Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
File: 4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft (raw, json)
Hash identifier: BgXqkz4V+PHUQe5RhGyUwRgnO2bd85JvUh+XAEs9gOo=
Subject key identifier: C9:7D:42:DF:D7:04:48:9F:FA:A8:54:FC:4D:9B:D1:D1:AF:30:2D:39
Authority key identifier: E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46
Certificate issuer: /CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46
Certificate serial: 01994E1C10A9B731A2B899C80C2A0069DE61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
Manifest number: 1696
Signing time: Mon 15 Sep 2025 16:01:26 +0000
Manifest this update: Mon 15 Sep 2025 16:01:26 +0000
Manifest next update: Tue 16 Sep 2025 16:01:26 +0000
Files and hashes: 1: 4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl (hash: rHyT939RB77X0EvfwbiOs9aWzYsNY4IRPJ0D3dr2mhk=)
2: 9le1peACXBsZiHPrKGecXIwJa-c.roa (hash: abfbtZOYUj++vuicVi05zrp5kGNnF9HGnL5WTr/9qlE=)
3: AP7i3LahdsovYM70eVMlu0H0VyQ.roa (hash: gGYT6xMXK+q6XWFTZbqb5glJj73Q26Rxlysft5i280U=)
4: De0WCETpJfbN-_KAZM7Z5RJy8Ss.roa (hash: Kcw5neScj8y714DABjN4V/ktwunea0zBp9yHTOn8VeE=)
5: WCta5h-gHZZ_q49m5T2AptEQh0A.roa (hash: UEF6WvkAssJSXqYGaMl3u6THXq5hVmf7y+Pa60Tl3Bc=)
6: WIgYr5JYPXYMftdONSWv5Do5-Gk.roa (hash: Z2h27NPSq0u/AueWae1+/QX3Wc6gNsL5Ji2s5jEoznc=)
7: fLAxf74rd6UX3gfivf6snrbKhmg.roa (hash: 2y9JcTYhuslVBan0BBae3TsVIsvndLj/5tEYAdt92BQ=)
8: oSdrWOCaJ0gBbDhOrwzjpvj5kgk.roa (hash: fLc644uvb/7KJE5lOwMGlDoVjD+MslKnwZyZQoL0QcU=)
9: obrA-ZoCgk0zS8hgJpmT67NaB2Y.roa (hash: z5uErOAwohXeLePMQPhb50zJXMj4qbujXHMXCoCiW5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 13:46:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4e:1c:10:a9:b7:31:a2:b8:99:c8:0c:2a:00:69:de:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46
Validity
Not Before: Sep 15 16:01:26 2025 GMT
Not After : Sep 16 16:01:26 2025 GMT
Subject: CN=c97d42dfd704489ffaa854fc4d9bd1d1af302d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d5:da:f0:14:b6:67:a2:d2:da:a6:45:19:d3:
e5:33:6d:84:be:30:be:24:cb:3e:1f:b6:94:b1:a7:
36:c0:96:91:19:9c:56:a2:21:8f:db:31:7a:2d:65:
8c:28:ba:6d:69:d5:21:37:67:84:1e:d0:37:08:c5:
c8:56:5a:af:db:af:89:5d:96:85:8c:fe:c7:c7:c0:
46:d2:ab:4b:64:97:2d:ad:96:97:bd:77:44:19:a8:
75:fa:29:a3:a1:d5:56:db:33:d1:1d:a4:db:a7:b2:
08:05:3b:6d:6f:08:8f:7a:b4:9b:38:47:b8:6b:78:
3e:f1:00:69:75:90:c7:b7:ab:66:b6:d8:a7:14:e9:
1d:9b:32:1a:13:1b:a7:46:b2:33:4d:06:df:68:8d:
1b:e7:60:17:57:b4:e5:3b:4f:6f:a1:cb:bd:ef:62:
62:44:a2:73:f4:4d:f8:b6:73:1c:a7:c8:b1:70:a7:
09:74:ec:57:41:ec:03:ec:46:ab:8c:57:6e:f8:3a:
a1:ed:94:22:d3:33:cd:aa:ad:56:86:8f:8c:e7:00:
23:93:44:b4:78:76:91:bd:ff:f5:18:f6:18:6a:1c:
6a:9b:c5:b2:cd:d8:15:10:b5:ae:62:ff:34:b7:ee:
3c:f9:76:0e:2a:32:5f:49:c8:6d:9b:d8:1e:12:72:
03:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:7D:42:DF:D7:04:48:9F:FA:A8:54:FC:4D:9B:D1:D1:AF:30:2D:39
X509v3 Authority Key Identifier:
keyid:E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:34:3e:7d:e5:e5:73:e0:1c:53:52:b0:9c:b9:66:ce:f5:2b:
29:0b:32:18:b0:17:91:6c:ce:ce:5a:3f:94:ce:4f:64:8f:8f:
16:f5:9d:f2:9f:67:f9:c7:91:59:a6:1f:e7:9c:59:30:90:e3:
9e:82:e3:a8:08:3c:c8:4d:af:04:b5:01:5d:15:d9:e5:78:bb:
aa:d7:30:21:d6:5d:68:fe:e9:cc:8f:b2:80:3d:7a:45:7d:c6:
44:51:c6:a8:3f:1d:cb:b8:43:88:e6:ef:9b:db:e9:b5:71:71:
06:fb:38:b7:a5:f4:18:7d:ea:ff:61:43:8a:12:92:24:94:ff:
a7:46:c2:99:95:5e:01:8e:94:e6:33:b7:0f:f7:e1:33:cb:e0:
a9:83:b9:de:38:db:ff:ee:5e:11:04:b9:bc:9b:d9:90:b4:c7:
0e:ae:06:57:a1:d8:89:5a:ae:b4:f6:1a:8f:75:a6:7b:21:67:
d4:d3:0f:dc:25:c3:cc:a4:cb:a9:8d:a8:71:a2:11:29:f8:35:
3a:bc:93:a4:3e:8c:68:ac:3b:fd:63:2a:24:30:29:98:8b:cf:
80:29:86:02:07:68:8c:12:df:34:a9:4a:83:85:20:a9:a0:92:
43:67:97:d6:dd:84:6b:f0:5e:bf:cc:a3:66:3f:be:c9:7c:8a:
54:15:52:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZlOHBCptzGiuJnIDCoAad5hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMzhlYzI0MmE0M2U5YzlkNGNlYjI1ZGM5MGU1NDUzMzcz
ZDNmNDYwHhcNMjUwOTE1MTYwMTI2WhcNMjUwOTE2MTYwMTI2WjAzMTEwLwYDVQQD
EyhjOTdkNDJkZmQ3MDQ0ODlmZmFhODU0ZmM0ZDliZDFkMWFmMzAyZDM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttXa8BS2Z6LS2qZFGdPlM22EvjC+
JMs+H7aUsac2wJaRGZxWoiGP2zF6LWWMKLptadUhN2eEHtA3CMXIVlqv26+JXZaF
jP7Hx8BG0qtLZJctrZaXvXdEGah1+imjodVW2zPRHaTbp7IIBTttbwiPerSbOEe4
a3g+8QBpdZDHt6tmttinFOkdmzIaExunRrIzTQbfaI0b52AXV7TlO09vocu972Ji
RKJz9E34tnMcp8ixcKcJdOxXQewD7EarjFdu+Dqh7ZQi0zPNqq1Who+M5wAjk0S0
eHaRvf/1GPYYahxqm8WyzdgVELWuYv80t+48+XYOKjJfSchtm9geEnIDAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMl9Qt/XBEif+qhU/E2b0dGvMC05MB8GA1UdIwQY
MBaAFOE47CQqQ+nJ1M6yXckOVFM3PT9GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8wYjdmZDMtOTBmMC00NWQxLThhNTgt
Njc4NWNkNDU2ODcxLzEvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8wYjdmZDMtOTBmMC00NWQxLThhNTgtNjc4NWNkNDU2ODcx
LzEvNFRqc0pDcEQ2Y25VenJKZHlRNVVVemM5UDBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjDQ+feXl
c+AcU1KwnLlmzvUrKQsyGLAXkWzOzlo/lM5PZI+PFvWd8p9n+ceRWaYf55xZMJDj
noLjqAg8yE2vBLUBXRXZ5Xi7qtcwIdZdaP7pzI+ygD16RX3GRFHGqD8dy7hDiObv
m9vptXFxBvs4t6X0GH3q/2FDihKSJJT/p0bCmZVeAY6U5jO3D/fhM8vgqYO53jjb
/+5eEQS5vJvZkLTHDq4GV6HYiVqutPYaj3WmeyFn1NMP3CXDzKTLqY2ocaIRKfg1
OryTpD6MaKw7/WMqJDApmIvPgCmGAgdojBLfNKlKg4UgqaCSQ2eX1t2Ea/Bev8yj
Zj++yXyKVBVSAg==
-----END CERTIFICATE-----
Generated at Mon Sep 15 21:34:34 2025 by rpki-client