Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
File: 4I4Xp4G2QRmjpjVwACVPW3lbDag.mft (raw, json)
Hash identifier: H6cpwMUjywe3ahzrEG7J/T7rb1FzJz0hJgqKGxg7CfE=
Subject key identifier: 9C:EB:B1:C8:BD:F7:08:21:48:DF:10:62:9F:DC:EA:C2:99:65:AE:67
Authority key identifier: E0:8E:17:A7:81:B6:41:19:A3:A6:35:70:00:25:4F:5B:79:5B:0D:A8
Certificate issuer: /CN=e08e17a781b64119a3a6357000254f5b795b0da8
Certificate serial: 019A7293DE629316BDB671F0BE0CC091B6FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 11:01:24 +0000
Manifest this update: Tue 11 Nov 2025 11:01:24 +0000
Manifest next update: Wed 12 Nov 2025 11:01:24 +0000
Files and hashes: 1: 4I4Xp4G2QRmjpjVwACVPW3lbDag.crl (hash: kzqabL6ofHNLfW0+PNg6lPZWYuUvTuvSe5nbzkuItvg=)
2: pJOGzrT_mgxPYsaglIaSM0kIw4Y.roa (hash: Ut0Tk0l/Yu9pyhP6CIl9TJN11JVJBhwd7Wz1zOCHBnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:de:62:93:16:bd:b6:71:f0:be:0c:c0:91:b6:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e08e17a781b64119a3a6357000254f5b795b0da8
Validity
Not Before: Nov 11 11:01:24 2025 GMT
Not After : Nov 12 11:01:24 2025 GMT
Subject: CN=9cebb1c8bdf7082148df10629fdceac29965ae67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2c:ab:99:dd:8f:13:51:e5:ec:b4:e8:df:8b:
e8:ec:ae:e6:14:f3:c0:03:6a:b2:a0:89:98:20:c4:
75:9f:f7:47:c2:4c:f4:7f:54:79:86:1d:fd:ac:06:
b9:aa:7b:45:9c:66:7b:5d:b1:46:a0:65:2f:79:51:
cb:74:54:fd:38:f7:93:11:06:ca:7d:86:01:cf:5b:
e2:7e:9f:8d:09:b9:0d:32:6a:68:be:a7:24:54:e5:
60:c2:7f:04:9e:3a:25:5b:f3:69:fa:d2:c9:ed:1a:
d1:ea:52:17:ea:07:63:47:37:e1:cb:da:ff:67:99:
4f:54:21:9b:c6:cb:9f:c1:81:46:33:d9:c9:4a:49:
a8:9d:66:80:76:93:62:86:77:70:b1:bd:bd:ad:09:
3d:31:3b:29:88:a5:65:c9:e2:f0:8d:63:31:58:73:
e0:11:5d:ba:5a:91:7c:2f:b7:3f:97:4a:a3:9d:b0:
b9:61:e3:a8:25:34:1f:e6:d3:fb:83:a0:bc:b1:03:
aa:78:1d:b4:c0:fc:89:54:77:8f:13:16:e3:ee:70:
37:f3:17:a2:29:8c:7b:62:fb:d4:c6:28:f5:0a:94:
f8:a8:56:37:00:b6:f8:bb:91:c1:26:bf:b8:99:17:
e3:84:27:ba:52:cb:8a:db:b2:11:d6:e6:7a:56:1f:
a2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:EB:B1:C8:BD:F7:08:21:48:DF:10:62:9F:DC:EA:C2:99:65:AE:67
X509v3 Authority Key Identifier:
keyid:E0:8E:17:A7:81:B6:41:19:A3:A6:35:70:00:25:4F:5B:79:5B:0D:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:13:29:65:e9:15:2b:ef:16:14:56:bc:ca:da:a4:09:e7:24:
87:8f:eb:6d:10:26:f9:ec:f6:b1:1a:62:a0:39:46:e6:e1:e2:
df:a4:a0:34:22:0c:c8:35:f1:18:cb:80:4d:f1:3d:64:c7:72:
ed:a7:24:4f:30:9c:bf:95:eb:d6:5c:23:23:00:0f:25:2b:16:
56:45:75:7c:13:a5:03:9a:49:45:01:d3:68:3a:91:b6:68:e1:
8b:5b:84:dd:d5:54:15:c5:31:c0:bc:5f:5d:17:da:6f:d3:33:
df:2d:cb:b9:44:13:d9:ce:fc:70:eb:05:db:2a:09:18:43:33:
de:71:5a:4b:31:74:cd:1a:c5:01:0b:dd:3e:1b:08:62:fb:e5:
ca:07:40:69:50:37:06:e0:1d:5d:48:14:44:26:cb:27:56:bf:
fb:93:44:87:18:66:a1:ca:18:1f:86:17:55:6a:fe:a8:0f:8b:
e2:65:6c:77:b6:be:f4:f1:2f:c5:39:14:8f:14:e4:b0:86:b2:
77:a3:ea:c7:2a:cb:d2:75:8b:fc:7b:6d:35:cd:3f:f6:e6:da:
80:53:fb:2a:fe:5f:27:50:5e:b0:4b:10:83:b4:b9:8f:8b:42:
f6:8f:c8:18:7b:36:d5:3f:fe:69:ee:fb:d4:8c:d4:64:e4:55:
e0:15:0b:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk95ikxa9tnHwvgzAkbb9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwOGUxN2E3ODFiNjQxMTlhM2E2MzU3MDAwMjU0ZjViNzk1
YjBkYTgwHhcNMjUxMTExMTEwMTI0WhcNMjUxMTEyMTEwMTI0WjAzMTEwLwYDVQQD
Eyg5Y2ViYjFjOGJkZjcwODIxNDhkZjEwNjI5ZmRjZWFjMjk5NjVhZTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSyrmd2PE1Hl7LTo34vo7K7mFPPA
A2qyoImYIMR1n/dHwkz0f1R5hh39rAa5qntFnGZ7XbFGoGUveVHLdFT9OPeTEQbK
fYYBz1vifp+NCbkNMmpovqckVOVgwn8EnjolW/Np+tLJ7RrR6lIX6gdjRzfhy9r/
Z5lPVCGbxsufwYFGM9nJSkmonWaAdpNihndwsb29rQk9MTspiKVlyeLwjWMxWHPg
EV26WpF8L7c/l0qjnbC5YeOoJTQf5tP7g6C8sQOqeB20wPyJVHePExbj7nA38xei
KYx7YvvUxij1CpT4qFY3ALb4u5HBJr+4mRfjhCe6UsuK27IR1uZ6Vh+iwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJzrsci99wghSN8QYp/c6sKZZa5nMB8GA1UdIwQY
MBaAFOCOF6eBtkEZo6Y1cAAlT1t5Ww2oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEk0WHA0RzJRUm1qcGpWd0FDVlBXM2xiRGFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9hMTQwMjAtMWJmYi00MTMzLWFmY2Ut
ZDVlNDVmMmNhODc5LzEvNEk0WHA0RzJRUm1qcGpWd0FDVlBXM2xiRGFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9hMTQwMjAtMWJmYi00MTMzLWFmY2UtZDVlNDVmMmNhODc5
LzEvNEk0WHA0RzJRUm1qcGpWd0FDVlBXM2xiRGFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIhMpZekV
K+8WFFa8ytqkCeckh4/rbRAm+ez2sRpioDlG5uHi36SgNCIMyDXxGMuATfE9ZMdy
7ackTzCcv5Xr1lwjIwAPJSsWVkV1fBOlA5pJRQHTaDqRtmjhi1uE3dVUFcUxwLxf
XRfab9Mz3y3LuUQT2c78cOsF2yoJGEMz3nFaSzF0zRrFAQvdPhsIYvvlygdAaVA3
BuAdXUgURCbLJ1a/+5NEhxhmocoYH4YXVWr+qA+L4mVsd7a+9PEvxTkUjxTksIay
d6PqxyrL0nWL/HttNc0/9ubagFP7Kv5fJ1BesEsQg7S5j4tC9o/IGHs21T/+ae77
1IzUZORV4BULcQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:59:54 2025 by rpki-client