Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
File: 4IFCtC45SABI0fzqWHo2k9pMC4o.mft (raw, json)
Hash identifier: hUK4sWfbS4pxXmGF7TvojjE1XFqkbkboWbk9GkOnwtg=
Subject key identifier: 3E:EB:30:D1:F1:48:41:D7:DD:D0:44:8A:A6:87:D8:D7:CF:95:CD:8C
Authority key identifier: E0:81:42:B4:2E:39:48:00:48:D1:FC:EA:58:7A:36:93:DA:4C:0B:8A
Certificate issuer: /CN=e08142b42e39480048d1fcea587a3693da4c0b8a
Certificate serial: 019A725C4B3340D5A4EDCA7C4806E67CB8BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IFCtC45SABI0fzqWHo2k9pMC4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
Manifest number: 050A
Signing time: Tue 11 Nov 2025 10:00:42 +0000
Manifest this update: Tue 11 Nov 2025 10:00:42 +0000
Manifest next update: Wed 12 Nov 2025 10:00:42 +0000
Files and hashes: 1: 4IFCtC45SABI0fzqWHo2k9pMC4o.crl (hash: oMiHR9GOCygNZt3sY0V3Nsl80mUA08Rjc3Oo7cCTsaQ=)
2: SkmMZcDmD4tfD5IJGWfT10a999s.roa (hash: FtSYkAppozDXy+VqyVeW2kon4HMuVtycn1oxBmmVVwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4IFCtC45SABI0fzqWHo2k9pMC4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:4b:33:40:d5:a4:ed:ca:7c:48:06:e6:7c:b8:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e08142b42e39480048d1fcea587a3693da4c0b8a
Validity
Not Before: Nov 11 10:00:42 2025 GMT
Not After : Nov 12 10:00:42 2025 GMT
Subject: CN=3eeb30d1f14841d7ddd0448aa687d8d7cf95cd8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a3:3a:a9:21:48:1f:42:57:a4:a3:76:f2:33:
68:ce:ec:47:ea:dc:32:2f:76:18:79:b9:91:60:93:
53:97:4c:d1:7b:02:35:b7:fa:ff:22:1e:f6:37:1b:
2f:72:1f:f2:0d:a2:86:aa:cd:f9:32:d9:fb:05:ec:
ff:1f:a4:18:74:f7:fe:75:4c:28:79:e5:e6:50:ee:
0f:b8:96:45:86:9e:7e:58:0d:37:57:98:97:e5:89:
f0:35:98:5b:86:14:b4:3c:b5:d4:4f:9c:41:48:9c:
dd:11:b6:98:9f:cd:98:8f:d8:ab:08:6b:91:89:60:
16:c9:43:b2:94:41:48:e6:10:78:c8:e6:bc:07:ce:
53:35:3f:37:05:c7:31:bb:91:4d:28:a6:1f:cb:e5:
8a:b7:ec:ad:4f:af:b9:ec:7b:f3:49:cb:2d:9b:45:
0f:a1:36:dc:51:61:05:32:94:39:fa:4c:c1:88:09:
fe:8b:b9:fe:4d:df:b0:7e:98:c1:1d:b6:b4:4c:51:
c4:06:74:4a:99:0f:f8:77:5b:64:44:ec:17:36:be:
f5:50:f1:a2:04:e1:b9:d6:a9:36:82:1c:ce:6f:27:
16:33:99:be:4e:5f:99:f8:3b:dd:1f:cc:4f:54:9b:
85:bc:b8:6a:38:5a:e7:da:4c:7e:11:9e:b8:aa:24:
29:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:EB:30:D1:F1:48:41:D7:DD:D0:44:8A:A6:87:D8:D7:CF:95:CD:8C
X509v3 Authority Key Identifier:
keyid:E0:81:42:B4:2E:39:48:00:48:D1:FC:EA:58:7A:36:93:DA:4C:0B:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IFCtC45SABI0fzqWHo2k9pMC4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:5e:86:c9:1b:5e:6d:bf:14:4f:86:fc:33:29:24:e6:7f:86:
f5:d2:75:dd:20:6d:cd:d3:3d:c8:0c:92:b0:d9:dd:54:6b:b3:
a0:22:94:61:cd:b7:07:05:7d:6e:5b:ee:b9:a3:d0:03:5b:ee:
dc:99:96:8d:c6:e0:39:b8:f2:61:cb:1c:f6:28:73:9e:96:cc:
ed:71:58:5d:0a:df:f5:1b:e1:a3:4c:dd:01:a7:53:c5:a8:fb:
50:50:82:89:41:4c:6e:2b:56:c3:e5:10:49:30:2a:c8:c1:15:
d2:00:22:b1:56:aa:63:8c:4b:24:21:22:ab:3d:20:12:43:ff:
58:b9:ec:90:7c:55:8a:00:f3:a5:6b:0f:02:4b:22:07:f0:09:
ce:2a:53:d0:36:ec:ab:99:83:77:b7:0d:be:92:04:12:40:b9:
ac:dd:6f:27:28:85:97:4c:6f:3d:01:ea:f9:d7:d2:d4:ac:1c:
4a:7e:e4:bd:99:9a:e6:2c:7d:10:2b:0c:46:27:85:31:45:2d:
76:52:cc:85:e7:4a:6f:c0:c5:a5:21:0b:67:20:f7:91:f5:c5:
3e:65:3f:37:7b:8d:d9:42:fd:9a:b8:c9:c7:6e:7b:f7:79:b9:
79:6b:53:d1:20:f4:82:a5:8b:0f:98:75:96:67:aa:05:31:9e:
d8:90:07:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXEszQNWk7cp8SAbmfLi6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwODE0MmI0MmUzOTQ4MDA0OGQxZmNlYTU4N2EzNjkzZGE0
YzBiOGEwHhcNMjUxMTExMTAwMDQyWhcNMjUxMTEyMTAwMDQyWjAzMTEwLwYDVQQD
EygzZWViMzBkMWYxNDg0MWQ3ZGRkMDQ0OGFhNjg3ZDhkN2NmOTVjZDhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6M6qSFIH0JXpKN28jNozuxH6twy
L3YYebmRYJNTl0zRewI1t/r/Ih72Nxsvch/yDaKGqs35Mtn7Bez/H6QYdPf+dUwo
eeXmUO4PuJZFhp5+WA03V5iX5YnwNZhbhhS0PLXUT5xBSJzdEbaYn82Yj9irCGuR
iWAWyUOylEFI5hB4yOa8B85TNT83Bccxu5FNKKYfy+WKt+ytT6+57HvzScstm0UP
oTbcUWEFMpQ5+kzBiAn+i7n+Td+wfpjBHba0TFHEBnRKmQ/4d1tkROwXNr71UPGi
BOG51qk2ghzObycWM5m+Tl+Z+DvdH8xPVJuFvLhqOFrn2kx+EZ64qiQpWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD7rMNHxSEHX3dBEiqaH2NfPlc2MMB8GA1UdIwQY
MBaAFOCBQrQuOUgASNH86lh6NpPaTAuKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNElGQ3RDNDVTQUJJMGZ6cVdIbzJrOXBNQzRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8yODJhYzYtNzJjNi00YjJjLTlkZjkt
OGYxZjJjOTE0ZjA0LzEvNElGQ3RDNDVTQUJJMGZ6cVdIbzJrOXBNQzRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8yODJhYzYtNzJjNi00YjJjLTlkZjktOGYxZjJjOTE0ZjA0
LzEvNElGQ3RDNDVTQUJJMGZ6cVdIbzJrOXBNQzRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV16GyRte
bb8UT4b8Mykk5n+G9dJ13SBtzdM9yAySsNndVGuzoCKUYc23BwV9blvuuaPQA1vu
3JmWjcbgObjyYcsc9ihznpbM7XFYXQrf9Rvho0zdAadTxaj7UFCCiUFMbitWw+UQ
STAqyMEV0gAisVaqY4xLJCEiqz0gEkP/WLnskHxVigDzpWsPAksiB/AJzipT0Dbs
q5mDd7cNvpIEEkC5rN1vJyiFl0xvPQHq+dfS1KwcSn7kvZma5ix9ECsMRieFMUUt
dlLMhedKb8DFpSELZyD3kfXFPmU/N3uN2UL9mrjJx25793m5eWtT0SD0gqWLD5h1
lmeqBTGe2JAH2w==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:48 2025 by rpki-client