Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft
File: 4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft (raw, json)
Hash identifier: lYW+ZELUskaFkPAVlzNzQNheESYQYy6k5qGT325NRKQ=
Subject key identifier: DC:42:41:F8:24:A6:6C:84:54:88:25:C8:EB:04:E0:2A:FF:D3:BA:E3
Authority key identifier: E2:A7:5E:F9:03:6F:5C:14:3E:57:DF:AF:BC:92:C0:25:5C:31:59:BA
Certificate issuer: /CN=e2a75ef9036f5c143e57dfafbc92c0255c3159ba
Certificate serial: 0198A0BA8C04197BF95E25E9723A9BA8AFF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4qde-QNvXBQ-V9-vvJLAJVwxWbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft
Manifest number: 068F
Signing time: Wed 13 Aug 2025 00:00:36 +0000
Manifest this update: Wed 13 Aug 2025 00:00:36 +0000
Manifest next update: Thu 14 Aug 2025 00:00:36 +0000
Files and hashes: 1: 4qde-QNvXBQ-V9-vvJLAJVwxWbo.crl (hash: ERAis3R++YI1Jg3FjTXmAexfHfWexAuWWIJUqehDMoM=)
2: _Yxsd0eiDHHGuFhmQURGYrs_Tng.roa (hash: nE0pyzNZgsvFiQ/2XuRBIkiIZVx/tCbJehUAtaFFq7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4qde-QNvXBQ-V9-vvJLAJVwxWbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:ba:8c:04:19:7b:f9:5e:25:e9:72:3a:9b:a8:af:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2a75ef9036f5c143e57dfafbc92c0255c3159ba
Validity
Not Before: Aug 13 00:00:36 2025 GMT
Not After : Aug 14 00:00:36 2025 GMT
Subject: CN=dc4241f824a66c84548825c8eb04e02affd3bae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:74:5c:78:76:a9:10:ac:9c:23:c9:cb:93:a6:
c3:11:80:c4:c1:90:b0:3a:d3:f4:d4:64:eb:ad:7b:
27:4a:bf:53:3d:08:9e:67:1b:eb:c9:29:86:12:7a:
96:51:63:b0:bc:5c:db:99:f5:44:33:e9:6b:8f:77:
7c:70:f7:49:67:35:07:38:d0:8d:38:bb:64:6b:a7:
f7:10:b4:fd:73:b9:e4:d4:fc:15:cc:4b:08:53:8a:
84:43:58:78:3b:51:fa:cd:43:3d:c9:91:2b:12:29:
11:5c:87:c1:b0:98:d5:e5:ec:10:b8:17:78:1d:be:
6e:6f:95:70:6e:64:b4:12:be:b5:bf:2c:34:06:93:
e6:5f:09:83:76:f8:df:7c:87:90:58:97:f5:e1:2b:
70:c0:34:ad:b6:58:f7:43:bb:05:c8:ed:4f:76:2e:
bf:5c:f2:5b:bc:5a:b1:7a:e8:cf:b9:e8:62:6f:af:
a3:01:24:06:1e:76:b2:d7:66:05:23:5f:0b:0f:7f:
7a:1f:29:07:79:89:5a:74:a8:c3:9e:83:38:cd:d0:
55:84:7e:a2:66:18:07:4c:e7:a6:1d:9c:44:38:c6:
14:b0:46:7f:d6:3c:f7:a3:7f:2f:27:38:06:82:6f:
60:43:15:c1:f3:a1:36:c3:7b:9a:e9:ff:6d:59:5a:
9e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:42:41:F8:24:A6:6C:84:54:88:25:C8:EB:04:E0:2A:FF:D3:BA:E3
X509v3 Authority Key Identifier:
keyid:E2:A7:5E:F9:03:6F:5C:14:3E:57:DF:AF:BC:92:C0:25:5C:31:59:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qde-QNvXBQ-V9-vvJLAJVwxWbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:01:0b:c4:20:68:cc:01:33:9b:a5:0a:6b:b9:6e:3c:f5:07:
e6:fe:b9:10:27:e0:48:05:36:f5:49:73:ab:e4:07:81:71:ad:
5e:6a:9e:e9:be:f3:e3:3c:8d:05:73:8f:3c:35:17:a1:7d:6c:
36:ca:0a:b5:89:56:a1:4c:a4:58:8f:b5:30:c6:1f:ae:54:b5:
a4:39:ea:33:6f:73:c4:27:32:91:42:c5:22:a6:ea:e0:63:3e:
35:d4:87:26:ca:32:8e:b5:9b:ee:fc:74:81:14:8a:26:30:f3:
db:d2:41:0f:6f:20:62:fe:15:c1:9b:65:02:f5:08:ea:36:ad:
d4:70:fd:58:d9:34:83:3c:d3:17:f7:75:4c:23:89:5b:5f:39:
89:50:33:4b:0f:ed:7c:03:a0:df:de:1c:65:dc:f6:5a:b7:ee:
63:90:d4:c0:c2:19:0b:ef:c1:28:4d:ed:37:c8:a7:c2:60:44:
cc:e0:6b:f0:54:73:f6:57:77:61:ac:48:27:e2:4c:eb:6e:66:
39:49:90:7e:ff:7e:67:fe:1e:fd:6f:e3:11:c7:6d:82:a3:4d:
74:56:fc:98:06:6e:35:ca:25:a2:85:67:91:69:53:d7:32:d6:
46:02:d1:fd:d8:4d:13:4c:4f:50:b4:af:7e:39:4b:03:97:37:
e4:f9:94:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:11:12 2025 by rpki-client