Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft
File: 4QBqBtxJCZf_j8OkLs84m-090Xg.mft (raw, json)
Hash identifier: IYx5g1+WsNYdaeu/DXU5JwwBuG/RcF9W8dCAzVTaF+o=
Subject key identifier: 9C:08:29:32:BB:93:98:A4:B2:E1:C4:55:D0:30:C8:A6:2F:CE:BC:47
Authority key identifier: E1:00:6A:06:DC:49:09:97:FF:8F:C3:A4:2E:CF:38:9B:ED:3D:D1:78
Certificate issuer: /CN=e1006a06dc490997ff8fc3a42ecf389bed3dd178
Certificate serial: 019A4F6268537D1B5CD4A2520577089D1187
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4QBqBtxJCZf_j8OkLs84m-090Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 15:00:40 +0000
Manifest this update: Tue 04 Nov 2025 15:00:40 +0000
Manifest next update: Wed 05 Nov 2025 15:00:40 +0000
Files and hashes: 1: 4QBqBtxJCZf_j8OkLs84m-090Xg.crl (hash: wdCM2RtsZLja0+62Ve/wRTf6jqa6aaah3ij7DG9QUvM=)
2: LnqHoulK3VATGmKEAn72iWxo7SM.roa (hash: yf2dP1AEzVPcio054NYKJ4SAhZkRjptLQTGykKC3qEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4QBqBtxJCZf_j8OkLs84m-090Xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:68:53:7d:1b:5c:d4:a2:52:05:77:08:9d:11:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1006a06dc490997ff8fc3a42ecf389bed3dd178
Validity
Not Before: Nov 4 15:00:40 2025 GMT
Not After : Nov 5 15:00:40 2025 GMT
Subject: CN=9c082932bb9398a4b2e1c455d030c8a62fcebc47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a7:3d:86:12:4a:ba:25:aa:03:c8:ba:76:18:
08:46:47:95:9f:c4:da:81:0d:e0:78:5e:19:6d:b1:
fe:e8:1a:87:b7:ed:f9:97:cd:41:5f:87:8d:ca:b8:
cf:00:bb:5b:cf:68:56:4e:a0:2e:d2:74:fb:32:4d:
1f:a0:34:de:00:3b:5c:0a:af:cb:3a:6e:db:f9:48:
20:8d:47:ee:13:5f:d2:50:9b:59:72:77:4b:09:10:
d5:91:87:25:b6:d0:bc:d7:ad:19:ab:d5:d7:df:c8:
dd:dd:7d:94:82:6b:57:10:8b:33:14:4d:92:a0:1c:
fc:d0:b8:0d:e4:60:2a:ec:ea:50:59:f8:78:06:b3:
f6:f5:54:48:98:87:df:c9:4d:5f:b8:e3:2d:d8:67:
fa:45:3f:35:91:c9:6d:89:75:a2:11:79:13:08:43:
23:72:97:56:2c:c4:1d:8f:68:45:47:c4:d6:2a:0c:
09:99:82:3a:ec:bc:43:32:8f:50:9e:b5:80:75:3e:
60:6e:7e:e2:e7:db:53:ed:e7:1e:cf:bd:35:61:82:
0b:c8:72:90:da:36:2f:2e:a5:9c:2b:12:62:d7:72:
dc:10:0d:01:c2:ec:d3:1e:d4:53:db:e9:6c:b3:67:
97:91:b9:25:85:f1:3d:9a:07:c2:64:0f:ee:3f:81:
0a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:08:29:32:BB:93:98:A4:B2:E1:C4:55:D0:30:C8:A6:2F:CE:BC:47
X509v3 Authority Key Identifier:
keyid:E1:00:6A:06:DC:49:09:97:FF:8F:C3:A4:2E:CF:38:9B:ED:3D:D1:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QBqBtxJCZf_j8OkLs84m-090Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:25:36:a0:f9:74:83:03:7e:e2:e7:e6:7a:40:26:e4:98:79:
cf:a0:32:c4:fa:86:ae:2f:09:2f:4e:dc:ff:c3:c1:1e:01:9e:
27:fb:95:e2:35:9f:30:fe:62:d1:dd:3e:de:36:7c:1f:cc:8f:
d7:cb:a9:c6:94:36:5d:b7:53:4d:16:ff:bd:83:85:45:76:c5:
61:9e:85:ee:e2:41:d8:ff:72:a8:66:3f:c3:03:e3:a2:75:32:
aa:e7:f8:22:74:a7:90:fe:21:6a:21:d3:b3:ea:f4:06:e9:d7:
8d:04:6e:14:79:4c:1e:7f:92:f6:f3:67:fb:e8:3d:bf:6c:f6:
97:16:9d:b8:12:cc:cc:02:f0:4b:59:51:b0:72:d2:1a:48:60:
09:87:f1:e7:1c:8e:ce:56:c5:c2:e5:a9:c0:34:75:46:51:2b:
3a:be:d9:fd:e0:cc:fb:7a:14:60:96:39:68:6a:91:5a:a8:eb:
30:90:ce:84:ef:53:51:00:fe:26:d0:01:1b:c9:18:95:86:ed:
c8:76:87:3e:ed:8a:8a:75:89:62:8e:0b:86:15:58:ff:80:c9:
f7:0e:d1:53:9c:4a:4f:91:92:ca:9d:d0:6e:93:9a:66:cc:14:
81:da:c8:ad:36:d8:cb:df:a3:4b:10:4b:af:eb:a2:7c:0b:5f:
7b:a2:23:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:57:10 2025 by rpki-client