Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft
File: DR4_1QQLufuRJuURnl_3wHTaW7w.mft (raw, json)
Hash identifier: mPvYG/dParNWg9RhnkZRlqEB3Z/Q6RvArGpMEUKlgks=
Subject key identifier: 2F:37:A8:8C:D4:10:6E:37:2F:39:E6:F2:DB:99:F4:9A:62:61:09:CC
Authority key identifier: 0D:1E:3F:D5:04:0B:B9:FB:91:26:E5:11:9E:5F:F7:C0:74:DA:5B:BC
Certificate issuer: /CN=0d1e3fd5040bb9fb9126e5119e5ff7c074da5bbc
Certificate serial: 019A51BE4A40FD318D2EB7DC6EA8C55749AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DR4_1QQLufuRJuURnl_3wHTaW7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft
Manifest number: 0C12
Signing time: Wed 05 Nov 2025 02:00:16 +0000
Manifest this update: Wed 05 Nov 2025 02:00:16 +0000
Manifest next update: Thu 06 Nov 2025 02:00:16 +0000
Files and hashes: 1: DR4_1QQLufuRJuURnl_3wHTaW7w.crl (hash: TueIyPZ/0N5Tshex40sJs8KSqKb5/rSaGd6apYD3LtY=)
2: tw53VyqONmO9P7i2y6gpvj2fu_U.roa (hash: J066HWT9IQx8ovZiJnDjPDFutWNRHoqwHzDICk2OhO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/DR4_1QQLufuRJuURnl_3wHTaW7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:4a:40:fd:31:8d:2e:b7:dc:6e:a8:c5:57:49:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d1e3fd5040bb9fb9126e5119e5ff7c074da5bbc
Validity
Not Before: Nov 5 02:00:16 2025 GMT
Not After : Nov 6 02:00:16 2025 GMT
Subject: CN=2f37a88cd4106e372f39e6f2db99f49a626109cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b7:42:19:01:28:6e:6b:9d:fc:dc:dc:77:8e:
5d:1d:ee:6a:58:6a:fd:0a:c1:ef:11:c9:bc:9d:3a:
81:1e:29:9f:a4:85:f3:3e:c9:66:cd:2b:49:ed:b2:
1b:62:57:bc:a0:a8:01:90:52:ac:5f:68:47:ce:51:
88:a0:8b:48:ab:35:e0:52:24:9e:3e:23:da:27:e1:
bb:da:c2:f7:6c:a4:01:e7:d5:81:c3:7f:0e:d7:52:
25:07:fe:11:19:02:b7:e1:9e:34:26:4a:19:88:40:
44:48:8f:ce:29:17:f7:ff:17:1e:8a:17:c0:d1:f3:
4e:81:e3:56:d1:8c:5d:99:84:6f:4b:f2:cc:6f:9a:
06:a8:37:2d:48:9d:ec:28:77:12:72:7d:02:97:92:
9c:57:1e:c7:77:89:6b:dc:00:76:54:a3:d1:fa:26:
2a:ee:fd:48:f6:32:25:3e:c5:13:a3:cb:b3:32:20:
ba:cb:75:3e:f1:2c:95:3f:f6:9e:aa:b8:c2:90:72:
17:59:ea:93:98:cf:c8:00:d1:3e:4b:d9:2c:70:10:
3e:d8:ca:69:cf:c3:b8:67:98:f2:7e:2e:3e:88:92:
6f:4d:ce:b4:74:0d:51:7c:b6:b3:c7:ad:58:ea:aa:
13:11:68:d4:34:9b:b5:d1:5b:12:1d:78:c2:ac:ee:
40:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:37:A8:8C:D4:10:6E:37:2F:39:E6:F2:DB:99:F4:9A:62:61:09:CC
X509v3 Authority Key Identifier:
keyid:0D:1E:3F:D5:04:0B:B9:FB:91:26:E5:11:9E:5F:F7:C0:74:DA:5B:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DR4_1QQLufuRJuURnl_3wHTaW7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:d0:74:75:c8:7c:65:ba:3c:c3:1f:16:99:df:a0:b5:52:e4:
a8:df:47:eb:b8:69:79:f9:1b:b2:4e:82:dc:d2:9b:60:00:cb:
31:32:c7:c5:d8:e0:27:ae:64:38:df:b6:9c:1f:c8:fb:10:43:
6c:3c:16:df:09:25:56:40:e6:2c:28:17:70:91:83:1c:aa:2a:
50:7e:be:ee:8b:f4:6b:d1:83:9e:68:8e:c7:a8:09:aa:46:eb:
68:d7:f1:4f:79:d0:e1:26:a1:23:94:3a:8b:b7:d8:6e:4a:06:
9d:98:c0:4b:d6:0d:cf:71:d9:fc:0d:c6:66:85:39:25:be:54:
07:a5:5e:ea:c2:8b:b5:af:63:8b:5d:a0:59:62:1a:05:35:75:
19:a8:f8:97:e6:f9:83:45:2e:0d:89:28:86:1a:eb:7c:fb:98:
1d:5b:47:92:28:a6:31:bf:4a:bf:ec:3e:ee:88:98:ae:44:ef:
2c:a4:4a:f5:42:9c:fa:04:00:e7:96:58:bb:40:74:5c:3c:75:
c8:c5:d5:e9:bf:25:dd:4c:14:61:c7:48:ac:91:4f:6a:cc:93:
6b:c9:95:d4:55:46:be:00:bb:45:97:a2:d4:de:f7:13:8a:8f:
36:9d:7c:bf:59:13:ea:b6:00:3c:b1:36:90:e4:d8:f0:70:54:
88:81:de:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:59:38 2025 by rpki-client