Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft
File: 4qKrCidaLQTx4mNassd-s65gOMw.mft (raw, json)
Hash identifier: Yvt93v3fdB4AIp0Leh/kaWxC+1Ginie4733lpDqdfyM=
Subject key identifier: 5B:85:22:97:5B:2C:82:55:FB:53:62:33:10:E7:9B:51:47:F1:98:A1
Authority key identifier: E2:A2:AB:0A:27:5A:2D:04:F1:E2:63:5A:B2:C7:7E:B3:AE:60:38:CC
Certificate issuer: /CN=e2a2ab0a275a2d04f1e2635ab2c77eb3ae6038cc
Certificate serial: 0199FE471BE46A18160817561D3170117EB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4qKrCidaLQTx4mNassd-s65gOMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft
Manifest number: 0A26
Signing time: Sun 19 Oct 2025 21:01:36 +0000
Manifest this update: Sun 19 Oct 2025 21:01:36 +0000
Manifest next update: Mon 20 Oct 2025 21:01:36 +0000
Files and hashes: 1: 4qKrCidaLQTx4mNassd-s65gOMw.crl (hash: sGqmu8bD7LycvhJOyWFbsAvKfM1F4mr/r7GZ2NWtY1A=)
2: r-_fYxsQeAAnWT8K8BN3aabue4c.roa (hash: vX8iAlHxAeCaWnzF37mIFqPFZYMuvvYEyZXEicfJpc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4qKrCidaLQTx4mNassd-s65gOMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:1b:e4:6a:18:16:08:17:56:1d:31:70:11:7e:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2a2ab0a275a2d04f1e2635ab2c77eb3ae6038cc
Validity
Not Before: Oct 19 21:01:36 2025 GMT
Not After : Oct 20 21:01:36 2025 GMT
Subject: CN=5b8522975b2c8255fb53623310e79b5147f198a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:75:61:c2:3d:e8:89:2d:2a:7c:80:ac:3d:46:
43:47:b3:1c:35:11:83:ec:e8:d4:54:0a:84:a6:20:
b9:00:4c:36:83:10:46:8a:f3:83:ce:c3:12:71:64:
c1:6e:01:75:b9:f3:30:54:38:f5:67:eb:41:87:4f:
2a:a0:7a:a0:c8:27:6d:88:38:10:24:24:90:d2:c0:
cb:23:9e:f9:86:0d:72:42:7a:4f:59:e5:f6:15:95:
5e:7d:09:87:23:23:c7:cc:05:d6:9a:00:91:0c:a6:
00:ec:b5:d7:59:df:0f:20:db:11:51:36:7a:2b:f7:
fc:9e:30:97:a2:df:9f:52:7e:1f:66:fb:7b:c4:c7:
7a:56:fa:25:46:0a:b6:53:94:8c:8f:be:61:28:4c:
49:29:2d:36:10:22:fb:b6:ec:67:2a:34:32:d9:63:
06:02:bd:0c:3c:5c:5b:fc:ea:80:2c:d3:95:f3:fe:
4e:24:df:7b:fd:5f:30:04:50:3e:03:f6:fa:7b:be:
83:20:a1:08:9a:d2:b0:e2:52:ce:28:e2:f9:ba:1b:
f8:cc:0f:98:05:cb:fd:e7:ef:02:c2:c0:84:55:5b:
fb:62:4f:89:ea:ac:0c:c6:4e:13:49:1d:fb:aa:37:
8f:89:3c:9f:fb:29:b7:67:5d:38:99:74:a4:f5:57:
db:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:85:22:97:5B:2C:82:55:FB:53:62:33:10:E7:9B:51:47:F1:98:A1
X509v3 Authority Key Identifier:
keyid:E2:A2:AB:0A:27:5A:2D:04:F1:E2:63:5A:B2:C7:7E:B3:AE:60:38:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qKrCidaLQTx4mNassd-s65gOMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:cd:f0:f6:af:31:fe:b2:7c:4a:56:c8:30:c2:a9:17:8a:7b:
a0:18:84:af:c1:24:3b:3c:23:81:9c:dd:3d:d0:b5:bd:f5:60:
32:97:c1:80:22:ee:6d:c9:9c:02:b1:5e:23:dc:70:54:44:08:
7c:6d:3a:0f:2f:63:9a:3b:74:5b:7f:e4:fc:5f:e6:d7:be:c9:
df:d6:1d:76:2b:53:b0:10:dd:8f:e8:f3:1e:3e:13:1f:d9:23:
08:41:8e:1f:dd:36:72:c2:be:b2:88:db:5f:dd:1f:6b:6e:18:
24:18:7a:09:02:98:07:10:dd:f9:be:b1:2a:b5:3c:7a:1f:2e:
34:47:54:09:75:d3:1f:a8:ee:7b:6d:51:e2:d3:b8:ee:05:e4:
20:46:ff:8c:06:ab:04:cf:d9:86:a6:54:e1:70:a8:8b:69:b3:
e4:58:ec:de:9d:34:59:67:17:57:04:72:8d:54:41:ff:46:df:
de:66:6d:23:1b:1f:d8:fe:d5:a0:91:db:38:88:7c:9a:5b:22:
3d:ae:70:aa:aa:7b:57:c4:60:15:55:57:95:5f:67:fd:b8:4a:
27:df:fe:e7:5d:da:63:d7:e6:51:14:c8:c3:ab:29:ae:b8:37:
7f:b5:55:9a:52:88:79:b6:1d:70:c3:cc:d0:0b:a1:b9:43:1c:
1c:1c:f0:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+RxvkahgWCBdWHTFwEX61MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYTJhYjBhMjc1YTJkMDRmMWUyNjM1YWIyYzc3ZWIzYWU2
MDM4Y2MwHhcNMjUxMDE5MjEwMTM2WhcNMjUxMDIwMjEwMTM2WjAzMTEwLwYDVQQD
Eyg1Yjg1MjI5NzViMmM4MjU1ZmI1MzYyMzMxMGU3OWI1MTQ3ZjE5OGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3Vhwj3oiS0qfICsPUZDR7McNRGD
7OjUVAqEpiC5AEw2gxBGivODzsMScWTBbgF1ufMwVDj1Z+tBh08qoHqgyCdtiDgQ
JCSQ0sDLI575hg1yQnpPWeX2FZVefQmHIyPHzAXWmgCRDKYA7LXXWd8PINsRUTZ6
K/f8njCXot+fUn4fZvt7xMd6VvolRgq2U5SMj75hKExJKS02ECL7tuxnKjQy2WMG
Ar0MPFxb/OqALNOV8/5OJN97/V8wBFA+A/b6e76DIKEImtKw4lLOKOL5uhv4zA+Y
Bcv95+8CwsCEVVv7Yk+J6qwMxk4TSR37qjePiTyf+ym3Z104mXSk9VfbdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFuFIpdbLIJV+1NiMxDnm1FH8ZihMB8GA1UdIwQY
MBaAFOKiqwonWi0E8eJjWrLHfrOuYDjMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHFLckNpZGFMUVR4NG1OYXNzZC1zNjVnT013LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81NWQ5MmMtZDNlMi00ZGExLThkNTMt
N2U0N2RhMWNlNDA2LzEvNHFLckNpZGFMUVR4NG1OYXNzZC1zNjVnT013Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS81NWQ5MmMtZDNlMi00ZGExLThkNTMtN2U0N2RhMWNlNDA2
LzEvNHFLckNpZGFMUVR4NG1OYXNzZC1zNjVnT013LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcs3w9q8x
/rJ8SlbIMMKpF4p7oBiEr8EkOzwjgZzdPdC1vfVgMpfBgCLubcmcArFeI9xwVEQI
fG06Dy9jmjt0W3/k/F/m177J39YdditTsBDdj+jzHj4TH9kjCEGOH902csK+sojb
X90fa24YJBh6CQKYBxDd+b6xKrU8eh8uNEdUCXXTH6jue21R4tO47gXkIEb/jAar
BM/ZhqZU4XCoi2mz5Fjs3p00WWcXVwRyjVRB/0bf3mZtIxsf2P7VoJHbOIh8mlsi
Pa5wqqp7V8RgFVVXlV9n/bhKJ9/+513aY9fmURTIw6sprrg3f7VVmlKIebYdcMPM
0AuhuUMcHBzw8Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:24:31 2025 by rpki-client