Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.mft
File: 4Zd4WdBx9xUIN7KstDU_8z79gxw.mft (raw, json)
Hash identifier: EHwbSRSrwBokDciKKmGN8oDpDrq7jQkIk+KyTfe5zt0=
Subject key identifier: AA:20:79:42:8E:24:99:DE:E7:FF:8C:5B:B5:C8:5F:E4:47:28:F8:27
Authority key identifier: E1:97:78:59:D0:71:F7:15:08:37:B2:AC:B4:35:3F:F3:3E:FD:83:1C
Certificate issuer: /CN=e1977859d071f7150837b2acb4353ff33efd831c
Certificate serial: 019A299E707D89DBACD47E1693944EE9DF2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Zd4WdBx9xUIN7KstDU_8z79gxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.mft
Manifest number: 14CA
Signing time: Tue 28 Oct 2025 07:00:40 +0000
Manifest this update: Tue 28 Oct 2025 07:00:40 +0000
Manifest next update: Wed 29 Oct 2025 07:00:40 +0000
Files and hashes: 1: 4Zd4WdBx9xUIN7KstDU_8z79gxw.crl (hash: X4o9PmoEgvGUppl7yo+XGhBbVggZn8iBUK6yaHO9OMw=)
2: yF44GfEIvZjG1b-fqxz7IcsVaik.roa (hash: Nr6aX1S4xhUfVJHe+PzjETZYUXFy6RKCIH4m44as1jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Zd4WdBx9xUIN7KstDU_8z79gxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:9e:70:7d:89:db:ac:d4:7e:16:93:94:4e:e9:df:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1977859d071f7150837b2acb4353ff33efd831c
Validity
Not Before: Oct 28 07:00:40 2025 GMT
Not After : Oct 29 07:00:40 2025 GMT
Subject: CN=aa2079428e2499dee7ff8c5bb5c85fe44728f827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fe:21:84:f0:b0:ea:df:17:7e:d0:ba:6a:39:
0b:13:32:67:3e:67:05:be:70:ee:0c:34:68:b6:b5:
dc:9b:4a:4a:8e:64:f0:e7:a1:14:54:29:b8:a3:77:
d2:5d:a5:43:f8:68:a5:d6:14:e9:dd:89:83:ae:46:
56:dc:be:65:58:70:a7:4c:36:7f:00:87:b8:32:38:
0b:9e:71:b2:ea:cb:81:b7:bf:7a:6e:50:4c:5c:f4:
cd:db:17:52:a4:d5:da:71:b9:d7:e8:0c:d7:d1:dd:
ca:27:ae:40:10:50:7c:b7:ae:97:1c:5b:77:0c:15:
1c:ec:6c:5b:52:3f:0b:89:88:b1:c4:eb:c9:e7:84:
58:0b:dc:bc:12:ed:bb:a0:f0:39:07:26:c3:f4:cf:
e4:71:16:41:2f:7e:a8:6a:55:40:c4:8a:ef:d2:cf:
a2:09:6d:4c:ef:f1:bd:cb:5d:4a:a8:44:19:66:aa:
cf:d2:05:9b:6e:1b:54:c8:bc:92:af:7e:e1:b6:2f:
d3:a7:17:b5:eb:dd:81:14:d0:14:db:76:da:e6:67:
db:97:d2:6d:f7:4b:c6:d1:4c:70:0b:d7:ca:08:46:
80:db:86:1f:21:3a:b2:26:72:cb:f6:15:09:cd:7c:
9a:d9:7d:52:d3:a0:8f:95:43:c1:77:3b:7f:3f:f8:
50:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:20:79:42:8E:24:99:DE:E7:FF:8C:5B:B5:C8:5F:E4:47:28:F8:27
X509v3 Authority Key Identifier:
keyid:E1:97:78:59:D0:71:F7:15:08:37:B2:AC:B4:35:3F:F3:3E:FD:83:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Zd4WdBx9xUIN7KstDU_8z79gxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:1b:f4:96:83:95:c9:2b:67:43:a0:36:78:8a:0c:2e:f7:cb:
f5:ee:cd:aa:29:bc:cd:f8:2b:cf:18:36:d1:e8:f8:48:c0:30:
6d:9c:be:29:55:77:c9:26:c9:e2:29:2a:9b:73:a1:96:5b:43:
98:d7:31:cf:82:e0:67:27:4e:73:52:82:76:6f:39:28:81:b5:
9a:aa:a2:78:b3:12:fa:76:ed:ff:12:50:f2:a0:50:be:56:0b:
b8:70:b5:f3:e9:d1:94:b0:6a:20:89:71:5d:a2:e2:2e:c1:f9:
77:5f:28:2f:6d:f0:02:69:b4:b0:a0:93:df:a7:3d:3e:ec:98:
6a:ed:6a:97:dd:09:6d:b4:3f:d5:7e:7d:dd:c1:55:95:ea:28:
64:0f:dc:69:ab:19:2a:22:2b:f2:e5:8a:04:92:c3:6e:af:db:
44:fe:2d:35:e0:4e:ee:5e:47:b8:46:68:98:81:36:73:3b:a8:
50:95:49:bd:97:89:92:b4:78:07:7e:ee:5e:bf:0d:c8:ff:02:
0f:fe:06:ff:18:2c:54:f2:e5:45:70:aa:5b:25:ed:d4:2a:35:
e4:c1:2f:b8:97:cd:33:49:80:ae:43:94:6e:48:a9:59:63:d5:
de:f8:93:d0:9b:e5:99:39:15:97:f7:95:9f:0a:39:dd:93:29:
ef:80:58:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZopnnB9idus1H4Wk5RO6d8rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxOTc3ODU5ZDA3MWY3MTUwODM3YjJhY2I0MzUzZmYzM2Vm
ZDgzMWMwHhcNMjUxMDI4MDcwMDQwWhcNMjUxMDI5MDcwMDQwWjAzMTEwLwYDVQQD
EyhhYTIwNzk0MjhlMjQ5OWRlZTdmZjhjNWJiNWM4NWZlNDQ3MjhmODI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxf4hhPCw6t8XftC6ajkLEzJnPmcF
vnDuDDRotrXcm0pKjmTw56EUVCm4o3fSXaVD+Gil1hTp3YmDrkZW3L5lWHCnTDZ/
AIe4MjgLnnGy6suBt796blBMXPTN2xdSpNXacbnX6AzX0d3KJ65AEFB8t66XHFt3
DBUc7GxbUj8LiYixxOvJ54RYC9y8Eu27oPA5BybD9M/kcRZBL36oalVAxIrv0s+i
CW1M7/G9y11KqEQZZqrP0gWbbhtUyLySr37hti/Tpxe1692BFNAU23ba5mfbl9Jt
90vG0UxwC9fKCEaA24YfITqyJnLL9hUJzXya2X1S06CPlUPBdzt/P/hQewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKogeUKOJJne5/+MW7XIX+RHKPgnMB8GA1UdIwQY
MBaAFOGXeFnQcfcVCDeyrLQ1P/M+/YMcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFpkNFdkQng5eFVJTjdLc3REVV84ejc5Z3h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85ZDdjZDctZWU2My00ODg2LThmZTEt
YjVjZTZiNmZkNGQxLzEvNFpkNFdkQng5eFVJTjdLc3REVV84ejc5Z3h3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni85ZDdjZDctZWU2My00ODg2LThmZTEtYjVjZTZiNmZkNGQx
LzEvNFpkNFdkQng5eFVJTjdLc3REVV84ejc5Z3h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhhv0loOV
yStnQ6A2eIoMLvfL9e7Nqim8zfgrzxg20ej4SMAwbZy+KVV3ySbJ4ikqm3OhlltD
mNcxz4LgZydOc1KCdm85KIG1mqqieLMS+nbt/xJQ8qBQvlYLuHC18+nRlLBqIIlx
XaLiLsH5d18oL23wAmm0sKCT36c9PuyYau1ql90JbbQ/1X593cFVleooZA/caasZ
KiIr8uWKBJLDbq/bRP4tNeBO7l5HuEZomIE2czuoUJVJvZeJkrR4B37uXr8NyP8C
D/4G/xgsVPLlRXCqWyXt1Co15MEvuJfNM0mArkOUbkipWWPV3viT0JvlmTkVl/eV
nwo53ZMp74BY9w==
-----END CERTIFICATE-----
Generated at Tue Oct 28 11:31:54 2025 by rpki-client