Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
File: 4q7DyKsR_AWMmo70AO8cPRRKe6g.mft (raw, json)
Hash identifier: +WVORh/qkxH/0cG6LhRZydWwW0BR1f//zrdmtS14awI=
Subject key identifier: 56:71:D0:C7:50:50:A4:57:F9:EB:19:A8:C2:37:43:9F:C2:A0:B4:09
Authority key identifier: E2:AE:C3:C8:AB:11:FC:05:8C:9A:8E:F4:00:EF:1C:3D:14:4A:7B:A8
Certificate issuer: /CN=e2aec3c8ab11fc058c9a8ef400ef1c3d144a7ba8
Certificate serial: 019A70DC2D182938AA56874B2B92421BE94D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
Manifest number: 09A4
Signing time: Tue 11 Nov 2025 03:01:08 +0000
Manifest this update: Tue 11 Nov 2025 03:01:08 +0000
Manifest next update: Wed 12 Nov 2025 03:01:08 +0000
Files and hashes: 1: 1qu70rxHLlsLAV5g5Efa66s6iag.roa (hash: YmJJTTwGISEG6l96iV4cbfKm+Xa4J2z07ynSRxjgi3U=)
2: 4q7DyKsR_AWMmo70AO8cPRRKe6g.crl (hash: Mfso2aMgYii8sYreGR1Rvwgpo7TDjxJ1aofhKrORHaI=)
3: q1pnCW-BLUiZBZvb23K3UxB_wVE.roa (hash: pCVPRKxVl5EU92p/4v7xk8uVkYaxmpQbOuLsACDt2jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:2d:18:29:38:aa:56:87:4b:2b:92:42:1b:e9:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2aec3c8ab11fc058c9a8ef400ef1c3d144a7ba8
Validity
Not Before: Nov 11 03:01:08 2025 GMT
Not After : Nov 12 03:01:08 2025 GMT
Subject: CN=5671d0c75050a457f9eb19a8c237439fc2a0b409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:57:56:d4:37:78:54:b2:cb:3a:e6:ec:c8:de:
5a:31:b6:7a:ea:aa:2d:af:aa:34:cf:8b:55:aa:6c:
03:25:ed:39:64:e7:a4:3f:1a:bf:8f:5f:a3:dc:43:
2b:10:87:4d:88:ed:a5:4e:af:fb:62:5f:81:4a:64:
e7:7b:6b:d5:ad:e2:e2:09:d0:56:8e:dc:1a:72:63:
e1:35:c1:de:9d:59:0e:cd:b4:f3:0a:22:3d:ed:0a:
57:8a:15:d6:44:8d:dd:80:81:f2:a7:28:52:09:2d:
f6:38:c9:24:37:3c:e4:7a:36:f5:8d:60:0f:77:5e:
cd:34:03:85:e3:3d:f1:46:d4:4c:2e:0a:33:0f:97:
41:e8:a1:3c:2b:c0:9d:b3:78:86:d0:e2:63:22:2f:
20:24:47:74:00:e3:67:78:26:1e:9e:30:15:1d:91:
e4:d2:5d:67:23:4e:c6:90:ef:f0:eb:9f:11:b5:8e:
e8:6c:68:93:7a:3f:81:2c:c4:ea:89:4b:c4:71:80:
ea:74:cc:8e:49:04:70:00:d8:77:72:8b:00:92:0d:
9d:18:75:40:da:3c:02:35:0b:c2:26:ad:a9:04:59:
81:d4:da:a4:bc:5f:6e:d4:29:f1:c2:fb:cd:24:e4:
aa:a0:f9:a1:41:63:4b:a1:8c:5a:ec:33:55:94:77:
9d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:71:D0:C7:50:50:A4:57:F9:EB:19:A8:C2:37:43:9F:C2:A0:B4:09
X509v3 Authority Key Identifier:
keyid:E2:AE:C3:C8:AB:11:FC:05:8C:9A:8E:F4:00:EF:1C:3D:14:4A:7B:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:1c:87:ae:21:72:8d:10:22:61:e5:c2:0a:c4:90:cd:87:07:
b6:1d:98:db:2d:52:c3:f7:8f:b1:ec:33:ac:f7:04:cf:b0:2d:
8d:69:88:fa:59:6c:d3:42:92:06:31:a6:c3:97:dc:38:b3:69:
a0:78:f5:ed:0c:9d:90:75:f6:54:10:f6:50:c2:72:72:c8:96:
7d:9b:f9:b4:a6:e2:4c:b0:d2:50:bb:51:07:e3:33:21:f2:ec:
47:a2:a9:9a:66:e4:5b:42:68:37:20:f5:92:8e:d1:05:b0:32:
0c:8c:46:30:64:34:0e:6a:37:30:43:ff:a8:db:66:6d:33:cd:
06:ff:b1:bd:3b:3e:35:ab:65:f8:e2:0d:c4:cb:45:0c:16:8e:
7d:4e:8e:19:d4:3d:e6:b6:a3:da:06:95:35:a2:75:4e:dc:71:
ad:9d:07:5a:51:92:37:4c:c4:0d:7f:dd:90:ab:51:42:08:5b:
81:6b:7b:61:2e:32:26:54:e5:5a:20:0a:18:1a:e5:84:9b:4a:
58:a7:87:54:fd:8c:70:5e:43:a6:ed:b7:9a:d6:2d:7f:c3:aa:
ba:09:06:3a:28:32:69:c9:c5:32:2a:c4:65:84:09:21:7d:79:
98:0b:f1:b9:55:05:a3:46:2c:0a:31:fe:d7:b7:ea:31:7c:ac:
55:b7:b3:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:04 2025 by rpki-client