Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft
File: 4qKrCidaLQTx4mNassd-s65gOMw.mft (raw, json)
Hash identifier: +6nzwQjrvlg3cH2/VNZXxVYhR78EHUrbJxF3OuYqt5c=
Subject key identifier: 46:CE:1A:AD:12:81:4D:D8:A8:49:66:8C:3D:81:B0:53:E6:B0:EB:C8
Authority key identifier: E2:A2:AB:0A:27:5A:2D:04:F1:E2:63:5A:B2:C7:7E:B3:AE:60:38:CC
Certificate issuer: /CN=e2a2ab0a275a2d04f1e2635ab2c77eb3ae6038cc
Certificate serial: 019A7225E99654A0EB7702312DEEA4B6DD84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4qKrCidaLQTx4mNassd-s65gOMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft
Manifest number: 0A62
Signing time: Tue 11 Nov 2025 09:01:18 +0000
Manifest this update: Tue 11 Nov 2025 09:01:18 +0000
Manifest next update: Wed 12 Nov 2025 09:01:18 +0000
Files and hashes: 1: 4qKrCidaLQTx4mNassd-s65gOMw.crl (hash: eLKRvsKu1LkK4NsxRNJp06qQWSiKWWZHR4TekrpvC+0=)
2: r-_fYxsQeAAnWT8K8BN3aabue4c.roa (hash: vX8iAlHxAeCaWnzF37mIFqPFZYMuvvYEyZXEicfJpc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4qKrCidaLQTx4mNassd-s65gOMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:e9:96:54:a0:eb:77:02:31:2d:ee:a4:b6:dd:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2a2ab0a275a2d04f1e2635ab2c77eb3ae6038cc
Validity
Not Before: Nov 11 09:01:18 2025 GMT
Not After : Nov 12 09:01:18 2025 GMT
Subject: CN=46ce1aad12814dd8a849668c3d81b053e6b0ebc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9e:0b:48:58:11:e9:2a:8b:3b:72:38:1c:02:
b4:1f:d4:cb:f7:3d:40:93:65:43:30:6f:7d:95:20:
0d:45:ac:b6:1e:03:96:67:14:67:5f:86:9d:d5:04:
d4:31:bd:54:82:1b:67:88:9e:44:b3:43:5b:4c:44:
95:53:81:17:5b:11:4b:9e:97:00:6d:1c:e8:c6:9a:
99:8b:3a:2f:a5:f8:b1:eb:6d:ad:34:33:c0:57:17:
f9:6d:da:47:1f:57:5d:7d:8b:d6:a0:9f:bc:30:79:
87:8e:f4:21:e5:bf:6c:49:2d:52:91:61:f6:d7:34:
bf:ec:e9:8e:1c:c3:e4:e2:19:42:04:3d:29:d1:ab:
e5:36:8b:09:5b:d9:69:80:74:bd:b7:be:ec:c0:80:
c8:33:9c:4b:1e:7d:a7:19:04:86:e5:74:34:58:fa:
25:f4:1c:c3:0f:43:85:b0:70:78:e6:c6:fc:17:80:
a9:08:e5:99:7d:96:d8:7e:e9:44:35:37:63:d6:b6:
6e:06:98:01:c1:e9:31:90:fd:67:e2:19:03:75:d1:
85:29:b2:b8:39:9e:4b:5f:d6:1d:56:2d:cb:06:c1:
1d:cf:e0:a3:ba:1d:51:9f:f3:bf:4a:76:c6:f4:aa:
4f:df:43:48:8a:b1:08:ea:b3:dc:86:91:9d:5f:3c:
62:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:CE:1A:AD:12:81:4D:D8:A8:49:66:8C:3D:81:B0:53:E6:B0:EB:C8
X509v3 Authority Key Identifier:
keyid:E2:A2:AB:0A:27:5A:2D:04:F1:E2:63:5A:B2:C7:7E:B3:AE:60:38:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qKrCidaLQTx4mNassd-s65gOMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:94:62:31:89:98:2a:b6:29:c2:2b:29:f7:e1:0a:fb:f1:f0:
8a:49:09:48:e2:c6:45:8d:1e:06:37:66:0d:57:11:09:1e:5c:
42:fb:a6:40:e1:4c:01:92:61:b9:c9:1f:85:7e:ad:2d:b6:f0:
ca:69:82:ec:4b:b0:15:26:81:b5:fc:97:ab:70:83:1a:08:04:
ea:d3:bc:62:c1:c3:6d:aa:aa:9c:b2:2c:be:9a:a3:f1:e5:17:
21:4b:ee:1b:e6:69:ac:0c:ee:c5:ed:34:37:d9:ee:fb:ae:4a:
64:f6:b4:ee:05:6d:7b:cd:aa:49:67:39:bc:ed:a5:d7:76:e1:
c5:30:ac:5e:c0:38:de:3b:41:31:a6:c2:68:ee:3e:2c:ec:95:
20:a9:66:ab:e1:65:65:b1:21:7f:3d:5d:3d:39:32:7a:68:14:
1f:dd:28:ba:97:f5:90:c6:3c:0b:6c:26:b7:e4:8c:a2:b8:7a:
15:bd:86:2e:b5:bd:dc:7d:07:13:5e:76:20:ba:a2:cd:b6:4d:
42:43:00:20:d5:12:55:21:6a:99:89:8d:c9:0b:7b:2d:34:4a:
7b:c6:98:26:d9:1f:4f:02:aa:48:8f:30:5a:1a:60:03:ab:7d:
7d:1e:ac:db:03:c0:13:b9:2c:c0:a9:15:f8:30:08:e6:08:47:
9c:62:b6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:10:50 2025 by rpki-client