Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft
File: 4QnieMeGIlTIh1XkcXOYpVKkkEA.mft (raw, json)
Hash identifier: IiPwwzuSxWwU++nb0Ol+g/eepHUiAvaJ2JdNOyJO/fI=
Subject key identifier: 94:0D:85:F7:64:CD:D6:62:9F:0B:E0:7B:D9:36:92:D8:61:F3:49:4A
Authority key identifier: E1:09:E2:78:C7:86:22:54:C8:87:55:E4:71:73:98:A5:52:A4:90:40
Certificate issuer: /CN=e109e278c7862254c88755e4717398a552a49040
Certificate serial: 019A5375D2A770635EF7A24CCC280B4E3981
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4QnieMeGIlTIh1XkcXOYpVKkkEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft
Manifest number: 04AF
Signing time: Wed 05 Nov 2025 10:00:21 +0000
Manifest this update: Wed 05 Nov 2025 10:00:21 +0000
Manifest next update: Thu 06 Nov 2025 10:00:21 +0000
Files and hashes: 1: 4QnieMeGIlTIh1XkcXOYpVKkkEA.crl (hash: PoDRilBLpyZX9yc1kQLVeiJmd2sTUBSGxGs4xMGkcP8=)
2: 8a9J3an90z8mWS8TkwqA1Af6V60.roa (hash: Sfg4OixpuznuGw9qd09AY2Lx61QBeTwn9kYrisQDEss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4QnieMeGIlTIh1XkcXOYpVKkkEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:75:d2:a7:70:63:5e:f7:a2:4c:cc:28:0b:4e:39:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e109e278c7862254c88755e4717398a552a49040
Validity
Not Before: Nov 5 10:00:21 2025 GMT
Not After : Nov 6 10:00:21 2025 GMT
Subject: CN=940d85f764cdd6629f0be07bd93692d861f3494a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:55:1b:62:d1:bf:79:44:76:45:09:77:be:1d:
d4:6f:af:fa:51:68:68:60:3a:18:29:47:be:7c:6c:
dd:b5:dd:ec:3e:f0:6c:11:59:c9:4a:65:0b:61:8b:
4a:a8:74:c5:d8:38:ca:17:cc:c3:9b:2d:44:cf:82:
66:46:51:cb:1d:cf:28:d3:c8:d8:e2:ba:cf:cc:53:
62:67:bb:cc:c2:03:f4:fa:13:0e:dd:c0:66:a4:7d:
6b:9d:7a:06:e6:2b:0d:4b:85:f7:2b:d0:24:dc:83:
aa:90:a6:bb:69:d9:3c:5a:88:2a:39:3a:c5:b9:8b:
69:47:16:6d:a1:fc:64:d8:cc:ab:35:0e:4a:17:3e:
32:4a:f3:dd:11:09:14:37:96:1d:24:e0:80:fe:16:
e8:95:54:96:be:f6:89:64:fa:1b:af:92:bb:f1:49:
49:27:df:11:2f:b9:a6:c7:4f:fe:4c:91:7a:59:a7:
b8:bc:52:31:1e:f5:29:17:a7:c7:8e:48:9d:a3:a0:
42:b1:e1:41:ce:1a:ce:04:f5:b5:44:41:50:45:bb:
15:93:6d:db:5e:2c:fe:ed:39:f7:23:65:dd:e8:ea:
e3:36:98:7c:a7:7d:5e:b6:f6:ce:0d:06:5b:65:72:
fe:17:97:7f:58:be:52:18:18:70:a6:c6:24:d8:87:
5b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:0D:85:F7:64:CD:D6:62:9F:0B:E0:7B:D9:36:92:D8:61:F3:49:4A
X509v3 Authority Key Identifier:
keyid:E1:09:E2:78:C7:86:22:54:C8:87:55:E4:71:73:98:A5:52:A4:90:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QnieMeGIlTIh1XkcXOYpVKkkEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:56:f8:1b:0f:32:b1:ea:d7:7f:48:45:80:ca:f8:48:a0:87:
32:c2:71:f0:23:0c:d4:04:75:72:ea:a5:bb:40:b8:c3:d1:bd:
87:57:4a:ee:cc:61:fa:fb:bb:0a:76:46:8a:b4:74:4a:57:f8:
37:a1:cb:2f:34:50:e0:f8:af:6d:91:5e:00:65:4d:43:46:80:
1b:90:2e:e5:d0:32:61:51:dd:a8:00:16:ad:9d:2b:d8:1b:df:
c6:1d:cc:f2:8c:6b:ab:98:8f:37:d6:a1:7e:51:f9:0c:9f:8b:
fd:32:91:3c:00:e4:c9:39:c0:89:86:52:27:61:98:21:41:eb:
3b:b6:b4:2c:67:af:2d:00:79:43:74:2f:cd:f7:4c:94:99:76:
51:64:40:b1:0b:bf:7e:62:9a:38:3e:e3:79:c7:e3:8d:e5:b0:
26:f1:3c:94:75:b3:7c:3e:30:9b:56:ea:b7:26:ef:33:a1:9e:
dc:79:51:3c:c0:91:75:93:87:8c:cb:c5:8e:57:9a:a7:d2:2a:
b2:d2:69:76:36:b8:6d:b3:8e:c4:b7:37:07:91:d3:62:5b:88:
f3:bb:d1:fd:25:b1:88:31:96:61:71:88:f1:97:f4:19:4f:b3:
11:f5:55:71:c7:43:ff:f1:1d:7e:59:39:34:17:3b:1f:bb:2d:
f7:f9:e6:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:04:27 2025 by rpki-client