Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
File: 4q7DyKsR_AWMmo70AO8cPRRKe6g.mft (raw, json)
Hash identifier: 9KU+IEFnsuWO6RU9TPvmU+D+/wZrDtT0wbG0enqkA7k=
Subject key identifier: D2:37:C8:B7:89:A1:0F:F5:60:3D:A2:46:27:4C:39:96:16:45:5A:5D
Authority key identifier: E2:AE:C3:C8:AB:11:FC:05:8C:9A:8E:F4:00:EF:1C:3D:14:4A:7B:A8
Certificate issuer: /CN=e2aec3c8ab11fc058c9a8ef400ef1c3d144a7ba8
Certificate serial: 019A4E18C711A4E34AD103BE6109819E4770
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
Manifest number: 0992
Signing time: Tue 04 Nov 2025 09:00:37 +0000
Manifest this update: Tue 04 Nov 2025 09:00:37 +0000
Manifest next update: Wed 05 Nov 2025 09:00:37 +0000
Files and hashes: 1: 1qu70rxHLlsLAV5g5Efa66s6iag.roa (hash: YmJJTTwGISEG6l96iV4cbfKm+Xa4J2z07ynSRxjgi3U=)
2: 4q7DyKsR_AWMmo70AO8cPRRKe6g.crl (hash: r3gcOSIx5t9wUdHocCna2DnevLzO9n/KPoh6lb7vwBU=)
3: q1pnCW-BLUiZBZvb23K3UxB_wVE.roa (hash: pCVPRKxVl5EU92p/4v7xk8uVkYaxmpQbOuLsACDt2jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:c7:11:a4:e3:4a:d1:03:be:61:09:81:9e:47:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2aec3c8ab11fc058c9a8ef400ef1c3d144a7ba8
Validity
Not Before: Nov 4 09:00:37 2025 GMT
Not After : Nov 5 09:00:37 2025 GMT
Subject: CN=d237c8b789a10ff5603da246274c399616455a5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:60:91:64:d9:7a:90:67:4e:80:1a:1b:8b:fc:
c3:89:d0:6b:36:75:08:e7:79:53:d9:c8:92:32:61:
96:ac:c3:66:e3:03:13:6c:bb:9c:93:dd:e8:76:8a:
fe:fd:3c:25:58:72:d9:d8:24:79:0f:3a:5d:8c:22:
1c:fc:a7:5d:02:fb:e2:11:38:56:43:a5:1e:06:34:
38:e8:65:71:90:68:2c:db:96:b7:37:55:01:c1:4a:
f3:5a:df:39:bb:19:7d:59:2d:51:b5:b8:e1:70:67:
87:53:56:ff:89:32:6a:0f:39:0e:65:1f:97:15:5f:
cd:c2:f3:78:47:2b:63:77:4d:16:63:31:22:36:c8:
bc:31:c8:f1:20:82:c8:a3:a7:27:ab:69:05:cc:f7:
ec:70:19:79:9e:f4:2f:13:0f:dc:5c:f4:31:cf:10:
ad:1c:bd:f8:29:19:69:f8:60:07:f3:9d:59:74:50:
17:f7:03:4a:2e:05:82:a1:e5:26:26:83:8e:cc:97:
6a:42:7e:0c:8a:cc:ad:2b:ab:bd:ac:f9:f6:60:c6:
6c:6a:34:2a:be:71:09:66:b1:33:8e:2e:49:11:b2:
25:55:e5:d8:b2:b2:4f:35:7b:aa:ec:6b:af:3b:e3:
32:dc:f7:83:f0:b0:fe:77:10:d3:95:65:99:41:fe:
49:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:37:C8:B7:89:A1:0F:F5:60:3D:A2:46:27:4C:39:96:16:45:5A:5D
X509v3 Authority Key Identifier:
keyid:E2:AE:C3:C8:AB:11:FC:05:8C:9A:8E:F4:00:EF:1C:3D:14:4A:7B:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:45:9b:47:c8:d5:d5:0e:d9:dd:bb:eb:f8:04:0f:85:f5:9e:
db:e5:37:27:b1:c5:56:22:69:b2:c7:51:1e:42:f4:ba:1a:12:
f5:33:71:05:c1:6b:59:e4:10:f4:9f:dd:83:c0:a0:bb:6c:1e:
a1:9e:a9:35:87:d8:d0:8c:7b:db:dd:17:67:00:c7:00:de:6b:
2d:bf:d2:5a:24:f1:e3:89:85:b7:d8:3e:b7:f4:17:5d:a2:53:
9a:dc:db:c1:74:e4:e1:ac:df:a2:90:34:77:73:51:15:b1:92:
f4:e9:a0:b2:c6:86:da:9e:c1:06:c3:20:a7:26:55:4a:5c:6e:
96:02:c4:0a:d1:cf:37:cf:aa:12:85:9a:f6:70:80:57:c2:92:
f2:72:33:d6:b9:14:8d:bb:c4:1a:42:8b:8d:33:39:09:8c:76:
21:f5:8f:70:7c:11:3f:67:50:ca:22:32:1f:56:29:3b:3d:96:
13:e6:c0:11:ac:c0:49:b2:65:45:05:ac:20:2c:bc:17:6c:7f:
72:32:0f:92:84:fd:5e:4f:9e:be:48:60:b3:54:0b:f9:65:c8:
f1:bd:e7:9b:f8:68:ee:44:cd:31:36:8b:f0:f1:8c:51:34:7a:
0a:e3:e1:8b:18:cb:68:e6:18:2e:e7:c1:4b:3c:a5:83:9d:41:
96:ce:c9:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:39 2025 by rpki-client