Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
File: 4_oaCoi7tUs_gvwll9JSr_dhO8U.mft (raw, json)
Hash identifier: 761nXd8uC619q0kfhnOhQCYAA2o1dNyg408t/taz/F8=
Subject key identifier: 5D:8A:67:28:8E:B4:1F:F7:EE:7F:E5:0D:6E:83:9D:DF:A8:B0:14:DA
Authority key identifier: E3:FA:1A:0A:88:BB:B5:4B:3F:82:FC:25:97:D2:52:AF:F7:61:3B:C5
Certificate issuer: /CN=e3fa1a0a88bbb54b3f82fc2597d252aff7613bc5
Certificate serial: 019A07817AB7892EAC43F6C0245BDC2E52F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
Manifest number: 16E8
Signing time: Tue 21 Oct 2025 16:01:57 +0000
Manifest this update: Tue 21 Oct 2025 16:01:57 +0000
Manifest next update: Wed 22 Oct 2025 16:01:57 +0000
Files and hashes: 1: 4_oaCoi7tUs_gvwll9JSr_dhO8U.crl (hash: nC8NNRUWUzC2vD0VWotsezXdFKobXNOoPMWPC1h+VM8=)
2: zkyq_bkRmP7y8uEpa3W6vwIy36k.roa (hash: rvIkZjLBjiZPMwp1YJD6TUGI2vyzFxSQs2biVpfUSoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:07:81:7a:b7:89:2e:ac:43:f6:c0:24:5b:dc:2e:52:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3fa1a0a88bbb54b3f82fc2597d252aff7613bc5
Validity
Not Before: Oct 21 16:01:57 2025 GMT
Not After : Oct 22 16:01:57 2025 GMT
Subject: CN=5d8a67288eb41ff7ee7fe50d6e839ddfa8b014da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5a:e2:2f:cc:a1:ad:a0:7d:a5:7f:df:fa:9a:
14:15:55:4f:58:2d:0b:35:22:28:3d:26:a0:43:a8:
3e:d0:00:0b:76:99:ce:a1:d8:63:f4:15:92:f3:a5:
3d:9c:07:70:a7:d6:8f:2f:1e:cd:bf:c5:52:2e:28:
11:f1:25:2e:27:b3:e7:bf:d7:35:2a:22:cb:84:46:
39:b3:21:ce:52:22:6a:c7:c8:2a:07:33:53:fa:ee:
f0:a5:1c:ed:85:4a:5d:73:c4:60:a8:49:ee:3c:ae:
a9:a9:03:af:c8:b6:c5:1b:4e:02:d9:1a:72:a8:2f:
1e:3a:04:70:7d:35:3e:75:a8:50:cb:f8:f2:4c:68:
4f:9d:77:82:a7:12:c7:af:76:68:d9:3a:72:c4:21:
4e:b2:09:e1:00:35:61:d2:ed:27:8a:96:0a:20:ff:
7a:ee:f4:57:38:a0:83:02:6b:48:b7:eb:1e:2c:cc:
eb:01:23:3f:7f:a1:4c:01:07:27:56:12:90:54:8b:
fc:89:68:ac:09:2d:a4:67:af:4b:35:e1:c4:80:09:
67:a5:db:a2:8c:04:e6:0b:68:c0:08:98:af:1e:d5:
8c:06:40:dc:ce:79:5e:e0:d1:6f:55:c7:0b:ab:99:
74:05:27:43:d5:f3:47:1c:dd:1e:ca:de:08:be:4e:
49:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:8A:67:28:8E:B4:1F:F7:EE:7F:E5:0D:6E:83:9D:DF:A8:B0:14:DA
X509v3 Authority Key Identifier:
keyid:E3:FA:1A:0A:88:BB:B5:4B:3F:82:FC:25:97:D2:52:AF:F7:61:3B:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:2c:a8:c2:38:ce:34:78:98:5c:eb:88:28:57:54:54:4b:14:
7a:f8:4e:7b:0f:ec:08:02:c3:42:11:ee:43:02:93:ab:15:04:
9a:2f:fb:21:e3:9d:a0:60:ab:ed:c3:3b:19:95:b9:c6:08:76:
11:39:47:18:72:fc:f5:e8:a4:c7:21:ab:e6:47:2e:07:07:bc:
3b:6f:93:99:1d:62:1a:52:01:89:f2:58:7a:09:f5:f6:48:5d:
f5:d3:04:7e:10:8d:ee:7e:d5:df:ac:9e:44:7a:99:13:c0:e2:
e1:f9:e0:a4:85:31:da:d0:7c:60:a2:17:c5:42:42:e9:72:4f:
1f:49:bc:1a:82:11:4a:b6:2d:34:fa:5e:b3:bc:08:c2:2b:04:
46:fa:6e:1b:17:af:33:e2:01:a1:16:80:d6:ef:02:e7:64:4a:
60:62:96:d9:9c:4e:20:fe:4f:d7:59:c2:fd:92:a2:4e:c5:30:
22:5b:c3:61:44:10:a7:af:46:2b:a0:92:f2:07:88:a9:a4:a1:
ec:f5:c5:64:35:51:f1:eb:b8:f9:a8:07:89:69:a8:87:2b:b7:
bb:36:72:26:aa:33:1b:76:22:cb:8d:a1:b0:86:a3:fc:ac:11:
69:91:a6:a3:17:d6:2d:95:98:67:e3:de:58:2b:24:ac:a6:0c:
95:47:6a:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoHgXq3iS6sQ/bAJFvcLlLyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZmExYTBhODhiYmI1NGIzZjgyZmMyNTk3ZDI1MmFmZjc2
MTNiYzUwHhcNMjUxMDIxMTYwMTU3WhcNMjUxMDIyMTYwMTU3WjAzMTEwLwYDVQQD
Eyg1ZDhhNjcyODhlYjQxZmY3ZWU3ZmU1MGQ2ZTgzOWRkZmE4YjAxNGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1riL8yhraB9pX/f+poUFVVPWC0L
NSIoPSagQ6g+0AALdpnOodhj9BWS86U9nAdwp9aPLx7Nv8VSLigR8SUuJ7Pnv9c1
KiLLhEY5syHOUiJqx8gqBzNT+u7wpRzthUpdc8RgqEnuPK6pqQOvyLbFG04C2Rpy
qC8eOgRwfTU+dahQy/jyTGhPnXeCpxLHr3Zo2TpyxCFOsgnhADVh0u0nipYKIP96
7vRXOKCDAmtIt+seLMzrASM/f6FMAQcnVhKQVIv8iWisCS2kZ69LNeHEgAlnpdui
jATmC2jACJivHtWMBkDcznle4NFvVccLq5l0BSdD1fNHHN0eyt4Ivk5JiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF2KZyiOtB/37n/lDW6Dnd+osBTaMB8GA1UdIwQY
MBaAFOP6GgqIu7VLP4L8JZfSUq/3YTvFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNF9vYUNvaTd0VXNfZ3Z3bGw5SlNyX2RoTzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8yN2FjMzItYWZjZi00ZTI4LWFiZmUt
NDY4M2JmZWQwMDM4LzEvNF9vYUNvaTd0VXNfZ3Z3bGw5SlNyX2RoTzhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8yN2FjMzItYWZjZi00ZTI4LWFiZmUtNDY4M2JmZWQwMDM4
LzEvNF9vYUNvaTd0VXNfZ3Z3bGw5SlNyX2RoTzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXSyowjjO
NHiYXOuIKFdUVEsUevhOew/sCALDQhHuQwKTqxUEmi/7IeOdoGCr7cM7GZW5xgh2
ETlHGHL89eikxyGr5kcuBwe8O2+TmR1iGlIBifJYegn19khd9dMEfhCN7n7V36ye
RHqZE8Di4fngpIUx2tB8YKIXxUJC6XJPH0m8GoIRSrYtNPpes7wIwisERvpuGxev
M+IBoRaA1u8C52RKYGKW2ZxOIP5P11nC/ZKiTsUwIlvDYUQQp69GK6CS8geIqaSh
7PXFZDVR8eu4+agHiWmohyu3uzZyJqozG3Yiy42hsIaj/KwRaZGmoxfWLZWYZ+Pe
WCskrKYMlUdq3A==
-----END CERTIFICATE-----
Generated at Tue Oct 21 22:29:51 2025 by rpki-client