Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
File: 4bpLKGfa04tzpGkYJB78cqISYvc.mft (raw, json)
Hash identifier: soQxgpw3qsrPhzXOqKmC+p1RopyAbbvMB6ooUE/lgkM=
Subject key identifier: 80:A7:AD:AB:D7:68:4F:B0:CC:15:69:C2:3C:05:39:78:18:17:08:22
Authority key identifier: E1:BA:4B:28:67:DA:D3:8B:73:A4:69:18:24:1E:FC:72:A2:12:62:F7
Certificate issuer: /CN=e1ba4b2867dad38b73a46918241efc72a21262f7
Certificate serial: 019A2855B72CD3F6CDB35975840A89058754
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
Manifest number: 16F9
Signing time: Tue 28 Oct 2025 01:01:37 +0000
Manifest this update: Tue 28 Oct 2025 01:01:37 +0000
Manifest next update: Wed 29 Oct 2025 01:01:37 +0000
Files and hashes: 1: 4bpLKGfa04tzpGkYJB78cqISYvc.crl (hash: pi58GMTfoq+Ry3+pC9MXKMUeT+uDQOaQWzZd7mNTlro=)
2: MccPojCQ_5aiRX4Myokyw6v--7c.roa (hash: 6zT3oaRUJKtce125U7+EL/be9RKqr09GLQyUToqdrbc=)
3: UJACc2s1J5BaMpYznoUagPO6cuI.roa (hash: 5ImyJpj69YHNVaFZ4EKvt0GWM6aecM/AkpksMF5YZpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:55:b7:2c:d3:f6:cd:b3:59:75:84:0a:89:05:87:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ba4b2867dad38b73a46918241efc72a21262f7
Validity
Not Before: Oct 28 01:01:37 2025 GMT
Not After : Oct 29 01:01:37 2025 GMT
Subject: CN=80a7adabd7684fb0cc1569c23c05397818170822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:98:34:ba:18:eb:a1:aa:b9:3d:01:89:60:d1:
90:90:35:04:d1:98:a5:3b:b3:72:15:e9:89:8a:cf:
07:e2:36:02:3e:a8:1e:a2:12:66:59:65:36:0f:91:
11:89:94:ae:90:88:3b:02:e9:3a:28:25:78:e2:a5:
5c:11:cb:84:dd:9e:23:b2:9e:cf:4f:45:99:28:64:
6b:07:36:64:8d:12:36:b8:16:6b:92:24:d3:de:31:
02:44:a2:14:29:3d:98:43:98:af:bf:0f:23:35:bc:
90:fb:b9:20:6d:38:80:35:11:67:db:e1:f6:2d:31:
d1:69:11:ff:5d:20:55:bd:d6:b5:65:cf:e1:33:c5:
b6:ad:43:9b:17:7c:da:a9:00:37:13:ff:07:92:77:
08:ee:4e:08:a4:cf:8f:09:1e:7e:f1:c3:30:cf:e4:
c8:d7:ae:69:a6:db:34:d8:95:f7:ce:cd:f6:1c:13:
c9:f2:f2:0d:d7:eb:49:e0:7d:0a:ad:25:f8:97:01:
8a:5b:b1:82:10:a9:dc:38:3c:22:eb:96:95:1d:01:
97:88:fa:a6:ab:a9:9a:71:b5:3e:5d:b5:7c:cf:f2:
e3:c7:9e:dd:4b:09:52:84:69:a8:ff:bd:c7:ea:96:
e1:55:6b:1b:75:39:14:27:d4:ad:fd:93:2c:5c:23:
26:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:A7:AD:AB:D7:68:4F:B0:CC:15:69:C2:3C:05:39:78:18:17:08:22
X509v3 Authority Key Identifier:
keyid:E1:BA:4B:28:67:DA:D3:8B:73:A4:69:18:24:1E:FC:72:A2:12:62:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:34:8b:a4:ee:d4:ee:95:4a:87:af:d2:04:f6:4a:e4:2e:17:
30:68:c8:71:8c:c8:55:f2:15:75:64:66:ae:46:ff:65:3d:67:
c8:26:97:af:63:d1:1b:c9:14:f2:03:9f:b3:a8:2e:13:dc:52:
72:9c:e3:5c:a5:78:ad:69:c1:a2:5b:c4:cd:0e:35:5d:2f:1e:
75:03:84:0a:a8:ac:f0:6c:a8:28:f6:f9:f0:e7:8d:e2:7c:a9:
6c:2f:39:62:c5:6a:69:7f:64:47:62:f0:ca:c8:e3:f4:68:5d:
fd:50:d5:b1:d4:83:fb:61:a7:39:af:fe:83:2b:18:f4:50:fc:
24:74:fe:e8:ce:d6:a1:1d:45:85:dc:b4:d4:88:61:ad:5d:33:
e2:35:96:c0:a4:40:85:4b:47:22:b7:57:36:e6:9a:10:b9:12:
7f:8a:ef:36:9e:e3:d6:35:cd:ac:4b:88:2d:17:41:d3:a1:76:
47:f1:6f:b2:1d:56:80:93:7b:ae:ac:c0:29:64:18:39:cc:4d:
39:2b:d4:07:1c:28:6d:13:7d:1c:11:ff:d6:ed:24:71:31:15:
ef:31:61:d2:56:d0:95:19:d0:08:36:82:08:13:ce:b9:e5:f7:
31:9c:f6:f1:0b:be:20:33:d8:ef:42:aa:de:95:9f:18:7a:23:
9b:a7:10:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZooVbcs0/bNs1l1hAqJBYdUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxYmE0YjI4NjdkYWQzOGI3M2E0NjkxODI0MWVmYzcyYTIx
MjYyZjcwHhcNMjUxMDI4MDEwMTM3WhcNMjUxMDI5MDEwMTM3WjAzMTEwLwYDVQQD
Eyg4MGE3YWRhYmQ3Njg0ZmIwY2MxNTY5YzIzYzA1Mzk3ODE4MTcwODIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJg0uhjroaq5PQGJYNGQkDUE0Zil
O7NyFemJis8H4jYCPqgeohJmWWU2D5ERiZSukIg7Auk6KCV44qVcEcuE3Z4jsp7P
T0WZKGRrBzZkjRI2uBZrkiTT3jECRKIUKT2YQ5ivvw8jNbyQ+7kgbTiANRFn2+H2
LTHRaRH/XSBVvda1Zc/hM8W2rUObF3zaqQA3E/8HkncI7k4IpM+PCR5+8cMwz+TI
165ppts02JX3zs32HBPJ8vIN1+tJ4H0KrSX4lwGKW7GCEKncODwi65aVHQGXiPqm
q6macbU+XbV8z/Ljx57dSwlShGmo/73H6pbhVWsbdTkUJ9St/ZMsXCMmZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFICnravXaE+wzBVpwjwFOXgYFwgiMB8GA1UdIwQY
MBaAFOG6Syhn2tOLc6RpGCQe/HKiEmL3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGJwTEtHZmEwNHR6cEdrWUpCNzhjcUlTWXZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC82ODkxMDktMTcyMy00YmYxLWI2M2Et
ZGM2NGFlNzI1NzhlLzEvNGJwTEtHZmEwNHR6cEdrWUpCNzhjcUlTWXZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC82ODkxMDktMTcyMy00YmYxLWI2M2EtZGM2NGFlNzI1Nzhl
LzEvNGJwTEtHZmEwNHR6cEdrWUpCNzhjcUlTWXZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkTSLpO7U
7pVKh6/SBPZK5C4XMGjIcYzIVfIVdWRmrkb/ZT1nyCaXr2PRG8kU8gOfs6guE9xS
cpzjXKV4rWnBolvEzQ41XS8edQOECqis8GyoKPb58OeN4nypbC85YsVqaX9kR2Lw
ysjj9Ghd/VDVsdSD+2GnOa/+gysY9FD8JHT+6M7WoR1Fhdy01IhhrV0z4jWWwKRA
hUtHIrdXNuaaELkSf4rvNp7j1jXNrEuILRdB06F2R/Fvsh1WgJN7rqzAKWQYOcxN
OSvUBxwobRN9HBH/1u0kcTEV7zFh0lbQlRnQCDaCCBPOueX3MZz28Qu+IDPY70Kq
3pWfGHojm6cQHQ==
-----END CERTIFICATE-----
Generated at Tue Oct 28 09:23:30 2025 by rpki-client