Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft
File: x4QShQX3-Zx1cEQpgK3rivkMwnA.mft (raw, json)
Hash identifier: izyTdSi8leDrVxwZ8YXoJE1DGd697ZeemYVSxoTsxTA=
Subject key identifier: 1D:0D:21:F8:D3:A8:6A:52:68:C5:49:FD:42:7C:B6:0D:69:3C:A4:CE
Authority key identifier: C7:84:12:85:05:F7:F9:9C:75:70:44:29:80:AD:EB:8A:F9:0C:C2:70
Certificate issuer: /CN=c784128505f7f99c7570442980adeb8af90cc270
Certificate serial: 019A2FA027C4257878D1E4B3064FDA492F8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft
Manifest number: 1701
Signing time: Wed 29 Oct 2025 11:00:16 +0000
Manifest this update: Wed 29 Oct 2025 11:00:16 +0000
Manifest next update: Thu 30 Oct 2025 11:00:16 +0000
Files and hashes: 1: 1k_-7iaL3-MiuBsEwzsqEjXw8Aw.roa (hash: MvGzqoey/hCfcwmRhO21Z8RbLw85JPgQ7VzzDBc6ROg=)
2: B5D9MGD5HNxMn2ytn4E-XXNfFUU.roa (hash: ZF/ZQXZ6OV0r+xXPNKcSMNFa0v6w/gQVQYon3rz/hOA=)
3: V3axZivK3WrjDfjp92dOnzYIRGs.roa (hash: Nvb4IvNDmUJ1oDhZXKGSuAJ/dOxxdh42DYgaZcrkkzQ=)
4: x4QShQX3-Zx1cEQpgK3rivkMwnA.crl (hash: 13snivUBNbOC2rda2Jx7QEyMyHG2ZH4Fh5B6KAyA+8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2f:a0:27:c4:25:78:78:d1:e4:b3:06:4f:da:49:2f:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c784128505f7f99c7570442980adeb8af90cc270
Validity
Not Before: Oct 29 11:00:16 2025 GMT
Not After : Oct 30 11:00:16 2025 GMT
Subject: CN=1d0d21f8d3a86a5268c549fd427cb60d693ca4ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0c:87:71:51:a8:ee:50:e3:78:44:3b:0a:4f:
5d:0c:60:25:52:94:a7:f8:4c:77:5b:7a:b9:19:f2:
60:eb:c9:17:b0:e2:51:11:16:43:8b:01:c7:e9:12:
a8:49:ed:aa:f0:d1:34:b3:8b:68:e0:26:d8:25:8e:
f1:13:ba:d7:81:aa:58:71:c6:3c:eb:ae:c8:4b:9c:
27:31:bd:db:22:7f:5b:7c:82:66:ce:00:73:82:47:
32:95:09:54:ec:9a:d8:00:69:3d:08:b4:05:f0:f5:
72:97:14:d6:2a:53:1e:7f:2f:6d:8c:1e:13:aa:17:
2f:0e:3a:7c:ae:e7:cd:2a:9a:7d:8d:ab:ea:29:26:
84:91:93:53:dd:dd:d7:f2:aa:21:de:ce:b2:3c:88:
fc:17:9f:5d:0c:2b:5a:c1:3a:83:c0:d5:8d:7d:95:
2e:49:1e:82:6e:f2:9a:39:ac:75:da:88:75:f3:8e:
d0:1d:41:2d:84:6f:e5:6a:60:a1:73:90:fc:df:8f:
89:a2:08:8d:21:11:b7:7a:2e:8b:71:13:6b:0a:f5:
23:cc:fa:e9:80:ef:1b:c9:0e:a7:51:74:fd:da:59:
02:6b:b1:3b:9b:eb:8c:c5:a2:f9:ce:db:f6:54:e9:
e6:34:96:49:25:8c:17:04:f7:22:1f:ec:dc:82:32:
99:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:0D:21:F8:D3:A8:6A:52:68:C5:49:FD:42:7C:B6:0D:69:3C:A4:CE
X509v3 Authority Key Identifier:
keyid:C7:84:12:85:05:F7:F9:9C:75:70:44:29:80:AD:EB:8A:F9:0C:C2:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:3b:ec:d4:66:0d:1a:a3:10:0c:3e:0d:49:15:6f:10:89:c1:
12:1d:26:c9:60:2b:d5:1a:a5:04:7a:da:d2:55:46:2c:4c:b3:
89:d0:4b:5a:02:d4:c9:f4:cb:33:9e:52:43:da:d8:48:1f:0b:
89:3a:d9:09:b9:00:f9:6e:89:72:2e:52:d5:fb:ed:3e:1b:24:
16:15:3c:a1:28:8f:e2:dd:29:5a:6b:62:d0:c6:e8:5f:70:5f:
12:4c:31:10:e3:52:5e:c0:84:1d:41:2a:c1:06:4c:c8:97:e9:
3d:cb:c5:dd:70:35:d0:cc:ac:c4:f1:dc:74:c3:0d:d8:43:f0:
07:77:49:4a:7e:e3:c6:ca:8a:66:7a:42:2f:e5:c5:b6:eb:bb:
db:67:e8:1f:11:a6:53:11:66:d1:6b:ed:6f:76:36:73:42:82:
f1:b6:e3:a0:76:8f:c2:d9:6f:f9:0a:6c:11:23:1b:09:c2:32:
a7:ec:f9:0c:43:7f:90:76:7a:f3:3b:a8:a1:3f:82:f4:70:3f:
1e:12:10:a8:3a:a3:e6:46:24:14:34:65:7f:2d:06:b0:75:14:
a3:b6:ac:4c:65:9f:af:ac:f2:1b:70:8f:67:2e:eb:5f:90:51:
c8:b6:5e:8b:e9:b2:b0:9a:a4:0e:68:6a:c9:94:0b:09:4b:ad:
0f:40:9b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 12:23:22 2025 by rpki-client