Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6aeda8-b75c-4bbb-8e7d-8feaafac7e89/1/c4P6Q4pvrmKzX5CRh2xE3tucDaM.mft
File: c4P6Q4pvrmKzX5CRh2xE3tucDaM.mft (raw, json)
Hash identifier: bLvBgzPg798Q2KDZslJ+VjzuDv5EQE/AtmEeytF6MW4=
Subject key identifier: 4B:0A:AA:4F:76:9D:35:2F:C2:43:FD:34:11:C3:1F:BA:12:0C:EF:D4
Authority key identifier: 73:83:FA:43:8A:6F:AE:62:B3:5F:90:91:87:6C:44:DE:DB:9C:0D:A3
Certificate issuer: /CN=7383fa438a6fae62b35f9091876c44dedb9c0da3
Certificate serial: 019A70A4DC9C9B9E36DE9C09B25092EDEF63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c4P6Q4pvrmKzX5CRh2xE3tucDaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6aeda8-b75c-4bbb-8e7d-8feaafac7e89/1/c4P6Q4pvrmKzX5CRh2xE3tucDaM.mft
Manifest number: 0BC3
Signing time: Tue 11 Nov 2025 02:00:43 +0000
Manifest this update: Tue 11 Nov 2025 02:00:43 +0000
Manifest next update: Wed 12 Nov 2025 02:00:43 +0000
Files and hashes: 1: c4P6Q4pvrmKzX5CRh2xE3tucDaM.crl (hash: 8CugDqgHMIpJdIKnoQIb5mWnZcx9B3rxHUAlp72EAYM=)
2: cJOETGpzF01z2PB9BHQ2YdHB3Oo.roa (hash: ddSAvoAgeQ9Rf29fTQhbhEaJlnO0oFB6dwFmZVNzK/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6aeda8-b75c-4bbb-8e7d-8feaafac7e89/1/c4P6Q4pvrmKzX5CRh2xE3tucDaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6aeda8-b75c-4bbb-8e7d-8feaafac7e89/1/c4P6Q4pvrmKzX5CRh2xE3tucDaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/c4P6Q4pvrmKzX5CRh2xE3tucDaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:dc:9c:9b:9e:36:de:9c:09:b2:50:92:ed:ef:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7383fa438a6fae62b35f9091876c44dedb9c0da3
Validity
Not Before: Nov 11 02:00:43 2025 GMT
Not After : Nov 12 02:00:43 2025 GMT
Subject: CN=4b0aaa4f769d352fc243fd3411c31fba120cefd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:14:96:9c:9d:e9:65:a3:8b:b2:06:ad:7a:45:
ad:55:7b:c9:29:c6:64:b0:91:fe:1a:66:e7:0a:1e:
75:e4:35:12:cb:81:fe:b2:aa:a8:de:f8:fe:dc:72:
98:47:00:f9:9f:62:bc:d9:30:77:5a:06:ad:8b:03:
11:5a:03:7d:db:14:82:43:e8:5a:79:85:84:d0:fa:
18:c5:f9:d6:2a:e4:95:65:f9:60:3a:57:3e:f7:80:
cd:fa:e4:fd:9e:80:46:bf:0c:5e:82:e7:2f:e6:3b:
b6:37:ef:dd:59:85:f1:9f:32:41:37:59:81:54:4d:
9a:d8:17:74:bc:d3:3f:7a:65:4c:7d:c6:fb:ac:1b:
fb:16:84:81:0f:63:83:cb:d6:f5:d7:e6:31:59:5b:
1d:11:7d:dc:a2:df:10:57:58:2e:c5:81:c3:cc:6e:
b8:36:56:98:b7:51:83:3f:d9:dd:de:5f:8c:df:7d:
2a:33:21:67:a9:4d:26:ba:f3:ac:06:1d:49:1d:0c:
ff:38:fa:fa:ce:1e:ca:2a:e3:d1:c6:69:71:c7:ae:
f3:4e:4b:90:cf:08:c3:e4:f0:af:65:4c:b9:32:1d:
97:8d:cb:4d:c0:50:7d:0b:49:7d:42:db:6f:e3:ff:
1e:ae:ff:15:98:c2:35:22:b0:4c:35:5e:9f:95:b9:
23:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:0A:AA:4F:76:9D:35:2F:C2:43:FD:34:11:C3:1F:BA:12:0C:EF:D4
X509v3 Authority Key Identifier:
keyid:73:83:FA:43:8A:6F:AE:62:B3:5F:90:91:87:6C:44:DE:DB:9C:0D:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4P6Q4pvrmKzX5CRh2xE3tucDaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6aeda8-b75c-4bbb-8e7d-8feaafac7e89/1/c4P6Q4pvrmKzX5CRh2xE3tucDaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6aeda8-b75c-4bbb-8e7d-8feaafac7e89/1/c4P6Q4pvrmKzX5CRh2xE3tucDaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:35:5d:e7:4c:a7:e5:c3:88:6e:1b:ed:c9:cf:96:bd:f3:95:
31:8f:8e:c6:91:79:dc:a1:63:c9:3c:27:db:25:21:31:5d:86:
3d:ad:da:74:04:c3:25:63:b7:60:77:ee:f6:fe:0f:88:fa:54:
f3:f4:ca:92:43:a8:c9:66:06:35:58:68:43:6a:db:30:d0:da:
5e:80:a3:8b:05:80:53:e5:29:c5:a4:3e:f5:4f:c4:07:15:70:
70:f4:b4:1c:18:60:3e:f9:cc:42:a4:36:a8:fa:66:5d:2d:90:
04:8a:ef:7c:f7:f2:84:2e:89:93:56:49:ef:35:c7:91:1b:b7:
de:c1:85:70:a2:6c:d4:fd:41:a7:ab:f0:ac:b2:be:db:a2:8f:
44:3b:82:ee:37:f6:bf:9e:84:53:10:54:f5:ed:e3:26:e7:63:
6e:18:b7:b7:24:27:dc:41:8e:64:23:ca:28:e6:3c:80:f6:10:
47:74:8a:ba:d1:da:20:5c:73:be:3d:10:1d:27:1f:80:f5:59:
41:1f:26:e7:8c:52:23:4e:b6:ca:69:ee:a7:2a:79:8b:6f:62:
5c:43:a3:09:23:45:09:4e:26:8b:22:57:e7:1e:d8:af:ae:00:
61:84:fe:62:21:89:4d:86:c3:37:f0:e4:84:17:79:80:1e:11:
3d:de:d4:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwpNycm5423pwJslCS7e9jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczODNmYTQzOGE2ZmFlNjJiMzVmOTA5MTg3NmM0NGRlZGI5
YzBkYTMwHhcNMjUxMTExMDIwMDQzWhcNMjUxMTEyMDIwMDQzWjAzMTEwLwYDVQQD
Eyg0YjBhYWE0Zjc2OWQzNTJmYzI0M2ZkMzQxMWMzMWZiYTEyMGNlZmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBSWnJ3pZaOLsgatekWtVXvJKcZk
sJH+GmbnCh515DUSy4H+sqqo3vj+3HKYRwD5n2K82TB3WgatiwMRWgN92xSCQ+ha
eYWE0PoYxfnWKuSVZflgOlc+94DN+uT9noBGvwxegucv5ju2N+/dWYXxnzJBN1mB
VE2a2Bd0vNM/emVMfcb7rBv7FoSBD2ODy9b11+YxWVsdEX3cot8QV1guxYHDzG64
NlaYt1GDP9nd3l+M330qMyFnqU0muvOsBh1JHQz/OPr6zh7KKuPRxmlxx67zTkuQ
zwjD5PCvZUy5Mh2XjctNwFB9C0l9Qttv4/8erv8VmMI1IrBMNV6flbkjHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEsKqk92nTUvwkP9NBHDH7oSDO/UMB8GA1UdIwQY
MBaAFHOD+kOKb65is1+QkYdsRN7bnA2jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzRQNlE0cHZybUt6WDVDUmgyeEUzdHVjRGFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC82YWVkYTgtYjc1Yy00YmJiLThlN2Qt
OGZlYWFmYWM3ZTg5LzEvYzRQNlE0cHZybUt6WDVDUmgyeEUzdHVjRGFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC82YWVkYTgtYjc1Yy00YmJiLThlN2QtOGZlYWFmYWM3ZTg5
LzEvYzRQNlE0cHZybUt6WDVDUmgyeEUzdHVjRGFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfTVd50yn
5cOIbhvtyc+WvfOVMY+OxpF53KFjyTwn2yUhMV2GPa3adATDJWO3YHfu9v4PiPpU
8/TKkkOoyWYGNVhoQ2rbMNDaXoCjiwWAU+UpxaQ+9U/EBxVwcPS0HBhgPvnMQqQ2
qPpmXS2QBIrvfPfyhC6Jk1ZJ7zXHkRu33sGFcKJs1P1Bp6vwrLK+26KPRDuC7jf2
v56EUxBU9e3jJudjbhi3tyQn3EGOZCPKKOY8gPYQR3SKutHaIFxzvj0QHScfgPVZ
QR8m54xSI062ymnupyp5i29iXEOjCSNFCU4miyJX5x7Yr64AYYT+YiGJTYbDN/Dk
hBd5gB4RPd7UAA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:23 2025 by rpki-client