Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft
File: 4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft (raw, json)
Hash identifier: 9ox4br1haf0jqBer+s+m+T6Xi+rjxipmm8AJC5BvA3Q=
Subject key identifier: 47:7B:AB:AF:1D:7A:90:16:39:A7:7F:DD:46:E1:BC:DF:D4:21:50:FB
Authority key identifier: E2:A7:5E:F9:03:6F:5C:14:3E:57:DF:AF:BC:92:C0:25:5C:31:59:BA
Certificate issuer: /CN=e2a75ef9036f5c143e57dfafbc92c0255c3159ba
Certificate serial: 0199FC58B38148031F4EDB2D64C7882DA3C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4qde-QNvXBQ-V9-vvJLAJVwxWbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft
Manifest number: 0743
Signing time: Sun 19 Oct 2025 12:01:35 +0000
Manifest this update: Sun 19 Oct 2025 12:01:35 +0000
Manifest next update: Mon 20 Oct 2025 12:01:35 +0000
Files and hashes: 1: 4qde-QNvXBQ-V9-vvJLAJVwxWbo.crl (hash: SYMTWGBOpNduVZN10kFUgso5q1QhnTcfezy+OE2ED8U=)
2: _Yxsd0eiDHHGuFhmQURGYrs_Tng.roa (hash: nE0pyzNZgsvFiQ/2XuRBIkiIZVx/tCbJehUAtaFFq7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4qde-QNvXBQ-V9-vvJLAJVwxWbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:b3:81:48:03:1f:4e:db:2d:64:c7:88:2d:a3:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2a75ef9036f5c143e57dfafbc92c0255c3159ba
Validity
Not Before: Oct 19 12:01:35 2025 GMT
Not After : Oct 20 12:01:35 2025 GMT
Subject: CN=477babaf1d7a901639a77fdd46e1bcdfd42150fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:61:d9:75:42:8c:d3:d0:6d:2e:dc:dc:20:fc:
9e:ce:8f:b5:f4:ed:38:33:d4:d1:68:06:d1:87:35:
88:61:4a:eb:4a:48:e7:fb:cf:70:ca:e8:7d:ee:1f:
6b:d5:9d:f0:26:02:ed:9d:a1:05:5c:91:70:40:1a:
b2:b9:c2:44:3c:00:f0:a3:61:64:26:6b:0a:99:4c:
ca:9a:e1:e7:c9:ef:20:47:f9:c5:15:44:c3:ff:3d:
d6:dd:27:43:dd:91:27:76:8e:6f:eb:9c:22:02:5e:
bb:e5:59:6f:7a:27:15:f6:f9:b2:d0:e0:6f:e4:55:
4e:28:15:b9:29:96:62:82:8a:3a:ce:e0:33:ec:7a:
0f:cb:15:d5:e1:03:16:8d:8a:db:ed:ff:3a:89:c2:
7c:d9:18:24:fd:ca:fc:7f:83:11:8a:d2:50:88:a9:
d2:82:69:29:6b:e3:40:28:aa:7c:67:e1:46:8d:4f:
01:6c:08:79:b4:ee:e4:b3:d6:2f:22:cd:1a:99:66:
79:e7:87:2d:e4:ae:ed:b7:02:ff:80:2b:5b:81:73:
18:67:fc:04:de:0c:ce:dc:bb:7b:50:b3:74:89:7c:
32:0f:54:5f:ad:20:0e:6c:63:b7:07:d3:6f:24:e5:
d1:d2:c2:f5:5d:23:4e:92:2b:4f:35:60:d6:26:56:
7b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:7B:AB:AF:1D:7A:90:16:39:A7:7F:DD:46:E1:BC:DF:D4:21:50:FB
X509v3 Authority Key Identifier:
keyid:E2:A7:5E:F9:03:6F:5C:14:3E:57:DF:AF:BC:92:C0:25:5C:31:59:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qde-QNvXBQ-V9-vvJLAJVwxWbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:93:3b:24:e3:83:36:1b:37:37:15:4b:41:89:20:d1:cd:54:
92:89:36:07:e7:82:4c:87:6b:9b:03:44:fe:ab:b6:3d:c5:0e:
1c:39:38:f4:b8:ef:41:f5:f9:3d:9b:c0:ba:c1:ad:63:78:e7:
c4:95:01:9d:38:7c:aa:63:4d:7a:48:46:e2:5c:b5:33:22:ca:
df:be:c6:ef:f2:d4:21:29:00:8f:d4:c3:48:93:fc:27:87:45:
87:7b:50:a3:7d:ee:d6:84:3c:43:42:f4:6f:ad:75:6c:2d:76:
ae:c5:7d:ed:3b:92:82:7a:df:e9:73:23:04:ff:1e:a7:f9:61:
14:e1:7d:8b:f2:bd:96:cd:20:16:55:7c:3f:42:f4:1f:8f:fc:
ed:64:5d:14:84:e9:a5:65:00:03:d2:82:db:b8:b3:92:9d:d8:
29:72:e9:8b:18:9e:49:b9:a6:b6:ae:20:67:a0:a9:5b:7b:7c:
93:32:f7:a8:db:ea:40:d6:e2:01:09:fa:2d:3b:cc:3a:61:a5:
d0:0e:ca:50:b9:3d:8a:69:0c:04:e4:57:db:5a:fc:d3:57:a8:
f3:2e:92:28:60:85:09:bf:55:43:d6:59:c3:61:dc:b3:d3:25:
62:6f:8a:fb:29:7b:49:aa:18:d4:25:e5:a6:74:19:91:d6:c1:
17:e7:a8:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:41:46 2025 by rpki-client