Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.mft
File: 4xci15v_Q4Sll8tUTZ55dEkNhzQ.mft (raw, json)
Hash identifier: wUb1HX+dcCqsNO0C7c2nfPF5ldkCe2z8V4dlt8tuKPk=
Subject key identifier: E6:32:B1:43:1D:E1:6B:D6:CA:D8:B4:32:55:A3:31:1D:A3:C4:8E:FA
Authority key identifier: E3:17:22:D7:9B:FF:43:84:A5:97:CB:54:4D:9E:79:74:49:0D:87:34
Certificate issuer: /CN=e31722d79bff4384a597cb544d9e7974490d8734
Certificate serial: 019A73019B047FF9BDBE7E520DDA03E4DF61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xci15v_Q4Sll8tUTZ55dEkNhzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.mft
Manifest number: 0FEE
Signing time: Tue 11 Nov 2025 13:01:16 +0000
Manifest this update: Tue 11 Nov 2025 13:01:16 +0000
Manifest next update: Wed 12 Nov 2025 13:01:16 +0000
Files and hashes: 1: 4xci15v_Q4Sll8tUTZ55dEkNhzQ.crl (hash: aaCLBchgZoLdjTiBB4rqzOkc7WtNVMSBuM3zsTtwbjs=)
2: 7wwToY-I4oQ7zD9rX8H-_4Eb5b4.roa (hash: Hl91ZV/in/bxS0Jez/RCMKQB6Lc2qVYsfbP/T+sqKUA=)
3: VnRQ8C8QXZSlLiPv3ntpPix0MBc.roa (hash: GsTYSMVbMlYjzB/yj1A15/Pa7xUVFVUn8yyhUswywB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xci15v_Q4Sll8tUTZ55dEkNhzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:9b:04:7f:f9:bd:be:7e:52:0d:da:03:e4:df:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e31722d79bff4384a597cb544d9e7974490d8734
Validity
Not Before: Nov 11 13:01:16 2025 GMT
Not After : Nov 12 13:01:16 2025 GMT
Subject: CN=e632b1431de16bd6cad8b43255a3311da3c48efa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:36:a7:8a:e5:77:32:e1:11:38:d7:94:02:0c:
bf:d0:f1:16:5b:08:12:af:cb:f6:7f:fb:44:3c:3c:
50:a4:18:35:ef:2f:e4:52:c4:8b:b2:d1:42:1c:03:
a7:2f:87:4d:cb:3c:0c:d1:c4:43:aa:e4:64:17:96:
8f:b6:01:30:23:c2:2b:d9:ca:27:5d:d4:d4:f3:e1:
a0:e1:0d:31:41:f5:28:c8:59:96:77:9a:43:67:63:
3b:27:5a:f0:2e:ed:47:5a:b2:34:ea:53:a0:c4:cd:
71:15:6c:c0:11:4b:6c:04:a6:ce:c8:b3:1b:30:00:
17:37:58:79:09:01:ea:4b:16:cd:fc:a3:9c:85:8e:
7e:55:ac:b6:ca:59:ba:6d:8a:94:64:10:80:84:c6:
2d:22:bc:10:75:6a:f3:e5:9e:c4:fb:06:f5:aa:72:
cd:df:f9:3a:63:5f:67:79:32:e1:e0:5f:89:6e:54:
7f:ba:7c:f4:bf:48:fc:6b:fd:aa:36:b3:5c:71:44:
04:99:7c:98:f5:70:2a:0e:52:e7:b6:56:60:11:f0:
f8:b8:5e:bb:23:1d:4d:fc:ed:c0:19:13:b2:5b:52:
ab:8c:8f:32:24:ae:95:08:31:d8:ea:48:92:65:b7:
c7:92:b0:57:50:2b:c9:c3:89:46:3d:b4:80:b6:da:
36:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:32:B1:43:1D:E1:6B:D6:CA:D8:B4:32:55:A3:31:1D:A3:C4:8E:FA
X509v3 Authority Key Identifier:
keyid:E3:17:22:D7:9B:FF:43:84:A5:97:CB:54:4D:9E:79:74:49:0D:87:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xci15v_Q4Sll8tUTZ55dEkNhzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:c9:88:32:4a:1d:c6:57:33:ce:94:e3:06:45:55:ea:84:b5:
0c:77:cd:a7:90:a0:c5:3d:76:8e:34:9a:10:f0:c7:8c:e3:cc:
d9:33:e4:d5:86:fc:88:61:36:2a:ff:6a:84:25:e1:24:a7:da:
b3:bc:47:5b:d2:3e:ff:f1:53:31:4f:04:69:e3:cb:6b:7c:6a:
d6:76:3f:06:f6:c7:2d:bf:2d:9d:8a:53:14:89:9a:00:c3:91:
6f:ca:53:22:c9:35:55:40:ff:bd:c9:f8:e5:6c:3e:9d:ad:cc:
4f:91:6c:f4:d0:ac:8b:3c:7c:01:da:66:b7:1d:a3:c7:28:0e:
d1:cb:87:a3:0e:94:21:8f:e1:dd:f5:22:ba:09:3d:a8:b4:b2:
e2:64:cc:9b:a8:59:2a:eb:a6:bf:ab:d3:8b:6e:1f:74:66:09:
85:ed:de:ed:ea:27:f0:ac:45:45:5e:91:96:5c:97:19:97:a0:
c9:30:81:a3:d7:99:e4:e3:44:fa:67:d4:78:8f:f2:88:14:12:
bd:ce:e6:50:c8:75:6a:de:e3:83:0f:7e:98:d3:5c:75:bd:86:
55:79:80:64:bf:5e:d4:e4:28:8f:05:82:e5:30:1b:dd:52:45:
8d:20:fc:63:b0:4c:eb:c7:eb:55:d1:51:6a:cd:c5:fd:79:22:
87:50:1c:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzAZsEf/m9vn5SDdoD5N9hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMTcyMmQ3OWJmZjQzODRhNTk3Y2I1NDRkOWU3OTc0NDkw
ZDg3MzQwHhcNMjUxMTExMTMwMTE2WhcNMjUxMTEyMTMwMTE2WjAzMTEwLwYDVQQD
EyhlNjMyYjE0MzFkZTE2YmQ2Y2FkOGI0MzI1NWEzMzExZGEzYzQ4ZWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzaniuV3MuERONeUAgy/0PEWWwgS
r8v2f/tEPDxQpBg17y/kUsSLstFCHAOnL4dNyzwM0cRDquRkF5aPtgEwI8Ir2con
XdTU8+Gg4Q0xQfUoyFmWd5pDZ2M7J1rwLu1HWrI06lOgxM1xFWzAEUtsBKbOyLMb
MAAXN1h5CQHqSxbN/KOchY5+Vay2ylm6bYqUZBCAhMYtIrwQdWrz5Z7E+wb1qnLN
3/k6Y19neTLh4F+JblR/unz0v0j8a/2qNrNccUQEmXyY9XAqDlLntlZgEfD4uF67
Ix1N/O3AGROyW1KrjI8yJK6VCDHY6kiSZbfHkrBXUCvJw4lGPbSAtto2pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOYysUMd4WvWyti0MlWjMR2jxI76MB8GA1UdIwQY
MBaAFOMXIteb/0OEpZfLVE2eeXRJDYc0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHhjaTE1dl9RNFNsbDh0VVRaNTVkRWtOaHpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9iNTU1OWUtOTUwYi00OGY0LWEyYWIt
YjI2ZjFhNzBhZjBkLzEvNHhjaTE1dl9RNFNsbDh0VVRaNTVkRWtOaHpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9iNTU1OWUtOTUwYi00OGY0LWEyYWItYjI2ZjFhNzBhZjBk
LzEvNHhjaTE1dl9RNFNsbDh0VVRaNTVkRWtOaHpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk8mIMkod
xlczzpTjBkVV6oS1DHfNp5CgxT12jjSaEPDHjOPM2TPk1Yb8iGE2Kv9qhCXhJKfa
s7xHW9I+//FTMU8EaePLa3xq1nY/BvbHLb8tnYpTFImaAMORb8pTIsk1VUD/vcn4
5Ww+na3MT5Fs9NCsizx8Adpmtx2jxygO0cuHow6UIY/h3fUiugk9qLSy4mTMm6hZ
Kuumv6vTi24fdGYJhe3e7eon8KxFRV6RllyXGZegyTCBo9eZ5ONE+mfUeI/yiBQS
vc7mUMh1at7jgw9+mNNcdb2GVXmAZL9e1OQojwWC5TAb3VJFjSD8Y7BM68frVdFR
as3F/Xkih1AceA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 17:13:34 2025 by rpki-client