Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f91a85-e93c-4a49-8215-8497717a4f61/1/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.mft
File: 4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.mft (raw, json)
Hash identifier: Pwt1ePsI8tVYAU8rsUrMTnSGNrac5b0fG6sY5pd92w4=
Subject key identifier: 91:80:2D:F6:C2:C9:42:B7:93:9F:19:3E:F4:6E:6B:11:D9:33:DD:97
Authority key identifier: E3:10:6A:C3:EA:76:0B:2D:02:42:A9:EF:BA:2C:21:16:B6:26:F8:24
Certificate issuer: /CN=e3106ac3ea760b2d0242a9efba2c2116b626f824
Certificate serial: 0199FB45DB5888EE2D4979027C86CD8F2BAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f91a85-e93c-4a49-8215-8497717a4f61/1/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.mft
Manifest number: 11
Signing time: Sun 19 Oct 2025 07:01:23 +0000
Manifest this update: Sun 19 Oct 2025 07:01:23 +0000
Manifest next update: Mon 20 Oct 2025 07:01:23 +0000
Files and hashes: 1: 4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.crl (hash: 2Ub4maR0KvwnNSKevgbEYNr/BNU3jjx/kL5LQvlWewo=)
2: YbfoRvGB_vLnIiGu5d4QBy03fUs.roa (hash: UvEPZK7xofSgVv8ge9vEI+2VGrLY8zhMDKE0qp4Mylo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/f91a85-e93c-4a49-8215-8497717a4f61/1/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/f91a85-e93c-4a49-8215-8497717a4f61/1/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:db:58:88:ee:2d:49:79:02:7c:86:cd:8f:2b:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3106ac3ea760b2d0242a9efba2c2116b626f824
Validity
Not Before: Oct 19 07:01:23 2025 GMT
Not After : Oct 20 07:01:23 2025 GMT
Subject: CN=91802df6c2c942b7939f193ef46e6b11d933dd97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fa:d7:f9:07:8c:e7:a9:0c:be:cf:f6:b9:35:
40:16:0f:4a:0d:f4:6b:aa:cf:89:8e:e3:9b:2b:8d:
20:86:c1:fa:23:73:a6:8c:a3:2b:39:38:3d:b9:4d:
e3:5a:e0:d7:26:4a:82:27:0d:db:7e:ec:3a:cd:c6:
b0:49:f4:8f:b6:97:35:6c:65:3e:cd:3e:19:90:74:
8b:9b:84:d5:51:3e:2d:98:6a:22:6f:68:46:6d:ab:
e5:14:21:1a:69:e4:24:44:2e:5a:66:07:70:ec:59:
ed:05:8c:04:a8:9e:56:e3:43:dd:db:2c:71:e7:01:
51:68:1d:f5:8c:27:ee:d5:18:f3:b2:ef:df:b7:49:
f1:cf:1a:e2:57:8a:fd:89:6d:f6:24:8f:52:aa:1c:
93:e0:9f:67:27:dd:57:e5:94:b2:8d:4f:ac:ee:0d:
51:51:f7:e4:1f:d6:f2:39:d6:87:55:15:1d:19:67:
ff:1f:56:28:c4:03:14:fc:45:e0:93:28:c6:69:15:
5a:80:8c:37:e0:7d:f4:63:e1:f2:04:1f:ee:1d:c8:
20:33:0e:52:ef:eb:42:89:c9:1c:ef:02:bf:ef:b5:
b4:77:c4:eb:f1:a3:b3:d0:19:7c:84:f8:d7:46:a9:
ee:d8:52:5b:7c:5c:b2:22:8d:67:d4:3a:3a:2d:f5:
a6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:80:2D:F6:C2:C9:42:B7:93:9F:19:3E:F4:6E:6B:11:D9:33:DD:97
X509v3 Authority Key Identifier:
keyid:E3:10:6A:C3:EA:76:0B:2D:02:42:A9:EF:BA:2C:21:16:B6:26:F8:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f91a85-e93c-4a49-8215-8497717a4f61/1/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f91a85-e93c-4a49-8215-8497717a4f61/1/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:80:05:c6:98:80:78:1b:08:e7:88:73:a2:4e:28:79:d2:5e:
45:13:b9:b1:9c:85:ff:bf:b8:24:75:9f:30:79:10:d8:e0:db:
65:cf:9a:a0:6d:ad:ce:75:c6:36:b0:29:ee:e0:f8:e5:55:90:
a0:a1:e8:45:72:1e:2a:b3:9b:34:e1:68:d9:6b:b9:80:5d:02:
e4:41:ea:eb:4e:30:11:6e:27:d3:5c:73:90:ef:3e:b9:ce:9b:
ee:e3:92:2b:1a:07:08:f1:60:15:3c:66:eb:62:aa:ae:22:0b:
f1:a3:cb:dc:f5:22:1e:47:3a:af:3f:61:77:b3:a6:31:1b:26:
83:38:52:c9:3f:df:bd:3a:f4:2b:5a:51:08:05:d2:cc:1c:df:
0e:74:4c:49:b4:f6:44:05:d0:49:4b:cd:7c:44:df:ca:b0:4d:
28:2b:fe:de:bf:44:04:ae:e0:85:02:56:d3:3d:03:24:dc:cf:
f5:23:45:46:bb:f2:7f:2f:f5:a6:b6:cc:c9:64:d9:a3:f5:b5:
89:7d:c3:8a:19:b5:0a:ae:06:8d:c4:8f:9d:5f:ca:11:dd:10:
5f:0b:21:eb:79:2d:99:7f:f1:43:e3:a2:fd:0e:e5:f6:0e:b6:
cc:6a:88:4f:a9:6b:0c:33:0c:2e:cd:7e:f9:b0:ca:c1:6b:e6:
3f:4d:5b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:19 2025 by rpki-client