
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft
File: _4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft (raw, json)
Hash identifier: D6jh/MjHijF7FdzQnp9v4OoujZ2vVMytzO94iEUXjHg=
Subject key identifier: 15:C6:E0:5F:A2:A4:20:14:97:60:F7:15:B2:0F:C4:18:A1:61:0E:FE
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 019A19BD5202DAB5155F489D01D5D4C174FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft
Manifest number: 173C
Signing time: Sat 25 Oct 2025 05:00:28 +0000
Manifest this update: Sat 25 Oct 2025 05:00:28 +0000
Manifest next update: Sun 26 Oct 2025 05:00:28 +0000
Files and hashes: 1: 07ZXjsdxsFuEtdgHwbOq-R5G76E.roa (hash: 1M9pQCAfVRT7MQ/Zj4tT9AVlQVRcilmGlJyGKK/xyXM=)
2: 1-qG54akf4ZK4Vn2nJAtq8qKMB-M.roa (hash: +KrvgwuNM4eT5l98LWe/CjZjFxSOKRz6fj1mSGz0IgM=)
3: 4PQhz7MOxuhGtS_nPubpyXMJOcI.roa (hash: BnJSvsApOD8luZipfIRx4R+p7IT8Z+rfRgGtpM8nPhY=)
4: 7_xHvFH9z1lTBMmCYCZyfOMLpCE.roa (hash: Dy9Ep1VuSlW1UwNypkd8T87oMpJakHz3KhMW+QvcJps=)
5: Fxq3h1JsdzyzYDgYtP2wnoeOjLA.roa (hash: tJ0CFUjWGpQHeBJKiYedBkhtxvRYSIaLu2u0ULfF3Dw=)
6: GYDa6uF4PXtvgFCZif9U8DfyJhs.roa (hash: x9pM/mAY2BLb1r8R45XN3qmt1Gw8vPBkNTNsNDjS6Jk=)
7: ISiMd8SOBUmeZ3l9pfTrNrRMVZ4.roa (hash: jX1VL1H9HdYzBbWtVwBVZy9/vxHTwytZF8IGlvhq3Yc=)
8: JXUpuOiDJbpAQ6wJyegYg23uwQY.roa (hash: IcXnbwWR3QdHkuBHHjMtVeQKCG9JaMJJR88n+O+Lv4g=)
9: K3gtWKami_XUUUtVwrQwwcMOVAg.roa (hash: 01aEVs3iMb11GEQQScA48mgu1ByLdBE37Eq3V2mjiGQ=)
10: Kn5AOeIvqDj0QyY0a6gvSVOYK04.roa (hash: /7QM63bFC+CBTXnuyFwX9/7nQ/C+RhIxyYwX13EXYS0=)
11: LL7AEgR132RnJITVXb1v0I3LCyw.roa (hash: gwRFxp3BgZCfzCqdNDK/XuHwvvhdYQt+5LD2lZsPRaU=)
12: NaXmOsDpDUrJU-L3cR4MsoyMUQA.roa (hash: dVVNZQbSo8+6scs7Gd+Q59/WTz4n0kcfFCZ13Y+qz7s=)
13: TH2FjafTPAZL_mWQxJbc1btzyxI.roa (hash: G8YErxusID/p1+2HPMXeLDbOJMfQf8vU1HgRFZ4uzuM=)
14: UryH-7kbyXWUJTfxmD8_iKhQToA.roa (hash: 9X1VOT+y467gWK0X8aw0s4QPOjoJGbo5qGz+HUSG1OM=)
15: V4iFmGmpuX9vmwKfCIL4MHq3iJo.roa (hash: I7wr4UYfNx1god3F0V72adpmlcw8clHUqo883JUOo54=)
16: XR-_EEDwF8zWqFnUJesI7P4suXw.roa (hash: 5Fp6z6r3AdWNjIT316J/wStOBp8ELRHvRNd1XNc9tso=)
17: ZtIB391wA96ODwULxOuaUb3zKjw.roa (hash: iYFjXUPN6915L3avwAU1BHDz24hStz0uZXCywgYk214=)
18: ZyYK-k77F1xgjjVfUFKWc3u5FMg.roa (hash: A8osarOaXuQWeZx8KQYjMoJwdcPiXJPczE87ARsfRqI=)
19: _4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl (hash: qXfXv+aoPAOlXS8JHs65zKAMWdNBOLX5A61/FeusYHI=)
20: bke-YJ-tbDLGpp3kvZGH2TLdlOI.roa (hash: NXBX9RHNDwlq1k9iub5dxUrFv5q8FjUTbkNsfuh2Uzo=)
21: bzmfxm3S5hbe6Gaa6wvgeLEiaNA.roa (hash: Ar56s14Axf0ioHIstHBEGHX85IVOcRUFRcIehjO4vNI=)
22: fBlvBTMJM3ddqp2rUiQB8ldjkd0.roa (hash: ETihZGojVJlaCJwQ0UQbamp7h1DxH8Yq4UnyjKrHjTY=)
23: k1RkiO-oYIsdIxPMb4yp4wi06vw.roa (hash: MCgag/nnrriwvetJZ3hm9uP9KJjRl+UaPWHYQ89ULn8=)
24: pKg9Eulzznq_Xmusn2tCljsUFm0.roa (hash: ZV91D/vMdBvdabbs6xfKbOYCwCqfj4mEA5NzU3QNIzA=)
25: pN1QTddIk2qdFe_mOVuHdGmP3Z4.roa (hash: CywtU84R198uQ8xF6BjJqnsNgApLacLlntN4HmgGHZM=)
26: rE9cybiH6oB4mGa5EHSN9cceqWE.roa (hash: YG48gdDn/SUyc3i/+XHJ5HagqvRplqEN/up/vYOmvBI=)
27: uYzA14o4SLgVDIUH1V-hG4krcmM.roa (hash: AAmmFasdZzQbOIJJuAxM6M66jvg5N0KdzbSbTAsq2+w=)
28: waIdBiyQcZY5S3UHlSgYjhWy3yA.roa (hash: B01bIchSEkzdF5UX/NW8F0eHIFCkAlYI9AyRAZwvgUg=)
29: yphDYCojIc0PisUPqGFzcSpaHr4.roa (hash: kueA64oPFnuqfOUJ8KFf+GceWa+kI7exnedP73+jI8A=)
30: zKmTOViL8l45Fi9xQRzBEWhChMs.roa (hash: i7XHAI01U2jBRys7znRQbgt3haoweJPHe63PN5KXiz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 02:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:19:bd:52:02:da:b5:15:5f:48:9d:01:d5:d4:c1:74:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Oct 25 05:00:28 2025 GMT
Not After : Oct 26 05:00:28 2025 GMT
Subject: CN=15c6e05fa2a420149760f715b20fc418a1610efe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:89:1b:12:28:74:30:40:39:94:25:d1:3f:ea:
55:10:a1:6a:c5:86:6a:eb:ce:4d:f4:11:df:3b:d3:
36:b3:5e:0d:24:44:85:f5:51:7d:29:6a:f0:2a:bc:
b3:bd:ff:3e:6c:f2:78:45:d0:d9:24:30:3d:51:b2:
90:b5:a4:04:2c:12:1f:e7:56:e9:3f:2d:1c:36:0b:
13:e0:5f:f3:f2:d6:f0:d4:a0:80:7d:9b:c6:77:63:
35:ca:e3:4e:10:44:af:d4:78:9a:c0:78:80:59:71:
5e:db:de:65:86:6f:88:b2:70:7e:3c:26:1d:0d:dc:
27:54:bd:0d:19:69:c4:88:6e:74:d5:6a:11:0d:65:
32:a4:3c:c7:2f:ff:6f:f3:13:2a:07:61:87:e0:f8:
08:d4:71:50:77:b2:84:63:cb:46:28:48:18:29:54:
65:e8:75:cf:b6:e9:a3:b3:6b:9b:08:3f:58:9c:86:
c3:ae:35:66:66:44:12:6c:a0:06:af:14:56:71:ea:
97:9d:b2:e0:51:84:c5:c9:eb:33:72:2b:f0:90:06:
38:e7:18:0e:e5:96:e2:88:e3:b0:cf:b8:bb:1f:a0:
87:a6:9f:27:5b:6b:2a:21:37:55:8b:2a:12:cb:d2:
1d:e0:ad:6c:08:bc:3d:e3:b3:06:18:83:b3:27:31:
26:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:C6:E0:5F:A2:A4:20:14:97:60:F7:15:B2:0F:C4:18:A1:61:0E:FE
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:95:be:3e:1a:75:64:48:60:41:62:86:05:83:6f:5f:20:8a:
45:13:40:6f:d5:ad:f9:79:64:7e:21:86:0e:a4:b1:2d:fb:6c:
fe:d2:0e:b1:fa:7f:9d:67:dd:85:2a:52:06:56:c8:0e:f6:d8:
33:3b:4b:e7:78:80:c2:c8:14:e4:67:3e:fe:10:62:56:de:f8:
bf:a3:d0:47:a9:b2:d6:dd:bf:d4:11:d2:86:f3:8e:4a:c8:a6:
e4:cf:14:58:9f:c2:c2:cb:71:4e:38:7e:1d:59:39:56:ca:b7:
3c:4d:d5:09:d5:ac:0a:e1:27:fc:15:60:45:84:8c:7e:be:b6:
11:90:32:12:4f:8e:84:65:61:1d:29:23:85:a5:f4:04:26:2c:
e3:68:eb:ce:d6:dc:c9:a9:75:ee:97:c9:13:f7:28:78:75:15:
bb:95:36:12:b1:d2:22:d8:20:d4:18:31:49:9d:8f:b3:6d:8c:
fb:dc:48:ed:c7:ef:dd:22:12:3f:ad:17:a6:ea:cf:a5:25:85:
ec:6a:6e:8a:59:fe:a4:cc:b2:67:b9:70:c1:b6:ef:99:63:b1:
44:15:5c:03:89:ee:29:2d:26:56:d9:2b:6e:1d:af:a9:03:38:
83:17:d9:be:45:33:20:35:da:28:ad:86:cb:5f:83:c4:8e:4c:
75:4a:11:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 11:38:47 2025 by rpki-client