Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.mft
File: 4VaISXYX6PCmBpCvqz75TBGrbXI.mft (raw, json)
Hash identifier: MR5Uo8IBEx6lTKkjfPoJr3gwifrnnTygIaQH0w38j+Y=
Subject key identifier: 33:88:64:36:A9:01:8B:CF:D8:FC:48:5E:D9:2C:EB:06:08:5C:73:AA
Authority key identifier: E1:56:88:49:76:17:E8:F0:A6:06:90:AF:AB:3E:F9:4C:11:AB:6D:72
Certificate issuer: /CN=e15688497617e8f0a60690afab3ef94c11ab6d72
Certificate serial: 019A71B81FEE5D40366B256327D89E26F36C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VaISXYX6PCmBpCvqz75TBGrbXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.mft
Manifest number: 01DA
Signing time: Tue 11 Nov 2025 07:01:23 +0000
Manifest this update: Tue 11 Nov 2025 07:01:23 +0000
Manifest next update: Wed 12 Nov 2025 07:01:23 +0000
Files and hashes: 1: 4VaISXYX6PCmBpCvqz75TBGrbXI.crl (hash: GiWtwmJuugpqOALy+SF1GZ4rJB13EDma14U3jII9tes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4VaISXYX6PCmBpCvqz75TBGrbXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:1f:ee:5d:40:36:6b:25:63:27:d8:9e:26:f3:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15688497617e8f0a60690afab3ef94c11ab6d72
Validity
Not Before: Nov 11 07:01:23 2025 GMT
Not After : Nov 12 07:01:23 2025 GMT
Subject: CN=33886436a9018bcfd8fc485ed92ceb06085c73aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7a:30:11:4e:c5:79:d2:92:06:45:22:d1:bd:
16:3a:63:18:2f:b2:fc:f6:5f:84:4b:93:05:d6:06:
bf:d6:93:27:fd:ca:08:ed:f7:0e:0c:0f:78:03:21:
1a:1a:02:5b:dc:a9:00:76:30:f9:82:8c:db:2b:34:
9e:00:4d:21:4d:a5:4a:50:8a:67:67:91:85:8b:11:
c7:c0:39:4f:1c:89:ce:73:b9:99:dd:55:89:79:c8:
83:58:04:d5:fd:41:d9:b7:d0:33:d5:76:6e:5f:71:
a4:08:f3:e8:90:29:c5:bf:82:69:bc:ab:65:02:f2:
97:fd:06:54:cc:6f:09:2e:3d:30:52:d3:25:66:9a:
a3:fd:59:e4:90:73:ef:26:05:92:60:70:9d:c6:ad:
d5:cf:90:80:a8:6e:e1:30:22:3e:83:50:90:d7:77:
d1:38:48:59:34:f5:19:7c:44:e0:70:41:60:98:38:
57:06:90:9d:3c:9c:39:b3:14:05:88:ef:38:0f:66:
2b:02:f8:16:9e:5f:ed:f4:ec:f8:2d:8e:ce:6d:de:
fe:3a:d1:fa:e0:9d:53:f1:9d:a0:d6:d9:22:38:eb:
f9:43:c3:87:13:e7:cd:96:6d:88:be:7c:d9:08:37:
4e:d6:f0:a1:ec:62:f6:92:f5:13:b3:ba:d6:f2:df:
9f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:88:64:36:A9:01:8B:CF:D8:FC:48:5E:D9:2C:EB:06:08:5C:73:AA
X509v3 Authority Key Identifier:
keyid:E1:56:88:49:76:17:E8:F0:A6:06:90:AF:AB:3E:F9:4C:11:AB:6D:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VaISXYX6PCmBpCvqz75TBGrbXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:0a:04:17:d3:fe:90:b5:bd:22:f6:9a:a0:54:14:49:e9:e8:
95:09:4b:9c:98:59:d5:d4:0a:45:a7:35:83:9f:f8:97:b3:fe:
9a:85:3a:b6:b5:09:99:d7:7e:80:35:cd:a9:56:27:27:9f:da:
9c:0f:a7:c1:42:42:13:c5:5f:21:3d:fd:0a:9b:b2:2a:da:42:
76:f4:26:3f:0c:cc:2c:d9:60:4e:ec:41:22:c9:a8:7a:7b:44:
16:28:9f:43:9c:e1:1f:a9:57:43:38:bd:da:41:e6:2a:7a:b6:
68:00:a7:10:14:a1:32:03:0d:9f:9d:f7:fc:4e:a3:42:f0:9e:
4c:eb:37:21:e3:a6:bf:41:48:c6:52:c8:66:59:93:83:84:ad:
32:47:15:7d:d4:19:64:51:94:38:b4:4a:a9:17:26:15:6e:2b:
c7:b0:1a:43:7e:5b:69:e2:ae:19:77:e0:e0:e6:49:b0:14:d2:
8f:a2:19:9f:46:1d:cd:7b:5a:c0:89:98:d4:e6:b1:6e:e9:ae:
e7:39:bd:51:22:6a:2b:5a:32:68:24:6b:a8:04:e6:70:0d:ee:
9b:93:8a:9c:d9:02:45:a1:33:48:8b:06:3f:1b:8c:55:b3:37:
27:b5:04:81:53:ed:bd:be:72:e7:96:c1:64:a4:3b:39:cd:57:
99:db:55:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuB/uXUA2ayVjJ9ieJvNsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNTY4ODQ5NzYxN2U4ZjBhNjA2OTBhZmFiM2VmOTRjMTFh
YjZkNzIwHhcNMjUxMTExMDcwMTIzWhcNMjUxMTEyMDcwMTIzWjAzMTEwLwYDVQQD
EygzMzg4NjQzNmE5MDE4YmNmZDhmYzQ4NWVkOTJjZWIwNjA4NWM3M2FhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3owEU7FedKSBkUi0b0WOmMYL7L8
9l+ES5MF1ga/1pMn/coI7fcODA94AyEaGgJb3KkAdjD5gozbKzSeAE0hTaVKUIpn
Z5GFixHHwDlPHInOc7mZ3VWJeciDWATV/UHZt9Az1XZuX3GkCPPokCnFv4JpvKtl
AvKX/QZUzG8JLj0wUtMlZpqj/VnkkHPvJgWSYHCdxq3Vz5CAqG7hMCI+g1CQ13fR
OEhZNPUZfETgcEFgmDhXBpCdPJw5sxQFiO84D2YrAvgWnl/t9Oz4LY7Obd7+OtH6
4J1T8Z2g1tkiOOv5Q8OHE+fNlm2IvnzZCDdO1vCh7GL2kvUTs7rW8t+fnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDOIZDapAYvP2PxIXtks6wYIXHOqMB8GA1UdIwQY
MBaAFOFWiEl2F+jwpgaQr6s++UwRq21yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFZhSVNYWVg2UENtQnBDdnF6NzVUQkdyYlhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi82Yzg0NDYtNzlmZC00NTZlLTllNmIt
Y2EzYmIxZGZkYWE2LzEvNFZhSVNYWVg2UENtQnBDdnF6NzVUQkdyYlhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi82Yzg0NDYtNzlmZC00NTZlLTllNmItY2EzYmIxZGZkYWE2
LzEvNFZhSVNYWVg2UENtQnBDdnF6NzVUQkdyYlhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACAoEF9P+
kLW9IvaaoFQUSenolQlLnJhZ1dQKRac1g5/4l7P+moU6trUJmdd+gDXNqVYnJ5/a
nA+nwUJCE8VfIT39CpuyKtpCdvQmPwzMLNlgTuxBIsmoentEFiifQ5zhH6lXQzi9
2kHmKnq2aACnEBShMgMNn533/E6jQvCeTOs3IeOmv0FIxlLIZlmTg4StMkcVfdQZ
ZFGUOLRKqRcmFW4rx7AaQ35baeKuGXfg4OZJsBTSj6IZn0YdzXtawImY1Oaxbumu
5zm9USJqK1oyaCRrqATmcA3um5OKnNkCRaEzSIsGPxuMVbM3J7UEgVPtvb5y55bB
ZKQ7Oc1XmdtV8Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:15 2025 by rpki-client