Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.mft
File: 4rWwjcQz-On3dyfLUfa6JL3V85o.mft (raw, json)
Hash identifier: 9nY0BNdyR+YRa1VlcNgnXVtRZUNLvYWTAV8x4v9KuUE=
Subject key identifier: B0:CA:D1:5B:D5:C5:C7:75:A2:ED:97:70:11:AA:68:5E:4E:5B:5A:A8
Authority key identifier: E2:B5:B0:8D:C4:33:F8:E9:F7:77:27:CB:51:F6:BA:24:BD:D5:F3:9A
Certificate issuer: /CN=e2b5b08dc433f8e9f77727cb51f6ba24bdd5f39a
Certificate serial: 019A71B818100D78A1B7DBF68025E0DD2DD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rWwjcQz-On3dyfLUfa6JL3V85o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.mft
Manifest number: 0739
Signing time: Tue 11 Nov 2025 07:01:21 +0000
Manifest this update: Tue 11 Nov 2025 07:01:21 +0000
Manifest next update: Wed 12 Nov 2025 07:01:21 +0000
Files and hashes: 1: 4rWwjcQz-On3dyfLUfa6JL3V85o.crl (hash: sdMnd3KXnI6f6u72dYRlpo5homHnQn4M/IpTtLxCPd4=)
2: 6QTOObZCJD1chm-ODo_uH-86-lI.roa (hash: PPt6OC48BVzBGzWbhNau2lL/cgNIrrJFP+rxLWVwYyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4rWwjcQz-On3dyfLUfa6JL3V85o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:18:10:0d:78:a1:b7:db:f6:80:25:e0:dd:2d:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b5b08dc433f8e9f77727cb51f6ba24bdd5f39a
Validity
Not Before: Nov 11 07:01:21 2025 GMT
Not After : Nov 12 07:01:21 2025 GMT
Subject: CN=b0cad15bd5c5c775a2ed977011aa685e4e5b5aa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ec:7e:40:5b:4b:b6:f6:95:05:d9:73:ac:c1:
da:0c:71:40:b5:b8:d7:84:d4:bb:1b:ba:29:29:6e:
17:da:3d:19:fa:b9:b0:43:5d:c9:ca:75:30:9d:d8:
4f:34:0a:01:28:c5:0a:b2:cd:18:e5:ef:5c:18:dc:
ce:05:4c:ab:fb:42:34:61:99:72:17:c2:df:ce:47:
bf:7d:d6:27:0e:e9:7b:ef:1a:1b:56:d0:d8:03:28:
fd:f8:a1:86:a5:5e:ec:da:fc:d2:b3:b0:7d:5f:08:
73:c5:08:7a:4d:c8:67:6d:d4:c4:2a:d5:3d:71:1b:
bc:d6:b6:f6:a9:2e:d3:1b:63:9b:81:fb:c8:c5:a7:
3a:a5:f2:75:eb:3a:ee:12:24:0e:db:f4:68:82:21:
6d:11:b5:4b:ed:60:1b:0e:34:c9:3b:8c:b0:98:e7:
17:42:84:90:df:b4:91:21:73:19:44:e3:57:53:13:
aa:52:0f:71:41:94:de:4b:c4:8e:8f:cd:a2:f4:e1:
27:e6:6d:45:ce:84:b6:2d:a6:eb:6d:c8:a1:c4:e7:
92:37:ab:e7:1d:eb:82:bb:f3:7d:00:9a:d9:fe:30:
20:73:4f:cb:a0:c1:02:42:73:90:da:e1:16:ab:8e:
d1:c1:7d:79:5f:7e:31:07:7c:a1:1b:6f:13:72:2f:
75:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:CA:D1:5B:D5:C5:C7:75:A2:ED:97:70:11:AA:68:5E:4E:5B:5A:A8
X509v3 Authority Key Identifier:
keyid:E2:B5:B0:8D:C4:33:F8:E9:F7:77:27:CB:51:F6:BA:24:BD:D5:F3:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rWwjcQz-On3dyfLUfa6JL3V85o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:0e:47:22:c8:4d:ac:09:b7:4b:f3:01:52:d0:5e:41:16:34:
ed:c1:9e:6e:4e:0b:f1:0f:8d:13:f8:1a:c4:94:1e:36:db:d8:
e5:ef:6b:81:80:74:ab:1d:00:f9:46:cf:25:7c:38:60:d5:13:
73:1a:61:0e:03:c6:f7:a7:2b:44:9c:40:ea:c8:26:76:47:1f:
3c:4f:fa:5a:13:d8:58:df:25:95:15:86:00:6b:a5:fd:a1:57:
68:a6:ec:6f:3b:b0:2a:71:44:8d:29:2a:12:30:b2:ed:81:da:
63:03:44:bf:b0:d3:f5:33:53:62:a5:e3:4b:87:71:da:33:26:
f0:41:ad:c8:0c:ea:ce:7b:98:fb:d6:dc:3b:f8:fe:0e:6b:b2:
fb:8f:87:6e:17:73:6a:80:4b:84:e9:ac:50:c1:9c:ca:93:2a:
8c:28:e3:2f:c5:34:ce:76:aa:6f:af:9b:7d:de:73:1b:65:da:
23:45:b6:df:8a:a6:a1:38:77:94:16:2b:4d:76:85:0d:c8:e4:
49:be:a5:21:34:83:46:3b:e1:0b:e8:84:2a:a6:5c:04:34:e1:
1e:7b:05:74:a8:97:01:9e:92:69:b1:21:1b:55:8a:c1:67:48:
f7:24:e8:0e:f7:cf:d2:6e:7f:5a:ca:78:ae:56:2f:93:92:7b:
83:8f:89:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuBgQDXiht9v2gCXg3S3QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYjViMDhkYzQzM2Y4ZTlmNzc3MjdjYjUxZjZiYTI0YmRk
NWYzOWEwHhcNMjUxMTExMDcwMTIxWhcNMjUxMTEyMDcwMTIxWjAzMTEwLwYDVQQD
EyhiMGNhZDE1YmQ1YzVjNzc1YTJlZDk3NzAxMWFhNjg1ZTRlNWI1YWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOx+QFtLtvaVBdlzrMHaDHFAtbjX
hNS7G7opKW4X2j0Z+rmwQ13JynUwndhPNAoBKMUKss0Y5e9cGNzOBUyr+0I0YZly
F8Lfzke/fdYnDul77xobVtDYAyj9+KGGpV7s2vzSs7B9XwhzxQh6TchnbdTEKtU9
cRu81rb2qS7TG2ObgfvIxac6pfJ16zruEiQO2/RogiFtEbVL7WAbDjTJO4ywmOcX
QoSQ37SRIXMZRONXUxOqUg9xQZTeS8SOj82i9OEn5m1FzoS2LabrbcihxOeSN6vn
HeuCu/N9AJrZ/jAgc0/LoMECQnOQ2uEWq47RwX15X34xB3yhG28Tci91TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLDK0VvVxcd1ou2XcBGqaF5OW1qoMB8GA1UdIwQY
MBaAFOK1sI3EM/jp93cny1H2uiS91fOaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHJXd2pjUXotT24zZHlmTFVmYTZKTDNWODVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9mYWU0NDMtMTk4Yi00MzJlLWI0MTkt
M2U2ZmJlMzc5ZTgzLzEvNHJXd2pjUXotT24zZHlmTFVmYTZKTDNWODVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9mYWU0NDMtMTk4Yi00MzJlLWI0MTktM2U2ZmJlMzc5ZTgz
LzEvNHJXd2pjUXotT24zZHlmTFVmYTZKTDNWODVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFg5HIshN
rAm3S/MBUtBeQRY07cGebk4L8Q+NE/gaxJQeNtvY5e9rgYB0qx0A+UbPJXw4YNUT
cxphDgPG96crRJxA6sgmdkcfPE/6WhPYWN8llRWGAGul/aFXaKbsbzuwKnFEjSkq
EjCy7YHaYwNEv7DT9TNTYqXjS4dx2jMm8EGtyAzqznuY+9bcO/j+Dmuy+4+Hbhdz
aoBLhOmsUMGcypMqjCjjL8U0znaqb6+bfd5zG2XaI0W234qmoTh3lBYrTXaFDcjk
Sb6lITSDRjvhC+iEKqZcBDThHnsFdKiXAZ6SabEhG1WKwWdI9yToDvfP0m5/Wsp4
rlYvk5J7g4+Jgg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:22:50 2025 by rpki-client