Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft
File: 4Sz8faj6dKFt04wXwgoBksuy0_4.mft (raw, json)
Hash identifier: +Y4tt0Loy7innJkjKUZbWyVYYV1X7g31C9VUwaRizHA=
Subject key identifier: 84:A9:C0:66:25:38:E6:8A:68:25:30:4C:AD:A7:3A:EB:60:A1:C7:46
Authority key identifier: E1:2C:FC:7D:A8:FA:74:A1:6D:D3:8C:17:C2:0A:01:92:CB:B2:D3:FE
Certificate issuer: /CN=e12cfc7da8fa74a16dd38c17c20a0192cbb2d3fe
Certificate serial: 019A725CE18F36B2D9D7B290293B137AFE6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Sz8faj6dKFt04wXwgoBksuy0_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft
Manifest number: 0DEF
Signing time: Tue 11 Nov 2025 10:01:20 +0000
Manifest this update: Tue 11 Nov 2025 10:01:20 +0000
Manifest next update: Wed 12 Nov 2025 10:01:20 +0000
Files and hashes: 1: 4Sz8faj6dKFt04wXwgoBksuy0_4.crl (hash: KzJla/LMMq3Z3HKrth/EG2LuD2yzkbBM8KbypFHyPzI=)
2: CzgWRo2OrtBEMKgJ83rtq5Y3g98.roa (hash: 2xTrIXSTjNXzltKj7q0eYjRCvrpmaN3vPbRoQNYjpK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Sz8faj6dKFt04wXwgoBksuy0_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:e1:8f:36:b2:d9:d7:b2:90:29:3b:13:7a:fe:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e12cfc7da8fa74a16dd38c17c20a0192cbb2d3fe
Validity
Not Before: Nov 11 10:01:20 2025 GMT
Not After : Nov 12 10:01:20 2025 GMT
Subject: CN=84a9c0662538e68a6825304cada73aeb60a1c746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f2:dc:b9:ee:f5:b3:20:45:88:99:93:e4:41:
aa:59:1d:f0:4f:6d:70:80:ac:f5:16:38:c2:1c:3f:
5c:3a:1d:e1:02:ac:46:23:c7:5f:55:06:2c:be:c2:
be:1b:47:69:c2:e2:37:f0:d9:d2:24:cf:ee:04:1c:
73:bb:49:89:62:91:bc:d0:5d:66:da:25:f7:ff:87:
b0:b9:29:c8:4f:aa:78:9d:66:78:2d:64:7f:82:84:
84:6a:14:6a:74:a8:21:a8:58:17:19:1a:75:b7:83:
70:88:bb:db:9c:42:eb:1e:c1:a0:09:03:ef:63:90:
5d:8e:55:3e:b9:51:97:af:10:b1:19:2c:2c:16:f1:
e0:8d:1a:88:9d:18:89:8c:f4:9e:49:cf:23:fa:d1:
5a:f1:0e:c3:1a:70:08:1a:24:0c:5c:7c:b2:b5:db:
0c:a8:9e:4a:17:8a:fb:9a:82:21:e7:0f:dc:8b:3c:
3e:86:ad:1f:63:2a:4f:07:fe:b7:29:c2:08:8e:81:
b5:80:eb:06:a4:04:67:2e:ed:e2:79:64:3e:7b:fe:
59:59:1c:70:f3:8e:4f:23:21:f5:9d:03:b6:e7:49:
c3:08:5b:ea:18:d3:90:99:c8:7e:69:8d:c8:03:cb:
5a:a3:0b:7c:8f:25:ee:b7:63:42:c9:30:cb:59:5f:
20:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A9:C0:66:25:38:E6:8A:68:25:30:4C:AD:A7:3A:EB:60:A1:C7:46
X509v3 Authority Key Identifier:
keyid:E1:2C:FC:7D:A8:FA:74:A1:6D:D3:8C:17:C2:0A:01:92:CB:B2:D3:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Sz8faj6dKFt04wXwgoBksuy0_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:bd:3b:d9:24:45:b9:8f:df:0d:69:8d:2c:59:f8:d0:3c:3a:
aa:d0:9c:05:28:0e:9e:82:98:5d:e7:a5:f4:3f:82:e5:ae:f3:
8e:63:08:36:74:c9:0f:88:cc:46:70:6b:12:51:6e:7f:cb:87:
64:9b:aa:1e:78:65:e0:c3:16:1f:14:8e:f4:96:e4:4b:1c:c8:
08:50:c9:76:f3:0e:5b:f1:05:88:b5:94:6c:dd:e1:66:cc:3f:
42:f7:aa:b6:7e:95:6a:07:4d:b5:fb:c8:01:2f:78:f0:52:c6:
2c:13:e0:81:b5:7e:f4:84:a5:0d:1d:45:8c:40:6a:ef:de:d9:
3d:5a:a2:62:d9:7c:41:c9:0d:61:86:36:e3:1a:07:6e:95:84:
37:8b:a0:b9:d0:ad:b4:60:e9:4c:66:4b:2a:5b:61:70:98:74:
7e:d5:cf:3b:5f:ba:59:16:45:b5:6d:1e:94:32:87:f2:c3:ee:
e3:bd:b1:d7:e5:54:98:d5:37:5c:c8:ce:ed:ea:fc:f3:c1:ba:
d1:2b:89:3e:93:04:fe:1f:d8:d7:b6:c7:2f:8f:5e:d9:5c:f2:
ec:fe:25:a2:98:58:a0:79:e4:02:b0:9f:e1:98:11:d1:93:7e:
ae:49:fc:4f:bf:50:70:65:bd:88:cf:19:1d:77:25:7b:16:97:
f1:5c:00:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXOGPNrLZ17KQKTsTev5vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMmNmYzdkYThmYTc0YTE2ZGQzOGMxN2MyMGEwMTkyY2Ji
MmQzZmUwHhcNMjUxMTExMTAwMTIwWhcNMjUxMTEyMTAwMTIwWjAzMTEwLwYDVQQD
Eyg4NGE5YzA2NjI1MzhlNjhhNjgyNTMwNGNhZGE3M2FlYjYwYTFjNzQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvLcue71syBFiJmT5EGqWR3wT21w
gKz1FjjCHD9cOh3hAqxGI8dfVQYsvsK+G0dpwuI38NnSJM/uBBxzu0mJYpG80F1m
2iX3/4ewuSnIT6p4nWZ4LWR/goSEahRqdKghqFgXGRp1t4NwiLvbnELrHsGgCQPv
Y5BdjlU+uVGXrxCxGSwsFvHgjRqInRiJjPSeSc8j+tFa8Q7DGnAIGiQMXHyytdsM
qJ5KF4r7moIh5w/cizw+hq0fYypPB/63KcIIjoG1gOsGpARnLu3ieWQ+e/5ZWRxw
845PIyH1nQO250nDCFvqGNOQmch+aY3IA8taowt8jyXut2NCyTDLWV8gOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFISpwGYlOOaKaCUwTK2nOutgocdGMB8GA1UdIwQY
MBaAFOEs/H2o+nShbdOMF8IKAZLLstP+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFN6OGZhajZkS0Z0MDR3WHdnb0Jrc3V5MF80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9hNmFlZmYtOWI5YS00YzE4LTk0NzQt
MjI3MmI0ZGJhYTYyLzEvNFN6OGZhajZkS0Z0MDR3WHdnb0Jrc3V5MF80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC9hNmFlZmYtOWI5YS00YzE4LTk0NzQtMjI3MmI0ZGJhYTYy
LzEvNFN6OGZhajZkS0Z0MDR3WHdnb0Jrc3V5MF80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV7072SRF
uY/fDWmNLFn40Dw6qtCcBSgOnoKYXeel9D+C5a7zjmMINnTJD4jMRnBrElFuf8uH
ZJuqHnhl4MMWHxSO9JbkSxzICFDJdvMOW/EFiLWUbN3hZsw/Qveqtn6VagdNtfvI
AS948FLGLBPggbV+9ISlDR1FjEBq797ZPVqiYtl8QckNYYY24xoHbpWEN4ugudCt
tGDpTGZLKlthcJh0ftXPO1+6WRZFtW0elDKH8sPu472x1+VUmNU3XMjO7er888G6
0SuJPpME/h/Y17bHL49e2Vzy7P4lophYoHnkArCf4ZgR0ZN+rkn8T79QcGW9iM8Z
HXclexaX8VwAZg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:54 2025 by rpki-client