Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft
File: DR4_1QQLufuRJuURnl_3wHTaW7w.mft (raw, json)
Hash identifier: +PS/SsiGn8naXViR7TEZ/QbyUIHpYBBmYyidnw57/is=
Subject key identifier: 79:59:E6:BB:DC:C0:A3:C8:6B:55:96:25:3E:72:07:8F:D4:33:AE:19
Authority key identifier: 0D:1E:3F:D5:04:0B:B9:FB:91:26:E5:11:9E:5F:F7:C0:74:DA:5B:BC
Certificate issuer: /CN=0d1e3fd5040bb9fb9126e5119e5ff7c074da5bbc
Certificate serial: 019882425E9FDFA7464E017373F7E7928F9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DR4_1QQLufuRJuURnl_3wHTaW7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft
Manifest number: 0B22
Signing time: Thu 07 Aug 2025 02:00:44 +0000
Manifest this update: Thu 07 Aug 2025 02:00:44 +0000
Manifest next update: Fri 08 Aug 2025 02:00:44 +0000
Files and hashes: 1: DR4_1QQLufuRJuURnl_3wHTaW7w.crl (hash: t7SKvzV9hfGUgKbEATcR10qMxkCxMfz3aEkvdALD3n0=)
2: tw53VyqONmO9P7i2y6gpvj2fu_U.roa (hash: J066HWT9IQx8ovZiJnDjPDFutWNRHoqwHzDICk2OhO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/DR4_1QQLufuRJuURnl_3wHTaW7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:42:5e:9f:df:a7:46:4e:01:73:73:f7:e7:92:8f:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d1e3fd5040bb9fb9126e5119e5ff7c074da5bbc
Validity
Not Before: Aug 7 02:00:44 2025 GMT
Not After : Aug 8 02:00:44 2025 GMT
Subject: CN=7959e6bbdcc0a3c86b5596253e72078fd433ae19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cb:30:94:86:2e:43:1a:b9:4f:4d:a4:ad:40:
b0:16:9b:62:6e:5c:d3:b5:f8:70:e6:25:77:c4:b5:
f8:ec:ac:2e:b3:4e:a6:55:37:36:3a:3c:7c:aa:81:
ad:26:8a:ed:18:47:87:df:f9:fe:67:3d:91:f3:e0:
34:83:b5:03:04:81:8f:79:3e:93:4e:64:71:95:80:
4e:c5:0a:39:0d:40:be:1a:02:e0:52:7a:3c:06:63:
32:64:1c:81:29:ed:c4:df:09:11:93:2d:a6:6e:70:
51:ae:af:ef:0f:24:dc:a9:65:b6:b9:8d:d0:93:26:
a7:3c:dc:e8:4a:84:33:f9:4e:91:ab:ed:10:63:d0:
0b:8f:92:74:87:5e:e8:e8:a6:a2:54:89:5c:9b:1e:
aa:9d:7b:16:b8:53:bd:8e:30:ef:62:d6:40:9f:49:
1e:c6:d0:0b:2a:f3:7b:c3:5f:9c:6b:aa:90:82:28:
7c:62:cd:2b:78:72:63:4b:3a:57:c6:9f:d0:69:36:
f5:a2:8d:07:de:1b:99:fe:54:9b:da:22:42:ea:1d:
64:80:d0:6d:c9:38:e0:cc:18:22:ab:19:32:b5:82:
0c:9c:02:fa:cd:25:b4:09:50:6f:85:da:a3:b6:88:
74:5a:e2:b9:e0:8c:3f:b1:e6:1f:5a:ae:de:80:02:
d7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:59:E6:BB:DC:C0:A3:C8:6B:55:96:25:3E:72:07:8F:D4:33:AE:19
X509v3 Authority Key Identifier:
keyid:0D:1E:3F:D5:04:0B:B9:FB:91:26:E5:11:9E:5F:F7:C0:74:DA:5B:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DR4_1QQLufuRJuURnl_3wHTaW7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:fc:53:44:16:00:0e:79:4a:a9:79:58:bf:22:92:f3:46:97:
8a:72:49:fc:25:59:35:d8:dc:10:63:c1:f4:e7:c2:e9:a5:7f:
1b:6f:d6:e1:6b:4a:b0:08:15:f5:f1:43:81:7f:6e:f4:c4:94:
f9:43:d8:c5:bd:44:5e:2f:33:1e:4d:16:c8:3e:71:27:5b:3e:
39:6d:00:94:46:c4:91:b6:6c:0a:02:6d:b3:5c:71:40:c5:98:
75:41:c2:77:ef:cc:d5:91:e0:37:d2:30:67:7e:e4:c9:84:48:
25:d5:1c:b4:ed:a3:53:4d:25:c0:09:33:c3:36:59:f2:cf:b6:
f8:0b:b4:d8:85:08:de:43:a4:98:06:c9:95:19:61:68:03:45:
29:55:29:36:45:cf:82:f7:36:5c:aa:d0:86:fa:f2:b5:f5:fe:
1c:99:82:9c:e4:78:40:84:5d:f9:42:80:6e:63:ec:35:83:7c:
75:39:6e:a4:cf:d6:35:64:4e:7b:ba:fb:9f:50:af:1f:d1:0a:
67:3c:28:a6:23:12:bb:6b:c6:28:9f:5c:21:f1:89:f5:03:8b:
b7:43:98:07:1a:77:d5:46:e1:a6:59:bd:f9:da:c0:8e:b3:81:
31:67:df:5d:70:1f:7c:ff:cc:06:0b:f5:58:47:9e:43:ac:9f:
e7:d8:ba:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:02:47 2025 by rpki-client