Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.mft
File: b4CWRAfF2qRAiKz-leZIi4APreU.mft (raw, json)
Hash identifier: yStxsbKp1v3FUkaKKvlHQjLS2GuL7YhrIm1Dqgo6Z70=
Subject key identifier: 14:8C:9C:F2:65:43:A5:9D:EA:17:F1:AB:9F:CB:79:67:33:C2:68:96
Authority key identifier: 6F:80:96:44:07:C5:DA:A4:40:88:AC:FE:95:E6:48:8B:80:0F:AD:E5
Certificate issuer: /CN=6f80964407c5daa44088acfe95e6488b800fade5
Certificate serial: 019A1EE3D0BE5A9F825C6AC76E7C5342D29F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4CWRAfF2qRAiKz-leZIi4APreU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.mft
Manifest number: 0EF0
Signing time: Sun 26 Oct 2025 05:00:37 +0000
Manifest this update: Sun 26 Oct 2025 05:00:37 +0000
Manifest next update: Mon 27 Oct 2025 05:00:37 +0000
Files and hashes: 1: F1clSCHfCrBchpNItB3_ECdQ4G0.roa (hash: UEaaY9HoQsqjcDAMUvi86kguZEF+pqvnu6gxjIkAd84=)
2: UvaL6VYsICABr4f2mztYJpGnmok.roa (hash: sDs2WTxe4PeqzEe78b/roJLSHAUp5tH9OZKXA5ved2I=)
3: b4CWRAfF2qRAiKz-leZIi4APreU.crl (hash: 8fZsJSHNKIXHPEVA0aed+8ZRPH56lJy8rRwwbCxrHSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4CWRAfF2qRAiKz-leZIi4APreU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:e3:d0:be:5a:9f:82:5c:6a:c7:6e:7c:53:42:d2:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f80964407c5daa44088acfe95e6488b800fade5
Validity
Not Before: Oct 26 05:00:37 2025 GMT
Not After : Oct 27 05:00:37 2025 GMT
Subject: CN=148c9cf26543a59dea17f1ab9fcb796733c26896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:65:78:e9:d3:c3:09:50:43:59:03:4b:0d:13:
57:91:6d:a2:29:61:d8:c5:f5:7a:f5:e6:01:04:00:
f6:d6:7f:7c:21:f5:3d:35:10:4d:83:1d:9e:1b:29:
57:3e:78:1a:e6:95:0d:c3:76:42:45:89:b5:fb:ce:
96:bb:38:14:2a:8c:64:49:ea:8e:31:3b:2b:67:05:
5a:81:e1:9f:9f:f2:5d:87:56:01:85:19:76:b6:74:
3a:8a:b3:88:bd:8a:d3:8f:f6:a9:ab:8b:f0:08:60:
08:c9:04:da:32:2b:b3:38:6e:51:4e:35:5a:c0:50:
07:31:04:89:14:5c:6d:23:61:a6:f8:ee:83:87:c6:
cd:e5:5a:fc:10:b5:28:fd:1f:a6:91:cb:0a:55:1e:
1e:a7:ff:6a:70:2d:ef:1f:b1:a4:a3:0c:52:f4:58:
57:b9:d1:8b:5f:e9:00:46:0d:9a:b2:02:9b:2e:fe:
d3:eb:8b:2a:98:09:5e:bc:8f:83:aa:65:79:77:e5:
ae:c3:b0:31:0c:50:74:4e:67:63:0d:5a:af:b2:1f:
cc:e8:56:9b:79:de:ac:e7:ad:33:17:88:f9:dd:5e:
31:72:00:1c:1b:04:3e:cc:bf:d6:a3:65:39:76:ec:
20:1a:62:01:1a:0c:59:24:52:e1:ec:18:ec:bb:21:
14:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:8C:9C:F2:65:43:A5:9D:EA:17:F1:AB:9F:CB:79:67:33:C2:68:96
X509v3 Authority Key Identifier:
keyid:6F:80:96:44:07:C5:DA:A4:40:88:AC:FE:95:E6:48:8B:80:0F:AD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4CWRAfF2qRAiKz-leZIi4APreU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:21:c4:6a:e3:2a:97:49:66:bb:a6:0b:71:1d:83:48:80:be:
1b:33:6e:78:e2:5e:84:50:04:c1:a7:34:94:42:55:30:18:5e:
2d:9e:8b:ec:e9:48:a8:98:43:60:85:38:c7:18:d3:09:d4:5b:
b7:45:06:0f:2c:c9:91:49:db:e2:f4:44:ce:45:0e:26:5b:44:
52:1e:10:34:8c:c0:7c:8b:af:18:ef:08:cc:70:11:98:57:f7:
4b:94:bc:fc:87:94:68:1a:94:c1:ac:5e:4d:b5:ef:eb:b6:cb:
39:cd:ac:c7:6a:95:6e:fd:04:7a:10:1d:65:51:c1:5c:fe:30:
4d:47:1e:12:f0:cb:66:0b:d1:be:67:54:ff:3d:80:c1:ec:fc:
fa:7e:6d:4d:47:66:4e:d5:c7:8e:11:dd:a3:7b:62:c5:39:e4:
b1:68:f2:a5:f7:d8:0f:e7:af:ce:01:54:de:47:95:05:c1:fb:
83:1a:7e:a8:6e:3a:b6:9a:ca:69:12:6a:bb:82:70:9c:63:6f:
6a:49:72:2e:d2:a5:f5:0f:e8:c1:3a:e9:22:cd:a1:07:18:6c:
6f:7d:5d:49:b6:29:0d:1f:06:1d:b9:8d:18:fb:3b:af:75:33:
af:d4:3c:c1:a2:e3:ec:fc:7b:d7:04:3b:5f:4a:db:47:99:c2:
5f:93:33:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoe49C+Wp+CXGrHbnxTQtKfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODA5NjQ0MDdjNWRhYTQ0MDg4YWNmZTk1ZTY0ODhiODAw
ZmFkZTUwHhcNMjUxMDI2MDUwMDM3WhcNMjUxMDI3MDUwMDM3WjAzMTEwLwYDVQQD
EygxNDhjOWNmMjY1NDNhNTlkZWExN2YxYWI5ZmNiNzk2NzMzYzI2ODk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmV46dPDCVBDWQNLDRNXkW2iKWHY
xfV69eYBBAD21n98IfU9NRBNgx2eGylXPnga5pUNw3ZCRYm1+86WuzgUKoxkSeqO
MTsrZwVageGfn/Jdh1YBhRl2tnQ6irOIvYrTj/apq4vwCGAIyQTaMiuzOG5RTjVa
wFAHMQSJFFxtI2Gm+O6Dh8bN5Vr8ELUo/R+mkcsKVR4ep/9qcC3vH7GkowxS9FhX
udGLX+kARg2asgKbLv7T64sqmAlevI+DqmV5d+Wuw7AxDFB0TmdjDVqvsh/M6Fab
ed6s560zF4j53V4xcgAcGwQ+zL/Wo2U5duwgGmIBGgxZJFLh7BjsuyEUzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBSMnPJlQ6Wd6hfxq5/LeWczwmiWMB8GA1UdIwQY
MBaAFG+AlkQHxdqkQIis/pXmSIuAD63lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRDV1JBZkYycVJBaUt6LWxlWklpNEFQcmVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9iOTA2YzktMmIzZC00MzdjLWEzY2Qt
NWQ5MmNlZjIzYzVhLzEvYjRDV1JBZkYycVJBaUt6LWxlWklpNEFQcmVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9iOTA2YzktMmIzZC00MzdjLWEzY2QtNWQ5MmNlZjIzYzVh
LzEvYjRDV1JBZkYycVJBaUt6LWxlWklpNEFQcmVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANyHEauMq
l0lmu6YLcR2DSIC+GzNueOJehFAEwac0lEJVMBheLZ6L7OlIqJhDYIU4xxjTCdRb
t0UGDyzJkUnb4vREzkUOJltEUh4QNIzAfIuvGO8IzHARmFf3S5S8/IeUaBqUwaxe
TbXv67bLOc2sx2qVbv0EehAdZVHBXP4wTUceEvDLZgvRvmdU/z2Awez8+n5tTUdm
TtXHjhHdo3tixTnksWjypffYD+evzgFU3keVBcH7gxp+qG46tprKaRJqu4JwnGNv
aklyLtKl9Q/owTrpIs2hBxhsb31dSbYpDR8GHbmNGPs7r3Uzr9Q8waLj7Px71wQ7
X0rbR5nCX5Mz3g==
-----END CERTIFICATE-----
Generated at Sun Oct 26 10:52:05 2025 by rpki-client