Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/358be9-192d-4ae9-b4bd-eed556af2c7f/1/4b3MskUKGgU8icwhPkrpuGR4LeM.mft
File: 4b3MskUKGgU8icwhPkrpuGR4LeM.mft (raw, json)
Hash identifier: GqA/Oyuoij39PjwJGwsz7dGDputom6rJkt14N01bHwE=
Subject key identifier: 1A:9A:3D:1A:B3:92:09:41:53:80:EF:EE:30:22:0C:EF:33:70:FA:C5
Authority key identifier: E1:BD:CC:B2:45:0A:1A:05:3C:89:CC:21:3E:4A:E9:B8:64:78:2D:E3
Certificate issuer: /CN=e1bdccb2450a1a053c89cc213e4ae9b864782de3
Certificate serial: 019A71EED8E08523EBB19BC7A0239132E705
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4b3MskUKGgU8icwhPkrpuGR4LeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/358be9-192d-4ae9-b4bd-eed556af2c7f/1/4b3MskUKGgU8icwhPkrpuGR4LeM.mft
Manifest number: 1007
Signing time: Tue 11 Nov 2025 08:01:09 +0000
Manifest this update: Tue 11 Nov 2025 08:01:09 +0000
Manifest next update: Wed 12 Nov 2025 08:01:09 +0000
Files and hashes: 1: 4b3MskUKGgU8icwhPkrpuGR4LeM.crl (hash: YuNAfJCSWRUGrftUaZbktx3jQNR42sSAyMEHnD1c/MU=)
2: 7uR_yiVUsKXN9cQ9UEqMaOjd_ow.roa (hash: OVRCNzp/6ULY8TXLR8C+JnnDlpd68DlkSuJjHaG4io0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/358be9-192d-4ae9-b4bd-eed556af2c7f/1/4b3MskUKGgU8icwhPkrpuGR4LeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/358be9-192d-4ae9-b4bd-eed556af2c7f/1/4b3MskUKGgU8icwhPkrpuGR4LeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4b3MskUKGgU8icwhPkrpuGR4LeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:d8:e0:85:23:eb:b1:9b:c7:a0:23:91:32:e7:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1bdccb2450a1a053c89cc213e4ae9b864782de3
Validity
Not Before: Nov 11 08:01:09 2025 GMT
Not After : Nov 12 08:01:09 2025 GMT
Subject: CN=1a9a3d1ab39209415380efee30220cef3370fac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:88:b6:ad:51:84:28:24:d5:94:07:47:39:b0:
16:82:6c:61:9d:ed:54:19:0a:03:02:e3:db:3d:96:
9f:66:31:af:e6:be:18:1b:6d:12:b4:11:e1:c5:8c:
da:cd:d2:75:c2:5b:19:70:94:c3:87:69:63:20:9f:
13:2f:ff:df:aa:9a:b0:6a:c3:fb:e7:11:ef:76:5e:
20:7c:88:5f:55:32:d3:56:86:c5:9d:8a:13:a3:aa:
56:c4:59:2c:ce:2c:bd:29:e0:f5:64:35:da:8a:01:
18:23:5c:d2:22:35:91:8e:9f:f3:73:91:d7:d0:75:
5b:82:87:be:e4:e6:db:0a:22:3f:ee:fb:f2:f0:06:
08:b5:be:ae:da:0a:4e:a2:a2:68:93:8a:60:fd:36:
e2:38:03:0a:0c:c0:c9:fc:22:f0:95:9a:22:b7:55:
01:f8:3b:2e:b6:ab:54:21:62:ea:95:92:fe:b3:e6:
6e:89:43:c4:d8:85:f6:1e:db:6c:25:c5:a4:73:ef:
fb:1b:c1:11:8e:fd:3a:6f:f7:30:17:37:a4:5c:79:
90:d3:e6:18:4e:28:ad:fa:d5:bd:90:1a:e7:10:e4:
eb:e5:d1:75:d5:e5:76:c7:bc:69:e1:18:fb:a3:1f:
3e:55:d5:21:b9:f8:1d:e6:b8:4b:e6:0e:af:f1:45:
c6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:9A:3D:1A:B3:92:09:41:53:80:EF:EE:30:22:0C:EF:33:70:FA:C5
X509v3 Authority Key Identifier:
keyid:E1:BD:CC:B2:45:0A:1A:05:3C:89:CC:21:3E:4A:E9:B8:64:78:2D:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b3MskUKGgU8icwhPkrpuGR4LeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/358be9-192d-4ae9-b4bd-eed556af2c7f/1/4b3MskUKGgU8icwhPkrpuGR4LeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/358be9-192d-4ae9-b4bd-eed556af2c7f/1/4b3MskUKGgU8icwhPkrpuGR4LeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:b0:55:45:44:ff:e2:5f:ba:81:2e:d6:2f:b9:39:e1:ac:4f:
59:29:43:f2:57:57:ac:c9:5e:d7:3b:50:e7:11:11:f0:ea:a0:
b7:f4:fb:0f:46:ad:92:b1:ee:84:0d:2f:ec:6f:7e:d2:d4:f1:
5c:be:e6:e8:9d:45:81:25:fa:9f:fc:4c:ac:41:78:1b:8e:58:
b6:35:05:4e:28:00:53:95:c7:fe:65:9f:82:57:07:6c:7d:d2:
10:02:53:91:f4:96:59:8f:38:6e:04:12:d7:20:21:b3:a7:48:
e6:0c:39:71:6a:66:f1:a5:bd:8f:63:8a:f2:13:8d:ab:28:f0:
f9:e1:73:c7:46:fa:99:f0:74:f8:eb:6b:cf:e3:f2:f9:2d:47:
9e:8a:88:de:6b:f0:98:02:a4:c7:00:a3:77:72:ca:8f:8b:fa:
e1:fd:10:d4:1c:96:10:a7:b5:7d:0e:c1:df:53:2e:ea:24:67:
2f:c8:38:af:17:e1:5c:d2:90:71:cc:cd:b6:49:50:3d:e8:5c:
d5:71:c9:ea:ff:c6:1d:d8:69:41:36:60:a9:8c:ce:e8:5c:ad:
f6:7f:3f:51:79:21:41:68:34:f7:1b:c3:f3:92:18:ab:ac:9c:
09:f1:b5:8c:14:61:ec:dd:71:9b:66:1f:f5:c2:e1:a4:3c:b9:
73:ba:75:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7tjghSPrsZvHoCORMucFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxYmRjY2IyNDUwYTFhMDUzYzg5Y2MyMTNlNGFlOWI4NjQ3
ODJkZTMwHhcNMjUxMTExMDgwMTA5WhcNMjUxMTEyMDgwMTA5WjAzMTEwLwYDVQQD
EygxYTlhM2QxYWIzOTIwOTQxNTM4MGVmZWUzMDIyMGNlZjMzNzBmYWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6oi2rVGEKCTVlAdHObAWgmxhne1U
GQoDAuPbPZafZjGv5r4YG20StBHhxYzazdJ1wlsZcJTDh2ljIJ8TL//fqpqwasP7
5xHvdl4gfIhfVTLTVobFnYoTo6pWxFksziy9KeD1ZDXaigEYI1zSIjWRjp/zc5HX
0HVbgoe+5ObbCiI/7vvy8AYItb6u2gpOoqJok4pg/TbiOAMKDMDJ/CLwlZoit1UB
+DsutqtUIWLqlZL+s+ZuiUPE2IX2HttsJcWkc+/7G8ERjv06b/cwFzekXHmQ0+YY
Tiit+tW9kBrnEOTr5dF11eV2x7xp4Rj7ox8+VdUhufgd5rhL5g6v8UXGdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBqaPRqzkglBU4Dv7jAiDO8zcPrFMB8GA1UdIwQY
MBaAFOG9zLJFChoFPInMIT5K6bhkeC3jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGIzTXNrVUtHZ1U4aWN3aFBrcnB1R1I0TGVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8zNThiZTktMTkyZC00YWU5LWI0YmQt
ZWVkNTU2YWYyYzdmLzEvNGIzTXNrVUtHZ1U4aWN3aFBrcnB1R1I0TGVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8zNThiZTktMTkyZC00YWU5LWI0YmQtZWVkNTU2YWYyYzdm
LzEvNGIzTXNrVUtHZ1U4aWN3aFBrcnB1R1I0TGVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE7BVRUT/
4l+6gS7WL7k54axPWSlD8ldXrMle1ztQ5xER8Oqgt/T7D0atkrHuhA0v7G9+0tTx
XL7m6J1FgSX6n/xMrEF4G45YtjUFTigAU5XH/mWfglcHbH3SEAJTkfSWWY84bgQS
1yAhs6dI5gw5cWpm8aW9j2OK8hONqyjw+eFzx0b6mfB0+Otrz+Py+S1HnoqI3mvw
mAKkxwCjd3LKj4v64f0Q1ByWEKe1fQ7B31Mu6iRnL8g4rxfhXNKQcczNtklQPehc
1XHJ6v/GHdhpQTZgqYzO6Fyt9n8/UXkhQWg09xvD85IYq6ycCfG1jBRh7N1xm2Yf
9cLhpDy5c7p16Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 16:53:04 2025 by rpki-client