Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.mft
File: 4Uk5uDWV4u-2lFa83yOGalB59vU.mft (raw, json)
Hash identifier: LnwDFp9t0Hh1k7d+XXg9sz89h8upL9ZMmUzLYxAlmro=
Subject key identifier: 07:F5:90:B4:BC:ED:DC:A2:DC:C6:C4:47:BD:A7:4E:67:0C:12:82:D8
Authority key identifier: E1:49:39:B8:35:95:E2:EF:B6:94:56:BC:DF:23:86:6A:50:79:F6:F5
Certificate issuer: /CN=e14939b83595e2efb69456bcdf23866a5079f6f5
Certificate serial: 019A706E4FA73233305F1476C76EF1E7D637
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Uk5uDWV4u-2lFa83yOGalB59vU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 01:01:08 +0000
Manifest this update: Tue 11 Nov 2025 01:01:08 +0000
Manifest next update: Wed 12 Nov 2025 01:01:08 +0000
Files and hashes: 1: 4Uk5uDWV4u-2lFa83yOGalB59vU.crl (hash: oNphT45LKS1ak2NlnCIwmwGUQqMN0Qtn4YcZXox7w7I=)
2: 9DOz_U29J25pYyeM86YxHr4X6eI.roa (hash: m1/Q7PpupEiNgQObdS35HK/CHkZPlsg/AOIPZ9fZoyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Uk5uDWV4u-2lFa83yOGalB59vU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:4f:a7:32:33:30:5f:14:76:c7:6e:f1:e7:d6:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14939b83595e2efb69456bcdf23866a5079f6f5
Validity
Not Before: Nov 11 01:01:08 2025 GMT
Not After : Nov 12 01:01:08 2025 GMT
Subject: CN=07f590b4bceddca2dcc6c447bda74e670c1282d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:39:ac:65:6d:21:4f:07:bd:93:3e:13:4c:6b:
8d:ab:9a:58:d1:f0:c5:00:47:82:10:7f:9f:d2:8d:
9f:c5:d1:96:2c:fc:92:09:f6:5c:08:10:c2:44:ff:
2a:e4:73:94:ba:cb:e4:c5:5f:8c:50:12:f8:43:ec:
d1:0c:d1:f3:d1:3c:70:d4:44:b5:a2:cd:ae:57:2d:
07:ab:df:0f:01:92:fe:29:c9:58:f5:30:51:1e:18:
03:85:65:32:f5:c2:bd:63:06:42:2a:59:de:de:f2:
42:a7:ab:58:bb:52:3e:a4:c2:6e:42:8a:8c:ab:97:
48:44:c5:0d:ec:d3:d0:1e:3b:9d:5a:95:a9:b3:91:
e6:fc:5c:20:66:a9:6c:90:4f:7d:da:5e:2e:c1:cd:
e9:28:e9:0a:84:08:2f:22:46:b6:8b:b2:d6:07:8e:
25:d1:27:f8:f4:14:89:5e:c8:87:c4:e7:23:11:cb:
9a:3b:5b:f8:14:76:34:c3:46:f5:82:aa:dd:8e:ae:
7d:a6:e8:46:38:bf:d4:6f:21:c0:0e:c6:62:2a:b7:
04:39:37:be:bb:57:41:34:43:0e:bb:3e:b1:48:0f:
c5:6f:66:c9:24:0c:03:15:8a:fc:69:79:66:7d:d2:
b6:0f:8e:2c:6a:95:96:f0:85:21:21:a0:7e:b1:1d:
e6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F5:90:B4:BC:ED:DC:A2:DC:C6:C4:47:BD:A7:4E:67:0C:12:82:D8
X509v3 Authority Key Identifier:
keyid:E1:49:39:B8:35:95:E2:EF:B6:94:56:BC:DF:23:86:6A:50:79:F6:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Uk5uDWV4u-2lFa83yOGalB59vU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:e0:f5:2c:a9:df:93:e1:4c:6e:50:f6:86:dd:19:44:54:1f:
de:03:ad:27:67:0a:30:b2:5c:9d:e7:cc:83:54:33:38:4d:5b:
a8:79:88:ea:fc:92:69:0c:50:5f:d8:76:2b:fc:c2:29:ce:c3:
e0:48:8c:01:ed:46:4c:80:5d:c9:da:42:40:74:7c:7c:10:ae:
11:e0:ec:2f:81:33:39:b8:11:95:93:6c:21:26:ea:f7:82:60:
61:65:3a:9b:bb:41:89:dd:9d:e6:f0:14:11:62:64:5b:f0:a7:
9b:04:7d:1f:8b:9e:75:14:7d:b2:0f:85:8a:d0:38:dd:eb:a6:
55:6a:ba:ae:5d:b9:ce:c4:5f:80:61:a3:7b:3a:7b:38:2a:c4:
7d:f3:29:05:b0:14:c7:88:4c:7f:52:f7:9e:e7:55:28:2a:65:
53:e0:fd:99:49:c3:c9:11:7d:2c:05:78:7e:f3:aa:4c:93:bb:
2c:9a:8b:22:8b:b8:c4:5d:4f:17:99:9d:c6:fe:ea:67:37:10:
b6:d3:65:58:f3:6b:f0:34:8d:24:55:e6:c6:16:d8:0e:24:87:
e8:21:48:cd:01:1b:46:f9:48:0e:a3:07:aa:3f:ef:74:ae:08:
83:0e:5e:e2:21:9f:e6:fd:1d:d4:b3:2b:43:03:27:f3:b0:ba:
8d:df:5c:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwbk+nMjMwXxR2x27x59Y3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNDkzOWI4MzU5NWUyZWZiNjk0NTZiY2RmMjM4NjZhNTA3
OWY2ZjUwHhcNMjUxMTExMDEwMTA4WhcNMjUxMTEyMDEwMTA4WjAzMTEwLwYDVQQD
EygwN2Y1OTBiNGJjZWRkY2EyZGNjNmM0NDdiZGE3NGU2NzBjMTI4MmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzmsZW0hTwe9kz4TTGuNq5pY0fDF
AEeCEH+f0o2fxdGWLPySCfZcCBDCRP8q5HOUusvkxV+MUBL4Q+zRDNHz0Txw1ES1
os2uVy0Hq98PAZL+KclY9TBRHhgDhWUy9cK9YwZCKlne3vJCp6tYu1I+pMJuQoqM
q5dIRMUN7NPQHjudWpWps5Hm/FwgZqlskE992l4uwc3pKOkKhAgvIka2i7LWB44l
0Sf49BSJXsiHxOcjEcuaO1v4FHY0w0b1gqrdjq59puhGOL/UbyHADsZiKrcEOTe+
u1dBNEMOuz6xSA/Fb2bJJAwDFYr8aXlmfdK2D44sapWW8IUhIaB+sR3m3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAf1kLS87dyi3MbER72nTmcMEoLYMB8GA1UdIwQY
MBaAFOFJObg1leLvtpRWvN8jhmpQefb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFVrNXVEV1Y0dS0ybEZhODN5T0dhbEI1OXZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9mOTBmZGEtMDM0ZC00NGUwLWE4MTIt
Y2Q2MzBkYmMxZDE4LzEvNFVrNXVEV1Y0dS0ybEZhODN5T0dhbEI1OXZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9mOTBmZGEtMDM0ZC00NGUwLWE4MTItY2Q2MzBkYmMxZDE4
LzEvNFVrNXVEV1Y0dS0ybEZhODN5T0dhbEI1OXZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW+D1LKnf
k+FMblD2ht0ZRFQf3gOtJ2cKMLJcnefMg1QzOE1bqHmI6vySaQxQX9h2K/zCKc7D
4EiMAe1GTIBdydpCQHR8fBCuEeDsL4EzObgRlZNsISbq94JgYWU6m7tBid2d5vAU
EWJkW/CnmwR9H4uedRR9sg+FitA43eumVWq6rl25zsRfgGGjezp7OCrEffMpBbAU
x4hMf1L3nudVKCplU+D9mUnDyRF9LAV4fvOqTJO7LJqLIou4xF1PF5mdxv7qZzcQ
ttNlWPNr8DSNJFXmxhbYDiSH6CFIzQEbRvlIDqMHqj/vdK4Igw5e4iGf5v0d1LMr
QwMn87C6jd9c/g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:18 2025 by rpki-client