Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft
File: 4QBqBtxJCZf_j8OkLs84m-090Xg.mft (raw, json)
Hash identifier: msHsBYBHGebDQk5Vw9Mdh34VMkgib12VbSOWV1sBYzs=
Subject key identifier: BA:91:D5:23:CF:24:C0:6E:AF:72:3A:EB:C5:1A:D6:79:97:C8:8F:EA
Authority key identifier: E1:00:6A:06:DC:49:09:97:FF:8F:C3:A4:2E:CF:38:9B:ED:3D:D1:78
Certificate issuer: /CN=e1006a06dc490997ff8fc3a42ecf389bed3dd178
Certificate serial: 019A22F739A06F3A11B88A956E509996BA25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4QBqBtxJCZf_j8OkLs84m-090Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft
Manifest number: 16F6
Signing time: Mon 27 Oct 2025 00:00:18 +0000
Manifest this update: Mon 27 Oct 2025 00:00:18 +0000
Manifest next update: Tue 28 Oct 2025 00:00:18 +0000
Files and hashes: 1: 4QBqBtxJCZf_j8OkLs84m-090Xg.crl (hash: Osn505rNKLpi13raLlBI2MbsGOa/4kjEKRVCQtO26HM=)
2: LnqHoulK3VATGmKEAn72iWxo7SM.roa (hash: yf2dP1AEzVPcio054NYKJ4SAhZkRjptLQTGykKC3qEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4QBqBtxJCZf_j8OkLs84m-090Xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:f7:39:a0:6f:3a:11:b8:8a:95:6e:50:99:96:ba:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1006a06dc490997ff8fc3a42ecf389bed3dd178
Validity
Not Before: Oct 27 00:00:18 2025 GMT
Not After : Oct 28 00:00:18 2025 GMT
Subject: CN=ba91d523cf24c06eaf723aebc51ad67997c88fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f9:ac:cc:7b:74:e6:12:e9:cd:02:f7:02:ba:
2d:a4:a1:f9:de:1e:ce:a6:13:07:3c:97:6c:00:c5:
75:5a:4e:13:b1:f0:61:84:ae:50:32:3b:15:dd:47:
e0:d8:ed:0b:28:f0:b7:4e:b7:5a:33:e0:e1:85:2d:
fe:96:eb:16:3b:65:64:3e:21:42:c7:96:86:46:a1:
4d:eb:1d:c7:80:51:63:3c:9b:a5:88:e7:90:69:44:
2d:73:25:18:9a:6c:43:4d:5f:1a:13:06:5a:38:4b:
d5:84:72:aa:35:18:c5:0f:fd:26:36:29:a6:66:0a:
83:b3:78:20:43:9a:52:b7:e5:85:2f:79:5a:7a:91:
44:eb:19:76:be:1f:d0:85:ef:ed:e8:e1:12:de:bd:
5d:d4:c0:38:cc:88:f3:04:3f:6e:f2:e2:2d:1e:f9:
a6:51:a7:37:a0:a7:41:5c:e4:50:88:2b:91:6b:30:
30:fd:43:92:7d:27:b3:8f:47:2f:a5:e9:f8:c7:d0:
3f:6f:47:78:02:11:12:b5:c2:5b:3e:ab:53:9d:cc:
0f:ba:b0:a5:a6:e6:8a:fe:84:8c:78:77:f5:f2:2d:
d7:e2:9b:01:52:33:4f:c0:a5:e3:f6:f1:ce:a2:e3:
64:dc:76:81:e2:70:e4:14:24:cb:fd:ff:ef:93:5c:
70:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:91:D5:23:CF:24:C0:6E:AF:72:3A:EB:C5:1A:D6:79:97:C8:8F:EA
X509v3 Authority Key Identifier:
keyid:E1:00:6A:06:DC:49:09:97:FF:8F:C3:A4:2E:CF:38:9B:ED:3D:D1:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QBqBtxJCZf_j8OkLs84m-090Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:5a:2a:57:6d:85:a5:ee:41:8f:23:39:a9:5b:ca:ff:de:5a:
39:36:8e:df:3f:62:4e:23:f1:53:5d:e8:f7:c7:e7:cc:0b:6c:
ef:e0:e2:74:de:20:f9:33:2e:37:a5:f3:9b:4a:ee:34:60:89:
2c:bc:76:0e:59:39:f5:1a:b0:df:b5:1b:9e:3d:f4:82:66:ee:
1c:a1:2d:47:e4:91:2f:aa:c1:fb:43:92:55:be:13:75:4c:c8:
dc:21:8f:fc:dd:13:cd:03:e8:ed:7f:17:3e:35:59:3c:a3:43:
dc:a8:b2:1b:61:d6:27:42:f1:bd:d7:e2:ea:54:c8:28:ab:82:
f3:b2:d8:f8:52:37:fd:f9:4e:f3:64:bc:44:a6:82:99:db:12:
37:fa:0c:ac:42:f3:aa:b7:88:87:38:4a:d6:cf:4c:16:5f:fa:
75:96:60:df:8e:f8:07:0d:d3:10:5c:74:37:61:1b:90:b0:cd:
fa:24:89:52:e2:4a:d8:44:e1:88:b1:23:35:62:2f:57:47:11:
c7:e4:d7:42:1d:a2:d1:ad:9f:c6:ad:20:07:bf:d3:6a:94:36:
9e:a8:b2:e2:d4:db:36:f0:ca:58:09:50:e4:4a:fc:0d:cc:4a:
72:f2:70:fc:8d:81:f6:03:c9:51:2c:ef:40:c6:9d:6f:f3:8d:
71:ff:37:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:37:18 2025 by rpki-client