Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
File: 4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft (raw, json)
Hash identifier: rbkGEjvMyauBWm79HbGKNvBEurwR4ikAPdI7ySEFYSQ=
Subject key identifier: 2B:96:A5:E9:0C:31:55:D3:C6:D4:4B:29:13:23:65:87:B6:07:D4:02
Authority key identifier: E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46
Certificate issuer: /CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46
Certificate serial: 019A473C461E3FD8359CABCEBF338283D0DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
Manifest number: 1717
Signing time: Mon 03 Nov 2025 01:02:03 +0000
Manifest this update: Mon 03 Nov 2025 01:02:03 +0000
Manifest next update: Tue 04 Nov 2025 01:02:03 +0000
Files and hashes: 1: 4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl (hash: kDEWHHWmbRaT2f5Jz/phkvoARSxH0m8wtzo79wBeHrQ=)
2: 9le1peACXBsZiHPrKGecXIwJa-c.roa (hash: abfbtZOYUj++vuicVi05zrp5kGNnF9HGnL5WTr/9qlE=)
3: AP7i3LahdsovYM70eVMlu0H0VyQ.roa (hash: gGYT6xMXK+q6XWFTZbqb5glJj73Q26Rxlysft5i280U=)
4: De0WCETpJfbN-_KAZM7Z5RJy8Ss.roa (hash: Kcw5neScj8y714DABjN4V/ktwunea0zBp9yHTOn8VeE=)
5: WCta5h-gHZZ_q49m5T2AptEQh0A.roa (hash: UEF6WvkAssJSXqYGaMl3u6THXq5hVmf7y+Pa60Tl3Bc=)
6: WIgYr5JYPXYMftdONSWv5Do5-Gk.roa (hash: Z2h27NPSq0u/AueWae1+/QX3Wc6gNsL5Ji2s5jEoznc=)
7: fLAxf74rd6UX3gfivf6snrbKhmg.roa (hash: 2y9JcTYhuslVBan0BBae3TsVIsvndLj/5tEYAdt92BQ=)
8: oSdrWOCaJ0gBbDhOrwzjpvj5kgk.roa (hash: fLc644uvb/7KJE5lOwMGlDoVjD+MslKnwZyZQoL0QcU=)
9: obrA-ZoCgk0zS8hgJpmT67NaB2Y.roa (hash: z5uErOAwohXeLePMQPhb50zJXMj4qbujXHMXCoCiW5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:47:3c:46:1e:3f:d8:35:9c:ab:ce:bf:33:82:83:d0:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46
Validity
Not Before: Nov 3 01:02:03 2025 GMT
Not After : Nov 4 01:02:03 2025 GMT
Subject: CN=2b96a5e90c3155d3c6d44b2913236587b607d402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3c:35:68:88:1b:c7:3a:51:a9:70:ce:06:c9:
d2:cd:40:31:ce:91:36:23:a7:ae:a2:4d:1a:52:27:
86:d0:c0:83:49:d2:60:98:53:6f:7b:13:c8:91:99:
0d:e7:22:92:36:15:59:74:d6:52:f3:bc:cc:88:27:
25:e9:b7:27:48:38:aa:a5:d5:f5:14:09:74:c1:e1:
75:7b:a2:10:22:c8:93:98:2b:33:28:56:cc:d5:98:
39:9b:88:27:9a:0a:3e:6d:c7:13:cc:5e:d0:79:4b:
53:3d:66:88:3c:e3:9d:12:39:8a:88:db:02:40:65:
b0:4a:b1:85:97:b0:cb:96:43:7a:bb:52:2c:7b:ec:
4d:8f:57:94:54:3d:7b:7d:46:cc:46:78:6d:99:34:
5c:cb:8b:07:ff:3d:ad:79:7c:93:5e:a1:f6:1c:9a:
85:23:4b:90:0e:fb:50:1b:1b:f6:67:4c:0c:33:82:
a1:24:d2:39:e1:62:2c:0b:fd:f2:16:d0:32:b3:fe:
1a:ae:d9:85:02:1a:c3:8e:4a:34:c8:d5:b6:0c:39:
eb:f7:e3:0e:be:3b:27:65:07:c6:d8:77:ed:c8:9c:
d5:1b:1e:a7:49:46:54:c4:b5:cf:ff:e7:cc:34:1d:
2c:ec:d0:bf:d0:1d:df:ec:d3:89:0a:e7:05:a2:72:
83:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:96:A5:E9:0C:31:55:D3:C6:D4:4B:29:13:23:65:87:B6:07:D4:02
X509v3 Authority Key Identifier:
keyid:E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:2a:e1:5b:df:0b:76:6b:4e:b3:d1:d0:d1:4f:bf:68:c1:13:
12:96:a8:17:5d:f9:7a:98:4e:31:8d:06:02:2d:ee:ad:8f:ee:
6d:9e:bc:82:bb:95:ed:ad:c0:48:f1:a6:2f:40:f2:6e:f1:57:
9b:18:8f:a8:b0:d8:51:ae:41:7e:35:38:ea:e5:e5:51:42:d7:
a2:12:92:e9:dd:06:f5:db:ca:3c:24:7c:f0:3a:d1:0e:e0:01:
85:61:8b:68:4f:c4:45:6f:2b:95:4b:28:9a:06:3b:46:e6:6c:
21:cf:e6:de:92:8b:7c:c6:fe:73:ed:ea:1a:c4:7a:25:ce:67:
d4:35:a0:cf:bf:03:bd:28:b8:57:f2:da:ef:a9:ef:79:52:02:
3f:7f:55:97:1c:ba:6b:e2:b5:fb:7f:8e:99:a4:63:85:8e:18:
d6:f1:4b:6d:0e:ec:d2:84:bc:99:31:a5:5d:ab:04:dd:3b:65:
7b:9f:08:b4:c3:89:38:ca:4e:79:39:7a:68:46:93:e5:33:10:
e5:8c:59:9d:f4:00:0b:a6:2b:37:7d:bd:da:d7:bc:9b:e7:35:
af:35:7e:86:cd:53:4f:e8:47:d9:e6:fd:38:b2:d2:6a:df:a2:
99:19:e5:b2:f7:dc:13:28:b0:fd:ab:b3:0a:58:46:e9:79:5d:
8e:33:f2:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpHPEYeP9g1nKvOvzOCg9DaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMzhlYzI0MmE0M2U5YzlkNGNlYjI1ZGM5MGU1NDUzMzcz
ZDNmNDYwHhcNMjUxMTAzMDEwMjAzWhcNMjUxMTA0MDEwMjAzWjAzMTEwLwYDVQQD
EygyYjk2YTVlOTBjMzE1NWQzYzZkNDRiMjkxMzIzNjU4N2I2MDdkNDAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjw1aIgbxzpRqXDOBsnSzUAxzpE2
I6euok0aUieG0MCDSdJgmFNvexPIkZkN5yKSNhVZdNZS87zMiCcl6bcnSDiqpdX1
FAl0weF1e6IQIsiTmCszKFbM1Zg5m4gnmgo+bccTzF7QeUtTPWaIPOOdEjmKiNsC
QGWwSrGFl7DLlkN6u1Ise+xNj1eUVD17fUbMRnhtmTRcy4sH/z2teXyTXqH2HJqF
I0uQDvtQGxv2Z0wMM4KhJNI54WIsC/3yFtAys/4artmFAhrDjko0yNW2DDnr9+MO
vjsnZQfG2HftyJzVGx6nSUZUxLXP/+fMNB0s7NC/0B3f7NOJCucFonKD6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCuWpekMMVXTxtRLKRMjZYe2B9QCMB8GA1UdIwQY
MBaAFOE47CQqQ+nJ1M6yXckOVFM3PT9GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8wYjdmZDMtOTBmMC00NWQxLThhNTgt
Njc4NWNkNDU2ODcxLzEvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8wYjdmZDMtOTBmMC00NWQxLThhNTgtNjc4NWNkNDU2ODcx
LzEvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYSrhW98L
dmtOs9HQ0U+/aMETEpaoF135ephOMY0GAi3urY/ubZ68gruV7a3ASPGmL0DybvFX
mxiPqLDYUa5BfjU46uXlUULXohKS6d0G9dvKPCR88DrRDuABhWGLaE/ERW8rlUso
mgY7RuZsIc/m3pKLfMb+c+3qGsR6Jc5n1DWgz78DvSi4V/La76nveVICP39Vlxy6
a+K1+3+OmaRjhY4Y1vFLbQ7s0oS8mTGlXasE3Ttle58ItMOJOMpOeTl6aEaT5TMQ
5YxZnfQAC6YrN3292te8m+c1rzV+hs1TT+hH2eb9OLLSat+imRnlsvfcEyiw/auz
ClhG6XldjjPyEg==
-----END CERTIFICATE-----
Generated at Mon Nov 3 06:42:39 2025 by rpki-client