Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.mft
File: 4WgoY-mYep64ZougfJbJmhst_mk.mft (raw, json)
Hash identifier: 8L6x6BRN6WvfWQmvUkKKMsuAIXU2FJAfg4+OilvTmpI=
Subject key identifier: F4:D4:58:4C:53:58:35:AC:5F:4A:07:FB:9B:49:48:A5:7F:E3:F3:80
Authority key identifier: E1:68:28:63:E9:98:7A:9E:B8:66:8B:A0:7C:96:C9:9A:1B:2D:FE:69
Certificate issuer: /CN=e1682863e9987a9eb8668ba07c96c99a1b2dfe69
Certificate serial: 019A71EE84B32C24BF9120E5BB61BC848232
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4WgoY-mYep64ZougfJbJmhst_mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.mft
Manifest number: 91
Signing time: Tue 11 Nov 2025 08:00:48 +0000
Manifest this update: Tue 11 Nov 2025 08:00:48 +0000
Manifest next update: Wed 12 Nov 2025 08:00:48 +0000
Files and hashes: 1: 4WgoY-mYep64ZougfJbJmhst_mk.crl (hash: 9sOuhiQ4270I03HOPlTN+uXqSdYg2YTsxaJ8tnQYm8w=)
2: HI7B1jr-szIvsbzfV6wrZqk3kpw.roa (hash: nW/JeadW697758rAda0qBRczYN3xljyyCO9Qys1RCMU=)
3: uF6s_hWqOyMm0beoSVdz1ofj_2U.roa (hash: sqABMRSLhInMQI+0EZuydVNxHulBTRCcnZGrhwhVSWA=)
4: yRXQpBuW1Pb2FFdzFa5o9VdREJ4.roa (hash: s9ixFSMI7GWSkeLxQmBgssbeEOKAKZsZGKgkyxXA67A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4WgoY-mYep64ZougfJbJmhst_mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:84:b3:2c:24:bf:91:20:e5:bb:61:bc:84:82:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1682863e9987a9eb8668ba07c96c99a1b2dfe69
Validity
Not Before: Nov 11 08:00:48 2025 GMT
Not After : Nov 12 08:00:48 2025 GMT
Subject: CN=f4d4584c535835ac5f4a07fb9b4948a57fe3f380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2b:f0:5b:18:b9:81:ec:34:1b:52:a3:53:ce:
e0:7b:18:19:66:fd:20:7e:df:fd:b7:3b:34:e8:01:
69:bf:c1:ab:1f:e5:17:5f:57:05:bf:59:2e:32:7d:
c1:e2:dc:12:8c:a2:4a:ca:f3:85:8b:74:75:a3:24:
2b:26:1b:fb:4b:29:4e:52:1e:e1:58:95:50:c0:ed:
2b:42:ed:9e:fa:14:a2:a2:63:bb:15:01:2d:c7:82:
78:0a:c5:a9:a8:82:61:bc:50:a3:67:f0:60:9f:26:
16:63:31:17:13:93:d5:82:37:51:f9:7e:52:69:f2:
bb:a0:b2:83:57:81:d9:16:0f:ca:f6:3d:b3:bd:c7:
21:af:3e:fc:cb:c9:77:36:0e:98:0f:96:9a:d0:80:
b0:25:dd:08:d2:b9:95:54:3f:0a:0b:3b:ca:81:a7:
29:b8:d5:8e:75:33:24:cf:a1:5b:a0:53:af:dc:0d:
a8:2f:01:fc:fe:5c:34:83:53:10:5a:9b:f3:1c:66:
d7:48:48:a5:28:3e:d9:bd:b5:f4:e2:d4:f3:39:f5:
4d:d2:4c:c8:97:e0:47:5b:d5:49:66:72:06:1c:da:
0c:e6:ff:40:b3:c1:23:0e:ae:e0:19:c1:f0:3a:b0:
1d:82:68:9b:9c:eb:3b:99:9d:c2:7f:d6:23:b9:ae:
4f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D4:58:4C:53:58:35:AC:5F:4A:07:FB:9B:49:48:A5:7F:E3:F3:80
X509v3 Authority Key Identifier:
keyid:E1:68:28:63:E9:98:7A:9E:B8:66:8B:A0:7C:96:C9:9A:1B:2D:FE:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4WgoY-mYep64ZougfJbJmhst_mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:de:5e:1a:46:50:2a:e7:bd:1a:95:fb:0b:31:26:c2:75:bd:
80:46:28:21:97:14:e3:e2:4d:95:ce:91:3e:cd:c0:1d:39:20:
67:30:c2:c6:a5:87:38:25:65:e1:1a:ec:fd:ca:d5:2f:ce:44:
fc:47:32:37:52:57:fb:1a:79:c2:e0:ba:35:62:6c:e9:97:fa:
4e:3f:c0:64:2c:c4:e0:a4:1a:98:51:e2:bc:f8:b0:cb:5c:23:
05:01:51:1e:a2:b4:11:7a:72:47:32:50:59:e8:36:5c:65:d6:
45:44:64:90:68:46:61:c7:66:58:7a:66:3b:50:ce:b0:ad:8e:
98:d0:60:b0:7a:d0:92:2e:a8:e2:64:a0:4a:ba:c6:8a:75:b9:
83:ad:db:f7:e7:35:3e:f6:ea:0a:1a:5c:ef:b7:6a:e3:7a:98:
cb:c9:ff:d5:13:3b:5c:df:94:02:bf:35:69:f0:d6:84:a4:a8:
71:75:81:e9:8f:b7:88:d4:26:18:a9:1d:82:34:e0:91:32:f4:
da:78:f7:94:81:e9:2d:96:ac:f3:22:30:83:7d:6d:0c:25:96:
97:5e:39:14:0b:b2:e2:1e:6a:33:41:45:9a:fb:6f:f1:f5:15:
60:ff:8d:ca:73:2f:af:26:92:2c:7c:92:ab:6d:53:75:ce:27:
57:7d:1f:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7oSzLCS/kSDlu2G8hIIyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNjgyODYzZTk5ODdhOWViODY2OGJhMDdjOTZjOTlhMWIy
ZGZlNjkwHhcNMjUxMTExMDgwMDQ4WhcNMjUxMTEyMDgwMDQ4WjAzMTEwLwYDVQQD
EyhmNGQ0NTg0YzUzNTgzNWFjNWY0YTA3ZmI5YjQ5NDhhNTdmZTNmMzgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySvwWxi5gew0G1KjU87gexgZZv0g
ft/9tzs06AFpv8GrH+UXX1cFv1kuMn3B4twSjKJKyvOFi3R1oyQrJhv7SylOUh7h
WJVQwO0rQu2e+hSiomO7FQEtx4J4CsWpqIJhvFCjZ/BgnyYWYzEXE5PVgjdR+X5S
afK7oLKDV4HZFg/K9j2zvcchrz78y8l3Ng6YD5aa0ICwJd0I0rmVVD8KCzvKgacp
uNWOdTMkz6FboFOv3A2oLwH8/lw0g1MQWpvzHGbXSEilKD7ZvbX04tTzOfVN0kzI
l+BHW9VJZnIGHNoM5v9As8EjDq7gGcHwOrAdgmibnOs7mZ3Cf9Yjua5P/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPTUWExTWDWsX0oH+5tJSKV/4/OAMB8GA1UdIwQY
MBaAFOFoKGPpmHqeuGaLoHyWyZobLf5pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFdnb1ktbVllcDY0Wm91Z2ZKYkptaHN0X21rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9lY2RjNWEtZWY1Mi00MTA3LWIzY2It
M2JkYTM1MzljNmJjLzEvNFdnb1ktbVllcDY0Wm91Z2ZKYkptaHN0X21rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9lY2RjNWEtZWY1Mi00MTA3LWIzY2ItM2JkYTM1MzljNmJj
LzEvNFdnb1ktbVllcDY0Wm91Z2ZKYkptaHN0X21rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX95eGkZQ
Kue9GpX7CzEmwnW9gEYoIZcU4+JNlc6RPs3AHTkgZzDCxqWHOCVl4Rrs/crVL85E
/EcyN1JX+xp5wuC6NWJs6Zf6Tj/AZCzE4KQamFHivPiwy1wjBQFRHqK0EXpyRzJQ
Weg2XGXWRURkkGhGYcdmWHpmO1DOsK2OmNBgsHrQki6o4mSgSrrGinW5g63b9+c1
PvbqChpc77dq43qYy8n/1RM7XN+UAr81afDWhKSocXWB6Y+3iNQmGKkdgjTgkTL0
2nj3lIHpLZas8yIwg31tDCWWl145FAuy4h5qM0FFmvtv8fUVYP+NynMvryaSLHyS
q21Tdc4nV30fjQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:58 2025 by rpki-client