Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.mft
File: RqpgZ2wTDGQ45FtaYHIQ6VZraDI.mft (raw, json)
Hash identifier: pM5MJeRH9iNW/mMd4D+sQLxP6EIH5p4IjoIkB5BfqCQ=
Subject key identifier: C6:2E:67:78:27:AC:E8:C0:49:02:C5:6C:F1:AE:BF:1C:93:56:3B:08
Authority key identifier: 46:AA:60:67:6C:13:0C:64:38:E4:5B:5A:60:72:10:E9:56:6B:68:32
Certificate issuer: /CN=46aa60676c130c6438e45b5a607210e9566b6832
Certificate serial: 019A515098D808627F1D861E2784BBFBF230
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.mft
Manifest number: 0427
Signing time: Wed 05 Nov 2025 00:00:27 +0000
Manifest this update: Wed 05 Nov 2025 00:00:27 +0000
Manifest next update: Thu 06 Nov 2025 00:00:27 +0000
Files and hashes: 1: 4pIrmmCZWAO8NuTmun2AQKQETQo.roa (hash: Pf6nhAI8L5UL8XOlhvccLv1CzKTIGW/DapLLMv9479I=)
2: RqpgZ2wTDGQ45FtaYHIQ6VZraDI.crl (hash: KKa3WYwbF6YtwD7XyyTkyBEv6uo8WknWILCTJOFkc4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:98:d8:08:62:7f:1d:86:1e:27:84:bb:fb:f2:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46aa60676c130c6438e45b5a607210e9566b6832
Validity
Not Before: Nov 5 00:00:27 2025 GMT
Not After : Nov 6 00:00:27 2025 GMT
Subject: CN=c62e677827ace8c04902c56cf1aebf1c93563b08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b6:61:c9:7f:cb:58:58:99:92:78:94:d8:0a:
b5:9e:6c:cf:4a:49:0e:f7:2a:cd:ee:5e:83:9a:b1:
72:c4:b4:82:c4:cd:c8:90:5f:fb:fa:92:4f:59:a9:
7e:5d:cb:ae:e0:47:58:ea:54:ac:ca:8d:16:d7:38:
e0:9e:19:0e:6e:bb:3b:31:7b:4e:73:07:d7:91:1e:
c1:75:39:61:bf:54:42:cf:87:87:65:e5:aa:ad:17:
f1:1e:38:78:87:ba:d8:ba:79:f6:fb:1c:18:7b:ef:
db:13:3c:c8:65:7d:4e:9c:99:b8:a6:ae:61:4e:a7:
78:5d:7a:55:15:33:36:8d:e2:19:56:2e:67:9d:40:
1b:f6:44:69:8e:55:28:12:9f:9f:44:6b:9a:39:17:
7c:ca:81:c8:67:91:6a:17:c0:fc:df:fe:24:fe:fa:
b3:2d:26:9c:df:25:67:bc:3d:ab:e8:fe:68:82:5a:
7f:56:34:51:4d:3d:0b:be:22:23:04:b2:32:26:7f:
dc:02:25:5e:73:c1:da:2d:a7:5e:b3:94:40:b6:b9:
e8:ce:92:c9:21:9f:a5:db:08:96:0b:34:2b:e6:ed:
d4:e4:12:0f:e6:87:54:55:0a:3f:a4:45:91:fc:fa:
eb:a9:51:85:bc:e7:e8:2a:88:3c:d3:a1:d5:9f:e7:
39:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:2E:67:78:27:AC:E8:C0:49:02:C5:6C:F1:AE:BF:1C:93:56:3B:08
X509v3 Authority Key Identifier:
keyid:46:AA:60:67:6C:13:0C:64:38:E4:5B:5A:60:72:10:E9:56:6B:68:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:75:06:53:3f:95:5d:9a:0d:06:db:bf:ce:d0:96:90:a7:37:
9f:c6:41:f2:73:bf:13:fb:41:23:7c:b5:a8:dc:0d:2a:76:53:
f3:ba:d0:4b:53:db:9a:cf:9c:e2:1d:b4:f0:9a:30:ec:56:35:
e1:1d:8c:43:d8:50:29:66:96:56:30:f0:d6:c9:43:f4:ac:17:
35:f3:66:69:f1:d0:60:49:d6:cc:59:27:6b:29:80:e5:aa:4d:
3b:93:eb:9f:f4:fe:99:04:f6:16:a5:26:0f:fb:09:11:10:ea:
eb:78:df:67:21:5e:96:56:41:79:be:86:42:85:8b:dd:0a:e0:
ff:a9:5b:fd:c3:43:f1:fb:29:1c:11:fc:98:ed:90:b9:cc:16:
53:d4:ed:43:ac:ca:6c:ed:47:e1:11:66:94:b2:ed:86:95:f1:
a9:c8:a6:a1:bc:89:db:2d:6e:7b:fe:fc:04:57:13:3c:ae:e8:
f7:43:2c:44:26:7a:31:bb:f2:2f:d0:e8:66:4e:a5:79:c0:89:
71:b3:d1:77:95:8c:ed:bf:df:14:a4:65:7f:6b:e2:2f:99:cb:
76:59:f6:d5:cf:d8:5b:9a:9e:18:75:cd:5c:1c:67:cd:34:71:
7b:cc:4c:2d:60:d6:42:a2:14:1e:ef:a8:52:03:0a:bf:b0:7a:
f7:68:c3:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRUJjYCGJ/HYYeJ4S7+/IwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2YWE2MDY3NmMxMzBjNjQzOGU0NWI1YTYwNzIxMGU5NTY2
YjY4MzIwHhcNMjUxMTA1MDAwMDI3WhcNMjUxMTA2MDAwMDI3WjAzMTEwLwYDVQQD
EyhjNjJlNjc3ODI3YWNlOGMwNDkwMmM1NmNmMWFlYmYxYzkzNTYzYjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrZhyX/LWFiZkniU2Aq1nmzPSkkO
9yrN7l6DmrFyxLSCxM3IkF/7+pJPWal+Xcuu4EdY6lSsyo0W1zjgnhkObrs7MXtO
cwfXkR7BdTlhv1RCz4eHZeWqrRfxHjh4h7rYunn2+xwYe+/bEzzIZX1OnJm4pq5h
Tqd4XXpVFTM2jeIZVi5nnUAb9kRpjlUoEp+fRGuaORd8yoHIZ5FqF8D83/4k/vqz
LSac3yVnvD2r6P5oglp/VjRRTT0LviIjBLIyJn/cAiVec8HaLades5RAtrnozpLJ
IZ+l2wiWCzQr5u3U5BIP5odUVQo/pEWR/PrrqVGFvOfoKog806HVn+c5LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMYuZ3gnrOjASQLFbPGuvxyTVjsIMB8GA1UdIwQY
MBaAFEaqYGdsEwxkOORbWmByEOlWa2gyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnFwZ1oyd1RER1E0NUZ0YVlISVE2VlpyYURJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8xNzIxZDgtYWE0Ni00ZmFhLWFlMTUt
YzVlMzJjODI3MmQ3LzEvUnFwZ1oyd1RER1E0NUZ0YVlISVE2VlpyYURJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8xNzIxZDgtYWE0Ni00ZmFhLWFlMTUtYzVlMzJjODI3MmQ3
LzEvUnFwZ1oyd1RER1E0NUZ0YVlISVE2VlpyYURJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf3UGUz+V
XZoNBtu/ztCWkKc3n8ZB8nO/E/tBI3y1qNwNKnZT87rQS1Pbms+c4h208Jow7FY1
4R2MQ9hQKWaWVjDw1slD9KwXNfNmafHQYEnWzFknaymA5apNO5Prn/T+mQT2FqUm
D/sJERDq63jfZyFellZBeb6GQoWL3Qrg/6lb/cND8fspHBH8mO2QucwWU9TtQ6zK
bO1H4RFmlLLthpXxqcimobyJ2y1ue/78BFcTPK7o90MsRCZ6MbvyL9DoZk6lecCJ
cbPRd5WM7b/fFKRlf2viL5nLdln21c/YW5qeGHXNXBxnzTRxe8xMLWDWQqIUHu+o
UgMKv7B692jDRQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:44:34 2025 by rpki-client