Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft
File: 4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft (raw, json)
Hash identifier: LAjxtqL+m/eb5SuduUJuvBECH8NXAI78JMusnyN/J9U=
Subject key identifier: C8:42:57:6F:8D:07:87:E7:E5:2D:2B:A2:9A:BB:D5:63:1F:82:BD:EA
Authority key identifier: E0:7E:00:8D:6E:D2:38:8A:D3:1B:74:22:42:31:52:A9:2A:54:DE:71
Certificate issuer: /CN=e07e008d6ed2388ad31b7422423152a92a54de71
Certificate serial: 019A71EE97D17E6EC1D72E2B66BF4BA4CDF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4H4AjW7SOIrTG3QiQjFSqSpU3nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 08:00:53 +0000
Manifest this update: Tue 11 Nov 2025 08:00:53 +0000
Manifest next update: Wed 12 Nov 2025 08:00:53 +0000
Files and hashes: 1: 4H4AjW7SOIrTG3QiQjFSqSpU3nE.crl (hash: jApqGR9GUxQLn7qJHh6d2z7X+/CUBTcFcqn6I4jrYpw=)
2: DRmZJybrlbdXMMtCv-LzVRORQZk.roa (hash: 5OPrd1Swg2Ws5p7BB56DIY7Qpw55Ar+XvquToD8doCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4H4AjW7SOIrTG3QiQjFSqSpU3nE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:97:d1:7e:6e:c1:d7:2e:2b:66:bf:4b:a4:cd:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e07e008d6ed2388ad31b7422423152a92a54de71
Validity
Not Before: Nov 11 08:00:53 2025 GMT
Not After : Nov 12 08:00:53 2025 GMT
Subject: CN=c842576f8d0787e7e52d2ba29abbd5631f82bdea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3c:21:fd:d0:a9:43:74:a0:d6:98:07:4a:04:
4e:2f:fb:59:e5:eb:a4:24:15:3b:72:98:d2:2c:8d:
3f:d4:f6:3c:9b:5b:5f:80:0a:48:d6:78:f3:6d:c5:
a7:51:38:56:ea:86:4e:5c:11:cb:6b:8c:72:8d:07:
35:17:13:ba:87:7b:3a:d7:cc:db:86:4a:1b:56:9e:
e4:27:40:b5:72:91:08:2d:2d:e6:94:73:40:33:2e:
ee:20:39:00:3a:f7:ae:a9:c9:70:72:03:c9:3a:ce:
19:7e:ff:d0:de:06:bb:0b:92:2d:6e:5d:58:f6:70:
56:d7:55:af:c1:8d:89:1a:7b:0a:1c:72:54:c7:c0:
4b:2b:a8:58:ce:0a:00:03:98:c5:b4:b0:3c:39:3e:
c2:2d:1d:42:78:9f:7b:df:7f:8f:72:db:14:7d:38:
6f:ac:c7:7a:d3:22:c8:85:72:4e:30:df:36:2b:46:
3d:48:84:0f:23:d8:67:d6:95:bd:33:98:22:87:c4:
2d:f1:f3:19:ad:f2:dc:78:73:97:58:71:26:50:7a:
9d:c0:fd:e4:4e:2e:01:40:ef:9b:2b:1c:3e:ea:3e:
ee:ff:fa:38:75:33:bf:1c:52:06:be:ce:19:99:1e:
a3:66:b5:f2:5e:11:bb:6f:17:e2:99:ca:1d:5a:18:
c4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:42:57:6F:8D:07:87:E7:E5:2D:2B:A2:9A:BB:D5:63:1F:82:BD:EA
X509v3 Authority Key Identifier:
keyid:E0:7E:00:8D:6E:D2:38:8A:D3:1B:74:22:42:31:52:A9:2A:54:DE:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4H4AjW7SOIrTG3QiQjFSqSpU3nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:06:71:94:97:d5:83:94:c9:70:22:1e:77:bf:2e:d1:fc:c1:
30:a6:16:7e:cd:d7:6c:19:0f:4b:cd:f7:14:50:3b:21:5d:a8:
7f:4a:6d:d9:84:43:9c:17:b4:6e:57:db:d6:70:4a:59:36:fb:
c3:1b:a5:94:c5:20:c1:1c:ea:5f:ad:37:82:c0:2c:c6:7b:b8:
6b:c4:81:bc:bf:16:1b:09:8c:db:0d:43:7a:d6:55:e3:83:93:
e6:17:7a:21:11:da:2c:ae:4e:53:e9:21:37:94:ff:b9:a6:d9:
55:ce:38:72:60:c2:1b:59:c4:55:36:73:e7:97:33:3a:d5:22:
85:41:20:cb:44:98:2e:e2:42:2f:1e:2e:ac:7d:96:45:62:7e:
53:07:73:16:3d:0e:b7:c7:2e:7a:56:2e:2b:b0:f3:50:5a:b0:
0d:55:1b:51:6c:c5:c2:22:7c:f5:f2:82:a2:28:1c:94:0a:f5:
35:d9:04:1c:cd:4f:e8:53:6d:1d:81:cf:a4:f8:07:6d:b8:dc:
00:9e:31:88:b4:c1:73:78:61:dc:4d:6a:29:61:3e:71:78:35:
b5:97:78:06:c8:8a:0d:78:cf:53:39:c7:c8:ab:c2:74:75:c1:
56:01:6d:03:27:f6:7c:9d:8d:9c:53:7a:6f:b2:6d:09:c1:69:
d9:58:f3:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7pfRfm7B1y4rZr9LpM3xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwN2UwMDhkNmVkMjM4OGFkMzFiNzQyMjQyMzE1MmE5MmE1
NGRlNzEwHhcNMjUxMTExMDgwMDUzWhcNMjUxMTEyMDgwMDUzWjAzMTEwLwYDVQQD
EyhjODQyNTc2ZjhkMDc4N2U3ZTUyZDJiYTI5YWJiZDU2MzFmODJiZGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTwh/dCpQ3Sg1pgHSgROL/tZ5euk
JBU7cpjSLI0/1PY8m1tfgApI1njzbcWnUThW6oZOXBHLa4xyjQc1FxO6h3s618zb
hkobVp7kJ0C1cpEILS3mlHNAMy7uIDkAOveuqclwcgPJOs4Zfv/Q3ga7C5Itbl1Y
9nBW11WvwY2JGnsKHHJUx8BLK6hYzgoAA5jFtLA8OT7CLR1CeJ9733+PctsUfThv
rMd60yLIhXJOMN82K0Y9SIQPI9hn1pW9M5gih8Qt8fMZrfLceHOXWHEmUHqdwP3k
Ti4BQO+bKxw+6j7u//o4dTO/HFIGvs4ZmR6jZrXyXhG7bxfimcodWhjEbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMhCV2+NB4fn5S0ropq71WMfgr3qMB8GA1UdIwQY
MBaAFOB+AI1u0jiK0xt0IkIxUqkqVN5xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEg0QWpXN1NPSXJURzNRaVFqRlNxU3BVM25FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9kNDc5Y2MtYTcxMi00YmMzLTgzMmQt
MjcyNzI0N2FmMjEwLzEvNEg0QWpXN1NPSXJURzNRaVFqRlNxU3BVM25FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9kNDc5Y2MtYTcxMi00YmMzLTgzMmQtMjcyNzI0N2FmMjEw
LzEvNEg0QWpXN1NPSXJURzNRaVFqRlNxU3BVM25FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkgZxlJfV
g5TJcCIed78u0fzBMKYWfs3XbBkPS833FFA7IV2of0pt2YRDnBe0blfb1nBKWTb7
wxullMUgwRzqX603gsAsxnu4a8SBvL8WGwmM2w1DetZV44OT5hd6IRHaLK5OU+kh
N5T/uabZVc44cmDCG1nEVTZz55czOtUihUEgy0SYLuJCLx4urH2WRWJ+UwdzFj0O
t8cuelYuK7DzUFqwDVUbUWzFwiJ89fKCoigclAr1NdkEHM1P6FNtHYHPpPgHbbjc
AJ4xiLTBc3hh3E1qKWE+cXg1tZd4BsiKDXjPUznHyKvCdHXBVgFtAyf2fJ2NnFN6
b7JtCcFp2VjznA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:16:18 2025 by rpki-client