Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
File: 4KAIqA2P8mJiXmX-JYdpFYspmPA.mft (raw, json)
Hash identifier: uy1vFMjPp+y61DKq/qk9dMiM5vmzwxaxPZt2CoxTOo4=
Subject key identifier: 96:EE:7A:40:93:46:2C:00:6B:5A:9F:3A:D5:A2:53:7C:4D:3F:17:C7
Authority key identifier: E0:A0:08:A8:0D:8F:F2:62:62:5E:65:FE:25:87:69:15:8B:29:98:F0
Certificate issuer: /CN=e0a008a80d8ff262625e65fe258769158b2998f0
Certificate serial: 019A7293770066F6D6A9941589E08F9935D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 11:00:58 +0000
Manifest this update: Tue 11 Nov 2025 11:00:58 +0000
Manifest next update: Wed 12 Nov 2025 11:00:58 +0000
Files and hashes: 1: 4KAIqA2P8mJiXmX-JYdpFYspmPA.crl (hash: Hp2zR40A/1TM7iI71sOaVJ0mfuz5PIzoq2BXI5txaNg=)
2: y5zHo6daLtznM6YyOsYqUp-odjg.roa (hash: jHrEQD+W4TVeVi8oEScgmYIF6Mmipa4IpJr32ELwoTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:77:00:66:f6:d6:a9:94:15:89:e0:8f:99:35:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0a008a80d8ff262625e65fe258769158b2998f0
Validity
Not Before: Nov 11 11:00:58 2025 GMT
Not After : Nov 12 11:00:58 2025 GMT
Subject: CN=96ee7a4093462c006b5a9f3ad5a2537c4d3f17c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:68:a2:81:88:a9:8a:6c:2a:5b:78:05:89:7c:
66:b4:9e:90:1a:db:ad:f3:01:cf:bf:1a:cb:e0:e1:
a3:50:84:7c:43:bb:79:28:ed:d0:66:e9:8a:8d:6b:
ee:6c:40:9b:36:04:e3:fc:22:6f:e0:57:fc:aa:5a:
b2:af:60:49:7c:f2:1e:75:46:c6:9d:db:39:8e:fb:
4a:5d:3a:36:b9:72:ab:63:3c:bc:39:ff:2b:06:12:
4a:32:7f:21:95:e8:af:8b:46:17:72:16:6a:68:39:
3e:ec:d9:40:31:d7:d6:02:34:6d:78:15:26:2a:dc:
50:a2:30:9c:1f:78:78:98:ba:44:4f:e5:fc:08:2e:
39:25:e5:63:99:69:85:1a:43:f5:9b:d7:7d:5c:66:
3b:a7:f6:75:52:a5:41:ba:94:5d:33:56:1b:38:a1:
6c:2a:34:b2:2d:fe:e4:c1:77:30:ed:da:5c:8d:98:
02:36:8d:bd:5d:b2:4b:cd:f6:c5:bf:c1:1e:4e:aa:
5d:9a:60:51:e7:4d:4b:ee:72:88:2e:0d:c8:e5:a3:
08:67:a9:28:b6:f6:bd:ee:60:da:80:d4:d4:46:15:
cf:c8:18:5e:dd:ec:dc:e7:a7:6d:89:cf:7f:d6:8a:
e0:8d:ee:80:2c:ea:3f:db:d7:4f:54:56:77:da:e8:
3d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:EE:7A:40:93:46:2C:00:6B:5A:9F:3A:D5:A2:53:7C:4D:3F:17:C7
X509v3 Authority Key Identifier:
keyid:E0:A0:08:A8:0D:8F:F2:62:62:5E:65:FE:25:87:69:15:8B:29:98:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:5f:0c:4f:64:71:d2:b3:70:b5:c4:1b:9b:f2:c4:3b:44:a1:
5e:12:9d:ef:f2:93:f4:e5:05:f6:fa:44:bf:f4:09:7b:c8:7d:
ed:6a:db:4d:30:2e:4e:18:a5:3b:c6:cf:83:b9:b1:57:f4:a6:
10:37:58:91:ae:5d:95:71:5c:d1:9b:f0:b4:38:05:d7:89:49:
37:c5:af:bc:23:02:8e:af:59:2a:62:2a:cd:3d:a0:1c:29:dd:
9f:d2:b8:24:ab:74:d2:3a:8c:5e:6d:e5:4a:68:16:86:cc:8a:
ad:0b:85:52:a0:72:e2:65:7e:73:f7:1e:7e:ef:36:7e:d9:f4:
4c:a5:f3:d9:62:b7:ac:fa:1d:65:e3:e0:4a:2d:b7:37:dc:0c:
29:1b:78:e9:ea:07:31:76:c4:ad:b9:3c:cd:d8:68:ad:f7:82:
38:2a:f4:24:28:16:d2:6b:0e:cc:51:21:29:be:fa:80:7d:02:
ae:e4:5e:6c:bd:68:e0:8c:77:7d:42:66:52:dc:7e:91:a9:24:
a6:57:ec:45:9b:e2:36:53:6d:c4:f9:7e:62:07:0c:12:2f:17:
3a:ef:c2:0c:d5:25:54:a3:ae:6c:a5:a7:e0:16:33:94:4f:a4:
e1:51:67:7f:4b:2e:c8:bb:6e:3e:8b:dc:30:94:70:d1:10:82:
4f:55:8b:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk3cAZvbWqZQVieCPmTXVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwYTAwOGE4MGQ4ZmYyNjI2MjVlNjVmZTI1ODc2OTE1OGIy
OTk4ZjAwHhcNMjUxMTExMTEwMDU4WhcNMjUxMTEyMTEwMDU4WjAzMTEwLwYDVQQD
Eyg5NmVlN2E0MDkzNDYyYzAwNmI1YTlmM2FkNWEyNTM3YzRkM2YxN2M3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWiigYipimwqW3gFiXxmtJ6QGtut
8wHPvxrL4OGjUIR8Q7t5KO3QZumKjWvubECbNgTj/CJv4Ff8qlqyr2BJfPIedUbG
nds5jvtKXTo2uXKrYzy8Of8rBhJKMn8hleivi0YXchZqaDk+7NlAMdfWAjRteBUm
KtxQojCcH3h4mLpET+X8CC45JeVjmWmFGkP1m9d9XGY7p/Z1UqVBupRdM1YbOKFs
KjSyLf7kwXcw7dpcjZgCNo29XbJLzfbFv8EeTqpdmmBR501L7nKILg3I5aMIZ6ko
tva97mDagNTURhXPyBhe3ezc56dtic9/1orgje6ALOo/29dPVFZ32ug92wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJbuekCTRiwAa1qfOtWiU3xNPxfHMB8GA1UdIwQY
MBaAFOCgCKgNj/JiYl5l/iWHaRWLKZjwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEtBSXFBMlA4bUppWG1YLUpZZHBGWXNwbVBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8wMzM4ZjMtMDgwMi00ZTViLTkyNDEt
NjBiZjcxOTM3MTA0LzEvNEtBSXFBMlA4bUppWG1YLUpZZHBGWXNwbVBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy8wMzM4ZjMtMDgwMi00ZTViLTkyNDEtNjBiZjcxOTM3MTA0
LzEvNEtBSXFBMlA4bUppWG1YLUpZZHBGWXNwbVBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL18MT2Rx
0rNwtcQbm/LEO0ShXhKd7/KT9OUF9vpEv/QJe8h97WrbTTAuThilO8bPg7mxV/Sm
EDdYka5dlXFc0ZvwtDgF14lJN8WvvCMCjq9ZKmIqzT2gHCndn9K4JKt00jqMXm3l
SmgWhsyKrQuFUqBy4mV+c/cefu82ftn0TKXz2WK3rPodZePgSi23N9wMKRt46eoH
MXbErbk8zdhorfeCOCr0JCgW0msOzFEhKb76gH0CruRebL1o4Ix3fUJmUtx+kakk
plfsRZviNlNtxPl+YgcMEi8XOu/CDNUlVKOubKWn4BYzlE+k4VFnf0suyLtuPovc
MJRw0RCCT1WLPg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:40:34 2025 by rpki-client