Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft
File: 4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft (raw, json)
Hash identifier: w/P0HfKRG3IP2kOOok/bdK+FRmelkQMDUOysqQPXqdY=
Subject key identifier: 6C:13:99:A8:52:21:7F:D5:95:5F:DE:4A:20:15:E5:DC:99:57:B7:29
Authority key identifier: E1:9A:3B:AE:48:C9:55:66:31:4D:60:EF:A8:89:F3:D6:5F:9B:DD:41
Certificate issuer: /CN=e19a3bae48c95566314d60efa889f3d65f9bdd41
Certificate serial: 019A7112C809871B254DB31AB1A4C4638FC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Zo7rkjJVWYxTWDvqInz1l-b3UE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft
Manifest number: 035C
Signing time: Tue 11 Nov 2025 04:00:47 +0000
Manifest this update: Tue 11 Nov 2025 04:00:47 +0000
Manifest next update: Wed 12 Nov 2025 04:00:47 +0000
Files and hashes: 1: 4Zo7rkjJVWYxTWDvqInz1l-b3UE.crl (hash: O/eMJjzty9t3CRfoxBIOid8wS33xH1nnzNO4Seg6HEA=)
2: tfMhyoCAwef_h-Z6sHOqruchZBw.roa (hash: Vm4p9lWk+dyS8xUI43ELEZzmPF8LCOKJ52R2v1+j6j0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Zo7rkjJVWYxTWDvqInz1l-b3UE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:c8:09:87:1b:25:4d:b3:1a:b1:a4:c4:63:8f:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e19a3bae48c95566314d60efa889f3d65f9bdd41
Validity
Not Before: Nov 11 04:00:47 2025 GMT
Not After : Nov 12 04:00:47 2025 GMT
Subject: CN=6c1399a852217fd5955fde4a2015e5dc9957b729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b3:46:16:19:b8:57:61:73:9c:32:1a:8d:6d:
bb:5d:eb:53:98:f7:72:97:dd:d8:d2:b9:5a:1e:b2:
39:77:ac:86:76:d4:8e:cc:37:b6:c8:86:b1:75:5f:
9d:fd:0f:fb:15:95:54:ed:55:f7:c2:b4:e8:af:f8:
f7:06:65:0f:2e:4b:fa:fa:1d:2e:39:70:1c:9e:c6:
7e:ac:03:69:df:ab:4d:03:26:4d:81:11:25:d8:5e:
73:88:19:a6:97:2e:83:af:ae:78:3b:6a:8f:43:bd:
09:6d:ba:4e:ad:71:6e:74:ec:ac:28:8a:9b:cc:33:
42:44:1c:55:7a:82:be:14:73:fb:1b:52:89:20:72:
e1:77:88:4a:7d:74:75:6e:f3:74:4e:e4:11:cd:2b:
9c:f6:6d:49:10:ea:29:e4:d3:92:60:c7:00:f1:c3:
ec:c9:8f:b0:4c:a2:5e:ff:fb:1d:a8:b1:a9:dd:d9:
25:9f:cf:71:e0:49:33:95:d8:05:ed:f3:fe:d2:f7:
ea:60:38:59:84:95:0a:1f:c6:85:74:75:57:55:e1:
2d:0d:99:6a:45:8a:d7:5a:f5:96:75:63:b5:d8:3c:
be:3b:44:ed:a5:49:38:f5:c0:5f:d2:8d:fa:2c:67:
6f:33:41:6f:ea:73:7d:9a:0c:e8:3c:16:d2:76:8f:
16:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:13:99:A8:52:21:7F:D5:95:5F:DE:4A:20:15:E5:DC:99:57:B7:29
X509v3 Authority Key Identifier:
keyid:E1:9A:3B:AE:48:C9:55:66:31:4D:60:EF:A8:89:F3:D6:5F:9B:DD:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Zo7rkjJVWYxTWDvqInz1l-b3UE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:06:9e:a8:e3:07:83:b0:a2:3b:37:42:d7:a5:80:43:03:dc:
41:d4:ab:67:1f:dc:f3:d2:c5:c7:53:5c:4d:38:49:9f:01:56:
10:86:7f:41:e6:35:36:a1:09:42:5f:d6:b5:8c:1d:bb:87:7c:
80:26:24:2a:2b:84:15:cc:c3:8e:5e:bb:6e:e8:be:84:b8:4f:
dd:fd:eb:5d:37:e8:68:5a:7b:52:b6:b9:af:af:2d:ab:f6:52:
fa:9a:b7:4b:8b:5a:74:e4:89:0a:19:16:22:1a:fa:54:99:39:
25:db:53:af:36:a7:9f:4d:2f:a2:32:cd:10:29:0a:6a:4e:39:
a6:a8:b8:75:6c:ff:38:cf:d6:9f:77:d8:72:4b:e1:d7:e4:ff:
5b:94:b9:e9:b5:23:8a:cb:f9:46:e2:c0:f8:52:6f:d7:7f:14:
19:e2:9f:2c:eb:9c:db:a7:cc:b7:46:6e:3c:a7:c0:b4:f4:fd:
ac:38:b7:93:bd:67:3d:4f:a5:05:5c:17:29:7b:13:03:4b:35:
0a:bb:2b:17:d8:c9:89:59:d3:af:b8:0f:fc:1f:18:b9:9f:e4:
6c:cb:49:2e:25:ff:d6:77:bf:15:31:0b:c3:68:e4:ef:95:0d:
ce:01:4f:fc:02:a8:46:14:9b:fc:a9:d0:11:12:5d:d9:1b:93:
28:92:6d:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxEsgJhxslTbMasaTEY4/DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxOWEzYmFlNDhjOTU1NjYzMTRkNjBlZmE4ODlmM2Q2NWY5
YmRkNDEwHhcNMjUxMTExMDQwMDQ3WhcNMjUxMTEyMDQwMDQ3WjAzMTEwLwYDVQQD
Eyg2YzEzOTlhODUyMjE3ZmQ1OTU1ZmRlNGEyMDE1ZTVkYzk5NTdiNzI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLNGFhm4V2FznDIajW27XetTmPdy
l93Y0rlaHrI5d6yGdtSOzDe2yIaxdV+d/Q/7FZVU7VX3wrTor/j3BmUPLkv6+h0u
OXAcnsZ+rANp36tNAyZNgREl2F5ziBmmly6Dr654O2qPQ70JbbpOrXFudOysKIqb
zDNCRBxVeoK+FHP7G1KJIHLhd4hKfXR1bvN0TuQRzSuc9m1JEOop5NOSYMcA8cPs
yY+wTKJe//sdqLGp3dkln89x4EkzldgF7fP+0vfqYDhZhJUKH8aFdHVXVeEtDZlq
RYrXWvWWdWO12Dy+O0TtpUk49cBf0o36LGdvM0Fv6nN9mgzoPBbSdo8WoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGwTmahSIX/VlV/eSiAV5dyZV7cpMB8GA1UdIwQY
MBaAFOGaO65IyVVmMU1g76iJ89Zfm91BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFpvN3JrakpWV1l4VFdEdnFJbnoxbC1iM1VFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy82MzBkMGEtNDViOC00NmM0LThjMDIt
OTE4NGE5MWI4YWUxLzEvNFpvN3JrakpWV1l4VFdEdnFJbnoxbC1iM1VFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy82MzBkMGEtNDViOC00NmM0LThjMDItOTE4NGE5MWI4YWUx
LzEvNFpvN3JrakpWV1l4VFdEdnFJbnoxbC1iM1VFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALQaeqOMH
g7CiOzdC16WAQwPcQdSrZx/c89LFx1NcTThJnwFWEIZ/QeY1NqEJQl/WtYwdu4d8
gCYkKiuEFczDjl67bui+hLhP3f3rXTfoaFp7Ura5r68tq/ZS+pq3S4tadOSJChkW
Ihr6VJk5JdtTrzann00vojLNECkKak45pqi4dWz/OM/Wn3fYckvh1+T/W5S56bUj
isv5RuLA+FJv138UGeKfLOuc26fMt0ZuPKfAtPT9rDi3k71nPU+lBVwXKXsTA0s1
CrsrF9jJiVnTr7gP/B8YuZ/kbMtJLiX/1ne/FTELw2jk75UNzgFP/AKoRhSb/KnQ
ERJd2RuTKJJtYw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:12:52 2025 by rpki-client