Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft
File: 4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft (raw, json)
Hash identifier: LyX6/BXos471qlnGElFslphjT2grMqLRYlHfJRU6AO8=
Subject key identifier: C6:4B:F3:6C:D1:86:48:E3:42:F5:CD:F5:85:74:3A:A0:4E:94:5F:1B
Authority key identifier: E2:A7:5E:F9:03:6F:5C:14:3E:57:DF:AF:BC:92:C0:25:5C:31:59:BA
Certificate issuer: /CN=e2a75ef9036f5c143e57dfafbc92c0255c3159ba
Certificate serial: 019A515082759467DC3941E05FB4C46B2075
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4qde-QNvXBQ-V9-vvJLAJVwxWbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft
Manifest number: 076F
Signing time: Wed 05 Nov 2025 00:00:21 +0000
Manifest this update: Wed 05 Nov 2025 00:00:21 +0000
Manifest next update: Thu 06 Nov 2025 00:00:21 +0000
Files and hashes: 1: 4qde-QNvXBQ-V9-vvJLAJVwxWbo.crl (hash: b+7RdVB0AOG5Ozay+t2GEQtXCUrd0IwvSDR4z6HnHc0=)
2: _Yxsd0eiDHHGuFhmQURGYrs_Tng.roa (hash: nE0pyzNZgsvFiQ/2XuRBIkiIZVx/tCbJehUAtaFFq7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4qde-QNvXBQ-V9-vvJLAJVwxWbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:82:75:94:67:dc:39:41:e0:5f:b4:c4:6b:20:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2a75ef9036f5c143e57dfafbc92c0255c3159ba
Validity
Not Before: Nov 5 00:00:21 2025 GMT
Not After : Nov 6 00:00:21 2025 GMT
Subject: CN=c64bf36cd18648e342f5cdf585743aa04e945f1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:65:7e:27:27:a7:48:c2:6f:d7:ce:86:70:d0:
c1:d5:09:d7:8e:67:b2:dd:4b:4c:af:cb:81:0a:a5:
16:8c:88:ee:1a:83:ba:a5:1d:b1:b0:2f:22:51:5d:
79:2b:2f:12:7a:10:fa:d1:68:dc:f7:d0:be:42:18:
ac:02:3e:7f:ce:e5:28:45:73:d5:92:2c:4f:01:e6:
7d:24:a3:96:1b:bf:de:a8:1b:4d:ce:02:f1:03:f2:
b5:67:27:f1:15:63:a6:eb:c4:34:ca:cf:65:d7:f8:
dd:54:8a:9a:06:82:dd:9b:9c:c1:b0:eb:0c:f8:bc:
eb:db:f7:42:ba:a8:22:cd:48:bf:8e:5a:69:d3:7e:
2d:8a:67:d6:af:a8:f6:25:32:55:12:9f:e0:10:6f:
69:21:65:1b:15:df:f5:04:fb:74:11:d4:9c:c4:ef:
49:26:5b:a9:f5:d0:32:c9:d2:39:8f:aa:dd:95:ff:
a4:ab:8c:d3:e1:61:09:d6:ff:13:fd:ca:da:88:55:
05:b4:62:6b:ce:f5:6a:5c:d0:13:8a:a8:b3:a1:97:
69:91:0c:6d:c4:fe:f0:05:9e:00:fc:6f:ba:b2:18:
3d:bf:f5:4e:c0:47:36:63:74:60:fa:b6:28:d5:36:
e7:f9:00:1b:5d:56:85:ed:f5:84:dd:19:df:95:fd:
0c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:4B:F3:6C:D1:86:48:E3:42:F5:CD:F5:85:74:3A:A0:4E:94:5F:1B
X509v3 Authority Key Identifier:
keyid:E2:A7:5E:F9:03:6F:5C:14:3E:57:DF:AF:BC:92:C0:25:5C:31:59:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qde-QNvXBQ-V9-vvJLAJVwxWbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:55:fa:77:9b:ed:cd:d6:85:68:46:64:4b:be:4a:ad:b7:ec:
49:55:ae:c7:3b:2a:b2:72:72:35:33:16:72:a9:18:8d:5b:96:
c9:e4:d1:b8:98:d2:6f:f2:08:85:ee:1f:66:29:fa:02:d6:0a:
ad:17:37:53:5f:9d:3c:a1:b1:2c:e9:1e:de:37:94:0f:c8:5c:
02:e3:f3:22:78:9f:46:50:96:46:6f:43:8c:da:94:15:86:23:
df:cc:f6:d9:bd:7e:c6:cf:b5:8b:e0:a7:5e:7b:7d:44:10:ce:
d4:52:8e:c5:93:04:85:64:32:17:4e:53:81:e5:a4:99:b6:28:
9f:31:85:99:c7:48:83:e0:34:80:23:33:db:6e:44:d3:6b:8d:
56:95:c8:04:35:6a:34:a0:a9:f6:16:b7:9c:1f:ba:7a:0b:b5:
ab:f2:61:90:2c:4b:ab:12:48:ea:2a:24:c2:76:06:a4:35:b0:
3c:1f:4f:a3:3a:2c:7d:30:f5:62:56:42:17:4f:12:5d:19:8d:
ef:3f:0c:8d:27:51:ed:40:d3:62:ca:21:6c:11:d9:70:5c:68:
58:bb:b9:e6:d7:ba:22:a6:10:d8:ce:0b:f4:df:14:3c:c9:05:
28:07:15:09:3f:e8:22:36:50:c9:e3:0a:78:16:06:6f:10:c8:
ec:e7:62:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:52:32 2025 by rpki-client