Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft
File: 4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft (raw, json)
Hash identifier: 0OftC7wb+mssefnoNd9H2OqznD0qlehkXXsYwOFzsN8=
Subject key identifier: 16:42:D9:65:53:C9:84:23:11:1F:C8:83:2F:9E:D4:4B:4C:75:C0:14
Authority key identifier: E0:5D:28:F1:49:79:3A:3D:72:E8:EF:04:1E:9C:9E:0D:9A:66:B2:1E
Certificate issuer: /CN=e05d28f149793a3d72e8ef041e9c9e0d9a66b21e
Certificate serial: 019A72935B2EA213E51B1CA6DB1D863836EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft
Manifest number: 0CD1
Signing time: Tue 11 Nov 2025 11:00:50 +0000
Manifest this update: Tue 11 Nov 2025 11:00:50 +0000
Manifest next update: Wed 12 Nov 2025 11:00:50 +0000
Files and hashes: 1: 4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.crl (hash: OK6f7cLu2jPkevAjxyFTZGwCXNAOkJhF5RpcZFIPz78=)
2: 8bvtISuekSRpBrLsSpaV6rAQww8.roa (hash: aP0bCcp5CUzuOtRFBu3Cv7XlqsZIi2ySA9u8hp6h1oU=)
3: HbFrbBDigmkbyhupjsQvR2G2rcg.roa (hash: DeaPvaz1CarpC6mp6iOUrw4n3hX9gcQTUiHE5Oraa94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:5b:2e:a2:13:e5:1b:1c:a6:db:1d:86:38:36:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e05d28f149793a3d72e8ef041e9c9e0d9a66b21e
Validity
Not Before: Nov 11 11:00:50 2025 GMT
Not After : Nov 12 11:00:50 2025 GMT
Subject: CN=1642d96553c98423111fc8832f9ed44b4c75c014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0f:2f:fc:c9:69:ba:64:27:5a:55:9f:48:16:
6d:bd:50:97:e8:1f:de:99:2d:d0:d9:c4:2c:6a:d7:
c7:a2:a8:4e:5f:27:68:27:48:8d:68:c2:f6:bf:7b:
2b:53:28:b8:77:e4:b2:5d:12:22:b2:94:7b:ce:e7:
d2:e5:2d:0b:2e:ff:82:16:5c:57:0a:a4:25:cc:d3:
8f:40:16:65:b8:9b:76:36:bc:92:1b:ed:09:af:b9:
a8:07:8f:f9:96:64:19:49:5a:45:27:e2:5d:da:08:
ef:59:b3:60:05:17:e1:54:b4:7d:2e:a3:b1:5b:bc:
7b:67:94:75:b9:6e:00:4d:ea:fe:58:cd:7d:d7:91:
4a:e7:06:cf:b1:fe:6b:42:ab:c6:42:9a:2b:e4:6a:
42:95:d6:68:5d:e4:63:aa:f5:a2:65:85:5a:fd:14:
d7:f0:3f:98:7b:ab:51:2b:7c:7a:a1:6b:37:d7:9a:
1f:73:5c:c3:c1:9e:5e:d5:04:68:f8:26:88:4c:04:
09:20:81:18:03:60:83:e9:4f:69:c1:ef:55:09:0f:
5d:90:30:1b:3b:23:da:48:3d:2a:7c:a8:a8:f0:fc:
d6:d7:4b:04:40:8e:7d:7b:8b:83:c9:e2:10:4d:f5:
a3:7e:c9:64:85:ee:ab:4f:9d:0e:05:83:cc:e2:6d:
08:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:42:D9:65:53:C9:84:23:11:1F:C8:83:2F:9E:D4:4B:4C:75:C0:14
X509v3 Authority Key Identifier:
keyid:E0:5D:28:F1:49:79:3A:3D:72:E8:EF:04:1E:9C:9E:0D:9A:66:B2:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:44:7a:95:fd:60:33:a3:4b:e2:11:d0:76:31:a8:eb:5d:cf:
5e:d3:55:d1:67:fb:07:97:93:b5:8f:a8:a7:17:b4:24:69:83:
3c:e0:be:a1:c2:65:01:f7:ae:f4:fb:7f:6c:35:28:4e:65:0b:
db:50:01:1e:25:ca:00:66:a6:b6:86:d4:65:d7:d4:4d:11:24:
ad:7b:86:81:84:30:f2:55:d4:eb:27:ff:3b:bd:2a:32:2b:97:
b4:2c:7e:02:12:1f:22:37:a1:50:10:ab:79:c0:8e:ce:ab:87:
35:03:14:7e:d5:54:38:8e:d9:62:69:05:73:b3:a3:27:87:a6:
63:e8:44:41:e8:59:e5:70:75:4d:92:87:69:fd:a4:46:3d:47:
a3:96:fb:e1:1b:23:a9:a8:c2:e0:57:f1:0e:3a:6e:9e:ec:29:
93:3e:7e:1e:bb:a1:bd:28:d8:5c:a2:c9:38:4e:d7:85:c2:f0:
98:d6:d8:14:ff:14:45:27:64:3e:e9:cb:4b:93:35:54:87:2c:
4b:56:5c:d0:48:a5:2c:ce:9b:ee:a9:79:f3:de:9b:6c:03:70:
9d:b9:b3:42:33:6d:3c:83:68:b4:1d:cc:df:29:3a:5d:6f:0a:
13:51:93:db:25:03:d3:9e:90:f8:2c:38:cb:8c:22:2a:c7:62:
df:d7:5e:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk1suohPlGxym2x2GODbuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNWQyOGYxNDk3OTNhM2Q3MmU4ZWYwNDFlOWM5ZTBkOWE2
NmIyMWUwHhcNMjUxMTExMTEwMDUwWhcNMjUxMTEyMTEwMDUwWjAzMTEwLwYDVQQD
EygxNjQyZDk2NTUzYzk4NDIzMTExZmM4ODMyZjllZDQ0YjRjNzVjMDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2g8v/MlpumQnWlWfSBZtvVCX6B/e
mS3Q2cQsatfHoqhOXydoJ0iNaML2v3srUyi4d+SyXRIispR7zufS5S0LLv+CFlxX
CqQlzNOPQBZluJt2NrySG+0Jr7moB4/5lmQZSVpFJ+Jd2gjvWbNgBRfhVLR9LqOx
W7x7Z5R1uW4ATer+WM1915FK5wbPsf5rQqvGQpor5GpCldZoXeRjqvWiZYVa/RTX
8D+Ye6tRK3x6oWs315ofc1zDwZ5e1QRo+CaITAQJIIEYA2CD6U9pwe9VCQ9dkDAb
OyPaSD0qfKio8PzW10sEQI59e4uDyeIQTfWjfslkhe6rT50OBYPM4m0IRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBZC2WVTyYQjER/Igy+e1EtMdcAUMB8GA1UdIwQY
MBaAFOBdKPFJeTo9cujvBB6cng2aZrIeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEYwbzhVbDVPajF5Nk84RUhweWVEWnBtc2g0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9iNGM5N2ItZTAwNS00Y2Q2LTgzMzUt
ODA5MWViY2UzYmJmLzEvNEYwbzhVbDVPajF5Nk84RUhweWVEWnBtc2g0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9iNGM5N2ItZTAwNS00Y2Q2LTgzMzUtODA5MWViY2UzYmJm
LzEvNEYwbzhVbDVPajF5Nk84RUhweWVEWnBtc2g0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg0R6lf1g
M6NL4hHQdjGo613PXtNV0Wf7B5eTtY+opxe0JGmDPOC+ocJlAfeu9Pt/bDUoTmUL
21ABHiXKAGamtobUZdfUTREkrXuGgYQw8lXU6yf/O70qMiuXtCx+AhIfIjehUBCr
ecCOzquHNQMUftVUOI7ZYmkFc7OjJ4emY+hEQehZ5XB1TZKHaf2kRj1Ho5b74Rsj
qajC4FfxDjpunuwpkz5+HruhvSjYXKLJOE7XhcLwmNbYFP8URSdkPunLS5M1VIcs
S1Zc0EilLM6b7ql5896bbANwnbmzQjNtPINotB3M3yk6XW8KE1GT2yUD056Q+Cw4
y4wiKsdi39deMA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 17:16:46 2025 by rpki-client