Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
File: 4upZNGSFjik5UjRc9Ol3ksiBEFc.mft (raw, json)
Hash identifier: vMIX5qUdAnbOoNuzif8K5D2geNBhJNmIlkvaTbmoGtY=
Subject key identifier: 75:75:8B:E0:DC:AD:D5:5E:6E:0A:04:DC:9D:47:E7:DC:89:01:57:3F
Authority key identifier: E2:EA:59:34:64:85:8E:29:39:52:34:5C:F4:E9:77:92:C8:81:10:57
Certificate issuer: /CN=e2ea593464858e293952345cf4e97792c8811057
Certificate serial: 019A71B830D8C87B8978057AC455183B058D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
Manifest number: 16B2
Signing time: Tue 11 Nov 2025 07:01:27 +0000
Manifest this update: Tue 11 Nov 2025 07:01:27 +0000
Manifest next update: Wed 12 Nov 2025 07:01:27 +0000
Files and hashes: 1: 4upZNGSFjik5UjRc9Ol3ksiBEFc.crl (hash: 64H4RDw0drrr1aBd5scF2ehVdbjHiUfrfg1xCDioOo8=)
2: n71MSGzOhUkplgZWWIqcoN_zTeY.roa (hash: M4lvFRLACkU+Ya2mbosmCvcTtHX7Mafia2WGDrBrlJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:30:d8:c8:7b:89:78:05:7a:c4:55:18:3b:05:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2ea593464858e293952345cf4e97792c8811057
Validity
Not Before: Nov 11 07:01:27 2025 GMT
Not After : Nov 12 07:01:27 2025 GMT
Subject: CN=75758be0dcadd55e6e0a04dc9d47e7dc8901573f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b7:3b:b0:1b:d5:80:a2:64:42:b4:2d:77:17:
9c:e6:46:d9:ab:01:4a:e7:b1:0e:11:dd:bf:41:be:
90:3b:8b:bc:d3:84:57:97:a5:24:12:f0:20:0f:b9:
b1:fb:c4:1c:92:39:9f:87:b6:66:8b:da:b4:3f:1b:
06:01:fa:43:2f:8b:61:44:42:28:35:aa:41:67:c6:
f3:6c:59:d7:8a:19:4a:40:c5:08:aa:aa:dd:34:09:
99:2e:63:5f:04:a1:6c:df:dd:6d:77:f8:a9:e7:8e:
98:10:0a:7a:c2:47:ac:7b:7b:fe:4b:6d:33:25:d3:
51:47:b1:45:22:bc:3a:b8:7e:90:d2:b7:f9:b5:8b:
5f:e5:72:a1:bd:2d:4d:4c:f7:88:22:e8:05:5e:a3:
03:fb:f0:8a:23:30:58:a2:b0:ea:3b:96:62:07:f4:
57:f2:da:6f:cd:7c:d9:9f:c1:e9:9b:9e:05:5e:dd:
c8:0c:99:aa:5f:f0:a0:54:ea:a8:05:60:97:04:16:
ad:e3:46:a9:83:50:9f:ce:b7:83:9a:7f:81:66:dd:
58:bb:ad:51:d6:cc:75:b3:1a:4c:e5:83:e6:61:1f:
08:53:d6:2f:96:0b:c9:00:59:c7:5c:ca:40:89:50:
75:c0:ab:62:87:9b:e9:35:70:c1:c0:b8:09:ee:5c:
1b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:75:8B:E0:DC:AD:D5:5E:6E:0A:04:DC:9D:47:E7:DC:89:01:57:3F
X509v3 Authority Key Identifier:
keyid:E2:EA:59:34:64:85:8E:29:39:52:34:5C:F4:E9:77:92:C8:81:10:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:a2:af:6d:d9:f6:93:db:39:ab:47:a6:69:1f:e7:39:2f:9c:
83:ed:73:ec:df:db:98:0d:6d:00:67:f7:38:0d:0b:cf:94:f0:
9b:5e:01:97:07:77:3e:5a:7c:85:6b:02:5d:11:b1:d6:04:5d:
ce:2a:d0:94:e8:0a:5a:50:a4:ac:f6:ba:bb:93:ba:88:82:21:
5b:50:e9:7c:f4:c3:a6:25:59:1e:80:35:42:12:e2:90:06:ca:
b6:6a:2d:c6:5b:1e:2a:17:6b:a5:92:a1:fe:e8:b5:d5:01:c1:
db:f8:be:0f:bd:c2:b3:88:43:8f:35:7c:1b:d5:1e:6e:b8:fe:
06:bb:44:48:35:3a:07:51:9e:8b:6d:a9:df:5b:7a:53:62:b6:
94:99:ff:d9:8b:7f:20:e0:06:8f:77:22:9e:0c:1d:99:54:00:
58:4d:23:83:74:d9:67:4d:10:7a:8e:3e:93:d8:51:45:e5:10:
b7:5d:26:15:19:b1:e9:cd:ec:44:ad:88:55:15:60:a6:df:b7:
b1:21:72:7d:5d:e5:57:8e:ac:0a:3a:b1:72:1a:3f:fb:17:7b:
09:44:e2:83:51:95:33:49:e2:e6:56:cb:01:23:d8:cb:9a:41:
3a:d0:a4:08:5d:dc:58:b2:47:d0:bd:6f:59:eb:97:f2:f6:4e:
b1:37:0d:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuDDYyHuJeAV6xFUYOwWNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZWE1OTM0NjQ4NThlMjkzOTUyMzQ1Y2Y0ZTk3NzkyYzg4
MTEwNTcwHhcNMjUxMTExMDcwMTI3WhcNMjUxMTEyMDcwMTI3WjAzMTEwLwYDVQQD
Eyg3NTc1OGJlMGRjYWRkNTVlNmUwYTA0ZGM5ZDQ3ZTdkYzg5MDE1NzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7c7sBvVgKJkQrQtdxec5kbZqwFK
57EOEd2/Qb6QO4u804RXl6UkEvAgD7mx+8Qckjmfh7Zmi9q0PxsGAfpDL4thREIo
NapBZ8bzbFnXihlKQMUIqqrdNAmZLmNfBKFs391td/ip546YEAp6wkese3v+S20z
JdNRR7FFIrw6uH6Q0rf5tYtf5XKhvS1NTPeIIugFXqMD+/CKIzBYorDqO5ZiB/RX
8tpvzXzZn8Hpm54FXt3IDJmqX/CgVOqoBWCXBBat40apg1CfzreDmn+BZt1Yu61R
1sx1sxpM5YPmYR8IU9YvlgvJAFnHXMpAiVB1wKtih5vpNXDBwLgJ7lwblwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHV1i+DcrdVebgoE3J1H59yJAVc/MB8GA1UdIwQY
MBaAFOLqWTRkhY4pOVI0XPTpd5LIgRBXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHVwWk5HU0ZqaWs1VWpSYzlPbDNrc2lCRUZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9jMzkzMmYtZjQ3Ni00ZDVjLWJiNWEt
NjJlNGJhZWU0ZmM1LzEvNHVwWk5HU0ZqaWs1VWpSYzlPbDNrc2lCRUZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9jMzkzMmYtZjQ3Ni00ZDVjLWJiNWEtNjJlNGJhZWU0ZmM1
LzEvNHVwWk5HU0ZqaWs1VWpSYzlPbDNrc2lCRUZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACqKvbdn2
k9s5q0emaR/nOS+cg+1z7N/bmA1tAGf3OA0Lz5Twm14Blwd3Plp8hWsCXRGx1gRd
zirQlOgKWlCkrPa6u5O6iIIhW1DpfPTDpiVZHoA1QhLikAbKtmotxlseKhdrpZKh
/ui11QHB2/i+D73Cs4hDjzV8G9Uebrj+BrtESDU6B1Gei22p31t6U2K2lJn/2Yt/
IOAGj3cingwdmVQAWE0jg3TZZ00Qeo4+k9hRReUQt10mFRmx6c3sRK2IVRVgpt+3
sSFyfV3lV46sCjqxcho/+xd7CUTig1GVM0ni5lbLASPYy5pBOtCkCF3cWLJH0L1v
WeuX8vZOsTcNLg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:17 2025 by rpki-client