Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft
File: r4jIvS2oviecF3KhEQqjiPDvEQI.mft (raw, json)
Hash identifier: hU03V5F8yDk1Vsx14PXVOnp5sHqhqmlaDbiTfkW2Vu8=
Subject key identifier: EA:0F:37:37:64:1B:32:A7:F9:05:33:1D:8C:87:0D:6C:D8:D7:9B:E2
Authority key identifier: AF:88:C8:BD:2D:A8:BE:27:9C:17:72:A1:11:0A:A3:88:F0:EF:11:02
Certificate issuer: /CN=af88c8bd2da8be279c1772a1110aa388f0ef1102
Certificate serial: 019A209B34A679E7F432D7088EA22BB6AE27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft
Manifest number: 16F5
Signing time: Sun 26 Oct 2025 13:00:33 +0000
Manifest this update: Sun 26 Oct 2025 13:00:33 +0000
Manifest next update: Mon 27 Oct 2025 13:00:33 +0000
Files and hashes: 1: V6I7xtb-s540gCh7ELkbFAWWNm8.roa (hash: 4XfEuv+JUU8dRovsqOYBux0Sp8hqu4SxoGQivq4ciLk=)
2: r4jIvS2oviecF3KhEQqjiPDvEQI.crl (hash: NRFG9iAmMQ8O/Eit29qPNHMVCC7onM2jdetCyWvvD4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:9b:34:a6:79:e7:f4:32:d7:08:8e:a2:2b:b6:ae:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af88c8bd2da8be279c1772a1110aa388f0ef1102
Validity
Not Before: Oct 26 13:00:33 2025 GMT
Not After : Oct 27 13:00:33 2025 GMT
Subject: CN=ea0f3737641b32a7f905331d8c870d6cd8d79be2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1d:8a:07:8e:5f:de:81:64:6e:b9:ea:1e:f8:
56:79:ee:3c:85:10:c9:40:5f:8c:4b:e9:84:68:a1:
9a:53:88:ee:61:36:1b:92:a2:41:01:54:dc:4b:b6:
fa:60:d4:03:c2:83:6f:99:29:22:ba:b7:42:6d:00:
6f:d0:02:56:dc:3f:a2:08:38:07:ef:5a:14:aa:43:
31:05:c1:83:d9:a9:9f:e0:15:2d:13:0a:aa:b4:6c:
41:ea:3e:ad:1d:20:a8:8e:bb:62:2f:36:99:5d:93:
64:5e:c8:61:63:28:6f:53:36:ad:f8:d3:b9:57:64:
13:45:c1:6d:32:4b:82:2e:3b:dd:d8:47:fc:07:e9:
8f:89:47:6a:d1:78:11:35:4f:99:67:c1:ae:bc:04:
64:ef:91:ec:5e:aa:3d:b5:93:17:d5:d6:95:e2:55:
3b:1f:f4:ba:7d:ae:50:f3:11:da:1e:ea:5c:ed:c3:
b0:44:23:9a:15:e0:a9:9f:fa:64:98:9b:16:1f:e9:
1d:33:e1:46:c0:60:42:57:b3:a1:42:b1:c9:d4:33:
b3:e2:d9:b6:76:ea:35:41:4e:21:33:68:7d:af:a8:
8e:0e:e6:eb:09:6b:6f:a8:8e:80:4c:fc:18:95:bb:
c0:f4:3d:d6:e5:fe:c5:85:cf:52:8e:e2:a9:83:77:
66:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:0F:37:37:64:1B:32:A7:F9:05:33:1D:8C:87:0D:6C:D8:D7:9B:E2
X509v3 Authority Key Identifier:
keyid:AF:88:C8:BD:2D:A8:BE:27:9C:17:72:A1:11:0A:A3:88:F0:EF:11:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:63:db:99:4b:76:e8:4f:71:94:1a:84:ba:85:af:61:51:a3:
76:96:e1:0f:a3:fb:99:86:07:09:bc:0a:bb:71:15:75:a4:a3:
76:b7:ac:d0:88:d5:c7:e0:83:9f:52:f9:ba:49:4f:2d:0e:a6:
20:fb:ca:51:f9:2e:bf:a9:f7:61:01:ae:46:a6:9e:d1:dc:7e:
2e:4b:e9:03:71:ac:61:e2:f2:48:73:18:38:07:ef:3d:3d:23:
df:53:03:51:17:3f:89:2b:e8:7f:68:28:5b:02:8a:26:b1:33:
53:a3:0a:92:4d:02:9e:ed:dd:19:d3:ca:9a:6a:84:3c:f8:7f:
19:fe:fc:3c:34:28:7f:3b:a8:73:24:88:01:31:09:d2:93:c5:
f6:c8:ea:ad:a0:63:45:30:d1:d6:f7:a8:3b:6f:4b:14:81:29:
c7:9d:47:9d:c9:b0:97:4e:cd:7c:63:9d:f0:de:21:4a:3a:df:
f4:21:fc:95:24:10:78:85:c7:e7:24:f8:98:e8:7c:7a:19:2e:
69:0a:85:ef:23:d8:09:66:7b:13:c0:5f:10:3a:78:04:69:10:
38:54:07:20:e8:78:75:0a:f6:61:a6:62:6d:59:16:eb:12:0f:
08:83:24:75:ec:1f:98:bb:c9:af:d7:4b:31:02:0c:fd:95:7a:
aa:c5:28:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZogmzSmeef0MtcIjqIrtq4nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmODhjOGJkMmRhOGJlMjc5YzE3NzJhMTExMGFhMzg4ZjBl
ZjExMDIwHhcNMjUxMDI2MTMwMDMzWhcNMjUxMDI3MTMwMDMzWjAzMTEwLwYDVQQD
EyhlYTBmMzczNzY0MWIzMmE3ZjkwNTMzMWQ4Yzg3MGQ2Y2Q4ZDc5YmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAox2KB45f3oFkbrnqHvhWee48hRDJ
QF+MS+mEaKGaU4juYTYbkqJBAVTcS7b6YNQDwoNvmSkiurdCbQBv0AJW3D+iCDgH
71oUqkMxBcGD2amf4BUtEwqqtGxB6j6tHSCojrtiLzaZXZNkXshhYyhvUzat+NO5
V2QTRcFtMkuCLjvd2Ef8B+mPiUdq0XgRNU+ZZ8GuvARk75HsXqo9tZMX1daV4lU7
H/S6fa5Q8xHaHupc7cOwRCOaFeCpn/pkmJsWH+kdM+FGwGBCV7OhQrHJ1DOz4tm2
duo1QU4hM2h9r6iODubrCWtvqI6ATPwYlbvA9D3W5f7Fhc9SjuKpg3dmUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOoPNzdkGzKn+QUzHYyHDWzY15viMB8GA1UdIwQY
MBaAFK+IyL0tqL4nnBdyoREKo4jw7xECMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjRqSXZTMm92aWVjRjNLaEVRcWppUER2RVFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9mMmYxZDMtZjRjMS00OWRmLTlkNDEt
YmM3NmNhZjA3ODYwLzEvcjRqSXZTMm92aWVjRjNLaEVRcWppUER2RVFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9mMmYxZDMtZjRjMS00OWRmLTlkNDEtYmM3NmNhZjA3ODYw
LzEvcjRqSXZTMm92aWVjRjNLaEVRcWppUER2RVFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWGPbmUt2
6E9xlBqEuoWvYVGjdpbhD6P7mYYHCbwKu3EVdaSjdres0IjVx+CDn1L5uklPLQ6m
IPvKUfkuv6n3YQGuRqae0dx+LkvpA3GsYeLySHMYOAfvPT0j31MDURc/iSvof2go
WwKKJrEzU6MKkk0Cnu3dGdPKmmqEPPh/Gf78PDQofzuocySIATEJ0pPF9sjqraBj
RTDR1veoO29LFIEpx51Hncmwl07NfGOd8N4hSjrf9CH8lSQQeIXH5yT4mOh8ehku
aQqF7yPYCWZ7E8BfEDp4BGkQOFQHIOh4dQr2YaZibVkW6xIPCIMkdewfmLvJr9dL
MQIM/ZV6qsUoSw==
-----END CERTIFICATE-----
Generated at Sun Oct 26 20:43:35 2025 by rpki-client