Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/26609f-2700-4949-8dbe-bae1f77ba758/1/Q5rDiHgSfOzcTIPqae7h9OEYvP8.mft
File: Q5rDiHgSfOzcTIPqae7h9OEYvP8.mft (raw, json)
Hash identifier: 2HKVqnakg8vZ4DUeds7/79I5L40VtYj3ME1JRgzcGAk=
Subject key identifier: DA:F5:EC:66:80:61:41:91:9B:EC:DD:9A:B7:D9:A2:71:E1:4C:04:5D
Authority key identifier: 43:9A:C3:88:78:12:7C:EC:DC:4C:83:EA:69:EE:E1:F4:E1:18:BC:FF
Certificate issuer: /CN=439ac38878127cecdc4c83ea69eee1f4e118bcff
Certificate serial: 019A7113506D353676B87FA9C013CBDACB13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5rDiHgSfOzcTIPqae7h9OEYvP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/26609f-2700-4949-8dbe-bae1f77ba758/1/Q5rDiHgSfOzcTIPqae7h9OEYvP8.mft
Manifest number: 0BAB
Signing time: Tue 11 Nov 2025 04:01:22 +0000
Manifest this update: Tue 11 Nov 2025 04:01:22 +0000
Manifest next update: Wed 12 Nov 2025 04:01:22 +0000
Files and hashes: 1: Q5rDiHgSfOzcTIPqae7h9OEYvP8.crl (hash: IWoWm8v+r0l93KmlzTDUy47ZZQfUAYspmjZdg6h0VUo=)
2: rqFwpW6hygA3WlEvpR2r2eLIqwU.roa (hash: hJKMm6stZaqD+/5F5Zq5RhHhs3I7m3K3YzZ93XXb5tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/26609f-2700-4949-8dbe-bae1f77ba758/1/Q5rDiHgSfOzcTIPqae7h9OEYvP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/26609f-2700-4949-8dbe-bae1f77ba758/1/Q5rDiHgSfOzcTIPqae7h9OEYvP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5rDiHgSfOzcTIPqae7h9OEYvP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:50:6d:35:36:76:b8:7f:a9:c0:13:cb:da:cb:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439ac38878127cecdc4c83ea69eee1f4e118bcff
Validity
Not Before: Nov 11 04:01:22 2025 GMT
Not After : Nov 12 04:01:22 2025 GMT
Subject: CN=daf5ec66806141919becdd9ab7d9a271e14c045d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c1:00:77:a0:04:ca:dc:30:74:2a:6e:80:2f:
a1:a1:ca:85:0b:ca:43:39:11:10:53:2e:19:0c:d4:
b3:73:97:25:6f:99:80:b1:db:ad:f4:ab:19:64:3f:
10:76:f9:eb:06:da:b8:0f:d6:f0:59:18:67:1c:e4:
47:63:f0:4b:48:0f:f1:49:6c:10:12:11:09:69:d7:
73:5b:d2:5e:0f:1d:0b:cb:c2:4a:06:94:c3:d8:1d:
b4:b3:29:1f:7a:17:17:ba:41:dd:43:46:28:7b:7b:
cb:d0:50:95:30:f3:76:3f:ce:82:06:72:f0:50:7d:
2a:e8:b5:d2:a8:43:70:de:4a:bd:12:bb:ec:98:20:
48:9f:c4:bf:02:48:3d:46:cc:50:c8:03:87:9b:fa:
d9:ad:80:4a:e3:8b:f6:04:ee:95:f9:47:04:aa:2d:
88:c3:d2:11:0b:02:42:f9:79:da:c5:b5:e7:67:00:
c8:ee:58:49:6d:91:45:f5:09:dd:40:d5:1d:bd:1e:
9a:b4:85:6c:48:47:78:2c:89:06:76:80:11:11:16:
da:6a:60:8b:63:76:b4:63:65:a4:91:27:a7:6b:9c:
33:35:1a:33:25:28:8e:2a:97:c5:fd:be:58:f1:e3:
88:da:e9:9e:0c:82:1e:3c:37:0a:4b:f6:0a:25:be:
65:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F5:EC:66:80:61:41:91:9B:EC:DD:9A:B7:D9:A2:71:E1:4C:04:5D
X509v3 Authority Key Identifier:
keyid:43:9A:C3:88:78:12:7C:EC:DC:4C:83:EA:69:EE:E1:F4:E1:18:BC:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5rDiHgSfOzcTIPqae7h9OEYvP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/26609f-2700-4949-8dbe-bae1f77ba758/1/Q5rDiHgSfOzcTIPqae7h9OEYvP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/26609f-2700-4949-8dbe-bae1f77ba758/1/Q5rDiHgSfOzcTIPqae7h9OEYvP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:ca:a0:2e:d8:4f:ba:f9:79:dd:31:06:5c:bd:52:32:3a:bb:
10:87:db:88:57:e1:bf:c9:ae:35:cf:22:b2:94:7c:22:82:c8:
a1:9c:2a:e4:6b:b2:64:4a:9e:1a:ef:89:0b:87:b8:94:4e:44:
3c:cc:81:84:2d:74:e4:8c:8a:6a:5d:f4:b5:60:4d:ad:0e:9e:
b6:fb:2d:bb:80:63:c0:ad:c4:d6:b4:62:4d:de:c0:66:5b:7c:
66:9b:73:dd:c6:e9:7c:03:f6:c2:43:a1:19:d2:bb:4e:47:e3:
66:66:25:58:fe:45:3e:7e:6a:7d:7a:d7:3c:a4:af:94:11:ac:
96:20:1b:5c:e4:09:3d:d9:7b:72:50:f8:a0:26:d6:b1:1d:90:
10:09:05:86:77:3e:9e:74:1c:69:93:f7:3e:f0:21:5e:92:4b:
80:ff:0d:33:2a:66:c9:12:97:e2:da:ab:08:de:ed:e6:32:1a:
46:1d:c4:bb:f6:08:2e:39:96:4b:f9:09:47:9c:84:44:70:e3:
80:ae:e5:09:3c:63:20:32:7f:1e:eb:47:b7:a3:5e:f0:22:6f:
ea:bd:f4:11:ef:3f:77:7a:a4:93:86:b6:6a:0d:67:99:67:f9:
5f:19:4c:02:a4:c1:18:93:4d:77:e2:a4:06:8f:46:28:98:26:
6b:76:c7:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:14 2025 by rpki-client