Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
File: 4_cHBvbAz72cc6fz2DAjJApC9Q0.mft (raw, json)
Hash identifier: KgO6fwnAJRUtYy0Y4oTdY+i9NTUXUGC7Bq71mHBUVmE=
Subject key identifier: 8E:32:B3:10:67:3E:62:40:19:68:8B:E8:59:AD:E6:02:BD:1E:C8:DC
Authority key identifier: E3:F7:07:06:F6:C0:CF:BD:9C:73:A7:F3:D8:30:23:24:0A:42:F5:0D
Certificate issuer: /CN=e3f70706f6c0cfbd9c73a7f3d83023240a42f50d
Certificate serial: 019A21090CB9A7CF31626DE895872DE4AC14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
Manifest number: 0E03
Signing time: Sun 26 Oct 2025 15:00:32 +0000
Manifest this update: Sun 26 Oct 2025 15:00:32 +0000
Manifest next update: Mon 27 Oct 2025 15:00:32 +0000
Files and hashes: 1: 4_cHBvbAz72cc6fz2DAjJApC9Q0.crl (hash: ZGRArrGJvyVjn49qfjtukHqiuYOv7bmR1KUQhKesc14=)
2: JZBToS-O_vrT2aeKBSNggNB5se0.roa (hash: D8kzrex63NBxCoEgyWN4HyqVj2eRzOdT3Da1FU0u+nI=)
3: cKLdHjbMHa9DWXygLYK3fJRjYqw.roa (hash: aXunewdhx0tio/kXThZoUaubUGfQctWD4RTkIiazOVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 15:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:09:0c:b9:a7:cf:31:62:6d:e8:95:87:2d:e4:ac:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3f70706f6c0cfbd9c73a7f3d83023240a42f50d
Validity
Not Before: Oct 26 15:00:32 2025 GMT
Not After : Oct 27 15:00:32 2025 GMT
Subject: CN=8e32b310673e624019688be859ade602bd1ec8dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cb:a7:d6:3f:bc:52:76:92:ad:85:64:20:42:
84:db:ec:91:59:e3:e9:1f:8d:0c:35:44:a0:ab:0c:
55:09:9e:8e:24:c5:04:c1:69:5f:c0:fd:f0:7f:6d:
26:a6:c9:6c:0a:47:60:a3:98:52:62:c6:8d:5d:e7:
f5:89:25:6a:4f:50:bb:25:42:9e:8f:da:9f:92:c7:
f9:54:2f:7e:f0:19:89:5f:a2:f3:cd:01:00:df:e1:
d3:97:98:8b:57:ae:5f:7a:5d:a3:b9:58:62:0f:1c:
d2:04:86:ea:5b:79:79:5c:4d:b7:85:a5:17:fa:23:
73:3f:19:4a:e2:c7:28:25:95:63:7b:1a:d0:dd:dd:
ab:01:a9:89:c7:88:76:39:c3:f0:19:a1:3e:39:74:
16:e9:44:f9:a1:48:b7:96:1b:bc:13:c9:8b:55:ed:
6b:5c:79:ad:ca:c5:d3:8a:ab:19:56:60:6a:95:88:
80:c8:de:e7:b9:bb:69:29:14:69:9d:e2:7b:5e:05:
50:56:5f:ff:69:42:f5:23:4c:5b:33:ac:9d:52:bb:
7d:4e:2d:f5:37:57:34:7c:9d:04:a4:a9:ab:ff:f6:
3f:1d:97:b0:29:bf:24:79:9e:05:36:85:d2:0c:24:
d0:86:94:1c:0a:89:0e:fe:ae:e1:c1:61:b6:11:9c:
9b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:32:B3:10:67:3E:62:40:19:68:8B:E8:59:AD:E6:02:BD:1E:C8:DC
X509v3 Authority Key Identifier:
keyid:E3:F7:07:06:F6:C0:CF:BD:9C:73:A7:F3:D8:30:23:24:0A:42:F5:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:3c:fa:ab:a1:ca:58:70:ec:a2:c4:ad:e4:02:a8:5b:ee:fa:
fb:19:34:bb:45:f1:4e:c1:c7:a5:35:77:83:df:76:26:19:a5:
ae:1e:6e:9f:7c:35:54:b3:30:05:dd:6f:65:fa:2f:8e:cf:59:
16:13:2d:78:91:ba:02:0b:ea:0a:17:b7:45:4e:ee:b7:7a:21:
92:db:4a:fc:74:e7:7b:67:bb:b3:d7:29:ac:0e:15:c1:de:1e:
ba:da:13:4f:3e:51:9b:2c:53:bd:9f:cc:0d:5e:b3:f4:40:f5:
9a:e5:92:17:da:c1:40:a8:95:bc:d1:1c:a7:d7:37:99:a2:00:
77:84:11:18:2c:de:bd:da:a6:65:c1:eb:e9:50:d3:9a:44:06:
d6:2d:8d:f7:36:6b:e0:6f:51:2c:de:3f:bd:7d:b0:b4:b9:68:
76:56:b5:00:68:ca:d9:fb:f2:50:73:e9:8e:ca:08:c1:97:3b:
76:f4:13:69:ce:f9:68:c9:ce:5e:69:8d:e3:d7:77:44:b3:8d:
9b:93:ec:d1:80:c4:3c:82:9b:71:30:96:26:e9:3a:80:4a:19:
86:b7:4c:92:f1:fe:5d:5c:30:4d:73:06:ab:db:cb:ec:f4:e4:
26:98:7e:ba:a2:d9:c4:9f:69:50:12:d7:d1:3e:3b:df:17:6a:
3f:a6:b4:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZohCQy5p88xYm3olYct5KwUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZjcwNzA2ZjZjMGNmYmQ5YzczYTdmM2Q4MzAyMzI0MGE0
MmY1MGQwHhcNMjUxMDI2MTUwMDMyWhcNMjUxMDI3MTUwMDMyWjAzMTEwLwYDVQQD
Eyg4ZTMyYjMxMDY3M2U2MjQwMTk2ODhiZTg1OWFkZTYwMmJkMWVjOGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcun1j+8UnaSrYVkIEKE2+yRWePp
H40MNUSgqwxVCZ6OJMUEwWlfwP3wf20mpslsCkdgo5hSYsaNXef1iSVqT1C7JUKe
j9qfksf5VC9+8BmJX6LzzQEA3+HTl5iLV65fel2juVhiDxzSBIbqW3l5XE23haUX
+iNzPxlK4scoJZVjexrQ3d2rAamJx4h2OcPwGaE+OXQW6UT5oUi3lhu8E8mLVe1r
XHmtysXTiqsZVmBqlYiAyN7nubtpKRRpneJ7XgVQVl//aUL1I0xbM6ydUrt9Ti31
N1c0fJ0EpKmr//Y/HZewKb8keZ4FNoXSDCTQhpQcCokO/q7hwWG2EZybdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI4ysxBnPmJAGWiL6Fmt5gK9HsjcMB8GA1UdIwQY
MBaAFOP3Bwb2wM+9nHOn89gwIyQKQvUNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNF9jSEJ2YkF6NzJjYzZmejJEQWpKQXBDOVEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8yODZkNDctNjQzNC00MWJkLTlhYTIt
MDlmZjc5MzA4YmJlLzEvNF9jSEJ2YkF6NzJjYzZmejJEQWpKQXBDOVEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC8yODZkNDctNjQzNC00MWJkLTlhYTItMDlmZjc5MzA4YmJl
LzEvNF9jSEJ2YkF6NzJjYzZmejJEQWpKQXBDOVEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACjz6q6HK
WHDsosSt5AKoW+76+xk0u0XxTsHHpTV3g992Jhmlrh5un3w1VLMwBd1vZfovjs9Z
FhMteJG6AgvqChe3RU7ut3ohkttK/HTne2e7s9cprA4Vwd4eutoTTz5RmyxTvZ/M
DV6z9ED1muWSF9rBQKiVvNEcp9c3maIAd4QRGCzevdqmZcHr6VDTmkQG1i2N9zZr
4G9RLN4/vX2wtLlodla1AGjK2fvyUHPpjsoIwZc7dvQTac75aMnOXmmN49d3RLON
m5Ps0YDEPIKbcTCWJuk6gEoZhrdMkvH+XVwwTXMGq9vL7PTkJph+uqLZxJ9pUBLX
0T473xdqP6a0Yw==
-----END CERTIFICATE-----
Generated at Mon Oct 27 01:46:47 2025 by rpki-client