Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
File: 4FotrPXdTpv6LS2bLTw_lnh0WEE.mft (raw, json)
Hash identifier: fZa5n2O5zLuDmm3G7ddpPzNOeI5ykAGqwRdKzV10M4U=
Subject key identifier: B0:02:2E:2A:24:4A:20:9B:A4:ED:81:23:82:E8:7F:51:49:E8:B5:16
Authority key identifier: E0:5A:2D:AC:F5:DD:4E:9B:FA:2D:2D:9B:2D:3C:3F:96:78:74:58:41
Certificate issuer: /CN=e05a2dacf5dd4e9bfa2d2d9b2d3c3f9678745841
Certificate serial: 019A221BB31015E6B28B9065001944844DE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
Manifest number: 16F8
Signing time: Sun 26 Oct 2025 20:00:31 +0000
Manifest this update: Sun 26 Oct 2025 20:00:31 +0000
Manifest next update: Mon 27 Oct 2025 20:00:31 +0000
Files and hashes: 1: 4FotrPXdTpv6LS2bLTw_lnh0WEE.crl (hash: j6+YV4ixmzRpdjbEbzcVQlhUxb+3ttFQarNINuDkVI8=)
2: BS790JJGQ7DZlNZUL_em5Su64B4.roa (hash: VVqWBTRMk3+7j4zbJrp8La5lSHjcZGiKvxZueV8Sl7A=)
3: UJGm2ryO8HuvxtqrnMckm6HvQuw.roa (hash: LmIHTI0l7Czq42uu144MFysAfpmWgQRM3SWHkhVtvVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:1b:b3:10:15:e6:b2:8b:90:65:00:19:44:84:4d:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e05a2dacf5dd4e9bfa2d2d9b2d3c3f9678745841
Validity
Not Before: Oct 26 20:00:31 2025 GMT
Not After : Oct 27 20:00:31 2025 GMT
Subject: CN=b0022e2a244a209ba4ed812382e87f5149e8b516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5b:de:23:11:b7:33:08:d8:96:6a:cc:d4:d0:
38:c9:bf:c2:6d:8f:dc:fe:3a:b5:e8:23:43:e0:6e:
48:7d:ca:1e:94:4d:8c:24:4c:36:ae:74:07:ed:f0:
13:29:65:79:38:1d:26:c6:69:6f:47:c0:63:a3:85:
83:c3:c5:4d:d7:9e:a3:6e:0b:ce:0d:94:32:b3:0b:
ad:72:af:ce:ec:8e:0a:37:10:e0:bb:19:4c:8c:ed:
ae:01:3e:bd:bf:74:9b:8a:da:37:67:74:d8:c9:7b:
e5:f0:99:e3:a9:2a:43:92:27:40:a4:b5:9e:e4:27:
54:97:c5:2b:09:ee:31:a0:67:25:d5:78:7d:fc:0c:
bc:a1:bb:f3:39:87:f4:6e:c5:bf:3f:89:f1:a9:8b:
d9:a7:9d:47:4a:92:aa:49:74:26:8b:14:a7:3d:0b:
4f:a8:03:07:29:ac:27:b7:b1:d9:68:1f:17:59:17:
f2:26:2d:45:46:2b:15:58:85:66:c4:e9:05:49:00:
01:3b:06:16:e4:25:6c:f5:2d:82:52:de:94:fd:a0:
4a:1f:79:50:23:81:00:f7:6d:7b:b0:4f:f3:14:aa:
7d:49:b6:5f:7c:72:a4:74:31:6b:b2:3a:cf:51:55:
a2:24:fc:2b:63:05:e7:87:0f:32:b6:a0:0c:0f:61:
15:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:02:2E:2A:24:4A:20:9B:A4:ED:81:23:82:E8:7F:51:49:E8:B5:16
X509v3 Authority Key Identifier:
keyid:E0:5A:2D:AC:F5:DD:4E:9B:FA:2D:2D:9B:2D:3C:3F:96:78:74:58:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:98:28:8f:b3:3b:06:84:9c:f7:1c:3f:66:de:7a:75:50:59:
44:f1:7e:4d:9e:b7:0b:0a:d4:7f:2d:45:83:c5:b5:2e:37:d8:
14:1d:4e:46:df:d5:39:99:97:c8:fe:0c:e7:6f:5c:0e:0d:6f:
65:9a:52:29:ab:08:03:5e:36:fe:d3:13:f2:56:9e:4f:e2:e0:
33:94:4a:cd:34:60:c3:18:ee:f9:31:a9:86:b6:52:8f:e7:e6:
fc:d3:c7:d9:11:b2:73:45:9c:88:84:50:14:51:02:53:be:cb:
2a:75:4b:28:d9:63:89:62:71:13:b1:ca:36:03:eb:4f:2d:c1:
40:01:6a:ec:d3:52:02:a7:44:2a:24:47:94:ee:03:3b:92:a4:
64:64:f6:43:b3:17:b0:93:af:8c:b7:55:ef:8f:e9:50:32:ad:
b4:74:ed:b7:d0:db:6e:75:0c:fb:0c:2b:d4:73:1f:d9:ea:85:
19:78:36:2b:b0:a5:c1:ba:8a:3f:c4:95:86:3a:b4:3d:a9:c8:
fa:29:3d:92:20:24:9f:65:90:30:8e:b2:7b:56:97:53:bc:51:
84:13:31:54:5e:47:56:5e:76:97:36:00:d4:41:b9:2a:37:00:
3b:47:65:13:bf:dd:61:2a:8b:b4:0d:98:27:ff:65:d1:44:85:
08:e0:85:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoiG7MQFeayi5BlABlEhE3lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNWEyZGFjZjVkZDRlOWJmYTJkMmQ5YjJkM2MzZjk2Nzg3
NDU4NDEwHhcNMjUxMDI2MjAwMDMxWhcNMjUxMDI3MjAwMDMxWjAzMTEwLwYDVQQD
EyhiMDAyMmUyYTI0NGEyMDliYTRlZDgxMjM4MmU4N2Y1MTQ5ZThiNTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1veIxG3MwjYlmrM1NA4yb/CbY/c
/jq16CND4G5IfcoelE2MJEw2rnQH7fATKWV5OB0mxmlvR8Bjo4WDw8VN156jbgvO
DZQyswutcq/O7I4KNxDguxlMjO2uAT69v3Sbito3Z3TYyXvl8JnjqSpDkidApLWe
5CdUl8UrCe4xoGcl1Xh9/Ay8obvzOYf0bsW/P4nxqYvZp51HSpKqSXQmixSnPQtP
qAMHKawnt7HZaB8XWRfyJi1FRisVWIVmxOkFSQABOwYW5CVs9S2CUt6U/aBKH3lQ
I4EA9217sE/zFKp9SbZffHKkdDFrsjrPUVWiJPwrYwXnhw8ytqAMD2EV7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLACLiokSiCbpO2BI4Lof1FJ6LUWMB8GA1UdIwQY
MBaAFOBaLaz13U6b+i0tmy08P5Z4dFhBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEZvdHJQWGRUcHY2TFMyYkxUd19sbmgwV0VFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8wMTAwMGItYWE5Ni00YmM2LThjYzEt
YWYwN2E5ZTg3ZmMwLzEvNEZvdHJQWGRUcHY2TFMyYkxUd19sbmgwV0VFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS8wMTAwMGItYWE5Ni00YmM2LThjYzEtYWYwN2E5ZTg3ZmMw
LzEvNEZvdHJQWGRUcHY2TFMyYkxUd19sbmgwV0VFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfZgoj7M7
BoSc9xw/Zt56dVBZRPF+TZ63CwrUfy1Fg8W1LjfYFB1ORt/VOZmXyP4M529cDg1v
ZZpSKasIA142/tMT8laeT+LgM5RKzTRgwxju+TGphrZSj+fm/NPH2RGyc0WciIRQ
FFECU77LKnVLKNljiWJxE7HKNgPrTy3BQAFq7NNSAqdEKiRHlO4DO5KkZGT2Q7MX
sJOvjLdV74/pUDKttHTtt9DbbnUM+wwr1HMf2eqFGXg2K7ClwbqKP8SVhjq0PanI
+ik9kiAkn2WQMI6ye1aXU7xRhBMxVF5HVl52lzYA1EG5KjcAO0dlE7/dYSqLtA2Y
J/9l0USFCOCFTQ==
-----END CERTIFICATE-----
Generated at Mon Oct 27 04:16:04 2025 by rpki-client