Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
File: 4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft (raw, json)
Hash identifier: sa1s+eRqbBNmR4sobwbQWyRuyOg0deJoFrTheXNtXjE=
Subject key identifier: DD:5D:03:24:1A:FB:FA:3E:5B:9A:84:9E:F4:5A:32:7F:40:C2:2E:93
Authority key identifier: E0:1A:A3:EF:F4:75:B0:10:BD:E4:15:4F:3B:D4:74:3A:7C:0B:AE:55
Certificate issuer: /CN=e01aa3eff475b010bde4154f3bd4743a7c0bae55
Certificate serial: 0199FC8F3CB4E9E22351414C4D781817C177
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
Manifest number: 0B0F
Signing time: Sun 19 Oct 2025 13:01:09 +0000
Manifest this update: Sun 19 Oct 2025 13:01:09 +0000
Manifest next update: Mon 20 Oct 2025 13:01:09 +0000
Files and hashes: 1: 4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl (hash: uV1NXmSZCSzrUincDNg1YEC4JsNhCTHr55AVB3/RgIk=)
2: p_9inuYDdp5y0a2pR7IT5FJWxkA.roa (hash: w2ZioVdUL3h+FykybnCF+ZnIIFFr6zWJMlYabfFURBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:3c:b4:e9:e2:23:51:41:4c:4d:78:18:17:c1:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e01aa3eff475b010bde4154f3bd4743a7c0bae55
Validity
Not Before: Oct 19 13:01:09 2025 GMT
Not After : Oct 20 13:01:09 2025 GMT
Subject: CN=dd5d03241afbfa3e5b9a849ef45a327f40c22e93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:6b:17:89:f7:52:77:7c:09:ca:8b:1a:ba:46:
e3:2a:31:5c:ec:f9:8f:b8:b7:b4:a0:dc:23:17:31:
4a:63:86:93:06:ed:51:68:d2:10:37:6a:b3:e8:2c:
25:64:ab:f2:08:cd:c9:db:43:55:38:79:68:de:b1:
21:bc:89:d9:74:ca:32:3a:41:87:54:df:09:ed:00:
02:81:63:96:bd:ec:61:83:f9:23:d5:37:db:15:f8:
53:ba:14:82:c9:22:0c:b9:dd:c3:15:65:27:c7:48:
2c:77:7b:08:e4:90:1f:f8:d0:56:e3:b2:96:98:dd:
97:47:c9:e4:39:36:24:57:b2:7b:aa:d7:7d:4b:13:
dd:08:7a:e3:0b:fa:d2:33:64:69:dd:1c:10:3b:58:
ce:a3:1c:f8:86:05:47:82:b6:74:6c:18:f1:40:64:
78:d6:2f:09:fa:03:7a:c8:f2:44:b7:59:da:90:cd:
21:35:4a:9b:5d:90:2d:0f:86:cd:b7:8d:5c:70:19:
34:18:b9:c8:e0:9c:f1:74:c0:45:54:81:95:f8:47:
e9:ed:97:e2:55:a2:41:11:39:8d:08:a4:c9:ee:40:
91:90:5e:54:f2:b0:57:2a:31:e7:d8:2b:53:4c:b8:
ec:d9:aa:15:ae:0a:18:04:b0:6c:5c:06:8e:a9:4c:
02:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:5D:03:24:1A:FB:FA:3E:5B:9A:84:9E:F4:5A:32:7F:40:C2:2E:93
X509v3 Authority Key Identifier:
keyid:E0:1A:A3:EF:F4:75:B0:10:BD:E4:15:4F:3B:D4:74:3A:7C:0B:AE:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:5e:aa:c2:d6:fb:c9:0f:22:1c:82:c8:41:bd:3b:cb:53:06:
ed:a2:05:77:0a:db:ea:29:83:29:d9:96:f0:b6:8d:07:89:12:
d0:0d:4c:73:5b:bc:cd:cb:b4:84:2b:a6:68:15:14:94:71:e9:
78:cd:b9:5c:69:7b:59:02:af:98:d4:c1:83:7a:bf:02:ae:29:
3a:24:c3:88:37:e7:39:76:e7:63:23:8a:95:b2:73:12:b1:e3:
92:0f:c8:52:d3:c4:bd:e7:2a:59:4a:2b:b5:2a:63:9f:f3:eb:
c4:69:2c:9c:1e:b4:b4:ae:71:e5:a3:8a:12:64:1f:d8:08:09:
c0:df:10:6b:e8:7e:f2:d2:f2:bc:36:ec:4b:05:e4:f9:83:ac:
5d:a1:02:7f:a5:f8:53:ea:f9:b7:e5:2c:b0:1f:7d:4f:02:50:
af:a2:8a:a3:d6:ea:77:27:68:d3:c6:b5:df:e3:fb:91:5c:5e:
e9:85:e4:86:bf:ac:52:d5:bf:0a:a8:c3:b4:fd:4e:eb:eb:bd:
0f:f7:0b:3b:fc:04:d6:cf:8f:35:e6:e0:78:c9:0e:0b:7a:62:
e4:67:98:bd:7d:a2:cb:1b:cc:20:1e:18:7f:43:73:fd:bd:a4:
9f:97:9e:03:03:70:36:a1:cf:3d:3b:90:3f:ea:8f:d2:a3:6c:
ff:c8:a1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:17 2025 by rpki-client