Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/ccf63f-de5b-48ca-af15-dc0fe9d9e099/1/4yaBz9l8FkTv91Hg8eCqBTwFwA8.mft
File: 4yaBz9l8FkTv91Hg8eCqBTwFwA8.mft (raw, json)
Hash identifier: V72x1fIaTh2nQivCP5HqmX5BT3wPYoxOxbYGs6uQiCY=
Subject key identifier: FE:DA:70:B5:3E:9D:4A:E4:94:9B:E7:DC:B2:01:C0:F2:F0:F8:B7:96
Authority key identifier: E3:26:81:CF:D9:7C:16:44:EF:F7:51:E0:F1:E0:AA:05:3C:05:C0:0F
Certificate issuer: /CN=e32681cfd97c1644eff751e0f1e0aa053c05c00f
Certificate serial: 019A71B889EECD1EF3BF89E731762C1CD81D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4yaBz9l8FkTv91Hg8eCqBTwFwA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/ccf63f-de5b-48ca-af15-dc0fe9d9e099/1/4yaBz9l8FkTv91Hg8eCqBTwFwA8.mft
Manifest number: 0480
Signing time: Tue 11 Nov 2025 07:01:50 +0000
Manifest this update: Tue 11 Nov 2025 07:01:50 +0000
Manifest next update: Wed 12 Nov 2025 07:01:50 +0000
Files and hashes: 1: 4yaBz9l8FkTv91Hg8eCqBTwFwA8.crl (hash: tOSE59r1yiAhUfL70k/TFepDdU9tAj7gHkOCWBwzy50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/ccf63f-de5b-48ca-af15-dc0fe9d9e099/1/4yaBz9l8FkTv91Hg8eCqBTwFwA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/ccf63f-de5b-48ca-af15-dc0fe9d9e099/1/4yaBz9l8FkTv91Hg8eCqBTwFwA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4yaBz9l8FkTv91Hg8eCqBTwFwA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:89:ee:cd:1e:f3:bf:89:e7:31:76:2c:1c:d8:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e32681cfd97c1644eff751e0f1e0aa053c05c00f
Validity
Not Before: Nov 11 07:01:50 2025 GMT
Not After : Nov 12 07:01:50 2025 GMT
Subject: CN=feda70b53e9d4ae4949be7dcb201c0f2f0f8b796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:52:09:69:05:4c:26:8f:89:42:2d:2b:cd:a3:
f8:23:22:6c:cb:a0:03:b1:d6:a3:ae:11:65:0c:9f:
cc:ea:33:7d:f6:8e:62:d8:01:3c:9b:99:ac:0b:7a:
f3:ed:f9:09:cb:14:1f:0c:c3:c4:fb:47:28:d9:e5:
24:11:94:20:30:62:89:d9:7a:48:16:db:6b:95:65:
93:27:63:13:3d:9b:d7:4e:7d:97:43:8c:ef:de:d7:
cf:28:a0:9d:82:3e:1c:c6:78:ba:9a:75:6f:1b:35:
0c:a6:33:bb:4c:4e:8d:03:c1:8d:26:f9:08:b8:cf:
6d:62:80:d8:86:f6:e0:24:dc:81:b9:48:d6:f9:4d:
57:c2:04:b7:98:dc:00:86:e3:4a:c7:3e:a7:08:2f:
ad:5b:95:95:ca:70:7c:be:ed:d8:90:6e:b7:5a:7d:
9d:a1:66:e3:f3:ff:7f:42:6b:8c:18:89:25:a0:b3:
52:3a:e6:72:69:64:fd:2c:e5:ed:b3:34:17:54:1d:
58:8d:b6:90:ff:21:8a:a8:c6:84:29:b1:9f:a6:f8:
33:42:5c:36:bb:e2:31:4e:72:d6:2a:40:5d:09:5f:
d8:3f:71:6d:79:d7:d8:b3:af:ac:bf:3e:ce:03:36:
d1:e5:18:3b:7c:f7:4c:97:a0:0d:9f:1e:31:03:32:
d1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:DA:70:B5:3E:9D:4A:E4:94:9B:E7:DC:B2:01:C0:F2:F0:F8:B7:96
X509v3 Authority Key Identifier:
keyid:E3:26:81:CF:D9:7C:16:44:EF:F7:51:E0:F1:E0:AA:05:3C:05:C0:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4yaBz9l8FkTv91Hg8eCqBTwFwA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/ccf63f-de5b-48ca-af15-dc0fe9d9e099/1/4yaBz9l8FkTv91Hg8eCqBTwFwA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/ccf63f-de5b-48ca-af15-dc0fe9d9e099/1/4yaBz9l8FkTv91Hg8eCqBTwFwA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:db:42:50:ef:74:98:b2:84:75:51:db:88:f8:c7:8e:4b:a5:
70:c7:c9:cf:0c:57:2b:5b:a3:b5:d4:0a:31:ad:e6:76:be:a6:
ab:c8:00:1c:d8:f2:d2:c1:21:11:99:59:a8:56:38:d1:0f:38:
fa:04:ef:a2:00:9c:33:fd:5a:d2:1c:69:1e:bf:be:2c:3c:d1:
89:69:8f:46:cb:1f:07:48:49:c5:e5:81:fb:0a:ee:2c:eb:3f:
37:1c:b3:82:9d:cc:3e:9c:cb:9e:df:d8:75:31:b9:9f:02:76:
01:7d:6d:10:b3:5a:55:cf:86:7e:61:8e:25:91:d5:3a:cf:66:
1b:b6:15:ed:d7:45:46:eb:d8:9b:26:b7:86:22:1d:42:c5:99:
4c:0e:4b:f2:d4:bd:a4:49:4f:e9:5f:aa:ad:78:1f:b0:0a:a2:
c1:1f:29:d1:3c:f6:aa:c6:f7:a4:7e:ec:91:30:f1:55:70:02:
7a:68:bd:93:12:85:16:86:37:84:4c:58:e3:af:5e:6e:43:20:
b1:a5:2c:01:a6:87:b5:9f:e9:e4:b4:26:98:b0:cf:78:85:aa:
ef:0f:7e:e7:42:6b:26:ab:7e:ee:c8:69:90:d2:95:8c:42:49:
fb:4f:98:ad:14:a5:5d:77:63:da:23:a2:bf:4a:57:48:bb:e2:
a4:3b:53:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuInuzR7zv4nnMXYsHNgdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMjY4MWNmZDk3YzE2NDRlZmY3NTFlMGYxZTBhYTA1M2Mw
NWMwMGYwHhcNMjUxMTExMDcwMTUwWhcNMjUxMTEyMDcwMTUwWjAzMTEwLwYDVQQD
EyhmZWRhNzBiNTNlOWQ0YWU0OTQ5YmU3ZGNiMjAxYzBmMmYwZjhiNzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lIJaQVMJo+JQi0rzaP4IyJsy6AD
sdajrhFlDJ/M6jN99o5i2AE8m5msC3rz7fkJyxQfDMPE+0co2eUkEZQgMGKJ2XpI
FttrlWWTJ2MTPZvXTn2XQ4zv3tfPKKCdgj4cxni6mnVvGzUMpjO7TE6NA8GNJvkI
uM9tYoDYhvbgJNyBuUjW+U1XwgS3mNwAhuNKxz6nCC+tW5WVynB8vu3YkG63Wn2d
oWbj8/9/QmuMGIkloLNSOuZyaWT9LOXtszQXVB1YjbaQ/yGKqMaEKbGfpvgzQlw2
u+IxTnLWKkBdCV/YP3FtedfYs6+svz7OAzbR5Rg7fPdMl6ANnx4xAzLR9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP7acLU+nUrklJvn3LIBwPLw+LeWMB8GA1UdIwQY
MBaAFOMmgc/ZfBZE7/dR4PHgqgU8BcAPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHlhQno5bDhGa1R2OTFIZzhlQ3FCVHdGd0E4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9jY2Y2M2YtZGU1Yi00OGNhLWFmMTUt
ZGMwZmU5ZDllMDk5LzEvNHlhQno5bDhGa1R2OTFIZzhlQ3FCVHdGd0E4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9jY2Y2M2YtZGU1Yi00OGNhLWFmMTUtZGMwZmU5ZDllMDk5
LzEvNHlhQno5bDhGa1R2OTFIZzhlQ3FCVHdGd0E4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaNtCUO90
mLKEdVHbiPjHjkulcMfJzwxXK1ujtdQKMa3mdr6mq8gAHNjy0sEhEZlZqFY40Q84
+gTvogCcM/1a0hxpHr++LDzRiWmPRssfB0hJxeWB+wruLOs/Nxyzgp3MPpzLnt/Y
dTG5nwJ2AX1tELNaVc+GfmGOJZHVOs9mG7YV7ddFRuvYmya3hiIdQsWZTA5L8tS9
pElP6V+qrXgfsAqiwR8p0Tz2qsb3pH7skTDxVXACemi9kxKFFoY3hExY469ebkMg
saUsAaaHtZ/p5LQmmLDPeIWq7w9+50JrJqt+7shpkNKVjEJJ+0+YrRSlXXdj2iOi
v0pXSLvipDtTiw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:33 2025 by rpki-client