Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft
File: S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft (raw, json)
Hash identifier: ShgU84ttlc96ePW2eW+aD7dZjnd4lXmKmlG1puwVR1M=
Subject key identifier: 86:53:C6:C4:A7:0F:69:52:BC:39:07:45:1E:3F:08:C0:FE:88:C3:1D
Authority key identifier: 4B:89:D8:7F:8E:41:B5:08:2D:38:91:60:15:E0:59:E5:6D:D0:11:4E
Certificate issuer: /CN=4b89d87f8e41b5082d38916015e059e56dd0114e
Certificate serial: 019A71B89DC06AA9232A165AB08D9FCE4C7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4nYf45BtQgtOJFgFeBZ5W3QEU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft
Manifest number: 0F8F
Signing time: Tue 11 Nov 2025 07:01:55 +0000
Manifest this update: Tue 11 Nov 2025 07:01:55 +0000
Manifest next update: Wed 12 Nov 2025 07:01:55 +0000
Files and hashes: 1: S4nYf45BtQgtOJFgFeBZ5W3QEU4.crl (hash: sqwJoXJqVASwX6VMn8JZ6LfW3YGCeUSBUsXYaiHcnLs=)
2: crOsrOXIXenqmjjK7E42FO9nzAY.roa (hash: FavBc7FYhPnbTZq/1FuhdovJ2d7YJv+63Ene4V7HX3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/S4nYf45BtQgtOJFgFeBZ5W3QEU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:9d:c0:6a:a9:23:2a:16:5a:b0:8d:9f:ce:4c:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b89d87f8e41b5082d38916015e059e56dd0114e
Validity
Not Before: Nov 11 07:01:55 2025 GMT
Not After : Nov 12 07:01:55 2025 GMT
Subject: CN=8653c6c4a70f6952bc3907451e3f08c0fe88c31d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:76:7f:39:e3:31:64:60:fa:d9:f1:02:87:29:
25:5e:69:4a:a3:6a:88:58:d5:a1:64:62:1b:07:84:
b9:78:c6:e8:e9:c7:0f:0d:fd:53:c2:1f:ab:c7:43:
13:ac:1d:b3:a3:12:60:90:f9:ee:f8:a1:72:f1:f1:
93:1a:4c:42:bf:0a:e8:57:09:97:33:5e:c9:0c:d3:
64:5f:53:b3:dc:6e:14:37:7a:9c:72:dc:62:99:d7:
1d:5d:10:f0:5e:98:8d:d1:ae:fb:35:79:d3:6f:1f:
6a:4d:70:33:c9:17:be:3b:7c:e7:74:19:c9:47:83:
f1:d4:be:e9:87:67:06:e0:0e:51:25:dc:ce:e6:e5:
b6:36:b7:76:cb:5b:0c:87:db:85:d8:ae:dc:ef:d1:
d2:77:1c:a5:d9:1b:01:3d:1c:1e:2d:e9:7f:1b:24:
11:1e:6c:fb:9a:77:4b:83:91:71:84:12:a6:7b:3f:
68:d3:ea:6c:b5:a1:b7:ee:03:5e:cf:eb:dd:95:d2:
4f:43:a2:f7:ab:23:aa:af:24:0d:61:4c:ad:e2:2f:
87:23:53:83:07:0d:c4:e7:e1:aa:2c:a3:ec:13:29:
a8:9e:4f:8f:06:9c:e5:c8:0e:83:a4:37:ac:cd:32:
80:7e:2e:b1:6d:24:9f:e0:cb:99:9b:d9:1e:5b:be:
ed:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:53:C6:C4:A7:0F:69:52:BC:39:07:45:1E:3F:08:C0:FE:88:C3:1D
X509v3 Authority Key Identifier:
keyid:4B:89:D8:7F:8E:41:B5:08:2D:38:91:60:15:E0:59:E5:6D:D0:11:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4nYf45BtQgtOJFgFeBZ5W3QEU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:c2:ed:28:05:98:0e:d0:fa:cb:94:16:19:23:63:e6:ef:3a:
e3:65:28:fc:7d:b5:7b:df:e9:99:30:b2:9d:ea:05:e8:93:a6:
a0:f1:cb:10:94:1b:ba:b0:a1:8b:97:17:72:e1:cb:94:36:04:
5c:43:14:c5:c4:bd:19:58:74:cd:68:98:22:de:5e:a0:06:ec:
98:bd:cb:93:2a:7d:6a:a0:77:c6:61:d6:31:1a:d0:68:c7:ea:
bd:55:34:42:7f:ae:9e:bf:98:54:9d:24:21:eb:ae:b4:b0:6f:
90:da:bd:d9:bf:95:96:75:55:27:3a:ce:04:8a:74:5c:1a:5a:
50:d4:1d:14:ab:d7:7e:91:73:14:7a:b1:4f:69:52:ba:21:cd:
43:6b:53:cf:88:74:21:b5:e6:84:ab:dc:6b:e8:bf:a8:9d:52:
f6:47:c5:e4:d9:ed:b9:ab:6a:fa:ff:36:e8:74:7a:06:d2:76:
1e:3c:cd:aa:3f:89:20:bc:6d:cf:6d:26:93:c5:03:fc:46:51:
44:87:c5:1c:70:f7:79:68:b1:83:d0:16:72:ce:21:89:c5:75:
d9:3a:cc:cd:88:ea:98:7f:2b:4c:f4:cb:83:4d:1f:e0:a5:b6:
71:fb:56:ee:68:f3:0d:11:a1:66:93:eb:fe:e2:da:9a:bd:00:
3b:de:5e:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuJ3AaqkjKhZasI2fzkx9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiODlkODdmOGU0MWI1MDgyZDM4OTE2MDE1ZTA1OWU1NmRk
MDExNGUwHhcNMjUxMTExMDcwMTU1WhcNMjUxMTEyMDcwMTU1WjAzMTEwLwYDVQQD
Eyg4NjUzYzZjNGE3MGY2OTUyYmMzOTA3NDUxZTNmMDhjMGZlODhjMzFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA73Z/OeMxZGD62fEChyklXmlKo2qI
WNWhZGIbB4S5eMbo6ccPDf1Twh+rx0MTrB2zoxJgkPnu+KFy8fGTGkxCvwroVwmX
M17JDNNkX1Oz3G4UN3qcctximdcdXRDwXpiN0a77NXnTbx9qTXAzyRe+O3zndBnJ
R4Px1L7ph2cG4A5RJdzO5uW2Nrd2y1sMh9uF2K7c79HSdxyl2RsBPRweLel/GyQR
Hmz7mndLg5FxhBKmez9o0+pstaG37gNez+vdldJPQ6L3qyOqryQNYUyt4i+HI1OD
Bw3E5+GqLKPsEymonk+PBpzlyA6DpDeszTKAfi6xbSSf4MuZm9keW77tVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIZTxsSnD2lSvDkHRR4/CMD+iMMdMB8GA1UdIwQY
MBaAFEuJ2H+OQbUILTiRYBXgWeVt0BFOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzRuWWY0NUJ0UWd0T0pGZ0ZlQlo1VzNRRVU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi80YmE5NzMtMGU5Zi00MzUyLTk4Mzgt
NjQyZGM5MTI3NjgwLzEvUzRuWWY0NUJ0UWd0T0pGZ0ZlQlo1VzNRRVU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi80YmE5NzMtMGU5Zi00MzUyLTk4MzgtNjQyZGM5MTI3Njgw
LzEvUzRuWWY0NUJ0UWd0T0pGZ0ZlQlo1VzNRRVU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxMLtKAWY
DtD6y5QWGSNj5u8642Uo/H21e9/pmTCyneoF6JOmoPHLEJQburChi5cXcuHLlDYE
XEMUxcS9GVh0zWiYIt5eoAbsmL3Lkyp9aqB3xmHWMRrQaMfqvVU0Qn+unr+YVJ0k
IeuutLBvkNq92b+VlnVVJzrOBIp0XBpaUNQdFKvXfpFzFHqxT2lSuiHNQ2tTz4h0
IbXmhKvca+i/qJ1S9kfF5Nntuatq+v826HR6BtJ2HjzNqj+JILxtz20mk8UD/EZR
RIfFHHD3eWixg9AWcs4hicV12TrMzYjqmH8rTPTLg00f4KW2cftW7mjzDRGhZpPr
/uLamr0AO95erw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:18 2025 by rpki-client