Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/1162e7-4f74-4e69-ba99-b80efbd68bfd/1/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.mft
File: 4xL0QTgtW6HYDfRZvUbAoxWQ5y8.mft (raw, json)
Hash identifier: BhIhFVAoKSP2BipsihNByl3R01WVCD2VC3s/1GAjduA=
Subject key identifier: 6F:D5:18:22:D1:23:DC:89:D4:0E:5F:AE:95:4A:B8:D3:B6:F8:EE:75
Authority key identifier: E3:12:F4:41:38:2D:5B:A1:D8:0D:F4:59:BD:46:C0:A3:15:90:E7:2F
Certificate issuer: /CN=e312f441382d5ba1d80df459bd46c0a31590e72f
Certificate serial: 019A7301A8A40A0C6F34A973BFB83D654151
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/1162e7-4f74-4e69-ba99-b80efbd68bfd/1/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.mft
Manifest number: 02BC
Signing time: Tue 11 Nov 2025 13:01:19 +0000
Manifest this update: Tue 11 Nov 2025 13:01:19 +0000
Manifest next update: Wed 12 Nov 2025 13:01:19 +0000
Files and hashes: 1: 4xL0QTgtW6HYDfRZvUbAoxWQ5y8.crl (hash: MZFIb8ijAjuCHWxY9NAwHiuTyFvJ6un1C8OI4xpNFfs=)
2: V9qSkag-yPFb6kdg7t_bXdafQY8.roa (hash: /gE5NbLPMb6fQQc04np3UK1UkGHwo2L/kFXUOBu9e5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/1162e7-4f74-4e69-ba99-b80efbd68bfd/1/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/1162e7-4f74-4e69-ba99-b80efbd68bfd/1/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:a8:a4:0a:0c:6f:34:a9:73:bf:b8:3d:65:41:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e312f441382d5ba1d80df459bd46c0a31590e72f
Validity
Not Before: Nov 11 13:01:19 2025 GMT
Not After : Nov 12 13:01:19 2025 GMT
Subject: CN=6fd51822d123dc89d40e5fae954ab8d3b6f8ee75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7e:ca:79:a9:a3:29:43:35:57:9b:f7:36:38:
19:1d:0c:3e:e6:ab:05:df:68:01:c5:ff:1a:78:61:
15:f3:0f:37:a1:53:22:fe:42:c8:63:ba:1f:2e:56:
7d:cd:3a:8f:9a:23:74:51:89:4f:2c:db:1d:72:41:
11:1f:67:44:90:cc:65:ef:22:22:86:d9:28:9f:d6:
a0:6f:eb:0d:90:a4:6c:7a:1a:43:f7:d1:d8:db:a0:
a3:f1:09:9f:20:c0:89:c4:b7:15:76:5c:69:ef:75:
ff:65:be:1d:9d:0f:ed:60:e9:a6:ec:80:a7:16:ff:
69:81:3e:4a:01:ca:10:21:ae:43:86:4c:34:17:ed:
f5:d0:05:8a:58:7d:16:de:74:1a:43:e4:d0:9c:d1:
fd:04:48:e2:b1:f7:d8:ac:13:ac:47:a4:8a:ad:e2:
80:2f:59:e4:14:09:ac:e6:7e:68:b0:93:44:06:5e:
ea:77:b2:50:dd:5d:eb:55:90:7f:f3:fc:e2:a5:bc:
37:51:67:a1:03:d3:65:70:14:a5:d7:f8:e3:a3:87:
c1:dd:91:1d:cd:f0:16:95:f5:ac:2c:74:bf:ea:c9:
10:c5:2e:51:94:be:35:df:5c:9f:85:cf:51:1f:fe:
ed:2e:70:bc:d2:2e:0a:21:a7:76:61:b9:8a:e9:83:
42:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D5:18:22:D1:23:DC:89:D4:0E:5F:AE:95:4A:B8:D3:B6:F8:EE:75
X509v3 Authority Key Identifier:
keyid:E3:12:F4:41:38:2D:5B:A1:D8:0D:F4:59:BD:46:C0:A3:15:90:E7:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1162e7-4f74-4e69-ba99-b80efbd68bfd/1/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1162e7-4f74-4e69-ba99-b80efbd68bfd/1/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:e4:97:e3:17:ac:de:ae:ea:76:57:1f:73:98:94:fd:f4:0d:
c0:1f:3e:e6:b6:ee:ae:7e:13:90:c1:2e:5e:b1:18:04:9b:62:
83:ba:60:c7:52:7c:58:cc:ab:c1:fc:ac:63:16:63:a6:56:62:
6b:b0:04:87:f9:82:84:74:27:d3:4d:4f:ff:3d:74:62:65:ff:
f8:f4:2b:2f:4c:ae:7b:cc:c0:42:25:68:e7:20:75:b8:cc:d1:
33:e8:eb:bd:11:6f:4e:4d:3a:7d:eb:2d:b0:7d:9c:58:28:c6:
af:2c:54:89:64:4f:e0:d1:15:2e:a6:9c:58:17:ac:df:41:61:
ff:08:81:6f:a1:ed:09:d0:3a:a6:3c:1f:ee:d3:6e:57:5d:aa:
83:8e:10:4c:1a:5e:48:21:67:e6:e9:9b:c7:3b:43:c0:3f:2f:
8d:ac:54:9a:83:44:7d:33:1d:ba:17:f2:11:20:61:13:fc:e3:
18:92:63:1a:a5:50:81:91:c8:15:2e:33:4d:94:d2:9d:38:f7:
e6:42:72:69:ad:da:55:87:61:d3:01:85:40:b6:14:72:ce:cb:
59:7c:fa:dd:66:cd:2b:24:83:24:a6:ca:9d:b9:d6:7b:c9:ad:
3c:a3:59:b5:0c:b3:5d:e9:76:1b:c3:bd:5b:1d:28:7e:b8:d2:
a5:2d:8f:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzAaikCgxvNKlzv7g9ZUFRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMTJmNDQxMzgyZDViYTFkODBkZjQ1OWJkNDZjMGEzMTU5
MGU3MmYwHhcNMjUxMTExMTMwMTE5WhcNMjUxMTEyMTMwMTE5WjAzMTEwLwYDVQQD
Eyg2ZmQ1MTgyMmQxMjNkYzg5ZDQwZTVmYWU5NTRhYjhkM2I2ZjhlZTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzH7KeamjKUM1V5v3NjgZHQw+5qsF
32gBxf8aeGEV8w83oVMi/kLIY7ofLlZ9zTqPmiN0UYlPLNsdckERH2dEkMxl7yIi
htkon9agb+sNkKRsehpD99HY26Cj8QmfIMCJxLcVdlxp73X/Zb4dnQ/tYOmm7ICn
Fv9pgT5KAcoQIa5Dhkw0F+310AWKWH0W3nQaQ+TQnNH9BEjisffYrBOsR6SKreKA
L1nkFAms5n5osJNEBl7qd7JQ3V3rVZB/8/zipbw3UWehA9NlcBSl1/jjo4fB3ZEd
zfAWlfWsLHS/6skQxS5RlL4131yfhc9RH/7tLnC80i4KIad2YbmK6YNC6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG/VGCLRI9yJ1A5frpVKuNO2+O51MB8GA1UdIwQY
MBaAFOMS9EE4LVuh2A30Wb1GwKMVkOcvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHhMMFFUZ3RXNkhZRGZSWnZVYkFveFdRNXk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8xMTYyZTctNGY3NC00ZTY5LWJhOTkt
YjgwZWZiZDY4YmZkLzEvNHhMMFFUZ3RXNkhZRGZSWnZVYkFveFdRNXk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8xMTYyZTctNGY3NC00ZTY5LWJhOTktYjgwZWZiZDY4YmZk
LzEvNHhMMFFUZ3RXNkhZRGZSWnZVYkFveFdRNXk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfOSX4xes
3q7qdlcfc5iU/fQNwB8+5rburn4TkMEuXrEYBJtig7pgx1J8WMyrwfysYxZjplZi
a7AEh/mChHQn001P/z10YmX/+PQrL0yue8zAQiVo5yB1uMzRM+jrvRFvTk06fest
sH2cWCjGryxUiWRP4NEVLqacWBes30Fh/wiBb6HtCdA6pjwf7tNuV12qg44QTBpe
SCFn5umbxztDwD8vjaxUmoNEfTMduhfyESBhE/zjGJJjGqVQgZHIFS4zTZTSnTj3
5kJyaa3aVYdh0wGFQLYUcs7LWXz63WbNKySDJKbKnbnWe8mtPKNZtQyzXel2G8O9
Wx0ofrjSpS2PIQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:36:58 2025 by rpki-client