Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft
File: 4OkqeIpBBX0ndk8W87HSo-9jRdY.mft (raw, json)
Hash identifier: nSyiVT0ALKz1YzE8P8FsluT2mQxlwJSovrftoxcogCs=
Subject key identifier: FC:0F:5A:2E:0D:EB:D5:17:D6:56:FF:5B:B4:61:76:5B:4D:CA:F0:97
Authority key identifier: E0:E9:2A:78:8A:41:05:7D:27:76:4F:16:F3:B1:D2:A3:EF:63:45:D6
Certificate issuer: /CN=e0e92a788a41057d27764f16f3b1d2a3ef6345d6
Certificate serial: 019A7225A7D274BFBD9CE23540190A8832F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4OkqeIpBBX0ndk8W87HSo-9jRdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 09:01:01 +0000
Manifest this update: Tue 11 Nov 2025 09:01:01 +0000
Manifest next update: Wed 12 Nov 2025 09:01:01 +0000
Files and hashes: 1: 4OkqeIpBBX0ndk8W87HSo-9jRdY.crl (hash: OjUcld47ec5OSv8u2pdVmsllzQMJlvsN3Rb6aB58bB8=)
2: BL-NDYgvhNS3ykN2bZ3XYSmCEZI.roa (hash: fBvbXWPI6WfZJHj+SHtFQme53z0G5Q3tNcbJRdIO7rA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4OkqeIpBBX0ndk8W87HSo-9jRdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:a7:d2:74:bf:bd:9c:e2:35:40:19:0a:88:32:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0e92a788a41057d27764f16f3b1d2a3ef6345d6
Validity
Not Before: Nov 11 09:01:01 2025 GMT
Not After : Nov 12 09:01:01 2025 GMT
Subject: CN=fc0f5a2e0debd517d656ff5bb461765b4dcaf097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e8:85:c1:35:83:6a:31:08:41:94:fb:ca:66:
57:c8:c6:79:11:fe:59:a4:b4:e9:51:f8:77:ba:ce:
48:ad:2c:52:77:12:27:75:5d:df:94:46:8b:bf:9a:
7f:8d:52:70:c9:f5:7e:d0:f8:2c:34:ae:1e:ea:a3:
c1:28:aa:be:03:a7:8c:00:54:74:8f:fd:41:6e:d6:
c9:aa:e2:ec:5b:1c:54:a6:b2:c3:a0:55:67:69:b8:
3a:81:81:38:8d:f6:35:4d:fd:5a:2f:d5:c7:9a:ef:
0d:28:9e:ee:82:df:46:04:73:71:b9:56:e0:9d:7a:
dc:f0:ee:a5:4b:95:30:3a:a5:9b:ea:a1:96:f6:b5:
c4:3c:a0:3c:6c:0b:62:5c:74:42:6e:41:8b:eb:2b:
1f:57:aa:cd:cc:44:9d:c2:03:f9:ad:ed:27:f5:ad:
d0:64:a6:bf:4b:bc:99:c4:dc:08:23:b8:44:29:09:
4c:38:61:1e:b0:1e:30:f9:9c:5c:36:e3:4d:5f:41:
92:9b:c1:a5:55:90:cb:82:12:18:b1:57:d6:4f:5d:
3d:0c:94:f4:93:bf:89:54:77:96:5f:0c:32:87:c7:
ff:f7:a8:ac:3c:04:56:21:87:3f:a9:38:25:16:4f:
23:4c:fd:35:97:7e:b4:fe:69:18:65:44:55:65:e7:
ff:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:0F:5A:2E:0D:EB:D5:17:D6:56:FF:5B:B4:61:76:5B:4D:CA:F0:97
X509v3 Authority Key Identifier:
keyid:E0:E9:2A:78:8A:41:05:7D:27:76:4F:16:F3:B1:D2:A3:EF:63:45:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OkqeIpBBX0ndk8W87HSo-9jRdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:c2:65:c9:6f:ae:10:07:18:37:47:2d:b1:23:f4:3f:af:15:
e7:ef:68:ec:7d:c9:28:8a:99:2a:69:00:60:00:6b:86:ba:be:
e0:08:4e:f3:97:e9:de:b2:57:c9:c3:d2:2f:d6:57:95:db:be:
80:b5:fb:18:ca:7e:f0:cb:48:60:d4:1c:7b:38:74:59:76:7f:
66:d0:2b:87:37:c5:67:85:bd:6d:6a:80:8b:33:1c:39:89:d2:
20:75:4d:98:81:f4:41:29:a1:22:d7:ef:6d:d8:8a:a8:73:60:
f7:b8:98:d7:14:24:c0:c8:e7:56:bb:9a:36:4b:bc:e8:92:f8:
e9:e4:2b:6f:f9:da:38:8d:c3:c2:94:50:f2:15:42:be:26:ef:
da:3c:56:7b:55:b5:11:a2:76:fa:9c:4a:e6:6b:ff:89:7f:00:
f2:c1:a0:1f:fc:9f:84:15:fa:e7:4e:cf:05:32:8c:fd:0f:41:
a6:cd:b6:08:28:5b:e6:37:ff:33:04:ad:1f:d9:81:97:fc:ea:
57:63:99:e9:09:58:4d:a3:36:f8:93:39:b9:32:75:16:38:47:
c4:d9:83:93:a6:4c:e4:b9:ce:a0:61:30:b9:43:da:a3:cc:17:
88:99:28:64:3e:dd:62:96:86:f5:05:42:6b:ed:e1:4f:79:e6:
35:26:00:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJafSdL+9nOI1QBkKiDL2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwZTkyYTc4OGE0MTA1N2QyNzc2NGYxNmYzYjFkMmEzZWY2
MzQ1ZDYwHhcNMjUxMTExMDkwMTAxWhcNMjUxMTEyMDkwMTAxWjAzMTEwLwYDVQQD
EyhmYzBmNWEyZTBkZWJkNTE3ZDY1NmZmNWJiNDYxNzY1YjRkY2FmMDk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOiFwTWDajEIQZT7ymZXyMZ5Ef5Z
pLTpUfh3us5IrSxSdxIndV3flEaLv5p/jVJwyfV+0PgsNK4e6qPBKKq+A6eMAFR0
j/1BbtbJquLsWxxUprLDoFVnabg6gYE4jfY1Tf1aL9XHmu8NKJ7ugt9GBHNxuVbg
nXrc8O6lS5UwOqWb6qGW9rXEPKA8bAtiXHRCbkGL6ysfV6rNzESdwgP5re0n9a3Q
ZKa/S7yZxNwII7hEKQlMOGEesB4w+ZxcNuNNX0GSm8GlVZDLghIYsVfWT109DJT0
k7+JVHeWXwwyh8f/96isPARWIYc/qTglFk8jTP01l360/mkYZURVZef/6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPwPWi4N69UX1lb/W7RhdltNyvCXMB8GA1UdIwQY
MBaAFODpKniKQQV9J3ZPFvOx0qPvY0XWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNE9rcWVJcEJCWDBuZGs4Vzg3SFNvLTlqUmRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9kNDY0ODctNDNmZi00NWVlLTgyMjgt
YmE1OWZiMmM0NjEwLzEvNE9rcWVJcEJCWDBuZGs4Vzg3SFNvLTlqUmRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9kNDY0ODctNDNmZi00NWVlLTgyMjgtYmE1OWZiMmM0NjEw
LzEvNE9rcWVJcEJCWDBuZGs4Vzg3SFNvLTlqUmRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPsJlyW+u
EAcYN0ctsSP0P68V5+9o7H3JKIqZKmkAYABrhrq+4AhO85fp3rJXycPSL9ZXldu+
gLX7GMp+8MtIYNQcezh0WXZ/ZtArhzfFZ4W9bWqAizMcOYnSIHVNmIH0QSmhItfv
bdiKqHNg97iY1xQkwMjnVruaNku86JL46eQrb/naOI3DwpRQ8hVCvibv2jxWe1W1
EaJ2+pxK5mv/iX8A8sGgH/yfhBX6507PBTKM/Q9Bps22CChb5jf/MwStH9mBl/zq
V2OZ6QlYTaM2+JM5uTJ1FjhHxNmDk6ZM5LnOoGEwuUPao8wXiJkoZD7dYpaG9QVC
a+3hT3nmNSYA+g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:26 2025 by rpki-client