Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/faea65-90b4-46db-beef-84b473b9ebcd/1/q4Ug7IPjDreTi4AC9HDw0cUFxFE.mft
File: q4Ug7IPjDreTi4AC9HDw0cUFxFE.mft (raw, json)
Hash identifier: OUdkDmYWNmzv6DLdckx17l23yyiyD/RIWf0ncGRUxTA=
Subject key identifier: 4B:05:50:32:F1:AB:03:C2:61:9B:2F:6B:0A:55:58:E9:C7:BA:6F:5E
Authority key identifier: AB:85:20:EC:83:E3:0E:B7:93:8B:80:02:F4:70:F0:D1:C5:05:C4:51
Certificate issuer: /CN=ab8520ec83e30eb7938b8002f470f0d1c505c451
Certificate serial: 019A7226166C490F811B719B517803A601F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4Ug7IPjDreTi4AC9HDw0cUFxFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/faea65-90b4-46db-beef-84b473b9ebcd/1/q4Ug7IPjDreTi4AC9HDw0cUFxFE.mft
Manifest number: 0D12
Signing time: Tue 11 Nov 2025 09:01:30 +0000
Manifest this update: Tue 11 Nov 2025 09:01:30 +0000
Manifest next update: Wed 12 Nov 2025 09:01:30 +0000
Files and hashes: 1: 0SSsSk3JYtZfVKoUdIXep-skUls.roa (hash: lo1rRlcKmSiP/o5fsPXMsNzyze1q/0lfZDjTXaH15HI=)
2: q4Ug7IPjDreTi4AC9HDw0cUFxFE.crl (hash: sA4wFxPgohkSNHlozMD4AxOEDja3uNmFbTzxZ3PUfgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/faea65-90b4-46db-beef-84b473b9ebcd/1/q4Ug7IPjDreTi4AC9HDw0cUFxFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/faea65-90b4-46db-beef-84b473b9ebcd/1/q4Ug7IPjDreTi4AC9HDw0cUFxFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/q4Ug7IPjDreTi4AC9HDw0cUFxFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:16:6c:49:0f:81:1b:71:9b:51:78:03:a6:01:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab8520ec83e30eb7938b8002f470f0d1c505c451
Validity
Not Before: Nov 11 09:01:30 2025 GMT
Not After : Nov 12 09:01:30 2025 GMT
Subject: CN=4b055032f1ab03c2619b2f6b0a5558e9c7ba6f5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2b:22:8a:f6:e6:4a:3a:b9:7a:77:b9:01:7f:
67:48:c4:bd:64:a6:1d:7b:9e:9e:72:cb:ea:fd:69:
41:4a:b3:db:43:ab:d6:f5:78:ab:e6:40:1f:28:cc:
1e:a7:a0:f5:1d:f7:b2:54:29:3b:54:b0:4d:48:f0:
7f:30:c3:24:8f:3f:1b:bf:a2:91:81:26:4a:7e:5c:
bf:cb:4f:a3:c7:d3:16:2b:45:2e:ee:02:65:b9:43:
b6:f7:dd:70:23:5a:68:e1:10:61:70:b1:71:0f:c5:
13:71:50:79:ee:35:55:4d:f2:8f:4a:28:43:51:28:
ce:1f:3c:5f:33:4b:3d:f7:37:90:67:b0:4e:b2:11:
81:50:62:2d:3f:fa:01:4d:b3:59:32:da:28:74:3d:
28:0b:91:df:c7:6d:24:51:cb:3b:58:60:a8:9c:89:
aa:3d:1d:04:64:56:00:42:6c:2e:db:92:34:ed:c9:
b6:4f:62:a2:2c:22:cb:44:3a:75:08:8f:3e:de:6d:
e3:a7:85:42:a6:b4:26:40:8b:bd:25:00:55:29:1c:
2f:cc:27:ef:ed:06:4e:60:bc:ff:24:3f:dd:e2:4f:
90:f1:98:65:08:f3:bb:17:24:07:91:54:c2:26:3d:
4f:96:d0:cb:ad:6c:cf:6b:96:e5:25:71:a0:fe:60:
6e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:05:50:32:F1:AB:03:C2:61:9B:2F:6B:0A:55:58:E9:C7:BA:6F:5E
X509v3 Authority Key Identifier:
keyid:AB:85:20:EC:83:E3:0E:B7:93:8B:80:02:F4:70:F0:D1:C5:05:C4:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4Ug7IPjDreTi4AC9HDw0cUFxFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/faea65-90b4-46db-beef-84b473b9ebcd/1/q4Ug7IPjDreTi4AC9HDw0cUFxFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/faea65-90b4-46db-beef-84b473b9ebcd/1/q4Ug7IPjDreTi4AC9HDw0cUFxFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:60:c1:9c:b5:c9:ab:d9:e8:d5:d5:96:82:ca:da:0c:9f:38:
e8:98:c6:85:2f:f1:c9:88:a4:f8:dc:30:3e:44:90:ac:9a:2c:
c9:e2:3e:90:60:da:59:b4:96:57:a7:1f:7b:0d:ce:96:df:7c:
fd:04:3c:89:d5:5d:39:4f:18:29:2a:33:48:01:49:ef:ac:b0:
cb:7c:8c:f6:93:76:f1:a1:5a:ba:6a:55:50:eb:a6:f3:8b:11:
83:88:46:0d:c8:48:1b:43:b5:c9:f9:5d:2e:5a:5c:44:ab:4b:
12:02:29:45:97:32:23:8e:07:66:cf:5f:f8:bf:f4:e7:3a:72:
19:83:35:e7:35:ff:85:c4:bb:bf:7c:d3:04:a3:0f:2a:11:29:
14:14:8e:76:5f:a1:ea:8f:9d:9f:4d:69:e1:2e:54:81:8d:81:
fe:69:35:53:e8:f1:ef:6c:52:45:cc:53:bf:5c:de:e9:b6:c4:
97:96:de:1d:c6:f4:f1:b2:21:9e:da:cc:45:7f:10:cc:f5:c5:
0d:7e:48:89:9e:26:f1:e6:1b:0b:b5:fc:57:ca:55:38:53:a5:
8a:8c:7b:a6:05:1f:c1:72:dc:e8:c5:28:e4:a9:0f:11:fd:0a:
95:7b:06:45:60:ae:53:5f:39:e4:c1:d7:26:94:46:11:23:b5:
10:d0:fb:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:40:54 2025 by rpki-client