Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.mft
File: k4KIfhkEky8RhsLDHGqS_17GQ4c.mft (raw, json)
Hash identifier: +Qz5JgubXrQTIjJx7ne4Eb/+FHf4xKZ0FluW+HY+IHg=
Subject key identifier: 77:04:FB:46:8A:34:CC:9A:70:EC:FD:2E:D5:C5:56:10:6E:11:DB:FA
Authority key identifier: 93:82:88:7E:19:04:93:2F:11:86:C2:C3:1C:6A:92:FF:5E:C6:43:87
Certificate issuer: /CN=9382887e1904932f1186c2c31c6a92ff5ec64387
Certificate serial: 019A71B81B8DEDBB4D44A495D5FE95DB2CDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k4KIfhkEky8RhsLDHGqS_17GQ4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.mft
Manifest number: 044E
Signing time: Tue 11 Nov 2025 07:01:22 +0000
Manifest this update: Tue 11 Nov 2025 07:01:22 +0000
Manifest next update: Wed 12 Nov 2025 07:01:22 +0000
Files and hashes: 1: k4KIfhkEky8RhsLDHGqS_17GQ4c.crl (hash: xhyArBtUwtJMmrtr9ZdfUSUGhNBN3K/PR4qYJ2boy/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/k4KIfhkEky8RhsLDHGqS_17GQ4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:1b:8d:ed:bb:4d:44:a4:95:d5:fe:95:db:2c:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9382887e1904932f1186c2c31c6a92ff5ec64387
Validity
Not Before: Nov 11 07:01:22 2025 GMT
Not After : Nov 12 07:01:22 2025 GMT
Subject: CN=7704fb468a34cc9a70ecfd2ed5c556106e11dbfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:31:08:93:7e:75:cb:44:47:9b:9b:aa:09:12:
3f:75:44:fb:06:3f:85:a6:3c:6a:4d:51:7d:66:09:
d5:65:04:a2:06:7e:c6:dc:93:71:e0:d0:42:3f:85:
9f:22:4b:ba:36:61:a1:55:27:1d:ab:2c:c8:75:55:
17:d4:c3:e4:9e:2c:a4:d0:cd:37:5e:bf:10:41:36:
fb:c1:94:d7:ce:0b:d8:1b:2a:66:7f:b5:e9:53:40:
61:87:8e:14:f2:95:0b:69:4c:21:a5:02:76:87:06:
41:9c:2a:ea:09:70:31:30:82:13:ab:df:f6:b6:0a:
18:73:58:72:60:ec:5f:4b:ee:95:23:63:6a:1a:00:
55:97:3a:b5:68:a4:ad:2c:d4:ca:55:55:2f:78:46:
c4:ed:a0:84:90:29:b8:24:67:59:a4:b8:7b:b5:58:
1c:9f:45:4d:c3:6b:a0:c5:74:5e:e4:15:c0:47:0c:
9a:84:e8:7e:46:f1:8e:06:bf:f2:4d:c7:ef:8b:2c:
76:7e:7d:15:d2:35:17:8d:40:c7:f6:19:a9:7a:31:
71:07:ee:4b:1d:f0:cd:ba:3a:d8:11:86:91:17:3b:
36:4b:93:d6:6c:8a:35:df:c0:38:a7:7d:00:17:4b:
65:d0:b3:8f:b0:e9:aa:71:ab:a8:e0:27:bd:24:7c:
06:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:04:FB:46:8A:34:CC:9A:70:EC:FD:2E:D5:C5:56:10:6E:11:DB:FA
X509v3 Authority Key Identifier:
keyid:93:82:88:7E:19:04:93:2F:11:86:C2:C3:1C:6A:92:FF:5E:C6:43:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4KIfhkEky8RhsLDHGqS_17GQ4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bf90eb-15c8-40d8-a220-5c945468c475/1/k4KIfhkEky8RhsLDHGqS_17GQ4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:a0:ea:e7:52:e1:71:e0:89:2c:66:be:2d:db:23:81:26:b2:
82:e4:d2:93:90:1b:e9:1a:20:61:b8:86:3e:e3:2e:56:ec:c9:
e5:61:72:47:05:ca:6d:01:ca:4b:c9:a2:36:f6:ce:6f:f6:8d:
01:94:b4:05:5e:70:b3:1f:94:8e:83:62:74:a1:ed:f6:72:bc:
7e:00:f3:83:a5:0d:26:c0:41:12:6d:31:55:b1:81:86:b8:0a:
23:21:e0:65:70:ce:10:0e:86:ff:9b:80:60:d5:7d:67:d9:a6:
c5:7a:5b:93:dd:a6:c6:f1:67:0f:2c:24:fa:f7:e4:fc:83:4c:
20:d1:2b:01:5a:d3:82:80:8a:e3:a4:38:61:ba:b2:a6:53:9c:
bf:db:e2:2c:f7:4a:d3:ba:88:41:42:f7:c5:25:63:6f:35:42:
4b:e8:17:37:05:e2:2a:fd:2d:a2:37:22:9c:f3:33:76:f2:58:
86:f1:6d:03:ab:1d:21:9e:2e:95:64:f3:38:88:de:aa:79:a4:
28:aa:9a:72:84:ce:c2:f3:b3:ab:06:b3:ec:7d:81:4a:06:55:
6b:49:48:66:da:68:d0:85:62:a3:04:8f:9d:dc:75:2e:46:45:
ca:9e:5e:b7:ee:5b:87:9f:bf:9d:f8:22:90:f6:25:5a:7c:47:
56:21:98:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuBuN7btNRKSV1f6V2yzaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzODI4ODdlMTkwNDkzMmYxMTg2YzJjMzFjNmE5MmZmNWVj
NjQzODcwHhcNMjUxMTExMDcwMTIyWhcNMjUxMTEyMDcwMTIyWjAzMTEwLwYDVQQD
Eyg3NzA0ZmI0NjhhMzRjYzlhNzBlY2ZkMmVkNWM1NTYxMDZlMTFkYmZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjEIk351y0RHm5uqCRI/dUT7Bj+F
pjxqTVF9ZgnVZQSiBn7G3JNx4NBCP4WfIku6NmGhVScdqyzIdVUX1MPkniyk0M03
Xr8QQTb7wZTXzgvYGypmf7XpU0Bhh44U8pULaUwhpQJ2hwZBnCrqCXAxMIITq9/2
tgoYc1hyYOxfS+6VI2NqGgBVlzq1aKStLNTKVVUveEbE7aCEkCm4JGdZpLh7tVgc
n0VNw2ugxXRe5BXARwyahOh+RvGOBr/yTcfviyx2fn0V0jUXjUDH9hmpejFxB+5L
HfDNujrYEYaRFzs2S5PWbIo138A4p30AF0tl0LOPsOmqcauo4Ce9JHwGIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHcE+0aKNMyacOz9LtXFVhBuEdv6MB8GA1UdIwQY
MBaAFJOCiH4ZBJMvEYbCwxxqkv9exkOHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazRLSWZoa0VreThSaHNMREhHcVNfMTdHUTRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9iZjkwZWItMTVjOC00MGQ4LWEyMjAt
NWM5NDU0NjhjNDc1LzEvazRLSWZoa0VreThSaHNMREhHcVNfMTdHUTRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9iZjkwZWItMTVjOC00MGQ4LWEyMjAtNWM5NDU0NjhjNDc1
LzEvazRLSWZoa0VreThSaHNMREhHcVNfMTdHUTRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXKDq51Lh
ceCJLGa+LdsjgSayguTSk5Ab6RogYbiGPuMuVuzJ5WFyRwXKbQHKS8miNvbOb/aN
AZS0BV5wsx+UjoNidKHt9nK8fgDzg6UNJsBBEm0xVbGBhrgKIyHgZXDOEA6G/5uA
YNV9Z9mmxXpbk92mxvFnDywk+vfk/INMINErAVrTgoCK46Q4YbqyplOcv9viLPdK
07qIQUL3xSVjbzVCS+gXNwXiKv0tojcinPMzdvJYhvFtA6sdIZ4ulWTzOIjeqnmk
KKqacoTOwvOzqwaz7H2BSgZVa0lIZtpo0IViowSPndx1LkZFyp5et+5bh5+/nfgi
kPYlWnxHViGYhg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:07:08 2025 by rpki-client