Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft
File: 4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft (raw, json)
Hash identifier: 1V+f/I49pjJFvQJzKZnxrPB4G6yz49KoChWxZ/Y6wqQ=
Subject key identifier: D4:81:C7:AB:86:B8:90:5E:D9:76:3E:A7:37:E4:73:3F:20:F4:8D:49
Authority key identifier: E2:60:B0:A5:5A:87:A6:6E:90:A7:46:3A:01:DA:64:14:FC:03:4D:3D
Certificate issuer: /CN=e260b0a55a87a66e90a7463a01da6414fc034d3d
Certificate serial: 019A3F82DCB30FF0F9FC5EC1B392992F4168
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft
Manifest number: 0408
Signing time: Sat 01 Nov 2025 13:02:12 +0000
Manifest this update: Sat 01 Nov 2025 13:02:12 +0000
Manifest next update: Sun 02 Nov 2025 13:02:12 +0000
Files and hashes: 1: 4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.crl (hash: 7dXAFMMslMNbHMLWu4BnuQ4WuyuQUcaW8UqcVcJDAs4=)
2: H7jD667ua1MTRSgNeUALgotBmYc.roa (hash: DYMDYLZ2zWAIEYH23OdxIBtMbFHxghghtjADwNcrKf0=)
3: b9-JZ3RdF7ZemK1dm7cPMRh2l58.roa (hash: oUjihEIhXb/rvj31i27jlX3Sh4tmRUO23s5LKuEs2r0=)
4: lchTEZvN-6afhfJLiZL0vloeA9I.roa (hash: ralvdBvuAobYP/kvHgUFvqB6/N94B6BhMEuSMEPEay0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3f:82:dc:b3:0f:f0:f9:fc:5e:c1:b3:92:99:2f:41:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e260b0a55a87a66e90a7463a01da6414fc034d3d
Validity
Not Before: Nov 1 13:02:12 2025 GMT
Not After : Nov 2 13:02:12 2025 GMT
Subject: CN=d481c7ab86b8905ed9763ea737e4733f20f48d49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:38:7f:77:5f:bd:04:db:c6:9c:52:4b:94:25:
c0:cd:09:d2:78:43:f6:d3:8c:b0:8a:03:8e:0e:79:
c9:53:e5:f7:36:1d:f5:b0:12:dc:46:99:33:24:0f:
d7:a5:0b:e6:5b:82:4d:87:bb:ab:de:d0:76:f9:1a:
2a:fc:85:bb:4b:80:17:59:29:9a:fa:11:c3:f5:38:
36:9d:8d:fd:08:1e:1c:40:68:30:a6:2b:09:a4:61:
f6:3b:13:f6:99:f5:7b:f6:48:f8:35:03:62:7a:55:
e1:3e:e3:be:cf:a3:fe:9a:8d:90:71:71:9f:a7:7a:
e5:0e:75:6f:11:08:19:bc:dd:cf:22:32:c4:cd:45:
10:2f:ee:56:a9:d8:66:fa:eb:84:3f:c8:82:e1:aa:
ce:13:c4:b0:26:49:a8:45:d1:ca:dd:8c:f3:3f:8b:
2d:79:f9:b2:63:c1:4c:0b:68:d9:6d:af:6d:8d:ab:
c9:72:e3:f5:23:34:63:11:c0:b0:25:75:07:7d:9c:
cc:2f:c7:40:41:38:78:81:f7:85:e5:e7:50:d7:da:
72:30:f1:5a:f8:53:d5:bf:1f:75:1f:a6:55:d2:69:
96:94:62:cb:9f:c1:10:fc:6e:75:7b:58:de:a1:c3:
c4:fb:03:92:2d:7e:57:d4:72:79:15:87:41:6a:b4:
0a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:81:C7:AB:86:B8:90:5E:D9:76:3E:A7:37:E4:73:3F:20:F4:8D:49
X509v3 Authority Key Identifier:
keyid:E2:60:B0:A5:5A:87:A6:6E:90:A7:46:3A:01:DA:64:14:FC:03:4D:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:e6:26:e7:88:59:d4:a9:87:80:8a:5e:b2:d1:12:d1:62:0d:
56:1b:22:e4:3d:f3:0c:c0:db:74:a9:25:88:b3:c5:e1:b0:4a:
91:94:2a:44:b3:cc:4c:d2:9b:9e:36:c3:0a:5b:45:ee:06:21:
cf:c3:4d:bf:39:2b:a2:ee:43:62:db:d0:e3:19:e8:c0:27:f5:
00:86:0f:05:e7:cf:e4:96:a8:2b:3e:25:ad:4d:39:71:15:a1:
24:9a:d0:33:33:51:8a:67:59:ff:d5:c1:1f:ab:6e:d0:ed:b4:
a9:35:e2:0d:2e:44:54:ba:38:99:17:6c:a4:1a:fb:6a:6c:22:
f5:75:4f:d8:10:f0:6c:a4:80:d3:8a:1a:91:5a:4e:f2:5b:5b:
c7:31:c9:6e:1a:cb:63:ff:bf:d9:68:ae:73:a0:2c:f6:f6:bd:
c6:be:cb:0a:9e:1c:37:09:33:b0:0f:5c:54:8c:be:36:26:9b:
de:b1:4f:8f:5e:28:e7:b3:91:7c:5f:f2:67:1e:82:b2:7d:59:
3c:14:50:23:7b:cc:9b:1d:6b:5e:a9:cf:86:27:2f:53:97:60:
59:89:a8:bb:da:f8:1b:cf:05:bc:d9:6a:29:76:72:d8:73:12:
b1:36:38:e2:af:a2:fc:20:9d:46:0d:e3:71:c7:8d:5a:49:f1:
3c:be:ab:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZo/gtyzD/D5/F7Bs5KZL0FoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyNjBiMGE1NWE4N2E2NmU5MGE3NDYzYTAxZGE2NDE0ZmMw
MzRkM2QwHhcNMjUxMTAxMTMwMjEyWhcNMjUxMTAyMTMwMjEyWjAzMTEwLwYDVQQD
EyhkNDgxYzdhYjg2Yjg5MDVlZDk3NjNlYTczN2U0NzMzZjIwZjQ4ZDQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDh/d1+9BNvGnFJLlCXAzQnSeEP2
04ywigOODnnJU+X3Nh31sBLcRpkzJA/XpQvmW4JNh7ur3tB2+Roq/IW7S4AXWSma
+hHD9Tg2nY39CB4cQGgwpisJpGH2OxP2mfV79kj4NQNielXhPuO+z6P+mo2QcXGf
p3rlDnVvEQgZvN3PIjLEzUUQL+5Wqdhm+uuEP8iC4arOE8SwJkmoRdHK3YzzP4st
efmyY8FMC2jZba9tjavJcuP1IzRjEcCwJXUHfZzML8dAQTh4gfeF5edQ19pyMPFa
+FPVvx91H6ZV0mmWlGLLn8EQ/G51e1jeocPE+wOSLX5X1HJ5FYdBarQK6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNSBx6uGuJBe2XY+pzfkcz8g9I1JMB8GA1UdIwQY
MBaAFOJgsKVah6ZukKdGOgHaZBT8A009MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNG1Dd3BWcUhwbTZRcDBZNkFkcGtGUHdEVFQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8xYmNiMTEtMzQxZC00YWRlLTk2YjEt
ZDIyNjlmNDBmM2QzLzEvNG1Dd3BWcUhwbTZRcDBZNkFkcGtGUHdEVFQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8xYmNiMTEtMzQxZC00YWRlLTk2YjEtZDIyNjlmNDBmM2Qz
LzEvNG1Dd3BWcUhwbTZRcDBZNkFkcGtGUHdEVFQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdOYm54hZ
1KmHgIpestES0WINVhsi5D3zDMDbdKkliLPF4bBKkZQqRLPMTNKbnjbDCltF7gYh
z8NNvzkrou5DYtvQ4xnowCf1AIYPBefP5JaoKz4lrU05cRWhJJrQMzNRimdZ/9XB
H6tu0O20qTXiDS5EVLo4mRdspBr7amwi9XVP2BDwbKSA04oakVpO8ltbxzHJbhrL
Y/+/2Wiuc6As9va9xr7LCp4cNwkzsA9cVIy+Niab3rFPj14o57ORfF/yZx6Csn1Z
PBRQI3vMmx1rXqnPhicvU5dgWYmou9r4G88FvNlqKXZy2HMSsTY44q+i/CCdRg3j
cceNWknxPL6rvg==
-----END CERTIFICATE-----
Generated at Sat Nov 1 14:45:57 2025 by rpki-client