Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.mft
File: rG4-ExEUORR_ZdM31fCxvC7XlDQ.mft (raw, json)
Hash identifier: z/zot7JYVgdqKGnyWuPnUbLudDxDsP1NHZyWC2KlBhQ=
Subject key identifier: 84:91:A8:A6:04:43:58:45:71:A5:C4:7D:12:1B:F8:FE:63:EF:43:F8
Authority key identifier: AC:6E:3E:13:11:14:39:14:7F:65:D3:37:D5:F0:B1:BC:2E:D7:94:34
Certificate issuer: /CN=ac6e3e13111439147f65d337d5f0b1bc2ed79434
Certificate serial: 019A15E07999BE6C6749D6F8BA38C727E0C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rG4-ExEUORR_ZdM31fCxvC7XlDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.mft
Manifest number: 16F0
Signing time: Fri 24 Oct 2025 11:00:24 +0000
Manifest this update: Fri 24 Oct 2025 11:00:24 +0000
Manifest next update: Sat 25 Oct 2025 11:00:24 +0000
Files and hashes: 1: AwXuQoOBDpLkL6JkvNNI78Almh8.roa (hash: rgsGgbJMkxlD2Xt53P3qCIDlwFDG3I1YNJZMV8rGCso=)
2: rG4-ExEUORR_ZdM31fCxvC7XlDQ.crl (hash: GmqnHxIjhDZaZVuEM/iLTg+qlOEPGoF2OHiJh+3fJwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rG4-ExEUORR_ZdM31fCxvC7XlDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:15:e0:79:99:be:6c:67:49:d6:f8:ba:38:c7:27:e0:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac6e3e13111439147f65d337d5f0b1bc2ed79434
Validity
Not Before: Oct 24 11:00:24 2025 GMT
Not After : Oct 25 11:00:24 2025 GMT
Subject: CN=8491a8a60443584571a5c47d121bf8fe63ef43f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:44:1e:37:a0:ed:0f:d8:3f:39:0b:88:3b:25:
ea:31:79:d4:12:d3:2f:5e:08:5d:58:74:bb:3b:2b:
a9:9a:a0:10:66:e7:97:5e:73:21:5a:11:b2:e0:a4:
05:e3:8a:cf:ff:c5:8d:5d:be:9d:b8:b2:25:93:21:
4e:fb:53:c8:f3:4b:2f:e6:b6:41:0e:79:42:b2:bc:
2e:33:6f:66:de:10:a1:4b:c0:97:8c:c6:41:5b:73:
4b:4d:d5:02:b9:39:8b:33:71:6b:01:f5:90:b3:5f:
9a:55:c0:3e:b7:85:bb:53:74:5b:cb:33:ed:0c:0c:
57:80:08:73:a9:aa:0b:09:da:99:76:8a:e3:10:78:
43:0c:1a:98:9a:65:a7:bf:1d:99:20:6b:7f:2c:78:
65:ae:26:af:52:fd:1c:40:0e:12:64:cd:55:3c:fc:
f7:68:04:3f:99:ea:b6:fa:c2:cb:85:35:54:f3:30:
ff:c7:d2:36:6f:5f:2e:f5:fd:9d:dd:7c:1b:dc:0f:
8e:99:e1:02:e3:5c:71:76:53:38:cc:ae:6d:8e:8b:
1a:00:c7:a7:d7:22:ca:0e:59:7a:90:ef:3b:89:73:
27:5d:79:16:d3:38:8e:84:3b:ad:a2:40:3c:00:04:
8a:8f:2c:e4:47:af:a7:e8:c9:38:01:03:47:15:05:
60:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:91:A8:A6:04:43:58:45:71:A5:C4:7D:12:1B:F8:FE:63:EF:43:F8
X509v3 Authority Key Identifier:
keyid:AC:6E:3E:13:11:14:39:14:7F:65:D3:37:D5:F0:B1:BC:2E:D7:94:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rG4-ExEUORR_ZdM31fCxvC7XlDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:ce:b0:68:ef:af:a4:96:dc:38:be:05:3c:dc:b4:55:86:1d:
9f:df:9a:4f:24:e4:9a:9a:0f:ec:6f:b2:8c:8b:1c:c0:a9:99:
79:ed:83:27:e3:4f:94:cd:4e:db:bf:76:df:89:3a:dd:36:ab:
da:05:51:4f:63:86:14:c1:f0:0f:1e:96:6f:be:ac:a8:06:fa:
a4:50:02:75:51:b5:56:c2:d8:19:b1:57:55:7f:53:95:c0:55:
9e:fd:e7:15:ab:a8:1b:0c:cc:72:39:cc:15:ae:28:2f:d2:13:
83:a8:f7:42:36:5b:e8:7f:03:ad:b7:52:9b:55:ca:ce:ef:37:
77:d5:e8:ed:73:46:33:ed:c8:78:49:e0:b4:cd:9e:52:8f:dd:
ff:d5:e1:21:51:9a:d4:f9:d9:97:39:b9:ea:6c:f6:ab:55:80:
ba:ab:44:b3:05:fc:00:bb:26:80:8a:25:a7:76:b0:7f:9d:c6:
9f:94:5b:c7:18:78:48:0d:c1:d4:59:07:c9:25:9a:f4:48:b9:
65:af:e6:41:d5:cd:39:11:df:3d:45:63:0e:e1:f2:0b:0e:9f:
ad:a5:5b:63:28:67:56:04:fd:0d:10:c0:e6:6b:b2:99:77:93:
16:1b:9f:fa:26:a0:fd:85:64:ad:da:50:d3:94:cd:8d:d7:96:
11:b7:3c:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoV4HmZvmxnSdb4ujjHJ+DBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjNmUzZTEzMTExNDM5MTQ3ZjY1ZDMzN2Q1ZjBiMWJjMmVk
Nzk0MzQwHhcNMjUxMDI0MTEwMDI0WhcNMjUxMDI1MTEwMDI0WjAzMTEwLwYDVQQD
Eyg4NDkxYThhNjA0NDM1ODQ1NzFhNWM0N2QxMjFiZjhmZTYzZWY0M2Y4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEQeN6DtD9g/OQuIOyXqMXnUEtMv
XghdWHS7OyupmqAQZueXXnMhWhGy4KQF44rP/8WNXb6duLIlkyFO+1PI80sv5rZB
DnlCsrwuM29m3hChS8CXjMZBW3NLTdUCuTmLM3FrAfWQs1+aVcA+t4W7U3RbyzPt
DAxXgAhzqaoLCdqZdorjEHhDDBqYmmWnvx2ZIGt/LHhlriavUv0cQA4SZM1VPPz3
aAQ/meq2+sLLhTVU8zD/x9I2b18u9f2d3Xwb3A+OmeEC41xxdlM4zK5tjosaAMen
1yLKDll6kO87iXMnXXkW0ziOhDutokA8AASKjyzkR6+n6Mk4AQNHFQVgnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFISRqKYEQ1hFcaXEfRIb+P5j70P4MB8GA1UdIwQY
MBaAFKxuPhMRFDkUf2XTN9Xwsbwu15Q0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckc0LUV4RVVPUlJfWmRNMzFmQ3h2QzdYbERRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xMmJhMmEtMGNjYS00MzdhLTk4NWQt
ZmVmZTg1N2ZlYTgwLzEvckc0LUV4RVVPUlJfWmRNMzFmQ3h2QzdYbERRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xMmJhMmEtMGNjYS00MzdhLTk4NWQtZmVmZTg1N2ZlYTgw
LzEvckc0LUV4RVVPUlJfWmRNMzFmQ3h2QzdYbERRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEs6waO+v
pJbcOL4FPNy0VYYdn9+aTyTkmpoP7G+yjIscwKmZee2DJ+NPlM1O279234k63Tar
2gVRT2OGFMHwDx6Wb76sqAb6pFACdVG1VsLYGbFXVX9TlcBVnv3nFauoGwzMcjnM
Fa4oL9ITg6j3QjZb6H8DrbdSm1XKzu83d9Xo7XNGM+3IeEngtM2eUo/d/9XhIVGa
1PnZlzm56mz2q1WAuqtEswX8ALsmgIolp3awf53Gn5Rbxxh4SA3B1FkHySWa9Ei5
Za/mQdXNORHfPUVjDuHyCw6fraVbYyhnVgT9DRDA5muymXeTFhuf+iag/YVkrdpQ
05TNjdeWEbc8bQ==
-----END CERTIFICATE-----
Generated at Fri Oct 24 18:47:52 2025 by rpki-client