
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
File: 4IFCtC45SABI0fzqWHo2k9pMC4o.mft (raw, json)
Hash identifier: /kv1eUX1cnisJSoJS8XTX5KekdmlDeYO7xZPchDKVNg=
Subject key identifier: 6E:7B:C4:9A:CC:D3:8B:BF:82:39:BA:E3:BB:30:93:79:95:70:3D:36
Authority key identifier: E0:81:42:B4:2E:39:48:00:48:D1:FC:EA:58:7A:36:93:DA:4C:0B:8A
Certificate issuer: /CN=e08142b42e39480048d1fcea587a3693da4c0b8a
Certificate serial: 0199FAA11515AF63EFD37A0BB810C8171022
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IFCtC45SABI0fzqWHo2k9pMC4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
Manifest number: 04CC
Signing time: Sun 19 Oct 2025 04:01:24 +0000
Manifest this update: Sun 19 Oct 2025 04:01:24 +0000
Manifest next update: Mon 20 Oct 2025 04:01:24 +0000
Files and hashes: 1: 4IFCtC45SABI0fzqWHo2k9pMC4o.crl (hash: lNsB2V9v+1tzkvPS3xGm937REwWiDH5257XgCKAHuzY=)
2: SkmMZcDmD4tfD5IJGWfT10a999s.roa (hash: FtSYkAppozDXy+VqyVeW2kon4HMuVtycn1oxBmmVVwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4IFCtC45SABI0fzqWHo2k9pMC4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a1:15:15:af:63:ef:d3:7a:0b:b8:10:c8:17:10:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e08142b42e39480048d1fcea587a3693da4c0b8a
Validity
Not Before: Oct 19 04:01:24 2025 GMT
Not After : Oct 20 04:01:24 2025 GMT
Subject: CN=6e7bc49accd38bbf8239bae3bb30937995703d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:8d:ef:db:1c:ad:1b:0c:9e:97:96:68:9c:94:
4d:df:b0:c9:9b:a8:26:de:45:27:60:43:a9:ba:44:
c8:4c:a3:ec:15:b6:02:21:a5:96:3d:d8:0d:f9:73:
7f:ff:11:59:00:c0:32:4b:2b:05:f7:8d:4e:5c:9a:
46:40:24:7a:a7:97:e4:3a:82:97:6b:71:53:f7:78:
e5:be:59:52:d6:72:9c:a4:8f:a4:9f:f4:7b:29:05:
89:2e:92:2c:e6:43:f3:cb:ab:a1:e5:45:7c:27:59:
4e:7f:1c:a5:0c:44:4a:f9:ec:01:45:9d:fc:ad:61:
d1:f5:49:4f:72:74:e6:99:75:2f:56:48:e4:04:50:
96:39:14:87:07:4e:56:ca:fa:89:d5:1e:28:1f:8e:
e5:f1:83:f3:c9:e7:8d:58:ae:4a:44:46:df:c3:46:
ae:93:0c:f7:53:19:66:3a:c4:bf:c0:de:a2:38:ff:
b9:84:0e:1b:ac:a0:d2:fb:47:36:08:a9:35:1b:d1:
73:39:08:f4:2b:53:46:57:aa:0b:cf:11:33:cf:20:
7e:4c:75:bf:48:e1:e8:4c:67:78:4f:b3:8b:e2:f3:
0d:a5:29:3d:9a:e1:f4:ab:47:4c:61:f2:0b:fd:76:
a8:1e:3e:45:45:61:6a:47:fe:4a:97:e9:26:f9:d7:
94:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:7B:C4:9A:CC:D3:8B:BF:82:39:BA:E3:BB:30:93:79:95:70:3D:36
X509v3 Authority Key Identifier:
keyid:E0:81:42:B4:2E:39:48:00:48:D1:FC:EA:58:7A:36:93:DA:4C:0B:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IFCtC45SABI0fzqWHo2k9pMC4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:eb:61:4b:57:04:1d:7f:15:24:1b:2e:d3:28:be:b5:4d:2f:
f8:52:de:a1:1d:83:ce:9d:cb:0c:50:35:46:d7:38:92:84:1c:
a1:72:76:e6:c7:3d:a1:40:6d:81:61:44:72:23:74:d0:a5:7e:
59:e1:8c:f2:93:66:2c:ad:ed:1e:3e:8f:f1:96:3e:4d:0a:7a:
ad:83:d7:9d:88:9f:b8:08:43:14:81:d3:83:ff:d8:b9:5e:01:
ac:90:17:a1:b3:99:7f:f3:72:c8:27:cc:49:b1:f3:e0:f3:61:
d7:53:b0:42:5f:ac:de:00:51:e2:fd:83:3e:52:ad:61:a2:5a:
da:97:1c:9e:6a:64:07:85:a8:c6:d9:e3:d9:bc:a1:c2:b2:e9:
6b:7b:b4:b1:43:24:8d:6f:71:f8:4e:3f:65:8e:61:a7:8e:c1:
3d:84:e8:a4:63:9f:a7:0c:df:4d:6c:ab:83:aa:61:23:74:83:
78:91:a0:e9:95:58:a8:f3:0c:f1:8b:f4:20:d5:ed:5b:0a:21:
39:fa:4b:c8:fe:84:d3:21:3e:92:85:9b:92:be:7b:2e:50:e5:
90:bf:99:b9:bb:15:c0:7d:05:17:84:52:d8:1c:9a:73:84:2f:
62:6c:4c:27:74:aa:57:5a:50:61:cb:96:c5:92:95:c5:9b:1a:
c6:87:d1:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn6oRUVr2Pv03oLuBDIFxAiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwODE0MmI0MmUzOTQ4MDA0OGQxZmNlYTU4N2EzNjkzZGE0
YzBiOGEwHhcNMjUxMDE5MDQwMTI0WhcNMjUxMDIwMDQwMTI0WjAzMTEwLwYDVQQD
Eyg2ZTdiYzQ5YWNjZDM4YmJmODIzOWJhZTNiYjMwOTM3OTk1NzAzZDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7o3v2xytGwyel5ZonJRN37DJm6gm
3kUnYEOpukTITKPsFbYCIaWWPdgN+XN//xFZAMAySysF941OXJpGQCR6p5fkOoKX
a3FT93jlvllS1nKcpI+kn/R7KQWJLpIs5kPzy6uh5UV8J1lOfxylDERK+ewBRZ38
rWHR9UlPcnTmmXUvVkjkBFCWORSHB05WyvqJ1R4oH47l8YPzyeeNWK5KREbfw0au
kwz3UxlmOsS/wN6iOP+5hA4brKDS+0c2CKk1G9FzOQj0K1NGV6oLzxEzzyB+THW/
SOHoTGd4T7OL4vMNpSk9muH0q0dMYfIL/XaoHj5FRWFqR/5Kl+km+deUhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG57xJrM04u/gjm647swk3mVcD02MB8GA1UdIwQY
MBaAFOCBQrQuOUgASNH86lh6NpPaTAuKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNElGQ3RDNDVTQUJJMGZ6cVdIbzJrOXBNQzRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8yODJhYzYtNzJjNi00YjJjLTlkZjkt
OGYxZjJjOTE0ZjA0LzEvNElGQ3RDNDVTQUJJMGZ6cVdIbzJrOXBNQzRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8yODJhYzYtNzJjNi00YjJjLTlkZjktOGYxZjJjOTE0ZjA0
LzEvNElGQ3RDNDVTQUJJMGZ6cVdIbzJrOXBNQzRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApOthS1cE
HX8VJBsu0yi+tU0v+FLeoR2Dzp3LDFA1Rtc4koQcoXJ25sc9oUBtgWFEciN00KV+
WeGM8pNmLK3tHj6P8ZY+TQp6rYPXnYifuAhDFIHTg//YuV4BrJAXobOZf/NyyCfM
SbHz4PNh11OwQl+s3gBR4v2DPlKtYaJa2pccnmpkB4Woxtnj2byhwrLpa3u0sUMk
jW9x+E4/ZY5hp47BPYTopGOfpwzfTWyrg6phI3SDeJGg6ZVYqPMM8Yv0INXtWwoh
OfpLyP6E0yE+koWbkr57LlDlkL+ZubsVwH0FF4RS2Byac4QvYmxMJ3SqV1pQYcuW
xZKVxZsaxofRZQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:39 2025 by rpki-client