Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft
File: _4IIsSnFPofD8NDtG8qFcwFA85A.mft (raw, json)
Hash identifier: LiGDnxXALPAPaJvrfewmNzOH03sUQhIAnFqrUoW6cOg=
Subject key identifier: 0E:48:56:BC:5F:7D:F7:F9:FF:A3:1E:49:F1:05:DA:6C:7D:A8:19:55
Authority key identifier: FF:82:08:B1:29:C5:3E:87:C3:F0:D0:ED:1B:CA:85:73:01:40:F3:90
Certificate issuer: /CN=ff8208b129c53e87c3f0d0ed1bca85730140f390
Certificate serial: 019A21E481B40F41933994A9638DA2C425F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft
Manifest number: 1004
Signing time: Sun 26 Oct 2025 19:00:14 +0000
Manifest this update: Sun 26 Oct 2025 19:00:14 +0000
Manifest next update: Mon 27 Oct 2025 19:00:14 +0000
Files and hashes: 1: _4IIsSnFPofD8NDtG8qFcwFA85A.crl (hash: V8aGBrmT510CdrfNY/pwZHayxnERVzuAZ4ypSTezd+s=)
2: qGecERglbMsiHMQJoiUSFGALt-E.roa (hash: yLMKR6LctC/w2fvLTclquZCs4hF15ArbhdOh5oCoDz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:e4:81:b4:0f:41:93:39:94:a9:63:8d:a2:c4:25:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8208b129c53e87c3f0d0ed1bca85730140f390
Validity
Not Before: Oct 26 19:00:14 2025 GMT
Not After : Oct 27 19:00:14 2025 GMT
Subject: CN=0e4856bc5f7df7f9ffa31e49f105da6c7da81955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:17:01:e6:e6:3e:64:1e:c7:86:c6:13:5f:34:
af:c7:44:40:b5:c2:0c:dd:aa:49:91:c5:b7:67:69:
39:c5:2f:bb:02:3d:3d:01:ac:f9:f0:27:17:c8:23:
f8:53:80:80:13:69:db:b4:e9:25:98:2f:4e:e6:d8:
a4:b3:cd:3c:b8:9b:df:57:8f:0d:b0:4b:a0:40:0e:
b2:f5:f2:45:f5:9a:27:5d:63:2e:fe:db:eb:bc:c3:
8c:b4:14:47:ae:b9:7a:f5:48:cc:d4:a0:8c:40:e0:
f0:4e:d6:17:ca:a3:90:0c:65:8e:f2:d5:6e:be:6b:
50:da:52:72:c1:9c:a8:bb:84:8f:9b:3e:4d:a3:ff:
b2:a4:2c:af:b6:e2:9f:29:56:76:49:0f:63:27:12:
2a:0f:95:7c:4c:0b:41:29:95:28:20:eb:e1:75:2f:
a1:b2:1e:f7:75:71:61:ee:73:cb:b0:bb:c9:84:0c:
21:7a:1e:d9:93:1a:ff:68:4f:2b:66:70:10:da:5a:
34:6d:46:a4:f3:8e:2c:0a:e5:c9:ce:5f:ba:94:08:
20:c3:bc:76:e2:3e:3b:15:10:c7:33:31:ef:0b:07:
55:80:d5:a5:f2:1d:d2:84:83:8e:e6:50:19:29:2d:
b2:71:f9:3c:a9:33:e7:83:d9:a9:cc:5a:de:db:6f:
95:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:48:56:BC:5F:7D:F7:F9:FF:A3:1E:49:F1:05:DA:6C:7D:A8:19:55
X509v3 Authority Key Identifier:
keyid:FF:82:08:B1:29:C5:3E:87:C3:F0:D0:ED:1B:CA:85:73:01:40:F3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:c2:90:0a:83:30:50:3a:0a:fb:b8:a5:ca:82:a3:ab:fd:c7:
66:c6:60:b0:9b:2b:48:13:50:69:f0:c5:ff:5c:7d:23:91:d5:
5e:9d:c1:0e:74:8f:89:1e:03:93:00:25:a4:25:80:cf:d4:27:
ca:6b:31:89:89:27:fa:6c:11:cb:0e:a4:7c:71:a9:29:b8:dd:
74:a0:92:12:b9:6a:a6:a8:07:af:da:9e:3a:f9:59:64:ff:18:
b5:8f:57:ae:74:4e:b3:24:89:0b:45:1f:b6:80:c6:dc:e1:28:
7f:ea:9e:98:bb:06:61:a6:1d:75:dd:1b:94:d5:75:3d:72:57:
5c:e6:d6:20:65:16:b2:ad:7c:98:fb:c8:b0:2d:9c:77:83:7f:
aa:a1:f2:69:f4:39:11:b7:b7:5e:68:f1:2e:fe:f2:fa:9e:b1:
54:46:c9:4a:d3:72:86:4f:8a:a6:72:c7:0e:42:1a:ed:cb:4e:
0c:ff:dd:c6:11:a3:ad:08:70:91:86:53:80:f2:9d:07:6b:f0:
ef:a8:9f:2d:9c:8c:a5:32:de:fb:d9:b2:11:ef:62:65:51:54:
08:39:eb:1a:47:7d:75:56:3c:07:cf:27:59:8d:5a:4b:d8:2f:
cd:4a:33:ed:72:38:60:63:35:0b:d5:93:98:eb:1a:29:0f:f1:
5d:3b:11:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoh5IG0D0GTOZSpY42ixCXyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmODIwOGIxMjljNTNlODdjM2YwZDBlZDFiY2E4NTczMDE0
MGYzOTAwHhcNMjUxMDI2MTkwMDE0WhcNMjUxMDI3MTkwMDE0WjAzMTEwLwYDVQQD
EygwZTQ4NTZiYzVmN2RmN2Y5ZmZhMzFlNDlmMTA1ZGE2YzdkYTgxOTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxcB5uY+ZB7HhsYTXzSvx0RAtcIM
3apJkcW3Z2k5xS+7Aj09Aaz58CcXyCP4U4CAE2nbtOklmC9O5tiks808uJvfV48N
sEugQA6y9fJF9ZonXWMu/tvrvMOMtBRHrrl69UjM1KCMQODwTtYXyqOQDGWO8tVu
vmtQ2lJywZyou4SPmz5No/+ypCyvtuKfKVZ2SQ9jJxIqD5V8TAtBKZUoIOvhdS+h
sh73dXFh7nPLsLvJhAwheh7Zkxr/aE8rZnAQ2lo0bUak844sCuXJzl+6lAggw7x2
4j47FRDHMzHvCwdVgNWl8h3ShIOO5lAZKS2ycfk8qTPng9mpzFre22+VFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA5IVrxffff5/6MeSfEF2mx9qBlVMB8GA1UdIwQY
MBaAFP+CCLEpxT6Hw/DQ7RvKhXMBQPOQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzRJSXNTbkZQb2ZEOE5EdEc4cUZjd0ZBODVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS85NjgwYzctNTdkNy00OWM2LThiNjMt
NDAxNTNjNWQwYTQ3LzEvXzRJSXNTbkZQb2ZEOE5EdEc4cUZjd0ZBODVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS85NjgwYzctNTdkNy00OWM2LThiNjMtNDAxNTNjNWQwYTQ3
LzEvXzRJSXNTbkZQb2ZEOE5EdEc4cUZjd0ZBODVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgcKQCoMw
UDoK+7ilyoKjq/3HZsZgsJsrSBNQafDF/1x9I5HVXp3BDnSPiR4DkwAlpCWAz9Qn
ymsxiYkn+mwRyw6kfHGpKbjddKCSErlqpqgHr9qeOvlZZP8YtY9XrnROsySJC0Uf
toDG3OEof+qemLsGYaYddd0blNV1PXJXXObWIGUWsq18mPvIsC2cd4N/qqHyafQ5
Ebe3XmjxLv7y+p6xVEbJStNyhk+KpnLHDkIa7ctODP/dxhGjrQhwkYZTgPKdB2vw
76ifLZyMpTLe+9myEe9iZVFUCDnrGkd9dVY8B88nWY1aS9gvzUoz7XI4YGM1C9WT
mOsaKQ/xXTsRyw==
-----END CERTIFICATE-----
Generated at Mon Oct 27 01:41:40 2025 by rpki-client