Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
File: 4i1-riHYuu6d5pQNjOaynZKpAx4.mft (raw, json)
Hash identifier: ++mKlp2Cagt1E/sTLy7oZLhfZGJf9FG2YWk2rZeSfNw=
Subject key identifier: 54:75:1C:45:5A:D4:13:4B:7B:10:24:20:6F:E3:7F:B8:92:4A:57:DF
Authority key identifier: E2:2D:7E:AE:21:D8:BA:EE:9D:E6:94:0D:8C:E6:B2:9D:92:A9:03:1E
Certificate issuer: /CN=e22d7eae21d8baee9de6940d8ce6b29d92a9031e
Certificate serial: 019A71EEDC47AABDFA94059CF9A7A856D757
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
Manifest number: 065E
Signing time: Tue 11 Nov 2025 08:01:10 +0000
Manifest this update: Tue 11 Nov 2025 08:01:10 +0000
Manifest next update: Wed 12 Nov 2025 08:01:10 +0000
Files and hashes: 1: 4i1-riHYuu6d5pQNjOaynZKpAx4.crl (hash: LIy2d88CByMD5SNvClI22qWt4pL9K/qngGFmQwQT3GM=)
2: Ym4cY_1EuRnkCyF3T4bm70pYxjE.roa (hash: AkplZO86AEiMlgSJVWAGSBviunFDjdLnWUMhCPpbyQE=)
3: iIMfjrcM-EEaIrK48S4AaqdLSDc.roa (hash: kGHhJdo0yzn2T1RMM++JhdnOAbfrtsEDL/H5s4If3hE=)
4: kVLjxhxgFuqXEqXn9rCH2eEb9oA.roa (hash: QbtMbRiPhMHo4O/j41QZux+PuXLhM2M+5dr1jmr3fpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:dc:47:aa:bd:fa:94:05:9c:f9:a7:a8:56:d7:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e22d7eae21d8baee9de6940d8ce6b29d92a9031e
Validity
Not Before: Nov 11 08:01:10 2025 GMT
Not After : Nov 12 08:01:10 2025 GMT
Subject: CN=54751c455ad4134b7b1024206fe37fb8924a57df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:12:8f:51:c7:56:41:4e:a4:91:2f:44:d7:f5:
e1:20:e9:f7:4b:54:2c:5f:17:2e:fd:fa:ed:93:31:
fe:0e:b0:f0:06:d2:e9:5c:96:f0:17:78:a3:49:64:
02:49:94:98:bf:f8:03:91:52:9d:55:14:f7:4a:81:
12:40:9a:03:6a:0f:e7:d4:d7:13:81:3a:b2:e2:08:
af:7e:f1:fb:8b:e3:32:26:cb:65:66:26:7b:3d:d5:
d0:84:0e:9f:e3:50:8b:3c:2d:09:63:26:a5:e7:7b:
0c:60:c8:4f:18:38:08:88:7c:78:dd:76:5f:0e:8b:
1e:9b:14:03:12:5c:bc:84:38:1b:35:f8:d1:af:0f:
1f:ad:13:50:ca:08:53:30:ac:c2:45:20:e1:b3:99:
a0:c1:63:2f:3d:2b:0d:8f:35:50:4f:ba:0d:2a:cc:
17:e9:be:10:b2:76:0a:4c:bf:7e:24:11:fa:73:e1:
69:21:b8:12:f4:8f:b3:93:35:99:81:88:23:94:01:
32:f6:fa:84:34:3f:b4:b6:a0:ac:e8:d3:fe:92:13:
a1:35:e9:0d:84:b5:dd:24:54:12:92:4c:93:dd:22:
1c:24:f7:a1:04:94:e0:3c:98:dc:83:85:1b:57:71:
16:eb:a6:67:99:f9:5b:1d:b2:7f:9f:49:3b:3d:5f:
90:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:75:1C:45:5A:D4:13:4B:7B:10:24:20:6F:E3:7F:B8:92:4A:57:DF
X509v3 Authority Key Identifier:
keyid:E2:2D:7E:AE:21:D8:BA:EE:9D:E6:94:0D:8C:E6:B2:9D:92:A9:03:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:fc:c1:7a:71:c5:e1:5c:ee:70:61:a6:6d:87:ee:a7:77:a8:
cb:e5:b4:22:ea:de:0a:4a:b0:33:a8:6b:1e:2d:c4:3c:39:ee:
6c:0a:d6:57:e7:d6:c8:68:b3:3b:20:23:39:15:d3:58:bd:e2:
8b:e6:c6:3d:d1:ea:e9:5c:58:3d:89:ea:fe:00:78:51:39:22:
1a:0c:a8:e2:84:50:5e:a5:6c:bd:d3:3e:26:05:7e:a1:2f:f0:
3c:3a:36:7b:19:dc:23:1f:8a:91:aa:9e:0f:a2:df:61:25:96:
c0:73:c8:ad:ab:c1:c3:cd:d0:c5:1d:91:56:a6:94:b1:d9:e8:
c8:43:7e:09:54:fc:a2:d2:20:31:9e:e5:f9:32:2e:34:30:5e:
0b:25:81:b2:0d:2b:02:aa:dc:e3:48:fb:39:9c:6b:34:bf:09:
86:21:1c:ce:37:47:c6:35:bd:67:b1:a9:bb:ea:74:e5:a6:14:
5f:ea:b8:57:a0:64:e8:7f:98:9e:f7:cb:5d:c6:1c:09:ea:db:
11:fc:69:c1:d6:34:0d:d1:3c:e9:fb:73:e7:32:a1:05:9b:2f:
4c:35:b5:74:dd:5a:23:22:bb:01:7c:bb:8d:1a:b6:6c:e8:69:
a9:03:23:ab:9f:dd:3c:f0:54:2f:29:3b:b3:03:33:ce:32:a9:
ec:c4:82:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7txHqr36lAWc+aeoVtdXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyMmQ3ZWFlMjFkOGJhZWU5ZGU2OTQwZDhjZTZiMjlkOTJh
OTAzMWUwHhcNMjUxMTExMDgwMTEwWhcNMjUxMTEyMDgwMTEwWjAzMTEwLwYDVQQD
Eyg1NDc1MWM0NTVhZDQxMzRiN2IxMDI0MjA2ZmUzN2ZiODkyNGE1N2RmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxKPUcdWQU6kkS9E1/XhIOn3S1Qs
Xxcu/frtkzH+DrDwBtLpXJbwF3ijSWQCSZSYv/gDkVKdVRT3SoESQJoDag/n1NcT
gTqy4givfvH7i+MyJstlZiZ7PdXQhA6f41CLPC0JYyal53sMYMhPGDgIiHx43XZf
DosemxQDEly8hDgbNfjRrw8frRNQyghTMKzCRSDhs5mgwWMvPSsNjzVQT7oNKswX
6b4QsnYKTL9+JBH6c+FpIbgS9I+zkzWZgYgjlAEy9vqEND+0tqCs6NP+khOhNekN
hLXdJFQSkkyT3SIcJPehBJTgPJjcg4UbV3EW66ZnmflbHbJ/n0k7PV+Q1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFR1HEVa1BNLexAkIG/jf7iSSlffMB8GA1UdIwQY
MBaAFOItfq4h2LruneaUDYzmsp2SqQMeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGkxLXJpSFl1dTZkNXBRTmpPYXluWktwQXg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9hYjgwNzAtNGY1OC00NjM0LTlhNDQt
Mzg3NTM2ZDAzYTcxLzEvNGkxLXJpSFl1dTZkNXBRTmpPYXluWktwQXg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9hYjgwNzAtNGY1OC00NjM0LTlhNDQtMzg3NTM2ZDAzYTcx
LzEvNGkxLXJpSFl1dTZkNXBRTmpPYXluWktwQXg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARfzBenHF
4VzucGGmbYfup3eoy+W0IureCkqwM6hrHi3EPDnubArWV+fWyGizOyAjORXTWL3i
i+bGPdHq6VxYPYnq/gB4UTkiGgyo4oRQXqVsvdM+JgV+oS/wPDo2exncIx+Kkaqe
D6LfYSWWwHPIravBw83QxR2RVqaUsdnoyEN+CVT8otIgMZ7l+TIuNDBeCyWBsg0r
Aqrc40j7OZxrNL8JhiEczjdHxjW9Z7Gpu+p05aYUX+q4V6Bk6H+YnvfLXcYcCerb
EfxpwdY0DdE86ftz5zKhBZsvTDW1dN1aIyK7AXy7jRq2bOhpqQMjq5/dPPBULyk7
swMzzjKp7MSCNA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:55:19 2025 by rpki-client