Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/a6c6ee-4260-4f11-b218-dc1afb0f7f19/1/s4-3-dr7t_J8ZSqEbTf7nimODho.mft
File: s4-3-dr7t_J8ZSqEbTf7nimODho.mft (raw, json)
Hash identifier: KNCak5mx7URmTsn4MXo5M+Ahg1W+Yb/SnoztyoATAAk=
Subject key identifier: 8A:E8:1D:FC:2A:FD:A6:32:B5:D9:37:45:5A:59:6E:03:30:94:25:57
Authority key identifier: B3:8F:B7:F9:DA:FB:B7:F2:7C:65:2A:84:6D:37:FB:9E:29:8E:0E:1A
Certificate issuer: /CN=b38fb7f9dafbb7f27c652a846d37fb9e298e0e1a
Certificate serial: 019A71B8AC002756B4E4F29A412C29C7A697
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s4-3-dr7t_J8ZSqEbTf7nimODho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/a6c6ee-4260-4f11-b218-dc1afb0f7f19/1/s4-3-dr7t_J8ZSqEbTf7nimODho.mft
Manifest number: 0196
Signing time: Tue 11 Nov 2025 07:01:59 +0000
Manifest this update: Tue 11 Nov 2025 07:01:59 +0000
Manifest next update: Wed 12 Nov 2025 07:01:59 +0000
Files and hashes: 1: s4-3-dr7t_J8ZSqEbTf7nimODho.crl (hash: C2gRny/SaUhFQoom+FiP0zmWx5Vw3wZRujchIrMXd8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/a6c6ee-4260-4f11-b218-dc1afb0f7f19/1/s4-3-dr7t_J8ZSqEbTf7nimODho.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/a6c6ee-4260-4f11-b218-dc1afb0f7f19/1/s4-3-dr7t_J8ZSqEbTf7nimODho.mft
rsync://rpki.ripe.net/repository/DEFAULT/s4-3-dr7t_J8ZSqEbTf7nimODho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:ac:00:27:56:b4:e4:f2:9a:41:2c:29:c7:a6:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b38fb7f9dafbb7f27c652a846d37fb9e298e0e1a
Validity
Not Before: Nov 11 07:01:59 2025 GMT
Not After : Nov 12 07:01:59 2025 GMT
Subject: CN=8ae81dfc2afda632b5d937455a596e0330942557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7b:aa:ff:ec:ed:c6:82:a0:19:20:dd:22:40:
cc:a5:75:3a:5b:e8:0a:24:a2:1f:f1:20:cf:9a:c7:
0e:8a:e0:12:20:43:2f:5d:f3:50:70:d7:f3:8c:d3:
4f:bc:89:61:03:be:00:cb:fd:34:4a:69:f3:ea:ac:
ed:86:8a:98:1c:da:16:b9:6c:b5:da:e3:79:ac:74:
2e:b1:d5:15:21:51:47:17:9c:38:16:f8:91:59:ae:
e2:31:20:4c:40:a5:ef:d6:6c:87:e8:15:49:47:da:
06:ca:48:df:a1:d3:fd:34:30:e9:2b:eb:fd:73:53:
95:74:ab:5f:16:b8:3f:6b:1a:50:21:6a:45:6c:b6:
7c:11:d5:e7:a1:6d:b7:04:27:b9:60:1c:70:4e:24:
67:88:ee:65:84:6c:ae:d0:15:ea:b2:3a:7d:66:00:
6b:0c:6e:23:25:f7:03:bd:9e:c1:18:93:cf:17:8e:
4d:f9:d5:7f:f9:15:31:d0:65:68:2d:f3:5d:05:ca:
59:5d:9e:24:d7:36:9c:01:b4:ce:ab:58:1d:34:a0:
4a:c9:a8:01:c5:20:35:79:af:45:eb:0d:f3:80:94:
ab:fc:93:f9:2a:d4:4e:40:3c:2f:52:6e:a6:93:be:
42:01:ea:3b:d4:d3:63:be:33:99:28:82:f3:ec:1c:
72:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E8:1D:FC:2A:FD:A6:32:B5:D9:37:45:5A:59:6E:03:30:94:25:57
X509v3 Authority Key Identifier:
keyid:B3:8F:B7:F9:DA:FB:B7:F2:7C:65:2A:84:6D:37:FB:9E:29:8E:0E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s4-3-dr7t_J8ZSqEbTf7nimODho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a6c6ee-4260-4f11-b218-dc1afb0f7f19/1/s4-3-dr7t_J8ZSqEbTf7nimODho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a6c6ee-4260-4f11-b218-dc1afb0f7f19/1/s4-3-dr7t_J8ZSqEbTf7nimODho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:13:00:46:48:f7:36:bb:31:aa:3a:14:39:6c:d5:04:34:82:
9e:f4:07:9b:ce:59:da:83:c3:e5:43:08:28:a5:3d:b1:d6:b1:
7f:a4:64:4c:85:81:9b:bf:da:8c:34:b1:9d:f5:e2:e9:d2:ad:
10:6d:df:f3:16:20:a7:af:b0:69:28:03:c1:27:32:e2:c1:1a:
33:7f:ae:43:f9:9a:60:70:04:cb:d7:d9:55:fa:62:e6:33:78:
9a:8e:82:b4:3a:34:a4:79:10:71:bf:ce:d5:f7:e9:f9:20:17:
a6:1f:65:41:9d:86:4b:b0:34:25:1e:c7:d5:02:d7:ed:69:30:
38:46:63:42:93:20:a6:b6:2b:14:8a:c7:88:8d:e4:2a:f5:ba:
a0:28:b6:21:79:49:ce:66:e4:c1:5e:49:a7:10:9a:00:4a:38:
a8:0e:df:13:32:12:57:70:1d:bd:72:e4:fc:2b:91:f4:96:b3:
45:b6:19:75:7d:5a:de:77:35:01:97:9f:9d:64:b3:fd:93:d2:
ba:6c:13:9d:23:86:b6:28:a8:5c:1d:42:e3:7e:c9:cf:5b:61:
d3:a7:82:28:01:2e:2d:40:05:ed:b9:cc:21:f4:b6:77:69:2f:
b5:4e:04:60:e4:3f:37:53:73:4b:d4:55:5f:4f:03:e8:d1:9c:
aa:4f:36:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuKwAJ1a05PKaQSwpx6aXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzOGZiN2Y5ZGFmYmI3ZjI3YzY1MmE4NDZkMzdmYjllMjk4
ZTBlMWEwHhcNMjUxMTExMDcwMTU5WhcNMjUxMTEyMDcwMTU5WjAzMTEwLwYDVQQD
Eyg4YWU4MWRmYzJhZmRhNjMyYjVkOTM3NDU1YTU5NmUwMzMwOTQyNTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynuq/+ztxoKgGSDdIkDMpXU6W+gK
JKIf8SDPmscOiuASIEMvXfNQcNfzjNNPvIlhA74Ay/00Smnz6qzthoqYHNoWuWy1
2uN5rHQusdUVIVFHF5w4FviRWa7iMSBMQKXv1myH6BVJR9oGykjfodP9NDDpK+v9
c1OVdKtfFrg/axpQIWpFbLZ8EdXnoW23BCe5YBxwTiRniO5lhGyu0BXqsjp9ZgBr
DG4jJfcDvZ7BGJPPF45N+dV/+RUx0GVoLfNdBcpZXZ4k1zacAbTOq1gdNKBKyagB
xSA1ea9F6w3zgJSr/JP5KtROQDwvUm6mk75CAeo71NNjvjOZKILz7BxyBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIroHfwq/aYytdk3RVpZbgMwlCVXMB8GA1UdIwQY
MBaAFLOPt/na+7fyfGUqhG03+54pjg4aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczQtMy1kcjd0X0o4WlNxRWJUZjduaW1PRGhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9hNmM2ZWUtNDI2MC00ZjExLWIyMTgt
ZGMxYWZiMGY3ZjE5LzEvczQtMy1kcjd0X0o4WlNxRWJUZjduaW1PRGhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9hNmM2ZWUtNDI2MC00ZjExLWIyMTgtZGMxYWZiMGY3ZjE5
LzEvczQtMy1kcjd0X0o4WlNxRWJUZjduaW1PRGhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmBMARkj3
NrsxqjoUOWzVBDSCnvQHm85Z2oPD5UMIKKU9sdaxf6RkTIWBm7/ajDSxnfXi6dKt
EG3f8xYgp6+waSgDwScy4sEaM3+uQ/maYHAEy9fZVfpi5jN4mo6CtDo0pHkQcb/O
1ffp+SAXph9lQZ2GS7A0JR7H1QLX7WkwOEZjQpMgprYrFIrHiI3kKvW6oCi2IXlJ
zmbkwV5JpxCaAEo4qA7fEzISV3AdvXLk/CuR9JazRbYZdX1a3nc1AZefnWSz/ZPS
umwTnSOGtiioXB1C437Jz1th06eCKAEuLUAF7bnMIfS2d2kvtU4EYOQ/N1NzS9RV
X08D6NGcqk821A==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:16:46 2025 by rpki-client