Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft
File: r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft (raw, json)
Hash identifier: q4gRaLgZ84EV+DbEhGEy0kKWrbEj5akQb4+YnwTjJlA=
Subject key identifier: B1:DC:F1:4D:B5:CF:9F:99:D8:2A:2A:B6:0D:B3:0F:4C:20:89:F2:F6
Authority key identifier: AF:80:19:84:CC:38:F0:A4:FC:5A:FE:1A:DE:AB:68:0C:1B:89:E9:5B
Certificate issuer: /CN=af801984cc38f0a4fc5afe1adeab680c1b89e95b
Certificate serial: 019A2365B0DC4F6BA2B8EAEB02EFBB45198A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft
Manifest number: 1761
Signing time: Mon 27 Oct 2025 02:00:58 +0000
Manifest this update: Mon 27 Oct 2025 02:00:58 +0000
Manifest next update: Tue 28 Oct 2025 02:00:58 +0000
Files and hashes: 1: 2I1GOWHl_sNg202ZkVSHIZVcDhI.roa (hash: hTizmDrUVZJ/qWZQ7WDFRMG/AOudB/C+8jSAoVtPrlA=)
2: r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.crl (hash: z7j8U/mhACHhpAUAkxemmnH80NFIDpO18F/iR4oiDe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:65:b0:dc:4f:6b:a2:b8:ea:eb:02:ef:bb:45:19:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af801984cc38f0a4fc5afe1adeab680c1b89e95b
Validity
Not Before: Oct 27 02:00:58 2025 GMT
Not After : Oct 28 02:00:58 2025 GMT
Subject: CN=b1dcf14db5cf9f99d82a2ab60db30f4c2089f2f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:90:20:3c:a1:a6:5a:9c:49:17:20:cd:eb:ba:
e9:3c:0e:39:15:c7:9e:8a:dd:c9:62:8e:a3:b9:e5:
44:5e:9d:d6:f6:51:ad:c5:3d:cf:79:83:f7:18:53:
c4:25:97:d2:c0:38:7d:08:5c:98:2a:85:97:26:8b:
11:d2:23:78:b4:a4:a1:d1:c3:b5:0d:28:a0:4b:73:
c1:f3:08:df:59:92:b5:0b:26:5d:74:32:1f:02:a1:
15:e2:da:fc:47:64:07:03:70:89:ec:ee:da:9c:27:
9f:9f:75:79:94:8b:ae:44:a0:5a:41:0d:c6:d2:55:
6a:a0:40:c9:4c:27:53:55:4b:25:8a:03:ed:e5:58:
90:a4:7e:dd:58:ef:df:c7:d5:9b:69:4a:db:37:62:
74:5c:c9:88:97:ba:84:97:66:4d:a9:50:f1:dc:98:
12:3c:95:13:3a:ae:5f:cd:83:01:44:48:89:5f:44:
02:1f:98:2a:1f:5b:f6:0d:56:bc:7c:07:d1:c6:22:
8b:3b:39:7e:2d:60:d1:c3:5a:56:d7:f5:58:c2:10:
67:ec:d0:ae:f1:96:c2:1e:56:5f:85:4d:14:16:42:
ee:84:4a:f2:cc:dd:67:36:29:e1:c8:03:fc:a4:17:
61:3c:25:d0:30:75:19:5b:c9:75:a7:bf:64:c6:83:
07:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:DC:F1:4D:B5:CF:9F:99:D8:2A:2A:B6:0D:B3:0F:4C:20:89:F2:F6
X509v3 Authority Key Identifier:
keyid:AF:80:19:84:CC:38:F0:A4:FC:5A:FE:1A:DE:AB:68:0C:1B:89:E9:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:e9:57:35:10:03:b4:d4:8c:a4:94:3d:88:28:dd:17:f0:01:
5c:67:f0:fd:f2:9a:30:e2:ab:b1:26:3a:64:0e:d0:af:5a:67:
99:0d:db:bd:2e:eb:10:f3:9d:54:3a:4e:c6:a2:95:c2:90:37:
1d:82:2c:6f:cc:bb:38:f1:da:ac:f7:d1:9e:80:c9:d7:6d:b7:
74:c2:24:84:d5:78:3d:8b:21:82:7a:0b:a8:bf:48:b1:7f:46:
30:9f:2a:2e:80:dd:9b:b4:69:bc:58:cf:eb:06:d4:eb:0f:f9:
58:ad:b5:ed:e5:c7:3d:93:27:07:e1:1b:10:81:16:c8:83:71:
ea:11:86:02:65:00:0e:e0:d0:81:c9:7b:38:0a:35:9f:8f:cc:
d7:73:24:7d:49:a4:32:04:e2:85:09:f2:60:c8:c8:98:94:4b:
7c:9d:d7:84:79:75:8e:24:41:6e:be:e3:c1:1e:f1:8e:6d:17:
c3:98:37:d0:04:f9:a8:dd:e1:61:fc:d3:f2:17:e3:7c:4c:01:
df:fa:cb:2e:fd:04:b9:ba:1b:e5:85:01:67:0f:81:11:b4:77:
ff:24:d4:38:e0:19:6b:5b:62:a4:a1:f8:8a:3f:67:87:56:49:
3b:7a:fa:4b:88:77:b5:28:fa:00:7d:81:55:4c:74:2b:9d:8e:
cb:df:2f:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZojZbDcT2uiuOrrAu+7RRmKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmODAxOTg0Y2MzOGYwYTRmYzVhZmUxYWRlYWI2ODBjMWI4
OWU5NWIwHhcNMjUxMDI3MDIwMDU4WhcNMjUxMDI4MDIwMDU4WjAzMTEwLwYDVQQD
EyhiMWRjZjE0ZGI1Y2Y5Zjk5ZDgyYTJhYjYwZGIzMGY0YzIwODlmMmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpAgPKGmWpxJFyDN67rpPA45Fcee
it3JYo6jueVEXp3W9lGtxT3PeYP3GFPEJZfSwDh9CFyYKoWXJosR0iN4tKSh0cO1
DSigS3PB8wjfWZK1CyZddDIfAqEV4tr8R2QHA3CJ7O7anCefn3V5lIuuRKBaQQ3G
0lVqoEDJTCdTVUsligPt5ViQpH7dWO/fx9WbaUrbN2J0XMmIl7qEl2ZNqVDx3JgS
PJUTOq5fzYMBREiJX0QCH5gqH1v2DVa8fAfRxiKLOzl+LWDRw1pW1/VYwhBn7NCu
8ZbCHlZfhU0UFkLuhEryzN1nNinhyAP8pBdhPCXQMHUZW8l1p79kxoMHgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLHc8U21z5+Z2Coqtg2zD0wgifL2MB8GA1UdIwQY
MBaAFK+AGYTMOPCk/Fr+Gt6raAwbielbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjRBWmhNdzQ4S1Q4V3Y0YTNxdG9EQnVKNlZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9iZmQzN2MtY2IxMi00YTljLThmNWQt
NDAyMTI2NWMzOWIwLzEvcjRBWmhNdzQ4S1Q4V3Y0YTNxdG9EQnVKNlZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9iZmQzN2MtY2IxMi00YTljLThmNWQtNDAyMTI2NWMzOWIw
LzEvcjRBWmhNdzQ4S1Q4V3Y0YTNxdG9EQnVKNlZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWulXNRAD
tNSMpJQ9iCjdF/ABXGfw/fKaMOKrsSY6ZA7Qr1pnmQ3bvS7rEPOdVDpOxqKVwpA3
HYIsb8y7OPHarPfRnoDJ1223dMIkhNV4PYshgnoLqL9IsX9GMJ8qLoDdm7RpvFjP
6wbU6w/5WK217eXHPZMnB+EbEIEWyINx6hGGAmUADuDQgcl7OAo1n4/M13MkfUmk
MgTihQnyYMjImJRLfJ3XhHl1jiRBbr7jwR7xjm0Xw5g30AT5qN3hYfzT8hfjfEwB
3/rLLv0Eubob5YUBZw+BEbR3/yTUOOAZa1tipKH4ij9nh1ZJO3r6S4h3tSj6AH2B
VUx0K52Oy98vWA==
-----END CERTIFICATE-----
Generated at Mon Oct 27 05:34:58 2025 by rpki-client