Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
File: 4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft (raw, json)
Hash identifier: IZW9BoAcbzm1hKwrBhLC3j9r499HZdCddKt33AA1+PY=
Subject key identifier: 20:0C:82:3F:2C:89:3E:23:B6:33:4C:69:59:0C:34:35:6D:46:9F:63
Authority key identifier: E0:1A:A3:EF:F4:75:B0:10:BD:E4:15:4F:3B:D4:74:3A:7C:0B:AE:55
Certificate issuer: /CN=e01aa3eff475b010bde4154f3bd4743a7c0bae55
Certificate serial: 019A4DAA7620F9A0237F543C36FAB0DED65A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
Manifest number: 0B39
Signing time: Tue 04 Nov 2025 07:00:08 +0000
Manifest this update: Tue 04 Nov 2025 07:00:08 +0000
Manifest next update: Wed 05 Nov 2025 07:00:08 +0000
Files and hashes: 1: 4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl (hash: 2B9ycvmqBBpTPD3Rlea9PugCsNg4tELh418zOEWx9yE=)
2: p_9inuYDdp5y0a2pR7IT5FJWxkA.roa (hash: w2ZioVdUL3h+FykybnCF+ZnIIFFr6zWJMlYabfFURBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:76:20:f9:a0:23:7f:54:3c:36:fa:b0:de:d6:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e01aa3eff475b010bde4154f3bd4743a7c0bae55
Validity
Not Before: Nov 4 07:00:08 2025 GMT
Not After : Nov 5 07:00:08 2025 GMT
Subject: CN=200c823f2c893e23b6334c69590c34356d469f63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e7:d6:58:d2:eb:2c:6a:94:39:50:bf:1c:bf:
dd:c6:27:2c:e8:5e:a9:6e:8a:12:75:ef:50:bf:9b:
f6:79:d0:85:71:38:d8:c5:64:09:f1:5d:bb:62:59:
27:b6:24:e5:59:02:6f:00:13:c9:b8:ad:0f:2f:04:
14:a7:1d:87:7a:4b:71:df:09:98:3c:7b:76:71:b4:
ea:91:62:50:fc:29:c1:48:a5:0e:5e:5d:04:e8:d2:
07:54:c9:27:fb:78:88:e8:d6:ed:b1:26:5b:b1:35:
7b:a8:74:b0:39:58:30:7b:a0:f1:6a:ff:65:3c:31:
5f:d9:92:bb:57:62:2b:a9:47:7e:d5:bf:5c:56:65:
fa:fe:0b:6c:c1:ff:c4:0c:c9:c4:12:0c:7c:48:69:
59:44:5a:73:f1:e5:83:80:e3:ca:c2:5a:0e:42:ca:
66:10:8e:60:28:d1:b5:08:d5:b7:4c:bf:93:e8:35:
2d:68:58:1d:57:59:73:5c:f1:c6:6c:3f:02:d6:58:
a4:3d:d1:08:04:b9:c8:9a:2d:5a:74:55:31:83:8c:
05:bd:21:25:b2:3d:5c:4b:6e:a1:8a:c8:9e:01:24:
73:f0:c6:4e:60:f2:a8:7f:d1:5e:3f:92:7c:ea:5f:
fa:4f:41:41:91:aa:2f:77:b2:c7:ca:cb:f9:79:37:
02:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:0C:82:3F:2C:89:3E:23:B6:33:4C:69:59:0C:34:35:6D:46:9F:63
X509v3 Authority Key Identifier:
keyid:E0:1A:A3:EF:F4:75:B0:10:BD:E4:15:4F:3B:D4:74:3A:7C:0B:AE:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:1c:29:74:9f:71:a0:7f:bb:12:69:93:3f:17:7c:0f:e1:d3:
28:be:95:93:4d:86:8e:a1:fa:94:71:97:b2:b4:13:f5:6e:68:
54:5a:f0:b9:5a:21:e4:44:5d:b7:bc:dc:ef:82:df:ad:71:67:
aa:c3:5a:ae:f8:da:fe:aa:9f:b9:79:5d:41:21:f5:a6:a6:f0:
0b:c8:1b:6b:8a:e0:9b:b0:2a:3f:63:55:68:3d:85:7c:08:cf:
d3:2c:6f:30:07:09:34:08:6c:29:83:33:43:5c:88:f5:08:ee:
7e:df:69:b3:4d:e1:0a:d5:ea:d9:9c:32:e3:b0:69:a4:93:be:
36:3b:c2:71:e2:9f:9b:e7:49:5c:b1:9c:c1:14:35:6f:08:7e:
b7:d9:cd:19:be:45:4b:c6:22:fb:75:43:f2:c3:7a:bd:39:f5:
cf:58:cc:5b:1c:09:2b:55:c7:a0:59:8d:bf:73:58:f3:aa:5c:
57:88:3d:36:8b:a4:d7:57:bd:be:af:f4:92:b8:1e:9f:84:56:
2b:f7:e6:96:e8:2f:40:c6:be:ce:61:a6:5c:64:93:24:31:a8:
30:aa:49:e2:59:5b:af:4e:c0:07:af:0c:28:2b:d7:85:d8:bd:
47:58:ab:97:89:be:db:8e:7a:e2:a2:23:e5:19:c6:81:e3:ae:
34:11:b9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:23 2025 by rpki-client