Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.mft
File: RqpgZ2wTDGQ45FtaYHIQ6VZraDI.mft (raw, json)
Hash identifier: UXQryIt4sG/ew5hWFqs35SZWrbmsKT0r5aKTqTlRAfY=
Subject key identifier: 0B:58:49:9B:0A:F3:BB:70:B4:A6:A9:9C:FD:1D:FF:8E:CE:24:C6:45
Authority key identifier: 46:AA:60:67:6C:13:0C:64:38:E4:5B:5A:60:72:10:E9:56:6B:68:32
Certificate issuer: /CN=46aa60676c130c6438e45b5a607210e9566b6832
Certificate serial: 019A72258B8CA5214542D14D5E4938FDE87C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.mft
Manifest number: 0438
Signing time: Tue 11 Nov 2025 09:00:54 +0000
Manifest this update: Tue 11 Nov 2025 09:00:54 +0000
Manifest next update: Wed 12 Nov 2025 09:00:54 +0000
Files and hashes: 1: 4pIrmmCZWAO8NuTmun2AQKQETQo.roa (hash: Pf6nhAI8L5UL8XOlhvccLv1CzKTIGW/DapLLMv9479I=)
2: RqpgZ2wTDGQ45FtaYHIQ6VZraDI.crl (hash: IxyKG62yoJpPWMOVdeBQu39yo/vN4O0ZFtLS7dHmQdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:8b:8c:a5:21:45:42:d1:4d:5e:49:38:fd:e8:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46aa60676c130c6438e45b5a607210e9566b6832
Validity
Not Before: Nov 11 09:00:54 2025 GMT
Not After : Nov 12 09:00:54 2025 GMT
Subject: CN=0b58499b0af3bb70b4a6a99cfd1dff8ece24c645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e1:f6:5b:10:c3:29:61:ea:2b:c5:74:e9:84:
4f:8d:0e:26:15:db:17:3f:dc:de:2b:a1:d1:b9:5e:
38:31:b4:e6:06:f4:5f:6b:d2:5a:59:09:35:70:bc:
e3:37:cf:31:66:37:0a:b5:0e:aa:a1:9c:48:6c:90:
1e:a6:43:d9:98:30:8d:b1:c0:ab:d4:db:53:0c:8f:
22:17:f9:4f:2e:9d:69:e4:22:be:c8:51:d0:05:64:
e5:86:10:27:ee:9e:46:b5:32:d2:ef:58:0a:6b:68:
65:d7:9c:74:f3:65:1e:ab:cd:fc:01:75:8d:f7:28:
be:cb:cc:08:99:0a:09:24:65:ef:1d:3c:63:42:a3:
dd:14:87:65:99:08:fd:23:a1:1f:a0:cb:66:a9:80:
6f:94:17:50:1e:36:b0:a7:f7:47:be:16:f7:4c:b1:
ff:48:23:d1:9d:3d:26:aa:ab:dc:39:41:75:9b:01:
b1:80:6e:9e:78:58:c9:6c:0d:78:a2:a1:65:5a:6f:
09:c0:8c:64:e9:53:c3:86:c6:48:16:60:94:39:c8:
72:4c:48:13:9b:9d:8f:aa:ce:b0:8c:3b:f2:b1:fd:
4d:f0:35:32:ed:18:d5:2e:5d:fe:e7:a9:a7:f3:47:
b8:ca:c2:ce:3c:ba:ac:a4:13:e1:48:1c:aa:ec:41:
9d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:58:49:9B:0A:F3:BB:70:B4:A6:A9:9C:FD:1D:FF:8E:CE:24:C6:45
X509v3 Authority Key Identifier:
keyid:46:AA:60:67:6C:13:0C:64:38:E4:5B:5A:60:72:10:E9:56:6B:68:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:84:46:28:c2:8d:d0:5c:cc:8c:04:4b:db:0d:f3:c0:68:a4:
0e:06:5c:01:47:d7:a6:d1:41:99:b4:06:87:0f:33:46:54:5c:
eb:81:53:1b:93:8b:3a:39:fd:f9:ac:c3:21:8d:9a:5c:07:2c:
c7:de:42:fa:db:6f:37:5e:3a:ae:68:9b:e9:87:5a:ed:e0:25:
04:ca:93:84:ea:81:c5:99:04:4f:48:67:b1:31:5a:1f:f3:3f:
35:9a:7b:ea:79:d7:5f:8a:ea:9d:0c:1b:9e:da:bf:bc:c9:9e:
f9:67:a4:5c:b7:ee:3f:d1:cd:3f:66:61:60:bf:50:38:9b:af:
fd:7e:41:ed:77:ab:26:54:ad:d8:fe:ce:72:2b:c6:05:04:76:
93:3e:0e:b4:fe:1b:ec:e2:18:45:69:2b:42:a2:11:9e:3f:c1:
a0:a5:02:1a:50:4a:53:62:e4:18:79:7c:b2:4a:7b:d5:c2:7f:
85:15:83:8f:db:35:41:2a:e1:d1:cd:3b:66:97:6f:bb:23:85:
a9:8b:65:9a:04:d2:52:f9:bb:cd:0b:c0:77:99:b5:6c:61:4a:
9b:20:1c:4c:5b:4b:10:d5:e1:86:28:39:4b:7c:1b:bc:84:7a:
6a:5c:d9:77:65:97:92:55:55:b1:52:34:1f:22:67:33:0f:19:
1a:65:af:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:00 2025 by rpki-client