Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f91a85-e93c-4a49-8215-8497717a4f61/1/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.mft
File: 4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.mft (raw, json)
Hash identifier: K7aG94C7JD4S8uBEGVSjP4k1xzBxi8T0fDbwyIiFhpY=
Subject key identifier: B2:75:1A:95:1E:D5:1B:0B:8E:BF:FE:C8:23:E4:B8:EB:84:74:AD:63
Authority key identifier: E3:10:6A:C3:EA:76:0B:2D:02:42:A9:EF:BA:2C:21:16:B6:26:F8:24
Certificate issuer: /CN=e3106ac3ea760b2d0242a9efba2c2116b626f824
Certificate serial: 019A72936FBFD4A4DF7766079584456DCA03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f91a85-e93c-4a49-8215-8497717a4f61/1/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.mft
Manifest number: 4F
Signing time: Tue 11 Nov 2025 11:00:56 +0000
Manifest this update: Tue 11 Nov 2025 11:00:56 +0000
Manifest next update: Wed 12 Nov 2025 11:00:56 +0000
Files and hashes: 1: 4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.crl (hash: f4A1g+Kz50+nWk4OW2j70MO4zkDSi5Tww3aTpVp+z6E=)
2: SoVuu5cSE-a7b5i8aLokg9V-CPk.roa (hash: fcsl2vUdBu+342WmKzTFEQ1uDfRLz+i6/wCTrStZ6x8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/f91a85-e93c-4a49-8215-8497717a4f61/1/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/f91a85-e93c-4a49-8215-8497717a4f61/1/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:6f:bf:d4:a4:df:77:66:07:95:84:45:6d:ca:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3106ac3ea760b2d0242a9efba2c2116b626f824
Validity
Not Before: Nov 11 11:00:56 2025 GMT
Not After : Nov 12 11:00:56 2025 GMT
Subject: CN=b2751a951ed51b0b8ebffec823e4b8eb8474ad63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6d:ba:78:6c:4d:c2:e7:c2:8b:00:17:9f:cc:
84:3d:0b:56:9c:54:a9:46:60:cd:33:44:a0:f6:66:
bd:2d:2b:18:e5:22:09:99:ae:b3:01:82:be:f9:db:
3a:39:65:e4:7f:7d:a3:02:ae:9c:95:20:c3:cb:75:
ec:3e:dd:46:41:05:49:a0:d6:54:38:30:41:a0:f2:
02:94:e4:b0:7d:d8:9b:c1:e1:11:9d:f8:f0:9b:57:
2b:85:0d:3a:a1:a4:f5:be:b4:2d:a6:00:69:63:5a:
8c:df:de:a9:9a:a4:62:43:72:37:6d:31:ef:e5:dc:
84:02:cc:0d:08:d2:9e:7b:38:0b:5c:3b:38:6e:21:
28:f4:83:7f:87:d0:08:31:5f:16:e7:c8:4b:74:1b:
1b:ea:03:c0:67:d0:d5:37:95:5c:7f:7e:52:2f:2b:
f8:c7:bb:06:04:35:79:c6:9a:42:ab:39:e3:43:db:
68:c0:73:ad:f5:e6:aa:1b:5d:bf:dc:56:6f:2d:a4:
f3:39:37:6a:c5:73:42:8a:04:e4:a5:01:44:ac:34:
0e:aa:8c:86:86:13:41:0e:86:7e:03:9f:8a:1d:6a:
31:9b:c1:a0:9f:a5:44:51:f5:fd:04:c2:79:37:44:
f6:50:57:2b:5f:6c:4e:ac:b4:49:dc:de:c6:d1:38:
1d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:75:1A:95:1E:D5:1B:0B:8E:BF:FE:C8:23:E4:B8:EB:84:74:AD:63
X509v3 Authority Key Identifier:
keyid:E3:10:6A:C3:EA:76:0B:2D:02:42:A9:EF:BA:2C:21:16:B6:26:F8:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f91a85-e93c-4a49-8215-8497717a4f61/1/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f91a85-e93c-4a49-8215-8497717a4f61/1/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:bf:29:63:c0:32:d7:51:2a:f9:d1:69:61:76:ef:55:b6:70:
1c:7b:c4:99:00:52:02:51:a1:68:dd:59:36:97:79:f4:83:e7:
6a:3a:05:4e:a5:58:96:02:64:48:6e:1d:77:af:23:92:10:1f:
fa:f5:46:59:39:fa:ae:fc:b6:22:75:56:8f:0f:04:c1:e1:a9:
1e:cb:c3:96:95:ed:e4:4b:4d:a2:fb:9d:8d:3e:b2:c6:5b:93:
55:68:5d:50:99:77:d3:9a:5d:78:db:93:14:df:f3:9c:68:b9:
8b:46:e1:31:ac:95:9d:98:1d:e5:08:19:92:c4:99:df:aa:d3:
79:76:ff:91:82:9d:ff:1e:1d:94:d1:3a:b9:dc:35:b2:51:b1:
d5:f7:9d:8c:83:db:6b:f0:9a:6f:c9:4d:a7:6d:a8:c5:a4:4b:
70:b1:42:5a:55:d1:d4:0e:de:8b:e2:d8:66:6c:6a:24:a7:7d:
34:84:b0:ee:88:c0:18:07:0e:f1:ed:7f:12:c1:c2:b2:73:c8:
ea:97:67:c2:44:f6:6d:37:5f:07:ef:54:0c:94:5b:e9:b3:c5:
8c:4a:e2:d1:aa:b1:b7:37:a1:9c:34:0a:6f:c0:23:53:16:32:
c5:4c:f9:77:04:82:d5:df:5d:37:7e:5e:06:c4:3f:a2:18:6a:
31:26:cc:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:55:01 2025 by rpki-client