
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
File: 4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft (raw, json)
Hash identifier: kaan+kd1cy3aaQ2OBR5NXASNC8XDgl+sG04Chqd75oo=
Subject key identifier: 04:50:B4:AD:BB:31:59:34:85:EE:4D:31:AB:EC:AE:76:39:23:8D:88
Authority key identifier: E2:14:EB:35:A3:5F:D4:88:86:07:03:B7:99:0B:81:70:AF:17:91:2F
Certificate issuer: /CN=e214eb35a35fd488860703b7990b8170af17912f
Certificate serial: 019A221B966A81D00F984D37E0F6223FEF33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
Manifest number: 0934
Signing time: Sun 26 Oct 2025 20:00:24 +0000
Manifest this update: Sun 26 Oct 2025 20:00:24 +0000
Manifest next update: Mon 27 Oct 2025 20:00:24 +0000
Files and hashes: 1: 4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl (hash: qmPHLF9P13jp08NT59bGY1kkuCs9J5hB2+pTYidE6ro=)
2: wxwsQanfQy5790A813fRANF-qCc.roa (hash: bJCA9RXeZ9EZ2+fSpx3hkdts4SbbKPXcBRLWj1SMUSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:1b:96:6a:81:d0:0f:98:4d:37:e0:f6:22:3f:ef:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e214eb35a35fd488860703b7990b8170af17912f
Validity
Not Before: Oct 26 20:00:24 2025 GMT
Not After : Oct 27 20:00:24 2025 GMT
Subject: CN=0450b4adbb31593485ee4d31abecae7639238d88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2b:1f:aa:bc:c4:85:98:6a:c6:78:5f:2a:62:
cb:c2:2c:ab:ad:14:a3:2e:d7:fe:7f:4f:51:6d:09:
85:31:37:a6:3d:86:8f:db:3a:16:05:4a:9c:36:98:
ab:8e:8b:07:40:f1:16:98:d9:fb:0b:d8:64:3f:c6:
1c:e0:39:dd:b9:1c:a1:8b:f4:04:b5:97:b3:e9:50:
e3:88:58:1a:6f:f9:9d:95:dd:83:bb:c7:85:cb:ea:
b1:f4:65:7f:87:d0:d1:7e:21:f6:92:2e:3d:f7:65:
bf:06:28:bb:1b:a7:a0:14:b7:66:15:61:ad:a4:d9:
ca:3c:fe:3e:3b:29:c9:cc:87:97:be:d9:09:6e:ba:
47:16:c3:fe:5a:84:84:29:3c:86:2d:3f:5f:e3:8b:
2b:90:bc:0a:26:9c:7c:94:60:67:94:7f:aa:cf:43:
08:ba:4e:1b:49:6f:89:66:ef:10:e8:63:d2:58:1b:
3f:04:97:c7:9d:fa:41:16:0c:07:ef:7c:06:15:c3:
ad:7f:81:92:6a:e8:25:67:bb:7f:38:c7:36:98:61:
e6:fc:c5:1a:84:fb:3e:db:63:e3:8c:71:46:d2:6e:
22:2d:91:87:3f:ef:a3:9c:9d:d2:b4:0f:e8:28:e2:
9b:25:b1:f8:9a:5c:16:db:f4:f1:fe:db:85:17:01:
ee:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:50:B4:AD:BB:31:59:34:85:EE:4D:31:AB:EC:AE:76:39:23:8D:88
X509v3 Authority Key Identifier:
keyid:E2:14:EB:35:A3:5F:D4:88:86:07:03:B7:99:0B:81:70:AF:17:91:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:24:e5:30:8a:93:87:73:7d:bb:39:5b:73:19:47:2b:58:9d:
54:17:5e:f8:45:88:dd:66:eb:13:78:22:e5:6c:b6:c9:15:6a:
3e:7a:ce:1c:bf:1f:e1:90:ad:96:87:32:2e:7c:e0:eb:be:13:
85:93:53:90:e1:6d:d9:e6:46:82:92:f4:65:8c:3b:b5:79:c9:
af:dc:f1:b6:9f:f5:d3:a4:48:e5:27:93:73:b6:9c:83:cb:10:
97:2d:af:b6:ab:e4:5b:7c:ea:68:8b:65:ce:1e:b0:04:a0:75:
af:a6:57:be:e9:e2:f1:5c:70:3e:ba:f9:93:56:96:8a:ab:2c:
3a:58:a8:8d:9c:d4:94:6d:b3:f7:dd:fa:0e:54:77:7a:54:26:
ae:0f:11:40:16:5d:dd:d0:f1:d4:d6:10:ca:c4:0d:7b:56:60:
36:4f:06:81:4f:42:90:5d:11:1a:e1:9e:3a:90:0c:7c:be:48:
d6:6a:1d:15:11:57:ff:12:49:b5:d5:73:74:8f:2e:63:43:96:
cd:18:fc:34:d4:a2:41:0f:8b:f9:44:10:fe:b3:3c:d1:5c:a8:
84:ed:94:f9:80:8f:74:87:84:95:ee:d5:72:40:6a:0e:a3:91:
30:fc:23:36:4b:fd:3b:e9:d7:9b:b6:be:a5:45:3c:e0:b1:d6:
2c:32:b4:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoiG5ZqgdAPmE034PYiP+8zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyMTRlYjM1YTM1ZmQ0ODg4NjA3MDNiNzk5MGI4MTcwYWYx
NzkxMmYwHhcNMjUxMDI2MjAwMDI0WhcNMjUxMDI3MjAwMDI0WjAzMTEwLwYDVQQD
EygwNDUwYjRhZGJiMzE1OTM0ODVlZTRkMzFhYmVjYWU3NjM5MjM4ZDg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqysfqrzEhZhqxnhfKmLLwiyrrRSj
Ltf+f09RbQmFMTemPYaP2zoWBUqcNpirjosHQPEWmNn7C9hkP8Yc4DnduRyhi/QE
tZez6VDjiFgab/mdld2Du8eFy+qx9GV/h9DRfiH2ki4992W/Bii7G6egFLdmFWGt
pNnKPP4+OynJzIeXvtkJbrpHFsP+WoSEKTyGLT9f44srkLwKJpx8lGBnlH+qz0MI
uk4bSW+JZu8Q6GPSWBs/BJfHnfpBFgwH73wGFcOtf4GSauglZ7t/OMc2mGHm/MUa
hPs+22PjjHFG0m4iLZGHP++jnJ3StA/oKOKbJbH4mlwW2/Tx/tuFFwHuOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFARQtK27MVk0he5NMavsrnY5I42IMB8GA1UdIwQY
MBaAFOIU6zWjX9SIhgcDt5kLgXCvF5EvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGhUck5hTmYxSWlHQndPM21RdUJjSzhYa1M4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS81NGJlNTgtNDE3NS00MDdhLWJjMzct
Y2MyNmQ0MzE2MTQyLzEvNGhUck5hTmYxSWlHQndPM21RdUJjSzhYa1M4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS81NGJlNTgtNDE3NS00MDdhLWJjMzctY2MyNmQ0MzE2MTQy
LzEvNGhUck5hTmYxSWlHQndPM21RdUJjSzhYa1M4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARCTlMIqT
h3N9uzlbcxlHK1idVBde+EWI3WbrE3gi5Wy2yRVqPnrOHL8f4ZCtlocyLnzg674T
hZNTkOFt2eZGgpL0ZYw7tXnJr9zxtp/106RI5SeTc7acg8sQly2vtqvkW3zqaItl
zh6wBKB1r6ZXvuni8VxwPrr5k1aWiqssOliojZzUlG2z9936DlR3elQmrg8RQBZd
3dDx1NYQysQNe1ZgNk8GgU9CkF0RGuGeOpAMfL5I1modFRFX/xJJtdVzdI8uY0OW
zRj8NNSiQQ+L+UQQ/rM80VyohO2U+YCPdIeEle7VckBqDqORMPwjNkv9O+nXm7a+
pUU84LHWLDK0iQ==
-----END CERTIFICATE-----
Generated at Mon Oct 27 01:42:58 2025 by rpki-client