Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
File: 4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft (raw, json)
Hash identifier: VFiEbZ61cHTLZeelhRdUOpSEWoDERal0zNQSSINkszU=
Subject key identifier: 97:5E:F6:1F:39:A4:91:8D:04:89:91:B6:3D:A4:8A:C8:F4:36:F3:8E
Authority key identifier: E1:B9:A3:CE:0F:59:39:10:81:9C:32:71:E1:E8:D0:BD:13:71:A6:BE
Certificate issuer: /CN=e1b9a3ce0f593910819c3271e1e8d0bd1371a6be
Certificate serial: 019A2AB163DB761CA710C143B72BAAB0E35F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
Manifest number: 1638
Signing time: Tue 28 Oct 2025 12:00:59 +0000
Manifest this update: Tue 28 Oct 2025 12:00:59 +0000
Manifest next update: Wed 29 Oct 2025 12:00:59 +0000
Files and hashes: 1: 4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl (hash: QN1Ovwnh632pFI/2PRDu87DYS5VjNwhxHD2HDvNLrE0=)
2: a66Wq_cz1-opkUh3xxWdvnCXHIE.roa (hash: RBd7B7hKzSBV9gC+hmCCrVD1uw4jr8IoDZkTqDG8H1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 12:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:b1:63:db:76:1c:a7:10:c1:43:b7:2b:aa:b0:e3:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1b9a3ce0f593910819c3271e1e8d0bd1371a6be
Validity
Not Before: Oct 28 12:00:59 2025 GMT
Not After : Oct 29 12:00:59 2025 GMT
Subject: CN=975ef61f39a4918d048991b63da48ac8f436f38e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1f:e6:ea:66:ba:25:0a:1d:02:f6:e9:01:95:
17:51:ea:95:6e:32:aa:a2:88:56:45:65:13:36:4c:
04:0f:64:9f:b9:db:83:d4:f2:81:84:f2:8c:ab:e9:
1e:c4:8f:88:01:cc:e4:97:45:89:8a:3a:9c:90:4b:
36:a8:d3:52:ed:b3:13:7f:c9:e9:0e:d7:39:c0:82:
29:c3:75:d2:f7:04:7f:71:92:fb:3c:c6:4e:ed:37:
66:73:4d:c5:e6:91:70:a2:fe:c7:97:48:30:49:1a:
8c:3c:26:6a:85:c5:2f:1c:cd:71:95:79:be:3a:1f:
97:f7:d4:82:bc:e5:21:6f:3c:e2:4e:7e:a5:25:88:
a1:fe:47:ba:81:0c:1f:8f:34:dd:7f:12:eb:df:46:
13:ad:5e:f3:66:d2:73:07:0a:66:32:c6:8f:9a:7e:
81:0e:7d:14:e2:da:20:7a:78:f6:00:f1:ec:88:55:
aa:3a:66:04:e2:02:c1:35:3c:54:cd:9f:27:94:2c:
a7:aa:d2:15:40:17:2c:62:c0:e2:a8:d5:0a:68:0f:
c3:84:57:bd:df:74:ae:0a:ab:d1:b6:4e:3d:a6:d0:
d8:53:f4:6d:49:3a:6e:31:49:11:da:4f:31:02:e7:
0c:4a:e0:40:ac:29:4f:1f:37:73:18:42:49:1b:36:
ed:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:5E:F6:1F:39:A4:91:8D:04:89:91:B6:3D:A4:8A:C8:F4:36:F3:8E
X509v3 Authority Key Identifier:
keyid:E1:B9:A3:CE:0F:59:39:10:81:9C:32:71:E1:E8:D0:BD:13:71:A6:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:6d:40:29:83:bc:c6:91:e4:90:b6:a6:59:a1:63:a3:7a:a9:
8a:01:7c:af:14:12:56:cb:ff:df:2c:27:6c:3a:db:7b:13:1e:
64:a6:b2:c4:34:62:d6:b3:8b:22:a2:15:92:f0:2c:d8:87:70:
a3:05:76:14:10:88:74:c8:00:02:84:27:cb:aa:e6:c6:70:60:
a9:94:f2:14:c1:a2:58:71:df:22:23:aa:14:41:c0:d9:0d:6f:
56:71:0b:6a:93:8f:61:9a:84:9a:a1:e8:9a:03:32:49:04:68:
a8:ec:ff:37:b0:c8:b1:50:9c:1b:a3:ce:c1:2f:c7:33:36:51:
b6:9f:73:55:33:a5:2a:64:99:cb:d9:62:60:0f:91:6c:55:f2:
de:e6:ff:45:14:ae:a2:86:b5:09:4d:b6:e4:4a:3b:5e:d7:42:
08:64:e7:f4:98:2b:91:ce:6a:3a:dc:a4:6b:a9:35:ea:24:a5:
73:fc:64:4c:30:bf:45:9e:c6:32:6c:c5:35:8d:21:1e:31:fd:
bf:d0:ee:bc:7e:3c:04:33:67:e5:61:f9:4d:fd:fb:4a:b7:a6:
10:93:12:2c:49:e8:4d:b6:e9:b1:a1:63:64:69:54:bd:7d:5e:
a3:74:50:11:92:f1:8d:10:1d:7a:20:7a:07:cf:e9:49:ac:b2:
67:f5:2d:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoqsWPbdhynEMFDtyuqsONfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxYjlhM2NlMGY1OTM5MTA4MTljMzI3MWUxZThkMGJkMTM3
MWE2YmUwHhcNMjUxMDI4MTIwMDU5WhcNMjUxMDI5MTIwMDU5WjAzMTEwLwYDVQQD
Eyg5NzVlZjYxZjM5YTQ5MThkMDQ4OTkxYjYzZGE0OGFjOGY0MzZmMzhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuh/m6ma6JQodAvbpAZUXUeqVbjKq
oohWRWUTNkwED2SfuduD1PKBhPKMq+kexI+IAczkl0WJijqckEs2qNNS7bMTf8np
Dtc5wIIpw3XS9wR/cZL7PMZO7Tdmc03F5pFwov7Hl0gwSRqMPCZqhcUvHM1xlXm+
Oh+X99SCvOUhbzziTn6lJYih/ke6gQwfjzTdfxLr30YTrV7zZtJzBwpmMsaPmn6B
Dn0U4togenj2APHsiFWqOmYE4gLBNTxUzZ8nlCynqtIVQBcsYsDiqNUKaA/DhFe9
33SuCqvRtk49ptDYU/RtSTpuMUkR2k8xAucMSuBArClPHzdzGEJJGzbtgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJde9h85pJGNBImRtj2kisj0NvOOMB8GA1UdIwQY
MBaAFOG5o84PWTkQgZwyceHo0L0Tcaa+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGJtanpnOVpPUkNCbkRKeDRlalF2Uk54cHI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8wZDhiZTgtYjRiNC00MzZlLTg2ZTIt
YmE0YzU2ZDhjMGNlLzEvNGJtanpnOVpPUkNCbkRKeDRlalF2Uk54cHI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8wZDhiZTgtYjRiNC00MzZlLTg2ZTItYmE0YzU2ZDhjMGNl
LzEvNGJtanpnOVpPUkNCbkRKeDRlalF2Uk54cHI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfW1AKYO8
xpHkkLamWaFjo3qpigF8rxQSVsv/3ywnbDrbexMeZKayxDRi1rOLIqIVkvAs2Idw
owV2FBCIdMgAAoQny6rmxnBgqZTyFMGiWHHfIiOqFEHA2Q1vVnELapOPYZqEmqHo
mgMySQRoqOz/N7DIsVCcG6POwS/HMzZRtp9zVTOlKmSZy9liYA+RbFXy3ub/RRSu
ooa1CU225Eo7XtdCCGTn9Jgrkc5qOtyka6k16iSlc/xkTDC/RZ7GMmzFNY0hHjH9
v9DuvH48BDNn5WH5Tf37SremEJMSLEnoTbbpsaFjZGlUvX1eo3RQEZLxjRAdeiB6
B8/pSayyZ/UtxA==
-----END CERTIFICATE-----
Generated at Tue Oct 28 15:13:27 2025 by rpki-client