Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft
File: DR4_1QQLufuRJuURnl_3wHTaW7w.mft (raw, json)
Hash identifier: G7domBebg431csJ8B+Vl1LPhCsBxyEiUzqmK6R1qThw=
Subject key identifier: CD:5C:1F:A0:A7:D5:15:79:15:08:D3:E9:9E:9F:DE:BF:0E:05:0A:1C
Authority key identifier: 0D:1E:3F:D5:04:0B:B9:FB:91:26:E5:11:9E:5F:F7:C0:74:DA:5B:BC
Certificate issuer: /CN=0d1e3fd5040bb9fb9126e5119e5ff7c074da5bbc
Certificate serial: 0199FAD7D4BB75C17365617CF97F6D50070E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DR4_1QQLufuRJuURnl_3wHTaW7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft
Manifest number: 0BE5
Signing time: Sun 19 Oct 2025 05:01:12 +0000
Manifest this update: Sun 19 Oct 2025 05:01:12 +0000
Manifest next update: Mon 20 Oct 2025 05:01:12 +0000
Files and hashes: 1: DR4_1QQLufuRJuURnl_3wHTaW7w.crl (hash: 8tBO/ugFEVmiTJeybJW0O2ZdPxkMK7+DCkwDOaIQL90=)
2: tw53VyqONmO9P7i2y6gpvj2fu_U.roa (hash: J066HWT9IQx8ovZiJnDjPDFutWNRHoqwHzDICk2OhO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/DR4_1QQLufuRJuURnl_3wHTaW7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:d4:bb:75:c1:73:65:61:7c:f9:7f:6d:50:07:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d1e3fd5040bb9fb9126e5119e5ff7c074da5bbc
Validity
Not Before: Oct 19 05:01:12 2025 GMT
Not After : Oct 20 05:01:12 2025 GMT
Subject: CN=cd5c1fa0a7d515791508d3e99e9fdebf0e050a1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:47:48:44:54:26:24:4f:21:ba:79:1d:9e:fa:
c2:e5:64:f2:6b:d6:f2:37:b9:64:50:21:52:51:2b:
bb:8a:a6:86:60:1d:22:8e:58:9f:9d:b1:39:89:c3:
50:4f:53:00:e9:62:0b:a9:08:e9:e5:eb:6d:e7:e4:
82:f5:bc:b7:52:c6:18:0e:4a:18:00:16:3a:45:05:
39:97:37:d4:2f:70:43:23:40:86:cc:74:10:05:a6:
ce:05:9b:d0:af:a8:e4:21:b5:43:6d:60:b7:3f:6e:
8a:57:46:bf:77:16:87:5c:9d:86:c8:3c:d9:ed:f9:
4c:01:75:de:bc:c5:11:c9:48:2b:15:1b:09:4d:bc:
dc:f2:bb:92:a9:5f:4c:a3:e3:6e:02:7a:0d:49:7e:
6e:49:fd:f3:2e:d9:76:43:ba:12:33:9e:e3:d2:2c:
29:c2:a9:d7:d2:04:2d:a7:a0:20:04:f2:10:b9:0b:
bc:1d:d3:e0:15:89:a4:25:77:93:cb:2e:60:9e:ce:
7c:23:70:ea:99:1e:16:0c:1f:a5:33:9c:48:88:6b:
ef:54:73:15:be:a9:66:fe:36:16:ac:a6:c1:27:05:
4c:f1:f2:7a:00:cb:f6:0a:82:c5:44:8a:5d:d1:be:
dd:da:a3:08:c4:12:e4:cb:f4:f4:e6:97:a3:74:df:
7a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:5C:1F:A0:A7:D5:15:79:15:08:D3:E9:9E:9F:DE:BF:0E:05:0A:1C
X509v3 Authority Key Identifier:
keyid:0D:1E:3F:D5:04:0B:B9:FB:91:26:E5:11:9E:5F:F7:C0:74:DA:5B:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DR4_1QQLufuRJuURnl_3wHTaW7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:94:e6:64:9c:49:b2:69:6b:ef:b3:a0:83:5b:82:89:f9:aa:
2a:14:ac:3a:a8:6a:e2:a7:0d:cd:2a:20:e5:e9:e8:88:71:5b:
cd:c6:35:6c:fb:83:1a:c0:19:78:82:3d:4c:2e:b4:2c:0a:be:
e5:a9:f3:4c:45:b2:b0:df:33:2b:e9:8f:75:2f:88:db:d4:ee:
cd:97:1e:54:de:2a:d6:2c:62:73:11:f5:ac:6a:f6:44:47:ca:
5f:d6:fc:49:f8:69:9a:1e:5b:02:a1:44:76:58:7e:49:db:63:
e7:be:ec:38:44:42:03:67:a1:5b:6e:56:ed:3d:2d:62:06:42:
4c:54:84:31:28:9e:e9:4b:b6:da:ef:a0:85:d1:d1:a9:61:bb:
d0:24:1a:d2:1e:ce:1e:37:b8:5f:74:c5:57:0f:9a:cf:8c:ff:
da:21:6c:f3:b6:61:6c:24:e8:e3:18:cc:7c:75:72:4a:11:c0:
d7:02:59:7c:76:79:af:30:10:8a:a3:4e:7e:0c:36:6b:33:bc:
24:11:a3:a8:2c:6b:f6:5e:e3:dc:27:e5:bc:6c:d8:c2:cb:3f:
44:03:19:2f:d0:cf:9d:dd:69:df:9f:a6:e6:52:66:b1:18:91:
6d:27:ae:4c:7d:35:64:b8:67:b6:b9:d9:fb:c0:f2:9f:6e:46:
ff:5f:68:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:22 2025 by rpki-client