDdmYjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogOGAmTEXxuECADfOiJ6jYXYOE9W
vt7fSXFTB39aXdwAL1FhDhJpuM7BkPuUqPbkGWsNFwLxtxFqKO8vYM0lVCNqO71X
ue/RjDg3gN5QRFNHIFP7XT6XkalpNKsBI8pvY6RHRZyd2DTLvPs2w3j2AE/egazE
7nFgdsKYYxRfcuIduNAUb4ChqC4N9mDe7nX/+Hm0pCE7XBeUx/Jg/83I8rl/xWaW
I9uodpZIQ1am4uXGq9CsIb+Q7GadOK8zJ1Bq3UJS8UARKxW7wA94Mp4VGZMzslWG
bGQoVm/T/Vz0pHJqoPCS0N1vlMk3URo0ax73HNEb7xpE79Vkt65csWgESQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP7mFCbq0RKwDsUgCMJfS5z5B/t7MB8GA1UdIwQY
MBaAFOC4ZxMRAMFd6JARAGPmOKXwI2fEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNExobkV4RUF3VjNva0JFQVktWTRwZkFqWjhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9lZWU1MjEtMjVmYS00MDA2LTk1MzEt
MWUwNDQ4MTQ1MThmLzEvNExobkV4RUF3VjNva0JFQVktWTRwZkFqWjhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9lZWU1MjEtMjVmYS00MDA2LTk1MzEtMWUwNDQ4MTQ1MThm
LzEvNExobkV4RUF3VjNva0JFQVktWTRwZkFqWjhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADyl4/hGm
6qd/TZ14gd8/TYoTvgrW70Jg3NEY2RN4Fl0WN6DY5tsqX+iPjOZ3ppAowNCfmaI7
aSEXd0NNFXbIpcgylaBwAqXmj8Umcb1DE+4GB1CW5hj/oX1GgY1n+u7Jfp4WcZ4A
iBvSW4mWqQTiwy9nKKHBxTsKYs+orL/XgoQYjIVy4mCtasZhZDNbt8AC0ceBsAeP
H8+bv/Ucqk/mnzP1qfTayuaQb4jB/EldybmhhR7ti/cHJ0jJ9Vt2u5FWfyzMLROr
OdudCNKVONnlrqA+mj7WhgFmMQEfyoWvZTYPdN4ZGoSPPf+4e11uCjb7VOpF7tOu
PajmO2EZKU8P/g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:39:30 2025 by rpki-client