Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft
File: 4BEGBvUk26pTjmfhI8r7xt8zhsA.mft (raw, json)
Hash identifier: /irwb2T0t0iaXSG5+/8Ivgz6x/dqJPe8oA9NtGzDpOw=
Subject key identifier: 84:B8:C5:D0:A6:1E:02:82:9D:1B:98:71:7F:8C:69:C5:77:A9:19:88
Authority key identifier: E0:11:06:06:F5:24:DB:AA:53:8E:67:E1:23:CA:FB:C6:DF:33:86:C0
Certificate issuer: /CN=e0110606f524dbaa538e67e123cafbc6df3386c0
Certificate serial: 0199FB0EFF476712FD2E1B4181C8B356B86C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BEGBvUk26pTjmfhI8r7xt8zhsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft
Manifest number: 0448
Signing time: Sun 19 Oct 2025 06:01:28 +0000
Manifest this update: Sun 19 Oct 2025 06:01:28 +0000
Manifest next update: Mon 20 Oct 2025 06:01:28 +0000
Files and hashes: 1: 4BEGBvUk26pTjmfhI8r7xt8zhsA.crl (hash: Yo+192Hhz3LCuiv07KyUYaKPjxMcydKcCjJ0xYWaSBA=)
2: LKg2o2zlysSfcmScabBK3xapbdE.roa (hash: 1l6VyqJgKUuQ/XvxIU6XnLgEokzCKE4ghCBRoC85WGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4BEGBvUk26pTjmfhI8r7xt8zhsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:ff:47:67:12:fd:2e:1b:41:81:c8:b3:56:b8:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0110606f524dbaa538e67e123cafbc6df3386c0
Validity
Not Before: Oct 19 06:01:28 2025 GMT
Not After : Oct 20 06:01:28 2025 GMT
Subject: CN=84b8c5d0a61e02829d1b98717f8c69c577a91988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ec:9d:9d:80:13:09:4d:3e:d8:fd:2a:4c:bb:
29:48:7a:d7:e0:a6:ee:52:92:df:fa:15:47:bb:99:
f4:d4:f0:d5:e7:03:37:1a:4c:a6:7b:6e:9a:d3:18:
14:06:91:af:fd:a6:72:6a:92:16:4b:55:22:50:a9:
44:e0:b3:1c:97:ee:b1:c4:69:49:bd:98:5b:bd:ca:
b2:95:08:5d:07:52:78:4f:92:9f:78:6f:4f:eb:97:
eb:94:da:4b:49:b0:9a:5e:38:2e:06:e6:c1:c3:6e:
fa:b0:35:ea:d2:3d:91:de:d3:af:43:cc:30:73:15:
c6:e8:1c:70:30:fd:61:80:87:55:86:4f:48:f3:a2:
a9:62:ef:13:bf:a3:28:24:6f:07:b4:66:88:93:d9:
61:40:58:58:11:87:3f:f4:71:55:e7:a2:20:d4:cf:
29:56:e0:7c:7a:da:20:75:a5:23:6b:36:6c:5a:69:
8c:15:4b:d3:7c:27:c9:21:69:ec:41:95:04:64:73:
5b:9a:9e:17:c0:77:7b:75:c9:83:91:31:31:2a:63:
71:e4:b9:b2:24:43:76:94:29:05:93:7b:f3:62:12:
7e:8a:57:3a:60:26:34:0a:56:69:34:4a:06:41:13:
b5:dc:a5:ce:e2:50:81:97:d2:23:7a:c2:64:b4:c8:
a5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B8:C5:D0:A6:1E:02:82:9D:1B:98:71:7F:8C:69:C5:77:A9:19:88
X509v3 Authority Key Identifier:
keyid:E0:11:06:06:F5:24:DB:AA:53:8E:67:E1:23:CA:FB:C6:DF:33:86:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BEGBvUk26pTjmfhI8r7xt8zhsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:79:fa:da:f4:79:1b:18:05:8e:24:4b:8a:b5:4f:c0:f4:7c:
57:77:21:65:e1:ed:58:95:c3:b3:36:30:a6:cd:18:48:5d:84:
92:c7:d5:33:5a:06:1f:7b:47:86:f8:1b:50:73:db:eb:9d:13:
b4:4a:e8:58:ce:42:a6:ff:34:8c:83:22:42:9d:93:30:b0:19:
85:b5:17:23:fc:a4:2e:ee:5c:de:bb:88:a6:7d:0a:d0:11:bf:
aa:5f:60:8d:d0:49:e4:98:71:25:63:93:11:c9:38:03:96:d2:
f3:ef:89:be:a4:84:77:b1:d4:41:4a:49:a4:a3:fd:b2:48:0b:
d7:eb:1b:79:85:6b:ea:c2:45:18:e0:c3:83:fe:06:51:2e:3d:
5a:2c:84:c4:97:57:2b:a4:c2:04:48:fb:ba:cc:77:ff:d0:f4:
48:fe:25:0f:68:0f:98:1b:c9:f0:d6:d9:6c:21:11:75:40:be:
52:24:f6:46:34:2b:4a:6f:61:27:10:22:af:fe:42:be:05:02:
f8:15:2a:6f:82:df:8b:29:db:9a:39:a6:72:08:3e:11:4d:51:
92:d0:67:fa:af:ef:48:4e:ab:93:81:e2:19:1a:29:f3:3c:06:
12:5e:2d:a2:55:b7:48:42:e0:dc:e2:80:da:fd:5a:b1:f3:01:
2e:13:93:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7Dv9HZxL9LhtBgcizVrhsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwMTEwNjA2ZjUyNGRiYWE1MzhlNjdlMTIzY2FmYmM2ZGYz
Mzg2YzAwHhcNMjUxMDE5MDYwMTI4WhcNMjUxMDIwMDYwMTI4WjAzMTEwLwYDVQQD
Eyg4NGI4YzVkMGE2MWUwMjgyOWQxYjk4NzE3ZjhjNjljNTc3YTkxOTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneydnYATCU0+2P0qTLspSHrX4Kbu
UpLf+hVHu5n01PDV5wM3Gkyme26a0xgUBpGv/aZyapIWS1UiUKlE4LMcl+6xxGlJ
vZhbvcqylQhdB1J4T5KfeG9P65frlNpLSbCaXjguBubBw276sDXq0j2R3tOvQ8ww
cxXG6BxwMP1hgIdVhk9I86KpYu8Tv6MoJG8HtGaIk9lhQFhYEYc/9HFV56Ig1M8p
VuB8etogdaUjazZsWmmMFUvTfCfJIWnsQZUEZHNbmp4XwHd7dcmDkTExKmNx5Lmy
JEN2lCkFk3vzYhJ+ilc6YCY0ClZpNEoGQRO13KXO4lCBl9IjesJktMilSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIS4xdCmHgKCnRuYcX+MacV3qRmIMB8GA1UdIwQY
MBaAFOARBgb1JNuqU45n4SPK+8bfM4bAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEJFR0J2VWsyNnBUam1maEk4cjd4dDh6aHNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS83M2Y3NDktNDU2MC00YWJlLThkMGIt
ZTJjMWFiYWZhYTZjLzEvNEJFR0J2VWsyNnBUam1maEk4cjd4dDh6aHNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS83M2Y3NDktNDU2MC00YWJlLThkMGItZTJjMWFiYWZhYTZj
LzEvNEJFR0J2VWsyNnBUam1maEk4cjd4dDh6aHNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXXn62vR5
GxgFjiRLirVPwPR8V3chZeHtWJXDszYwps0YSF2EksfVM1oGH3tHhvgbUHPb650T
tEroWM5Cpv80jIMiQp2TMLAZhbUXI/ykLu5c3ruIpn0K0BG/ql9gjdBJ5JhxJWOT
Eck4A5bS8++JvqSEd7HUQUpJpKP9skgL1+sbeYVr6sJFGODDg/4GUS49WiyExJdX
K6TCBEj7usx3/9D0SP4lD2gPmBvJ8NbZbCERdUC+UiT2RjQrSm9hJxAir/5CvgUC
+BUqb4Lfiynbmjmmcgg+EU1RktBn+q/vSE6rk4HiGRop8zwGEl4tolW3SELg3OKA
2v1asfMBLhOTRA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:40:23 2025 by rpki-client