Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/935044-1af5-45d0-aceb-d0406767e6cc/1/Q4-O0SG6MIHPshX6q1CuFFtZDdI.mft
File: Q4-O0SG6MIHPshX6q1CuFFtZDdI.mft (raw, json)
Hash identifier: t+ruYX9KKdzh7rGSx5XVwEBsHjYKZrEKBW344JjvJeY=
Subject key identifier: 46:50:54:75:89:20:F4:7A:92:8F:65:C0:3C:0B:6C:3D:00:BF:6A:C9
Authority key identifier: 43:8F:8E:D1:21:BA:30:81:CF:B2:15:FA:AB:50:AE:14:5B:59:0D:D2
Certificate issuer: /CN=438f8ed121ba3081cfb215faab50ae145b590dd2
Certificate serial: 019A71B84BB8445703CEFAF6F1F510FE43E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q4-O0SG6MIHPshX6q1CuFFtZDdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/935044-1af5-45d0-aceb-d0406767e6cc/1/Q4-O0SG6MIHPshX6q1CuFFtZDdI.mft
Manifest number: 1006
Signing time: Tue 11 Nov 2025 07:01:34 +0000
Manifest this update: Tue 11 Nov 2025 07:01:34 +0000
Manifest next update: Wed 12 Nov 2025 07:01:34 +0000
Files and hashes: 1: Q4-O0SG6MIHPshX6q1CuFFtZDdI.crl (hash: SK0TBl6F1HkaWlPqAGJhImvcVR8n9hq4Zm2Gz8FgmJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/935044-1af5-45d0-aceb-d0406767e6cc/1/Q4-O0SG6MIHPshX6q1CuFFtZDdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/935044-1af5-45d0-aceb-d0406767e6cc/1/Q4-O0SG6MIHPshX6q1CuFFtZDdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q4-O0SG6MIHPshX6q1CuFFtZDdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:4b:b8:44:57:03:ce:fa:f6:f1:f5:10:fe:43:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=438f8ed121ba3081cfb215faab50ae145b590dd2
Validity
Not Before: Nov 11 07:01:34 2025 GMT
Not After : Nov 12 07:01:34 2025 GMT
Subject: CN=465054758920f47a928f65c03c0b6c3d00bf6ac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e7:7a:8f:95:c0:9c:f1:6a:bb:4a:1e:a7:3e:
5a:34:cf:b7:7c:c2:2c:80:b3:b6:87:1d:f4:ea:2a:
2f:10:24:0e:c7:51:d4:9a:0e:d6:cd:f4:88:94:a9:
70:67:d4:e6:47:ae:65:48:fa:85:e7:c4:77:0f:b0:
c4:82:d3:b9:db:3f:91:5e:1c:35:6a:bb:72:78:1f:
e2:e1:fd:f8:d4:91:d7:b6:5c:96:33:c0:ab:6a:c6:
49:15:d9:56:2a:b4:bb:67:0a:00:8a:56:2f:6f:58:
f1:28:51:70:df:af:9d:58:41:7e:76:35:d5:54:98:
e8:c6:8c:23:ee:d4:51:c2:cb:bb:c2:26:4c:ee:c4:
38:67:c4:60:75:93:90:8a:bb:12:79:43:95:b3:20:
d3:9a:fd:ae:dd:fb:56:dd:11:3e:9c:d6:71:1d:0f:
d6:fb:32:69:3c:87:18:f8:3c:d3:a6:80:69:d5:5b:
66:2c:dc:33:05:f2:91:1d:b3:54:56:8d:b6:69:9d:
12:81:64:bc:03:2d:af:5b:8a:01:a8:41:6e:18:e1:
ab:fc:a5:c8:bc:c8:39:52:8e:42:ee:d7:60:8e:c8:
27:39:25:5d:08:20:c6:f9:03:e0:dd:84:72:75:b3:
b3:dd:48:b0:df:79:79:c2:97:18:3a:7e:f2:c7:04:
af:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:50:54:75:89:20:F4:7A:92:8F:65:C0:3C:0B:6C:3D:00:BF:6A:C9
X509v3 Authority Key Identifier:
keyid:43:8F:8E:D1:21:BA:30:81:CF:B2:15:FA:AB:50:AE:14:5B:59:0D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q4-O0SG6MIHPshX6q1CuFFtZDdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/935044-1af5-45d0-aceb-d0406767e6cc/1/Q4-O0SG6MIHPshX6q1CuFFtZDdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/935044-1af5-45d0-aceb-d0406767e6cc/1/Q4-O0SG6MIHPshX6q1CuFFtZDdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:98:6e:a3:0f:f6:4c:9b:aa:ee:ef:e6:20:fd:39:85:61:2c:
a8:87:3f:40:ef:2f:d5:2b:7a:ce:1d:75:50:07:44:d2:4e:bb:
03:58:c8:21:38:26:13:6b:ad:2f:dd:83:9f:1c:48:fe:7d:f6:
7f:37:63:d1:9e:be:b0:19:6d:52:0c:a7:b5:00:44:ee:85:22:
6c:29:60:c2:a2:98:40:9e:0b:3c:27:69:dd:30:59:cb:86:20:
1c:36:46:b5:e9:84:9d:9f:d1:40:22:b0:2e:f2:27:70:6f:e6:
d1:29:37:a2:be:c5:a6:60:13:d2:8b:8a:82:82:e9:0b:bf:8f:
8a:7c:21:78:63:a6:c7:7e:40:c4:3a:ea:96:f1:8a:02:df:08:
36:3a:56:85:8f:2e:25:94:3c:b2:ab:64:97:e3:57:bf:85:e7:
a2:77:8d:f2:d9:46:b0:11:cb:c9:ff:0a:fe:6f:7f:99:b3:99:
89:30:ed:25:f2:8c:69:b0:1e:67:3c:da:64:e1:3a:fc:d3:5b:
67:b8:54:50:62:80:8a:55:d2:22:2d:c1:d2:61:bb:8a:10:12:
cf:93:2c:35:76:3c:ea:90:9e:71:34:99:b3:61:19:31:82:d9:
c5:82:4a:f0:b4:87:30:94:9e:96:05:77:78:c2:79:7c:80:f7:
fc:74:75:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuEu4RFcDzvr28fUQ/kPnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzOGY4ZWQxMjFiYTMwODFjZmIyMTVmYWFiNTBhZTE0NWI1
OTBkZDIwHhcNMjUxMTExMDcwMTM0WhcNMjUxMTEyMDcwMTM0WjAzMTEwLwYDVQQD
Eyg0NjUwNTQ3NTg5MjBmNDdhOTI4ZjY1YzAzYzBiNmMzZDAwYmY2YWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOd6j5XAnPFqu0oepz5aNM+3fMIs
gLO2hx306iovECQOx1HUmg7WzfSIlKlwZ9TmR65lSPqF58R3D7DEgtO52z+RXhw1
artyeB/i4f341JHXtlyWM8CrasZJFdlWKrS7ZwoAilYvb1jxKFFw36+dWEF+djXV
VJjoxowj7tRRwsu7wiZM7sQ4Z8RgdZOQirsSeUOVsyDTmv2u3ftW3RE+nNZxHQ/W
+zJpPIcY+DzTpoBp1VtmLNwzBfKRHbNUVo22aZ0SgWS8Ay2vW4oBqEFuGOGr/KXI
vMg5Uo5C7tdgjsgnOSVdCCDG+QPg3YRydbOz3Uiw33l5wpcYOn7yxwSvcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEZQVHWJIPR6ko9lwDwLbD0Av2rJMB8GA1UdIwQY
MBaAFEOPjtEhujCBz7IV+qtQrhRbWQ3SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTQtTzBTRzZNSUhQc2hYNnExQ3VGRnRaRGRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS85MzUwNDQtMWFmNS00NWQwLWFjZWIt
ZDA0MDY3NjdlNmNjLzEvUTQtTzBTRzZNSUhQc2hYNnExQ3VGRnRaRGRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS85MzUwNDQtMWFmNS00NWQwLWFjZWItZDA0MDY3NjdlNmNj
LzEvUTQtTzBTRzZNSUhQc2hYNnExQ3VGRnRaRGRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlJhuow/2
TJuq7u/mIP05hWEsqIc/QO8v1St6zh11UAdE0k67A1jIITgmE2utL92DnxxI/n32
fzdj0Z6+sBltUgyntQBE7oUibClgwqKYQJ4LPCdp3TBZy4YgHDZGtemEnZ/RQCKw
LvIncG/m0Sk3or7FpmAT0ouKgoLpC7+PinwheGOmx35AxDrqlvGKAt8INjpWhY8u
JZQ8sqtkl+NXv4XnoneN8tlGsBHLyf8K/m9/mbOZiTDtJfKMabAeZzzaZOE6/NNb
Z7hUUGKAilXSIi3B0mG7ihASz5MsNXY86pCecTSZs2EZMYLZxYJK8LSHMJSelgV3
eMJ5fID3/HR14Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:14 2025 by rpki-client