Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.mft
File: 4imzfrYwaGsTKDOEcbUtqV0gSRE.mft (raw, json)
Hash identifier: MkvwPHoNDZ3XB1pcsYZqnwEPCR39s5IwCde5C9WHDgQ=
Subject key identifier: F4:80:75:BC:E5:D8:CD:A4:A2:73:2B:D0:10:B6:36:40:11:62:5E:91
Authority key identifier: E2:29:B3:7E:B6:30:68:6B:13:28:33:84:71:B5:2D:A9:5D:20:49:11
Certificate issuer: /CN=e229b37eb630686b1328338471b52da95d204911
Certificate serial: 019A71B9262A47997FD176772906CDDF37B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4imzfrYwaGsTKDOEcbUtqV0gSRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.mft
Manifest number: 0C30
Signing time: Tue 11 Nov 2025 07:02:30 +0000
Manifest this update: Tue 11 Nov 2025 07:02:30 +0000
Manifest next update: Wed 12 Nov 2025 07:02:30 +0000
Files and hashes: 1: 4imzfrYwaGsTKDOEcbUtqV0gSRE.crl (hash: mgr51qt0W288uCB9tLrymu7Cm68M7cN8rEL1GSzzmO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4imzfrYwaGsTKDOEcbUtqV0gSRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:26:2a:47:99:7f:d1:76:77:29:06:cd:df:37:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e229b37eb630686b1328338471b52da95d204911
Validity
Not Before: Nov 11 07:02:30 2025 GMT
Not After : Nov 12 07:02:30 2025 GMT
Subject: CN=f48075bce5d8cda4a2732bd010b6364011625e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7e:d7:a8:b5:1f:5e:bc:a3:23:37:fc:2e:fa:
1a:42:a5:3e:61:cf:41:d2:e2:6a:70:30:00:a8:62:
8c:54:bd:ae:03:af:7b:e8:37:50:0c:f1:fa:40:74:
6c:1c:a2:c8:89:9b:c2:86:50:a2:b4:d1:e1:c0:58:
21:20:59:76:1f:0c:5c:da:45:c6:0d:71:1d:8e:f7:
7f:d2:b2:6f:94:f0:12:26:76:db:3b:9a:13:74:9f:
3b:39:22:00:e0:de:55:be:90:66:c6:44:f8:20:84:
2f:cb:00:64:a6:8f:68:08:31:5f:f0:07:37:d2:c0:
a4:a2:bf:41:09:8e:cb:09:6f:26:35:fa:d4:cb:7f:
3f:a6:6d:4d:9d:69:2d:1c:ea:82:58:8c:5e:44:87:
c2:ce:ad:17:99:98:7c:30:b5:c3:ae:8b:80:d4:c2:
50:f0:42:3d:13:92:1a:a0:be:5f:10:61:c7:e1:04:
7e:a9:3e:db:03:51:6e:a8:42:f8:dc:0a:7c:d9:77:
ba:bb:55:a7:dd:35:c6:40:c1:1d:0f:2c:05:78:a2:
1a:2b:db:3c:51:a0:1f:6c:70:a3:4c:27:b0:7e:9a:
b0:19:cd:b3:83:a4:f2:c7:16:20:88:99:23:52:26:
9d:07:6a:1b:9a:f5:c2:22:9b:9d:e0:69:74:bf:c5:
f9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:80:75:BC:E5:D8:CD:A4:A2:73:2B:D0:10:B6:36:40:11:62:5E:91
X509v3 Authority Key Identifier:
keyid:E2:29:B3:7E:B6:30:68:6B:13:28:33:84:71:B5:2D:A9:5D:20:49:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4imzfrYwaGsTKDOEcbUtqV0gSRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:32:d8:6f:f2:5f:84:ae:2c:c6:44:72:39:bb:bf:28:bf:3f:
1a:13:98:56:40:82:b0:e0:90:7b:94:bb:cf:32:65:b3:71:be:
b0:a3:36:ce:0d:01:9a:8d:75:d2:ee:67:e6:34:cd:cf:15:bd:
6d:4d:a0:d8:c9:a1:68:2b:ff:87:dd:f9:47:46:92:86:8a:62:
33:c9:9e:a0:8a:35:f6:97:61:9c:b4:10:6e:cf:02:12:55:e5:
66:82:ce:9e:33:df:77:3b:2f:84:72:ed:35:ed:f1:b3:13:77:
97:e9:23:71:63:9c:2f:3d:ec:73:da:fb:01:58:02:80:6a:01:
ab:21:0b:23:6f:02:6e:d5:14:7c:63:17:a1:0c:f4:d5:56:20:
ab:d4:2e:95:44:56:06:75:7c:9f:12:22:b9:b3:f4:9f:1d:14:
14:80:91:09:82:07:f1:25:59:d9:e8:fc:29:8d:98:c0:cc:3f:
07:bb:00:00:a1:53:c6:83:d0:78:88:4a:17:ef:8c:7a:d7:3a:
f3:ee:68:1e:b2:e0:f4:7c:d8:f1:23:68:30:a8:64:51:0a:43:
83:17:b1:57:f1:c2:3b:1d:d5:52:32:5f:16:c0:57:3f:e3:a3:
c7:1c:c0:8d:a8:89:17:3f:9e:a6:0e:22:51:7a:ac:b9:e8:84:
ed:56:cd:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuSYqR5l/0XZ3KQbN3ze0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyMjliMzdlYjYzMDY4NmIxMzI4MzM4NDcxYjUyZGE5NWQy
MDQ5MTEwHhcNMjUxMTExMDcwMjMwWhcNMjUxMTEyMDcwMjMwWjAzMTEwLwYDVQQD
EyhmNDgwNzViY2U1ZDhjZGE0YTI3MzJiZDAxMGI2MzY0MDExNjI1ZTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqH7XqLUfXryjIzf8LvoaQqU+Yc9B
0uJqcDAAqGKMVL2uA6976DdQDPH6QHRsHKLIiZvChlCitNHhwFghIFl2Hwxc2kXG
DXEdjvd/0rJvlPASJnbbO5oTdJ87OSIA4N5VvpBmxkT4IIQvywBkpo9oCDFf8Ac3
0sCkor9BCY7LCW8mNfrUy38/pm1NnWktHOqCWIxeRIfCzq0XmZh8MLXDrouA1MJQ
8EI9E5IaoL5fEGHH4QR+qT7bA1FuqEL43Ap82Xe6u1Wn3TXGQMEdDywFeKIaK9s8
UaAfbHCjTCewfpqwGc2zg6TyxxYgiJkjUiadB2obmvXCIpud4Gl0v8X5QQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPSAdbzl2M2konMr0BC2NkARYl6RMB8GA1UdIwQY
MBaAFOIps362MGhrEygzhHG1LaldIEkRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGltemZyWXdhR3NUS0RPRWNiVXRxVjBnU1JFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS83NDUwMjQtOWUzNy00NzkwLTg2YWMt
N2RlOGQ4YzJlOTMwLzEvNGltemZyWXdhR3NUS0RPRWNiVXRxVjBnU1JFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS83NDUwMjQtOWUzNy00NzkwLTg2YWMtN2RlOGQ4YzJlOTMw
LzEvNGltemZyWXdhR3NUS0RPRWNiVXRxVjBnU1JFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANzLYb/Jf
hK4sxkRyObu/KL8/GhOYVkCCsOCQe5S7zzJls3G+sKM2zg0Bmo110u5n5jTNzxW9
bU2g2MmhaCv/h935R0aShopiM8meoIo19pdhnLQQbs8CElXlZoLOnjPfdzsvhHLt
Ne3xsxN3l+kjcWOcLz3sc9r7AVgCgGoBqyELI28CbtUUfGMXoQz01VYgq9QulURW
BnV8nxIiubP0nx0UFICRCYIH8SVZ2ej8KY2YwMw/B7sAAKFTxoPQeIhKF++Metc6
8+5oHrLg9HzY8SNoMKhkUQpDgxexV/HCOx3VUjJfFsBXP+OjxxzAjaiJFz+epg4i
UXqsueiE7VbNLQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:11 2025 by rpki-client