
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.mft
File: rG4-ExEUORR_ZdM31fCxvC7XlDQ.mft (raw, json)
Hash identifier: F4xGGTRJGzMFic0xNAyN12/vS8cWXyt6c8+5OxHZckA=
Subject key identifier: 05:FC:20:BA:79:C1:D2:B9:A8:35:8E:72:04:C4:81:11:E8:66:30:8C
Authority key identifier: AC:6E:3E:13:11:14:39:14:7F:65:D3:37:D5:F0:B1:BC:2E:D7:94:34
Certificate issuer: /CN=ac6e3e13111439147f65d337d5f0b1bc2ed79434
Certificate serial: 0199FAD7DEEDA1100DF64AC63458C8C13AB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rG4-ExEUORR_ZdM31fCxvC7XlDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 05:01:15 +0000
Manifest this update: Sun 19 Oct 2025 05:01:15 +0000
Manifest next update: Mon 20 Oct 2025 05:01:15 +0000
Files and hashes: 1: AwXuQoOBDpLkL6JkvNNI78Almh8.roa (hash: rgsGgbJMkxlD2Xt53P3qCIDlwFDG3I1YNJZMV8rGCso=)
2: rG4-ExEUORR_ZdM31fCxvC7XlDQ.crl (hash: Dra8uq/FDsh0VsvAiHa4ZwKhs6WAraVBydvY28aY3fc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rG4-ExEUORR_ZdM31fCxvC7XlDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:de:ed:a1:10:0d:f6:4a:c6:34:58:c8:c1:3a:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac6e3e13111439147f65d337d5f0b1bc2ed79434
Validity
Not Before: Oct 19 05:01:15 2025 GMT
Not After : Oct 20 05:01:15 2025 GMT
Subject: CN=05fc20ba79c1d2b9a8358e7204c48111e866308c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:02:a5:18:2d:48:63:28:16:3b:0f:58:0d:99:
f4:dc:8c:cb:78:f8:2d:78:9f:38:6d:69:d8:45:53:
67:65:7a:61:a2:c0:db:df:2c:13:68:27:f3:a8:7a:
7f:0e:6a:ef:00:a5:8b:3b:2d:da:f5:7a:a3:87:89:
e9:15:36:1b:30:f6:8c:95:10:b9:b9:63:0e:85:98:
5a:1e:07:37:ab:09:dc:c7:dd:1a:19:a0:75:15:57:
9a:20:11:44:e0:fe:bc:b6:cb:7b:0d:e5:61:2f:a9:
73:45:c7:2f:4c:9c:22:1b:af:7e:56:93:32:70:0d:
6c:05:aa:99:42:3d:58:27:f9:69:58:23:52:b9:2c:
32:52:b6:85:b2:53:80:3e:97:fc:b7:96:03:dc:d2:
b9:7f:68:f1:20:0c:e4:95:2a:9a:a8:dd:cd:2c:12:
93:12:8b:c3:5d:2b:88:c0:e9:e8:09:f4:79:c6:30:
f0:f2:43:09:ac:3b:81:f9:8a:34:2e:1d:1e:e7:e9:
97:b5:26:1a:38:9d:81:2d:df:df:f4:c8:46:6a:51:
3e:cd:8c:df:64:f4:2f:41:68:f4:b9:09:b1:af:75:
ba:ad:1b:41:a4:34:65:93:e3:4d:e9:52:8a:b7:3b:
9a:59:e8:8a:b4:8e:5d:ec:f8:d1:44:c4:c0:90:93:
b5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:FC:20:BA:79:C1:D2:B9:A8:35:8E:72:04:C4:81:11:E8:66:30:8C
X509v3 Authority Key Identifier:
keyid:AC:6E:3E:13:11:14:39:14:7F:65:D3:37:D5:F0:B1:BC:2E:D7:94:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rG4-ExEUORR_ZdM31fCxvC7XlDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:b8:9a:2c:8d:ed:07:79:18:1f:d4:17:3e:9e:c3:3d:73:28:
b0:83:e4:66:b4:02:b6:03:e2:67:07:33:b3:09:b1:2f:cd:d6:
4c:59:55:82:ee:be:ba:27:8b:cd:85:4d:1c:e7:6e:24:2f:75:
36:46:ba:a0:71:ac:56:6b:5e:ac:eb:2c:6f:a0:0b:ba:0b:bc:
ab:ae:53:47:1e:d4:2d:f7:f6:d4:f5:97:9b:25:3d:95:0d:30:
bd:98:41:e5:53:fe:63:0f:9f:fe:9a:15:fd:1a:36:f1:0c:b2:
95:08:a2:23:2a:42:c8:59:82:41:98:1b:a9:cd:c1:80:49:7f:
4f:40:10:25:bc:39:f6:e8:6f:cd:62:25:9e:b3:9c:ea:35:7e:
d3:55:5c:5c:7c:92:82:d1:12:59:ee:0f:37:18:94:37:e6:7d:
17:7a:3a:64:57:9c:d1:7b:95:33:c2:b6:02:2c:0b:85:ac:f8:
c5:59:62:fe:8b:89:a0:02:84:9a:db:39:de:84:f6:73:d3:34:
b6:20:d2:70:47:a0:95:26:f5:9b:8d:f9:1c:cf:bf:33:c8:2a:
a6:36:ed:a3:ef:75:03:61:03:d3:6f:76:4e:e7:12:c6:a7:b7:
4b:ef:cd:e3:d1:8e:73:a8:f9:23:89:16:85:41:02:6f:a1:42:
7e:59:eb:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn6197toRAN9krGNFjIwTq3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjNmUzZTEzMTExNDM5MTQ3ZjY1ZDMzN2Q1ZjBiMWJjMmVk
Nzk0MzQwHhcNMjUxMDE5MDUwMTE1WhcNMjUxMDIwMDUwMTE1WjAzMTEwLwYDVQQD
EygwNWZjMjBiYTc5YzFkMmI5YTgzNThlNzIwNGM0ODExMWU4NjYzMDhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQKlGC1IYygWOw9YDZn03IzLePgt
eJ84bWnYRVNnZXphosDb3ywTaCfzqHp/DmrvAKWLOy3a9Xqjh4npFTYbMPaMlRC5
uWMOhZhaHgc3qwncx90aGaB1FVeaIBFE4P68tst7DeVhL6lzRccvTJwiG69+VpMy
cA1sBaqZQj1YJ/lpWCNSuSwyUraFslOAPpf8t5YD3NK5f2jxIAzklSqaqN3NLBKT
EovDXSuIwOnoCfR5xjDw8kMJrDuB+Yo0Lh0e5+mXtSYaOJ2BLd/f9MhGalE+zYzf
ZPQvQWj0uQmxr3W6rRtBpDRlk+NN6VKKtzuaWeiKtI5d7PjRRMTAkJO1qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAX8ILp5wdK5qDWOcgTEgRHoZjCMMB8GA1UdIwQY
MBaAFKxuPhMRFDkUf2XTN9Xwsbwu15Q0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckc0LUV4RVVPUlJfWmRNMzFmQ3h2QzdYbERRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xMmJhMmEtMGNjYS00MzdhLTk4NWQt
ZmVmZTg1N2ZlYTgwLzEvckc0LUV4RVVPUlJfWmRNMzFmQ3h2QzdYbERRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xMmJhMmEtMGNjYS00MzdhLTk4NWQtZmVmZTg1N2ZlYTgw
LzEvckc0LUV4RVVPUlJfWmRNMzFmQ3h2QzdYbERRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmLiaLI3t
B3kYH9QXPp7DPXMosIPkZrQCtgPiZwczswmxL83WTFlVgu6+uieLzYVNHOduJC91
Nka6oHGsVmterOssb6ALugu8q65TRx7ULff21PWXmyU9lQ0wvZhB5VP+Yw+f/poV
/Ro28QyylQiiIypCyFmCQZgbqc3BgEl/T0AQJbw59uhvzWIlnrOc6jV+01VcXHyS
gtESWe4PNxiUN+Z9F3o6ZFec0XuVM8K2AiwLhaz4xVli/ouJoAKEmts53oT2c9M0
tiDScEeglSb1m435HM+/M8gqpjbto+91A2ED0292TucSxqe3S+/N49GOc6j5I4kW
hUECb6FCflnruA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:03 2025 by rpki-client