Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
File: 4KE7ki7n67muzeGacNDiW3d1DQI.mft (raw, json)
Hash identifier: EglfTeY7NyHGr8cRWDul7NqmyeRlVCvVAyk2oK559Is=
Subject key identifier: 56:5B:28:C1:35:17:CE:18:72:D7:A3:F2:F5:26:F6:F2:1F:EE:11:7A
Authority key identifier: E0:A1:3B:92:2E:E7:EB:B9:AE:CD:E1:9A:70:D0:E2:5B:77:75:0D:02
Certificate issuer: /CN=e0a13b922ee7ebb9aecde19a70d0e25b77750d02
Certificate serial: 019A714A0D770FBEB898ED0A6CF0CBAC2EDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KE7ki7n67muzeGacNDiW3d1DQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
Manifest number: 0D12
Signing time: Tue 11 Nov 2025 05:01:09 +0000
Manifest this update: Tue 11 Nov 2025 05:01:09 +0000
Manifest next update: Wed 12 Nov 2025 05:01:09 +0000
Files and hashes: 1: 4KE7ki7n67muzeGacNDiW3d1DQI.crl (hash: ecVlN0lzsdERDG/APz0HNuwrUz0Y0ACktnCG+3tcuLQ=)
2: Y8AXUYDP-qGUFi9hzn6P0gBawaM.roa (hash: PbgeAgI/Sj2ZS05Cb4sm9ySYZjOm8LnX+ij5E01wZBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4KE7ki7n67muzeGacNDiW3d1DQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:0d:77:0f:be:b8:98:ed:0a:6c:f0:cb:ac:2e:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0a13b922ee7ebb9aecde19a70d0e25b77750d02
Validity
Not Before: Nov 11 05:01:09 2025 GMT
Not After : Nov 12 05:01:09 2025 GMT
Subject: CN=565b28c13517ce1872d7a3f2f526f6f21fee117a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a9:cd:65:55:1c:96:79:75:85:58:85:ed:d5:
f1:86:a1:0d:ba:31:83:ba:74:d2:3d:1e:c0:26:dc:
84:7f:f6:f0:e6:11:98:6f:cd:c0:45:74:30:60:00:
e5:1c:d2:7b:fc:25:1d:34:7b:61:1e:95:78:59:10:
4a:06:5f:00:02:54:b0:54:77:43:97:79:f4:58:a6:
0d:84:14:45:28:8b:cd:f0:d2:8d:4b:44:19:71:83:
70:0f:81:98:de:aa:7b:e8:12:a0:eb:cd:af:fe:93:
76:0d:cc:a6:90:57:72:b1:63:31:b8:3c:36:fa:5f:
11:cf:a1:32:3d:ef:fc:4b:c4:cd:7e:f2:b0:7e:81:
2f:39:74:a5:1d:e4:4c:ce:db:33:cc:e5:36:22:70:
ce:dc:b2:43:a7:ec:93:15:ab:68:87:1f:3d:b6:48:
09:92:9a:46:0d:7a:22:d3:df:13:c2:79:e7:8d:f8:
8d:f7:e0:ae:95:80:71:a7:aa:63:81:33:2d:c5:78:
cb:1a:74:66:f8:11:7a:e0:93:e2:fb:a4:6d:40:cf:
d1:48:aa:07:e9:f2:2a:2f:59:e5:d5:e1:60:06:a2:
af:73:53:17:d7:92:25:44:90:ce:0f:dd:87:88:a4:
bc:f1:a5:d2:23:24:9a:a5:e5:75:54:50:bb:f6:81:
49:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:5B:28:C1:35:17:CE:18:72:D7:A3:F2:F5:26:F6:F2:1F:EE:11:7A
X509v3 Authority Key Identifier:
keyid:E0:A1:3B:92:2E:E7:EB:B9:AE:CD:E1:9A:70:D0:E2:5B:77:75:0D:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KE7ki7n67muzeGacNDiW3d1DQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:de:02:80:3a:72:a7:2a:46:02:90:5c:7a:96:84:83:ab:f9:
77:d0:d0:d8:ba:bb:cf:ca:9c:99:49:12:5d:33:c0:ab:aa:b0:
e3:93:fd:47:04:43:2d:3f:cb:cd:1f:ec:bf:c5:ce:94:0e:39:
73:09:52:af:9b:2c:94:11:3a:19:22:08:81:47:30:34:2e:11:
27:69:cc:cd:cc:7e:1b:c2:d5:49:cd:e3:ef:19:7d:4c:18:3d:
39:96:65:e1:c2:18:7c:83:5b:2d:6b:73:70:03:6b:0d:59:e9:
d7:43:4b:d1:e6:90:f0:e2:b4:0c:a7:2e:7a:69:50:d1:4d:f0:
40:08:d5:35:e6:3a:ba:4f:76:67:6e:dc:f3:13:0c:93:fc:6f:
8c:3f:d5:be:6e:26:b3:a0:01:56:e7:57:2e:48:bc:f9:90:15:
5e:d5:c0:94:79:36:c0:62:fa:96:eb:93:fa:81:c3:67:00:54:
b5:be:e9:5b:6d:42:0a:1d:07:3e:b4:e7:0f:26:be:04:a6:70:
76:84:5f:af:00:85:ca:f8:70:25:e2:ab:40:6e:93:52:74:0a:
36:2d:08:e0:49:74:67:f3:45:89:07:4b:bf:1c:33:7b:70:af:
a0:4c:ff:39:cd:75:68:44:e4:46:ed:28:db:33:8e:19:ba:f8:
09:60:be:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxSg13D764mO0KbPDLrC7aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwYTEzYjkyMmVlN2ViYjlhZWNkZTE5YTcwZDBlMjViNzc3
NTBkMDIwHhcNMjUxMTExMDUwMTA5WhcNMjUxMTEyMDUwMTA5WjAzMTEwLwYDVQQD
Eyg1NjViMjhjMTM1MTdjZTE4NzJkN2EzZjJmNTI2ZjZmMjFmZWUxMTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqnNZVUclnl1hViF7dXxhqENujGD
unTSPR7AJtyEf/bw5hGYb83ARXQwYADlHNJ7/CUdNHthHpV4WRBKBl8AAlSwVHdD
l3n0WKYNhBRFKIvN8NKNS0QZcYNwD4GY3qp76BKg682v/pN2DcymkFdysWMxuDw2
+l8Rz6EyPe/8S8TNfvKwfoEvOXSlHeRMztszzOU2InDO3LJDp+yTFatohx89tkgJ
kppGDXoi098TwnnnjfiN9+CulYBxp6pjgTMtxXjLGnRm+BF64JPi+6RtQM/RSKoH
6fIqL1nl1eFgBqKvc1MX15IlRJDOD92HiKS88aXSIySapeV1VFC79oFJTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFZbKME1F84Yctej8vUm9vIf7hF6MB8GA1UdIwQY
MBaAFOChO5Iu5+u5rs3hmnDQ4lt3dQ0CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEtFN2tpN242N211emVHYWNORGlXM2QxRFFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9mNzdjNWItMTliMi00YmMxLThmYWEt
MTBiMDIxMWQ5NmZjLzEvNEtFN2tpN242N211emVHYWNORGlXM2QxRFFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9mNzdjNWItMTliMi00YmMxLThmYWEtMTBiMDIxMWQ5NmZj
LzEvNEtFN2tpN242N211emVHYWNORGlXM2QxRFFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHt4CgDpy
pypGApBcepaEg6v5d9DQ2Lq7z8qcmUkSXTPAq6qw45P9RwRDLT/LzR/sv8XOlA45
cwlSr5sslBE6GSIIgUcwNC4RJ2nMzcx+G8LVSc3j7xl9TBg9OZZl4cIYfINbLWtz
cANrDVnp10NL0eaQ8OK0DKcuemlQ0U3wQAjVNeY6uk92Z27c8xMMk/xvjD/Vvm4m
s6ABVudXLki8+ZAVXtXAlHk2wGL6luuT+oHDZwBUtb7pW21CCh0HPrTnDya+BKZw
doRfrwCFyvhwJeKrQG6TUnQKNi0I4El0Z/NFiQdLvxwze3CvoEz/Oc11aETkRu0o
2zOOGbr4CWC+4g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:09:39 2025 by rpki-client