Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.mft
File: 4OG_U-vte1SAhvSvaANFQPIKeOw.mft (raw, json)
Hash identifier: ERfaSRJnLQ1J6KBkGWuQ00H4k+V0IrjL6I4WbEqfjlg=
Subject key identifier: 6D:4F:93:A2:04:E8:41:E0:6E:D0:1E:FD:2B:A9:DA:CD:40:16:18:86
Authority key identifier: E0:E1:BF:53:EB:ED:7B:54:80:86:F4:AF:68:03:45:40:F2:0A:78:EC
Certificate issuer: /CN=e0e1bf53ebed7b548086f4af68034540f20a78ec
Certificate serial: 019A2409F21E28CB22BCE0B36E7B5F5A867A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4OG_U-vte1SAhvSvaANFQPIKeOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.mft
Manifest number: 0139
Signing time: Mon 27 Oct 2025 05:00:22 +0000
Manifest this update: Mon 27 Oct 2025 05:00:22 +0000
Manifest next update: Tue 28 Oct 2025 05:00:22 +0000
Files and hashes: 1: 4OG_U-vte1SAhvSvaANFQPIKeOw.crl (hash: QjfbdYGSRaeN4T/dBJE/fu3af+0Dmpxg7Nh6Hyp6Sm0=)
2: L18LfUdDFMe4UbMpcGQhNbyBBFA.roa (hash: qvvnhzQads/EsFKpKYrOSE0oyBJYg5HQKOC8BoIIN9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4OG_U-vte1SAhvSvaANFQPIKeOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 05:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:09:f2:1e:28:cb:22:bc:e0:b3:6e:7b:5f:5a:86:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0e1bf53ebed7b548086f4af68034540f20a78ec
Validity
Not Before: Oct 27 05:00:22 2025 GMT
Not After : Oct 28 05:00:22 2025 GMT
Subject: CN=6d4f93a204e841e06ed01efd2ba9dacd40161886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4c:87:9f:06:c9:e5:1b:d0:5f:59:b4:6d:b6:
eb:c1:ea:5e:d6:7e:45:a4:b3:76:73:49:b1:fe:a9:
ed:d4:70:9b:99:d9:62:69:53:6c:b3:26:77:52:eb:
9e:6b:02:ca:de:22:bf:96:05:04:41:9b:18:ab:ff:
da:71:81:83:5f:f2:80:20:35:bb:fc:bb:4e:fc:1b:
23:31:fb:15:c9:6f:68:f9:9a:92:6a:00:af:ac:05:
83:30:8a:1d:c9:d0:46:1b:52:bc:c4:67:08:52:0f:
ae:a2:d0:24:82:ec:8c:3d:ae:f2:c4:fe:38:7b:ee:
10:ad:fe:95:2d:93:40:60:68:0b:dc:dd:56:34:36:
2c:d3:8b:ff:e1:18:67:e8:0c:e6:ab:90:65:16:86:
a0:31:61:0b:e1:73:80:08:85:05:f2:7f:3c:00:99:
c2:6b:f2:a7:09:cb:63:dc:b2:2e:90:64:aa:ad:93:
8e:15:c5:60:12:91:31:2b:c7:a6:9b:73:a8:45:d7:
8e:90:72:3b:60:b6:3c:63:52:85:60:7a:08:72:70:
b6:54:9d:63:a9:63:10:9c:19:da:66:60:f3:ac:1f:
16:2d:bf:ec:c6:a7:5d:b0:7b:ca:bc:0f:53:57:d0:
35:1f:64:d4:00:b3:ae:fe:c7:ca:ce:77:ed:dd:84:
a7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:4F:93:A2:04:E8:41:E0:6E:D0:1E:FD:2B:A9:DA:CD:40:16:18:86
X509v3 Authority Key Identifier:
keyid:E0:E1:BF:53:EB:ED:7B:54:80:86:F4:AF:68:03:45:40:F2:0A:78:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OG_U-vte1SAhvSvaANFQPIKeOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c6929d-ac53-48f0-9afe-2c9679ace9b1/1/4OG_U-vte1SAhvSvaANFQPIKeOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:cf:fe:8d:ef:b6:df:2b:6c:97:ee:4f:84:08:b2:5b:c4:86:
cf:d4:b3:49:d0:e2:c9:b5:de:4f:50:39:9a:d6:07:f4:8e:43:
bb:c5:d0:ea:15:11:42:d5:54:e3:21:80:82:91:c9:8a:2e:fa:
52:8b:46:96:18:48:ed:7c:83:fd:4c:b5:d2:87:2d:40:03:1e:
8b:fa:c1:25:99:d7:02:d7:ce:69:bd:46:d7:20:d1:98:6e:45:
b5:ab:7a:b2:4b:32:6e:b4:28:90:ed:cd:f1:f7:d9:20:27:73:
28:ff:43:3f:28:36:b3:5d:23:1e:53:fa:0a:1a:6d:07:e0:35:
02:fe:f3:1c:93:77:d3:ff:45:b5:08:9d:18:3a:c1:0f:9e:c7:
57:8f:9e:e1:26:f1:61:2d:9c:0d:3d:5d:22:1a:fe:1a:13:6b:
ca:b9:e0:40:9c:61:99:ad:72:33:86:d7:ff:59:10:7e:83:61:
c0:41:78:20:49:ec:4a:e1:0b:e3:0d:89:7f:2e:55:a3:8b:e7:
c2:50:6e:5d:a4:17:72:1d:f1:5f:c3:c4:49:1b:33:7a:eb:1c:
f1:88:25:2e:19:c7:3a:67:56:3a:72:ee:62:e5:ba:99:e5:3f:
8a:a1:29:bf:e4:3b:6d:29:b8:6c:82:a3:8e:ab:63:e5:4f:f0:
5f:f2:00:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZokCfIeKMsivOCzbntfWoZ6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwZTFiZjUzZWJlZDdiNTQ4MDg2ZjRhZjY4MDM0NTQwZjIw
YTc4ZWMwHhcNMjUxMDI3MDUwMDIyWhcNMjUxMDI4MDUwMDIyWjAzMTEwLwYDVQQD
Eyg2ZDRmOTNhMjA0ZTg0MWUwNmVkMDFlZmQyYmE5ZGFjZDQwMTYxODg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UyHnwbJ5RvQX1m0bbbrwepe1n5F
pLN2c0mx/qnt1HCbmdliaVNssyZ3UuueawLK3iK/lgUEQZsYq//acYGDX/KAIDW7
/LtO/BsjMfsVyW9o+ZqSagCvrAWDMIodydBGG1K8xGcIUg+uotAkguyMPa7yxP44
e+4Qrf6VLZNAYGgL3N1WNDYs04v/4Rhn6Azmq5BlFoagMWEL4XOACIUF8n88AJnC
a/KnCctj3LIukGSqrZOOFcVgEpExK8emm3OoRdeOkHI7YLY8Y1KFYHoIcnC2VJ1j
qWMQnBnaZmDzrB8WLb/sxqddsHvKvA9TV9A1H2TUALOu/sfKznft3YSnAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG1Pk6IE6EHgbtAe/Sup2s1AFhiGMB8GA1UdIwQY
MBaAFODhv1Pr7XtUgIb0r2gDRUDyCnjsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNE9HX1UtdnRlMVNBaHZTdmFBTkZRUElLZU93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9jNjkyOWQtYWM1My00OGYwLTlhZmUt
MmM5Njc5YWNlOWIxLzEvNE9HX1UtdnRlMVNBaHZTdmFBTkZRUElLZU93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9jNjkyOWQtYWM1My00OGYwLTlhZmUtMmM5Njc5YWNlOWIx
LzEvNE9HX1UtdnRlMVNBaHZTdmFBTkZRUElLZU93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKM/+je+2
3ytsl+5PhAiyW8SGz9SzSdDiybXeT1A5mtYH9I5Du8XQ6hURQtVU4yGAgpHJii76
UotGlhhI7XyD/Uy10octQAMei/rBJZnXAtfOab1G1yDRmG5Ftat6sksybrQokO3N
8ffZICdzKP9DPyg2s10jHlP6ChptB+A1Av7zHJN30/9FtQidGDrBD57HV4+e4Sbx
YS2cDT1dIhr+GhNryrngQJxhma1yM4bX/1kQfoNhwEF4IEnsSuEL4w2Jfy5Vo4vn
wlBuXaQXch3xX8PESRszeusc8YglLhnHOmdWOnLuYuW6meU/iqEpv+Q7bSm4bIKj
jqtj5U/wX/IAzg==
-----END CERTIFICATE-----
Generated at Mon Oct 27 12:23:57 2025 by rpki-client