Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft
File: 4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft (raw, json)
Hash identifier: Le6mwe4/3KOl9pjHZdSL8dPLWLP10Wvy6EIBIosRPUs=
Subject key identifier: D8:72:E3:FB:43:AF:6B:3C:00:4A:B2:A5:7A:47:87:A0:AE:C5:DD:04
Authority key identifier: E2:7E:1D:D0:74:66:27:80:36:BA:5C:D9:43:D7:B0:E0:21:CF:86:28
Certificate issuer: /CN=e27e1dd07466278036ba5cd943d7b0e021cf8628
Certificate serial: 019A70DC3B2A03A69258C51E0A1A0D18D1F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft
Manifest number: 0678
Signing time: Tue 11 Nov 2025 03:01:12 +0000
Manifest this update: Tue 11 Nov 2025 03:01:12 +0000
Manifest next update: Wed 12 Nov 2025 03:01:12 +0000
Files and hashes: 1: 4n4d0HRmJ4A2ulzZQ9ew4CHPhig.crl (hash: 2gh0ZkhA/H1dO75kF+xjMYhcfd/Pugh7i/vjC3qoAHg=)
2: FDe_pjW_jnnn_wQOP-AVXix4Szo.roa (hash: VtZUc2Nt2trLnWpsaaIqK/XsZumvjhDGxHdBVKEJhRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft
rsync://rpki.ripe.net/repository/DEFAULT/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:3b:2a:03:a6:92:58:c5:1e:0a:1a:0d:18:d1:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e27e1dd07466278036ba5cd943d7b0e021cf8628
Validity
Not Before: Nov 11 03:01:12 2025 GMT
Not After : Nov 12 03:01:12 2025 GMT
Subject: CN=d872e3fb43af6b3c004ab2a57a4787a0aec5dd04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cf:7d:79:8d:23:ad:6f:fc:e4:6d:02:e3:82:
5e:b2:ce:c9:ef:36:0b:89:cd:1c:f5:d5:cd:da:a1:
7e:b0:4b:e3:be:43:e6:cd:26:c8:68:57:a6:60:65:
8c:29:9c:f6:9f:67:95:ad:ba:ea:5b:61:8a:6c:b0:
85:2c:6b:13:97:8a:ef:b1:5b:7f:e1:27:28:d6:47:
cb:c3:bf:33:5a:18:0a:82:7e:c3:ad:7d:a1:62:34:
37:a9:87:bf:c9:bd:a2:fa:0d:93:af:d2:1d:51:8a:
9a:69:94:3a:38:2f:17:36:4c:a5:65:10:d5:e1:f1:
be:cb:79:4b:e7:c4:99:82:b5:9a:e5:62:81:28:f1:
f5:ee:fa:25:69:90:1e:a9:27:a0:48:f3:45:a0:d9:
9c:ca:3f:47:99:ff:56:aa:77:f2:b4:b3:fb:db:a1:
59:0d:7d:92:46:fa:c0:7f:29:17:79:00:57:8c:34:
2a:4f:fe:16:9a:38:4d:66:50:df:84:c5:1a:36:5e:
13:f4:44:fc:05:27:aa:35:03:90:7d:49:cc:dc:45:
17:e4:48:b6:50:00:e1:6b:cc:1b:e8:a4:16:5f:b4:
19:99:91:f5:a5:87:f2:b2:40:67:4d:a9:ab:bd:8c:
97:c5:6f:e1:7e:80:28:9f:04:3a:6e:85:f9:fe:14:
9e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:72:E3:FB:43:AF:6B:3C:00:4A:B2:A5:7A:47:87:A0:AE:C5:DD:04
X509v3 Authority Key Identifier:
keyid:E2:7E:1D:D0:74:66:27:80:36:BA:5C:D9:43:D7:B0:E0:21:CF:86:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:bb:14:61:9b:3f:9e:b7:c7:e1:1d:07:8f:e2:57:df:7f:7c:
ba:4a:d6:90:ef:35:17:2a:90:ce:9d:82:c1:18:53:6f:f4:8b:
38:df:4f:39:41:1b:09:11:09:9e:89:47:d3:e6:5a:6c:b8:03:
6b:cf:17:19:c4:cc:63:98:57:02:36:60:80:97:9c:1f:6a:ca:
f9:4d:ef:89:e4:ae:37:af:e9:23:d9:03:71:ae:10:5e:d9:26:
f1:eb:5e:05:44:8a:18:33:6a:0e:85:ef:28:83:b7:c7:c9:af:
c3:dc:b5:25:bb:01:18:dd:13:79:1e:8f:2d:5b:46:71:92:39:
e2:b3:a4:25:50:4d:0f:08:62:10:dc:d7:8e:c7:c1:36:6b:97:
e7:aa:dd:ee:75:eb:e8:11:29:05:4d:cb:a8:ed:c6:b6:da:24:
85:5b:46:5b:a1:b5:5e:50:19:b0:cd:cb:cf:bf:52:ae:4c:ef:
41:86:ef:51:cc:5a:8b:3f:b7:b9:fa:bd:9a:ff:da:9a:8c:7a:
ca:f8:53:94:f2:db:1c:1d:a5:27:d0:ed:66:ce:c3:28:25:8f:
4a:ee:62:78:90:57:3c:bb:10:dc:99:cd:4c:2b:69:1f:70:f2:
aa:85:22:6d:24:83:b0:bd:cf:3e:aa:04:f5:d5:04:c0:67:c6:
cd:38:d6:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpw3DsqA6aSWMUeChoNGNH4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyN2UxZGQwNzQ2NjI3ODAzNmJhNWNkOTQzZDdiMGUwMjFj
Zjg2MjgwHhcNMjUxMTExMDMwMTEyWhcNMjUxMTEyMDMwMTEyWjAzMTEwLwYDVQQD
EyhkODcyZTNmYjQzYWY2YjNjMDA0YWIyYTU3YTQ3ODdhMGFlYzVkZDA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAws99eY0jrW/85G0C44Jess7J7zYL
ic0c9dXN2qF+sEvjvkPmzSbIaFemYGWMKZz2n2eVrbrqW2GKbLCFLGsTl4rvsVt/
4Sco1kfLw78zWhgKgn7DrX2hYjQ3qYe/yb2i+g2Tr9IdUYqaaZQ6OC8XNkylZRDV
4fG+y3lL58SZgrWa5WKBKPH17volaZAeqSegSPNFoNmcyj9Hmf9WqnfytLP726FZ
DX2SRvrAfykXeQBXjDQqT/4WmjhNZlDfhMUaNl4T9ET8BSeqNQOQfUnM3EUX5Ei2
UADha8wb6KQWX7QZmZH1pYfyskBnTamrvYyXxW/hfoAonwQ6boX5/hSemQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNhy4/tDr2s8AEqypXpHh6Cuxd0EMB8GA1UdIwQY
MBaAFOJ+HdB0ZieANrpc2UPXsOAhz4YoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNG40ZDBIUm1KNEEydWx6WlE5ZXc0Q0hQaGlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9hZTBkOGItNDg1Ny00YmE3LWIzNDIt
NWVjMzM2YmY3NDNiLzEvNG40ZDBIUm1KNEEydWx6WlE5ZXc0Q0hQaGlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9hZTBkOGItNDg1Ny00YmE3LWIzNDItNWVjMzM2YmY3NDNi
LzEvNG40ZDBIUm1KNEEydWx6WlE5ZXc0Q0hQaGlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWrsUYZs/
nrfH4R0Hj+JX3398ukrWkO81FyqQzp2CwRhTb/SLON9POUEbCREJnolH0+ZabLgD
a88XGcTMY5hXAjZggJecH2rK+U3vieSuN6/pI9kDca4QXtkm8eteBUSKGDNqDoXv
KIO3x8mvw9y1JbsBGN0TeR6PLVtGcZI54rOkJVBNDwhiENzXjsfBNmuX56rd7nXr
6BEpBU3LqO3GttokhVtGW6G1XlAZsM3Lz79SrkzvQYbvUcxaiz+3ufq9mv/amox6
yvhTlPLbHB2lJ9DtZs7DKCWPSu5ieJBXPLsQ3JnNTCtpH3DyqoUibSSDsL3PPqoE
9dUEwGfGzTjWgA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:02:41 2025 by rpki-client