Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft
File: DR4_1QQLufuRJuURnl_3wHTaW7w.mft (raw, json)
Hash identifier: QFbtkOyTak1gNqn3UFrVeiO78ZzyTvbMmvmfzg3f130=
Subject key identifier: A8:20:87:8A:22:BE:38:F9:F6:5F:34:F3:C0:6A:8B:C1:28:69:5B:CC
Authority key identifier: 0D:1E:3F:D5:04:0B:B9:FB:91:26:E5:11:9E:5F:F7:C0:74:DA:5B:BC
Certificate issuer: /CN=0d1e3fd5040bb9fb9126e5119e5ff7c074da5bbc
Certificate serial: 0198D73AE0195A3A0B49481EDC7C285015D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DR4_1QQLufuRJuURnl_3wHTaW7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft
Manifest number: 0B4E
Signing time: Sat 23 Aug 2025 14:00:16 +0000
Manifest this update: Sat 23 Aug 2025 14:00:16 +0000
Manifest next update: Sun 24 Aug 2025 14:00:16 +0000
Files and hashes: 1: DR4_1QQLufuRJuURnl_3wHTaW7w.crl (hash: zHCoiOHzf1Uo39WBm/vIFdgfjjghsJksvxIJRj6LuVQ=)
2: tw53VyqONmO9P7i2y6gpvj2fu_U.roa (hash: J066HWT9IQx8ovZiJnDjPDFutWNRHoqwHzDICk2OhO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/DR4_1QQLufuRJuURnl_3wHTaW7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3a:e0:19:5a:3a:0b:49:48:1e:dc:7c:28:50:15:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d1e3fd5040bb9fb9126e5119e5ff7c074da5bbc
Validity
Not Before: Aug 23 14:00:16 2025 GMT
Not After : Aug 24 14:00:16 2025 GMT
Subject: CN=a820878a22be38f9f65f34f3c06a8bc128695bcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8a:45:6a:b1:36:8b:6e:d5:a2:d3:a8:1d:9b:
f6:6d:d9:76:58:1e:cc:68:2b:f4:8f:ea:7b:9d:b5:
a9:9f:9e:6a:75:98:a2:8e:74:29:82:b1:82:1a:74:
b1:86:93:cb:b1:33:ea:49:6e:e2:bf:5a:57:b9:85:
6a:1e:fe:f5:72:0e:af:cf:f5:61:13:6b:9f:c9:10:
3f:e8:97:ef:73:73:11:02:ff:a2:4d:72:64:13:e4:
67:cf:d5:bc:e9:1f:10:12:4e:8f:ac:6f:15:8c:d9:
15:e8:55:7a:9c:84:73:4e:6c:20:a0:6e:05:d9:7f:
c3:5c:28:00:21:ae:1d:d1:2e:ed:a0:68:64:a8:26:
3c:49:a0:76:3e:6c:f6:a0:20:88:a5:ed:4f:ed:1b:
17:ba:cb:6e:3e:03:2f:cf:76:98:64:6a:6b:24:89:
d4:3e:07:4d:66:19:06:d7:61:a8:82:96:a3:21:b9:
09:1a:07:7d:ea:f6:96:f1:9b:91:1f:6c:f7:8c:3e:
be:09:55:4d:ec:46:ec:3a:f0:01:18:91:e7:32:ec:
03:d0:cb:c8:1e:a5:76:ab:37:55:90:47:6e:5f:95:
5a:a3:d6:fc:08:e0:c5:39:b2:bf:0f:37:0f:71:2f:
dd:85:c1:6a:b6:b8:f0:26:a3:dc:4a:7f:b1:72:4b:
81:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:20:87:8A:22:BE:38:F9:F6:5F:34:F3:C0:6A:8B:C1:28:69:5B:CC
X509v3 Authority Key Identifier:
keyid:0D:1E:3F:D5:04:0B:B9:FB:91:26:E5:11:9E:5F:F7:C0:74:DA:5B:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DR4_1QQLufuRJuURnl_3wHTaW7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:98:0f:b5:70:ce:01:a1:1e:9c:d0:3a:db:7f:b1:7d:12:a5:
7b:09:7f:e0:43:09:a9:d5:b8:e9:87:d8:34:bf:81:b3:1a:66:
c4:02:8d:32:9a:01:79:82:82:3a:e0:5d:b9:e3:2b:72:77:92:
93:e9:1f:8f:81:16:84:fe:b1:16:04:ee:ed:f9:ad:dc:65:d2:
9c:4d:89:8f:52:96:bf:ad:94:18:eb:17:c2:66:ee:6c:31:f8:
b6:bd:a7:6b:ab:e8:f3:37:ad:59:ac:47:97:a9:9e:5f:de:4a:
8d:48:00:d4:8b:c7:17:02:bc:e7:a6:83:7e:5f:ec:bb:12:84:
1e:64:aa:65:26:5c:50:66:d7:94:85:96:f6:a7:39:cd:0b:6e:
5f:3f:5e:bc:87:83:ae:77:a8:60:23:d0:7f:d0:6c:3e:07:5d:
3c:ad:68:32:b4:5d:4e:1e:05:89:5e:cb:f1:6d:90:45:49:91:
1f:57:78:65:e8:9c:9c:de:65:83:fe:27:72:29:a6:18:f1:86:
a3:5a:83:37:cb:a7:ad:92:c2:ab:07:c1:32:8e:ef:1d:d5:cc:
d8:ae:57:2b:97:02:76:1f:59:5d:33:c2:b1:78:14:60:03:6b:
7b:c1:18:61:90:83:b0:e9:de:a9:6f:4e:29:85:83:65:ab:f9:
2b:32:a9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:02:07 2025 by rpki-client