Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft
File: DR4_1QQLufuRJuURnl_3wHTaW7w.mft (raw, json)
Hash identifier: iiDDTSwcn6qeIcjnPNvAk0bmZn/gSw2rI4Q6iDjhs9w=
Subject key identifier: 76:A7:F7:15:DC:66:71:8A:50:DF:87:4F:7A:90:9B:F8:87:A2:94:57
Authority key identifier: 0D:1E:3F:D5:04:0B:B9:FB:91:26:E5:11:9E:5F:F7:C0:74:DA:5B:BC
Certificate issuer: /CN=0d1e3fd5040bb9fb9126e5119e5ff7c074da5bbc
Certificate serial: 019A70A4EFD0510F3FC175A1CE5112ABB6D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DR4_1QQLufuRJuURnl_3wHTaW7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft
Manifest number: 0C22
Signing time: Tue 11 Nov 2025 02:00:48 +0000
Manifest this update: Tue 11 Nov 2025 02:00:48 +0000
Manifest next update: Wed 12 Nov 2025 02:00:48 +0000
Files and hashes: 1: DR4_1QQLufuRJuURnl_3wHTaW7w.crl (hash: cvADktgCQLGPK5WdbuN4H3UsQTwp66Sb4NWLvbzemf4=)
2: tw53VyqONmO9P7i2y6gpvj2fu_U.roa (hash: J066HWT9IQx8ovZiJnDjPDFutWNRHoqwHzDICk2OhO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/DR4_1QQLufuRJuURnl_3wHTaW7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:ef:d0:51:0f:3f:c1:75:a1:ce:51:12:ab:b6:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d1e3fd5040bb9fb9126e5119e5ff7c074da5bbc
Validity
Not Before: Nov 11 02:00:48 2025 GMT
Not After : Nov 12 02:00:48 2025 GMT
Subject: CN=76a7f715dc66718a50df874f7a909bf887a29457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:29:8a:77:7b:a3:79:fe:28:72:a7:74:89:76:
13:1b:04:d8:a2:c9:63:85:f4:0f:ef:02:4d:c3:f2:
08:0e:b8:59:55:a3:a6:14:72:0c:2f:2b:96:96:4f:
0d:7f:05:f1:4e:bd:3b:d1:69:da:e4:9e:93:38:3f:
c1:40:78:9d:ad:ce:98:c2:41:da:66:56:d0:35:08:
f6:06:cd:5e:4c:c1:94:fc:1b:0e:21:09:7b:28:50:
0b:4c:31:ce:9a:50:bf:13:a6:be:42:05:b0:60:1e:
c9:2f:59:66:b6:b4:a8:d6:cd:15:0c:3f:96:0d:e9:
9e:aa:62:f4:67:91:1f:79:a2:8c:cf:ba:18:d9:bd:
8c:6b:43:24:d2:f1:a9:c5:4d:ba:b7:8b:57:3c:16:
ec:f7:04:88:12:dc:ba:f3:83:46:af:cf:72:f5:72:
8b:b0:f1:6a:f4:71:40:98:9d:2f:61:20:3f:82:27:
47:9a:85:11:16:c2:f9:de:de:33:8c:e2:f8:45:14:
76:40:38:3d:a7:ee:82:66:cc:78:1f:09:12:08:cc:
88:fe:93:4f:87:1d:0f:12:11:09:92:34:6d:2f:11:
86:f5:83:d1:d8:7d:83:bd:a0:10:bc:2e:d7:1f:5d:
14:15:bd:2e:cd:50:35:e9:15:ad:1f:88:60:75:91:
35:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:A7:F7:15:DC:66:71:8A:50:DF:87:4F:7A:90:9B:F8:87:A2:94:57
X509v3 Authority Key Identifier:
keyid:0D:1E:3F:D5:04:0B:B9:FB:91:26:E5:11:9E:5F:F7:C0:74:DA:5B:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DR4_1QQLufuRJuURnl_3wHTaW7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:4f:59:5a:6e:3c:4b:c7:13:6c:6e:d0:b5:c4:4e:4e:34:4c:
25:56:98:4a:da:38:fb:2a:fe:84:dc:99:50:03:4d:df:7f:1c:
1e:5d:4a:79:41:07:cd:c2:fe:ec:c8:6a:50:2d:f4:1d:e7:b7:
57:5d:a0:45:90:14:c3:d1:47:fb:fd:73:0a:0f:ba:20:00:bd:
02:f2:08:fa:a4:b5:67:a0:eb:b3:68:11:4d:f0:32:e6:9f:3c:
f4:18:f1:59:ff:59:15:b1:7d:f1:78:dc:c1:77:c1:62:78:49:
b7:0b:92:07:5b:3e:43:1e:37:c2:3e:55:7a:5d:c0:f5:92:4a:
97:48:64:a3:13:dc:ad:61:e9:81:11:51:ac:45:c9:95:6a:c6:
03:34:91:0f:38:6a:65:53:2c:88:26:b2:e5:33:f6:a2:4f:e1:
c9:f8:3f:dd:05:e3:59:f9:18:dc:67:44:e3:20:f3:87:15:99:
3f:51:e7:d3:cc:52:d7:ec:6a:76:b8:ab:94:eb:36:bb:ed:cf:
44:1f:e1:72:2a:12:83:2c:00:a0:06:a7:69:a9:f7:cc:e7:fb:
fa:c6:31:83:68:1d:71:df:15:78:1d:27:5f:c5:fc:98:de:28:
7f:78:4a:53:a7:3c:7f:57:42:ca:d1:e3:17:f3:85:04:f7:c9:
b7:ab:8a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:17 2025 by rpki-client