Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.mft
File: 4qv2099Tm7fBaE-09GF50NoGsIM.mft (raw, json)
Hash identifier: gDlcgas5P2UPD0f73i0xt3djx3+v7yEWD8vJaNSil58=
Subject key identifier: F9:8D:05:E5:B1:3B:72:E1:84:8B:6F:B3:8E:75:20:BE:29:BC:4F:0D
Authority key identifier: E2:AB:F6:D3:DF:53:9B:B7:C1:68:4F:B4:F4:61:79:D0:DA:06:B0:83
Certificate issuer: /CN=e2abf6d3df539bb7c1684fb4f46179d0da06b083
Certificate serial: 019A4E18F907C7FB6E130B7A1D495E5CF9FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4qv2099Tm7fBaE-09GF50NoGsIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.mft
Manifest number: 0DED
Signing time: Tue 04 Nov 2025 09:00:50 +0000
Manifest this update: Tue 04 Nov 2025 09:00:50 +0000
Manifest next update: Wed 05 Nov 2025 09:00:50 +0000
Files and hashes: 1: 4qv2099Tm7fBaE-09GF50NoGsIM.crl (hash: SgaNmyV+dI7E6s+Tx/5ONxbsP63tVwebhEpZ9zm+9f0=)
2: ILMIPoeAh6Mp9Q-FEoKjBIMPdAM.roa (hash: 5aktyEB76Rn5TuWGXiVEAOmlZjNF43pV1TNogR1WVfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4qv2099Tm7fBaE-09GF50NoGsIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:f9:07:c7:fb:6e:13:0b:7a:1d:49:5e:5c:f9:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2abf6d3df539bb7c1684fb4f46179d0da06b083
Validity
Not Before: Nov 4 09:00:50 2025 GMT
Not After : Nov 5 09:00:50 2025 GMT
Subject: CN=f98d05e5b13b72e1848b6fb38e7520be29bc4f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e7:31:55:90:c2:cf:d7:54:86:23:44:68:73:
c2:fe:b9:cf:ba:1b:d8:2c:ef:23:b5:d0:6c:9c:69:
6d:fc:5a:3f:47:7b:dc:c9:29:00:61:7c:73:35:96:
ca:68:09:5c:20:32:e7:6d:ba:ae:8a:23:7a:6e:8f:
d9:e3:93:6c:2c:07:50:8f:d2:c2:a6:1a:e4:75:3a:
17:e7:d5:08:41:7d:6f:11:19:ed:53:b7:f4:82:ad:
ef:85:4b:89:39:27:7d:4b:f8:f5:b7:1c:ae:6b:e6:
92:9f:69:5c:1a:62:63:68:97:6a:15:31:cb:8e:34:
83:bd:62:03:eb:e9:19:f3:f9:69:9b:17:57:73:02:
af:35:67:65:af:c3:5e:7b:ff:67:39:03:12:35:27:
72:96:b8:b4:8e:30:77:97:44:66:e5:ed:a8:bc:df:
82:15:a6:94:16:2f:a6:db:07:64:cc:28:d8:fb:2d:
c2:a2:33:47:82:9b:bb:a5:50:1e:0a:8c:dc:c7:c6:
18:c8:ce:9a:f5:72:98:ca:b2:c8:67:91:79:a9:1c:
dc:58:76:5f:81:13:28:59:7d:82:96:90:98:f1:6b:
71:39:d1:a8:0f:b9:9b:aa:87:64:d9:96:f3:e6:12:
d2:3d:37:7e:0d:cf:5d:8e:ae:ef:87:08:df:18:1a:
40:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:8D:05:E5:B1:3B:72:E1:84:8B:6F:B3:8E:75:20:BE:29:BC:4F:0D
X509v3 Authority Key Identifier:
keyid:E2:AB:F6:D3:DF:53:9B:B7:C1:68:4F:B4:F4:61:79:D0:DA:06:B0:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qv2099Tm7fBaE-09GF50NoGsIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:a0:d8:57:9b:ca:8c:3d:35:16:53:0f:0d:c1:36:89:dc:69:
fb:cd:b6:e8:c8:34:f6:c4:6e:04:6e:41:22:4a:2c:dd:51:ce:
bc:f4:b7:df:1b:1b:da:09:6e:05:2b:1f:a6:63:92:11:a5:01:
b6:27:9e:12:9a:c5:6e:71:5b:4b:bb:4e:af:08:97:fe:3f:e2:
f3:82:76:45:a9:a3:90:6a:0b:1d:46:99:e0:c4:35:c9:36:fd:
b2:58:be:5e:48:c2:0f:1e:fe:57:50:a4:de:64:41:5b:53:93:
36:d5:b1:e4:78:ef:24:a8:d9:01:a4:a1:ab:61:3e:cf:fc:40:
e7:28:16:82:8e:ea:1c:f9:43:53:65:34:c1:16:84:f4:ac:86:
77:12:f1:4b:b8:3a:35:51:34:10:86:44:c4:6c:94:7d:bf:b5:
fc:66:ad:03:20:2a:44:db:a2:f5:37:ff:ee:95:35:8d:ee:27:
89:1b:ec:47:63:a3:0d:8f:02:c4:f4:3d:8e:00:0b:cd:5a:4b:
cb:7b:62:0e:7a:0c:5c:6c:78:ce:37:eb:86:b8:44:9e:5e:48:
99:43:f2:f1:c3:1e:a7:13:1b:c2:f3:ec:4b:4b:4e:cd:b6:17:
60:de:0e:96:7a:ee:01:65:b2:3e:be:97:aa:67:85:e6:1b:a1:
9a:c7:d7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:37:32 2025 by rpki-client