Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.mft
File: 4EHIW0dOi2wAiR2VQST_DIEgDYw.mft (raw, json)
Hash identifier: gMEIimp7kCOUlq2OTHA8+ldC9H+5umbu4LbRRj5OiVU=
Subject key identifier: 3F:50:22:AD:30:1B:3A:1E:23:CB:26:E3:54:B0:47:8A:D9:93:95:BC
Authority key identifier: E0:41:C8:5B:47:4E:8B:6C:00:89:1D:95:41:24:FF:0C:81:20:0D:8C
Certificate issuer: /CN=e041c85b474e8b6c00891d954124ff0c81200d8c
Certificate serial: 0199D0FFE5A70E3464783AFF0805C4DFCDBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4EHIW0dOi2wAiR2VQST_DIEgDYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.mft
Manifest number: 0A25
Signing time: Sat 11 Oct 2025 02:00:55 +0000
Manifest this update: Sat 11 Oct 2025 02:00:55 +0000
Manifest next update: Sun 12 Oct 2025 02:00:55 +0000
Files and hashes: 1: 4EHIW0dOi2wAiR2VQST_DIEgDYw.crl (hash: mxggogipJiFxDThwttsvEpRcTfAS6hYPvIxg5jtW/K4=)
2: N3RhFZbfRfFlakkE1oKkv4idahs.roa (hash: S19WQvJ0cwuBe3l5agvGw5hBi9jlwv6QitA6NIAiWl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4EHIW0dOi2wAiR2VQST_DIEgDYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Oct 2025 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:d0:ff:e5:a7:0e:34:64:78:3a:ff:08:05:c4:df:cd:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e041c85b474e8b6c00891d954124ff0c81200d8c
Validity
Not Before: Oct 11 02:00:55 2025 GMT
Not After : Oct 12 02:00:55 2025 GMT
Subject: CN=3f5022ad301b3a1e23cb26e354b0478ad99395bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cd:b5:df:af:d9:5e:9f:a0:10:0f:fb:cb:9b:
4c:8d:23:fe:99:6b:bb:85:4f:0a:06:a9:94:73:4d:
4e:67:da:43:bf:9b:bf:3d:4c:0a:4a:d5:c6:86:e2:
68:26:98:59:4c:40:9f:7e:4d:3f:ef:41:97:fb:cf:
9e:50:c6:91:e0:77:10:4e:49:95:98:2e:5f:e9:29:
49:77:47:04:ff:9c:40:ab:5e:c0:20:83:3e:3d:02:
ba:9c:14:58:65:43:cc:be:bc:aa:cb:63:93:40:c0:
5a:68:b3:a6:67:05:69:e9:78:9e:45:d8:98:75:7b:
70:87:d9:7d:f1:3b:50:93:df:ea:e2:42:e1:e3:fd:
c1:b2:88:5a:cc:3f:26:bf:8f:98:a8:d6:10:3d:14:
aa:1a:2b:5e:4a:a2:5b:b7:70:4c:23:34:6a:a3:5b:
ac:ca:2b:b9:9b:b5:d8:6c:57:dc:28:6d:86:f6:65:
eb:fe:4b:e2:ad:7c:fc:69:3b:6e:35:07:74:e5:16:
50:7d:69:f0:de:1d:49:ad:5c:70:6b:65:9c:24:b2:
41:53:dc:a2:a7:f3:28:df:26:93:37:a4:28:94:0b:
85:db:af:7c:0e:98:b9:5d:6d:4c:ad:b0:37:49:43:
40:bb:29:f7:bc:1c:46:9d:14:b3:a5:88:1b:2d:ac:
ad:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:50:22:AD:30:1B:3A:1E:23:CB:26:E3:54:B0:47:8A:D9:93:95:BC
X509v3 Authority Key Identifier:
keyid:E0:41:C8:5B:47:4E:8B:6C:00:89:1D:95:41:24:FF:0C:81:20:0D:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4EHIW0dOi2wAiR2VQST_DIEgDYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:75:25:91:8d:a5:aa:a4:4a:c1:f6:50:90:43:e0:eb:93:55:
2e:ed:d5:52:b0:2e:fd:5a:fd:df:fd:e5:28:5a:04:a4:d0:7a:
4b:f4:cd:46:03:b6:d8:a6:2a:1b:21:cb:ce:af:fc:1f:a7:f0:
4d:22:cc:4f:6d:68:4f:b9:b8:c9:28:43:42:cb:9c:4e:ec:89:
c8:08:03:7f:0e:66:42:49:c2:1f:cd:d4:cd:0f:75:aa:f1:78:
af:87:40:9b:47:bf:56:63:21:ad:26:af:69:78:3e:93:09:24:
0d:b1:8d:6e:5d:98:e8:14:3f:85:09:aa:7a:57:b4:97:62:7d:
99:91:83:4d:2a:48:e2:25:a3:5b:2f:91:58:69:c9:f9:2d:d9:
94:09:a8:9f:14:4f:f3:41:38:ba:23:f8:00:0d:7b:a2:b1:56:
c0:88:19:d4:7a:cc:3b:47:5d:fe:8f:ad:9b:99:4c:31:e1:87:
9a:22:3a:00:e4:25:8c:1f:3e:ab:9a:9f:e2:4b:ac:71:c7:2d:
91:7c:62:11:4d:aa:62:cc:25:bf:57:6a:fd:34:95:65:5b:00:
84:5b:ad:44:6c:bb:0e:66:53:ed:84:35:1c:7d:a6:e3:f4:b2:
93:3e:be:39:3e:7c:00:5d:a4:95:bb:1d:ec:e7:bf:65:09:52:
97:09:8a:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnQ/+WnDjRkeDr/CAXE3828MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNDFjODViNDc0ZThiNmMwMDg5MWQ5NTQxMjRmZjBjODEy
MDBkOGMwHhcNMjUxMDExMDIwMDU1WhcNMjUxMDEyMDIwMDU1WjAzMTEwLwYDVQQD
EygzZjUwMjJhZDMwMWIzYTFlMjNjYjI2ZTM1NGIwNDc4YWQ5OTM5NWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm82136/ZXp+gEA/7y5tMjSP+mWu7
hU8KBqmUc01OZ9pDv5u/PUwKStXGhuJoJphZTECffk0/70GX+8+eUMaR4HcQTkmV
mC5f6SlJd0cE/5xAq17AIIM+PQK6nBRYZUPMvryqy2OTQMBaaLOmZwVp6XieRdiY
dXtwh9l98TtQk9/q4kLh4/3BsohazD8mv4+YqNYQPRSqGiteSqJbt3BMIzRqo1us
yiu5m7XYbFfcKG2G9mXr/kvirXz8aTtuNQd05RZQfWnw3h1JrVxwa2WcJLJBU9yi
p/Mo3yaTN6QolAuF2698Dpi5XW1MrbA3SUNAuyn3vBxGnRSzpYgbLaytmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD9QIq0wGzoeI8sm41SwR4rZk5W8MB8GA1UdIwQY
MBaAFOBByFtHTotsAIkdlUEk/wyBIA2MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEVISVcwZE9pMndBaVIyVlFTVF9ESUVnRFl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC81NDllNGQtOGRlZS00NTliLTkyODMt
NDZiYjNmYTI4YjAwLzEvNEVISVcwZE9pMndBaVIyVlFTVF9ESUVnRFl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC81NDllNGQtOGRlZS00NTliLTkyODMtNDZiYjNmYTI4YjAw
LzEvNEVISVcwZE9pMndBaVIyVlFTVF9ESUVnRFl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALnUlkY2l
qqRKwfZQkEPg65NVLu3VUrAu/Vr93/3lKFoEpNB6S/TNRgO22KYqGyHLzq/8H6fw
TSLMT21oT7m4yShDQsucTuyJyAgDfw5mQknCH83UzQ91qvF4r4dAm0e/VmMhrSav
aXg+kwkkDbGNbl2Y6BQ/hQmqele0l2J9mZGDTSpI4iWjWy+RWGnJ+S3ZlAmonxRP
80E4uiP4AA17orFWwIgZ1HrMO0dd/o+tm5lMMeGHmiI6AOQljB8+q5qf4kusccct
kXxiEU2qYswlv1dq/TSVZVsAhFutRGy7DmZT7YQ1HH2m4/Sykz6+OT58AF2klbsd
7Oe/ZQlSlwmKPw==
-----END CERTIFICATE-----
Generated at Sat Oct 11 11:31:25 2025 by rpki-client