Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/216370-1c01-4440-adcd-00f83987bed7/1/4Lvt5klvcXJ3aK9rYbC90w4hcLA.mft
File: 4Lvt5klvcXJ3aK9rYbC90w4hcLA.mft (raw, json)
Hash identifier: k+ZGZDpTeMD44ohT1KVZvuMWh2Xp71ktMplKr/rMYwI=
Subject key identifier: CA:F4:58:1E:2B:39:AD:86:6A:FA:6D:38:26:28:E6:9F:69:DE:C3:EF
Authority key identifier: E0:BB:ED:E6:49:6F:71:72:77:68:AF:6B:61:B0:BD:D3:0E:21:70:B0
Certificate issuer: /CN=e0bbede6496f71727768af6b61b0bdd30e2170b0
Certificate serial: 019A70DC702614E137DD004F28677BCA91A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Lvt5klvcXJ3aK9rYbC90w4hcLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/216370-1c01-4440-adcd-00f83987bed7/1/4Lvt5klvcXJ3aK9rYbC90w4hcLA.mft
Manifest number: A8
Signing time: Tue 11 Nov 2025 03:01:25 +0000
Manifest this update: Tue 11 Nov 2025 03:01:25 +0000
Manifest next update: Wed 12 Nov 2025 03:01:25 +0000
Files and hashes: 1: 4Lvt5klvcXJ3aK9rYbC90w4hcLA.crl (hash: 9OHwVTA6azm4XNTVFyfyeNJ+ZRo1FlGpR/z4o5lbMSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/216370-1c01-4440-adcd-00f83987bed7/1/4Lvt5klvcXJ3aK9rYbC90w4hcLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/216370-1c01-4440-adcd-00f83987bed7/1/4Lvt5klvcXJ3aK9rYbC90w4hcLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Lvt5klvcXJ3aK9rYbC90w4hcLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:70:26:14:e1:37:dd:00:4f:28:67:7b:ca:91:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0bbede6496f71727768af6b61b0bdd30e2170b0
Validity
Not Before: Nov 11 03:01:25 2025 GMT
Not After : Nov 12 03:01:25 2025 GMT
Subject: CN=caf4581e2b39ad866afa6d382628e69f69dec3ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:8a:53:9c:8b:22:d6:cb:8c:6a:35:7f:09:f6:
90:3e:21:82:ad:80:3c:4f:78:12:e3:b6:cc:e5:cb:
fc:45:9a:3e:07:b4:35:69:20:db:8e:2a:62:19:eb:
f3:58:0c:ca:ce:ea:36:3e:8b:1d:52:0e:b0:19:b4:
41:b4:59:ab:03:98:27:b4:f9:3b:4c:10:c2:92:2e:
e5:57:f3:ea:d3:0a:4f:04:48:32:ce:47:be:08:7c:
5d:d8:8e:68:b3:62:61:a6:37:8d:3a:23:2f:e7:0c:
94:61:df:37:be:bc:19:06:7b:6b:9f:af:df:0f:d4:
91:f1:29:25:2c:dd:37:df:f4:ff:8c:b0:37:65:0f:
84:c2:32:96:36:ba:5e:95:e1:b5:45:af:c1:67:ae:
e4:32:72:8b:14:74:cb:15:ea:97:dd:93:04:af:91:
67:2a:d1:1d:aa:d6:d7:6b:d2:aa:73:2a:21:76:ed:
c4:89:b5:f6:9c:09:d5:3a:c4:45:b2:4e:b9:d7:16:
86:94:61:aa:16:13:c2:e0:ae:7a:e2:69:ef:ec:9b:
c4:59:49:2d:01:e1:77:6d:9d:3f:4d:89:fd:d3:06:
f0:06:50:ba:a6:66:f0:6d:e2:af:10:c3:97:99:a8:
27:2c:5e:ce:96:66:c0:1e:dc:13:e3:98:ad:80:3a:
4d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F4:58:1E:2B:39:AD:86:6A:FA:6D:38:26:28:E6:9F:69:DE:C3:EF
X509v3 Authority Key Identifier:
keyid:E0:BB:ED:E6:49:6F:71:72:77:68:AF:6B:61:B0:BD:D3:0E:21:70:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Lvt5klvcXJ3aK9rYbC90w4hcLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/216370-1c01-4440-adcd-00f83987bed7/1/4Lvt5klvcXJ3aK9rYbC90w4hcLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/216370-1c01-4440-adcd-00f83987bed7/1/4Lvt5klvcXJ3aK9rYbC90w4hcLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:81:b2:de:b1:4e:b4:e5:88:85:04:cd:34:e2:93:1e:64:74:
32:88:32:eb:0d:b7:04:6c:5f:69:14:a8:b2:e4:f3:a6:b4:a0:
7b:dd:15:b9:6a:11:34:84:6a:00:23:f4:2d:8e:cb:7e:c8:28:
ff:1a:f8:b6:44:74:e2:32:71:a5:08:59:c8:e0:b1:85:0e:4a:
34:f6:a5:56:ef:9a:14:fd:93:19:ac:13:41:d7:14:a1:e8:9d:
2b:67:42:50:d6:78:be:54:8e:bc:c7:8c:42:2b:01:ca:83:20:
28:6e:46:ca:b6:ca:f5:c0:2b:09:e1:42:26:15:0a:bd:6d:05:
fc:d3:ad:25:67:cd:44:d0:ea:c4:d4:00:f4:97:00:d0:39:62:
c1:da:79:28:c1:ea:7c:15:2d:56:ab:9b:2d:4b:e0:92:65:40:
f8:e7:c9:c9:08:19:97:9c:8e:35:d1:28:48:60:c7:ab:1e:e8:
93:ed:a2:c3:0a:0e:54:62:62:d1:94:11:73:01:e5:67:d9:3e:
c3:f7:c5:b2:e6:00:3b:d3:36:33:ab:23:d4:db:85:ba:c8:fe:
a9:34:1d:d3:0d:0a:f4:9d:a8:2c:4a:b4:68:42:8a:2a:14:df:
9b:a8:c1:db:95:86:76:1e:f2:a9:e3:7e:45:1f:9a:2b:85:dc:
1b:96:0c:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpw3HAmFOE33QBPKGd7ypGhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwYmJlZGU2NDk2ZjcxNzI3NzY4YWY2YjYxYjBiZGQzMGUy
MTcwYjAwHhcNMjUxMTExMDMwMTI1WhcNMjUxMTEyMDMwMTI1WjAzMTEwLwYDVQQD
EyhjYWY0NTgxZTJiMzlhZDg2NmFmYTZkMzgyNjI4ZTY5ZjY5ZGVjM2VmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA94pTnIsi1suMajV/CfaQPiGCrYA8
T3gS47bM5cv8RZo+B7Q1aSDbjipiGevzWAzKzuo2PosdUg6wGbRBtFmrA5gntPk7
TBDCki7lV/Pq0wpPBEgyzke+CHxd2I5os2JhpjeNOiMv5wyUYd83vrwZBntrn6/f
D9SR8SklLN033/T/jLA3ZQ+EwjKWNrpeleG1Ra/BZ67kMnKLFHTLFeqX3ZMEr5Fn
KtEdqtbXa9Kqcyohdu3EibX2nAnVOsRFsk651xaGlGGqFhPC4K564mnv7JvEWUkt
AeF3bZ0/TYn90wbwBlC6pmbwbeKvEMOXmagnLF7OlmbAHtwT45itgDpNUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMr0WB4rOa2GavptOCYo5p9p3sPvMB8GA1UdIwQY
MBaAFOC77eZJb3Fyd2iva2GwvdMOIXCwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEx2dDVrbHZjWEozYUs5clliQzkwdzRoY0xBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8yMTYzNzAtMWMwMS00NDQwLWFkY2Qt
MDBmODM5ODdiZWQ3LzEvNEx2dDVrbHZjWEozYUs5clliQzkwdzRoY0xBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi8yMTYzNzAtMWMwMS00NDQwLWFkY2QtMDBmODM5ODdiZWQ3
LzEvNEx2dDVrbHZjWEozYUs5clliQzkwdzRoY0xBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEIGy3rFO
tOWIhQTNNOKTHmR0Mogy6w23BGxfaRSosuTzprSge90VuWoRNIRqACP0LY7Lfsgo
/xr4tkR04jJxpQhZyOCxhQ5KNPalVu+aFP2TGawTQdcUoeidK2dCUNZ4vlSOvMeM
QisByoMgKG5GyrbK9cArCeFCJhUKvW0F/NOtJWfNRNDqxNQA9JcA0Dliwdp5KMHq
fBUtVqubLUvgkmVA+OfJyQgZl5yONdEoSGDHqx7ok+2iwwoOVGJi0ZQRcwHlZ9k+
w/fFsuYAO9M2M6sj1NuFusj+qTQd0w0K9J2oLEq0aEKKKhTfm6jB25WGdh7yqeN+
RR+aK4XcG5YMpQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:55:12 2025 by rpki-client