Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft
File: 1-QN586_ZTA8mtn__o01ulGwp1iQ.mft (raw, json)
Hash identifier: FIEOV2uGtutUy6xPtqla3Gn1nuTJbfmOJ/9tobl76uc=
Subject key identifier: 46:CB:CF:D7:A5:1A:A8:31:97:A3:5C:82:5A:54:45:5B:D4:03:6D:AD
Authority key identifier: F9:03:79:F3:AF:D9:4C:0F:26:B6:7F:FF:A3:4D:6E:94:6C:29:D6:24
Certificate issuer: /CN=f90379f3afd94c0f26b67fffa34d6e946c29d624
Certificate serial: 019A288BA9AD4BBD3E2E7B27D2568FFAEE3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft
Manifest number: 1428
Signing time: Tue 28 Oct 2025 02:00:32 +0000
Manifest this update: Tue 28 Oct 2025 02:00:32 +0000
Manifest next update: Wed 29 Oct 2025 02:00:32 +0000
Files and hashes: 1: 1-QN586_ZTA8mtn__o01ulGwp1iQ.crl (hash: 21cRMlbFmoIWHYclg9EMBKgrw+4Iyfu2Mshg18i8PTc=)
2: B9xdpXPKaKD7kATBDRUYPDrfJHM.roa (hash: xUpn/6yW+QKWLSXqnG2abjnoqVCxULjYMRU+slTa5PQ=)
3: YYzrkPDEMpFz0VlMFyfkPlvrIPc.roa (hash: ZTbSueGcUA5J+8KJD8a0DCRWPR/FrTGgSZg4efTERpc=)
4: z0hWnzSRmHLyAYMYl1nKCZOWbgw.roa (hash: GQY4W56WRkuweljajSL0/DPkbwKgksUsLIAtILepWM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:8b:a9:ad:4b:bd:3e:2e:7b:27:d2:56:8f:fa:ee:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f90379f3afd94c0f26b67fffa34d6e946c29d624
Validity
Not Before: Oct 28 02:00:32 2025 GMT
Not After : Oct 29 02:00:32 2025 GMT
Subject: CN=46cbcfd7a51aa83197a35c825a54455bd4036dad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:57:c5:2c:ce:17:b7:b7:d9:3b:70:a9:df:c9:
12:58:02:f1:06:0c:f7:d0:e6:7f:64:80:3e:c1:73:
3d:df:86:ab:c0:65:09:e2:1e:e2:f9:b2:ff:d5:c0:
18:eb:6b:2f:49:98:0e:a2:52:01:0f:fc:5c:f0:82:
51:9c:a5:f6:da:a3:cb:06:97:19:d9:fe:cd:ca:0c:
46:c6:5c:8f:7c:f8:81:3f:e9:de:e2:22:43:10:91:
37:b4:85:9e:87:2d:d9:3e:80:23:07:be:58:8f:0a:
f0:f3:41:7f:55:59:e3:af:97:0f:73:ec:c2:a2:ce:
1f:37:e4:20:58:d0:4b:df:b4:65:a0:0a:76:f3:c2:
56:56:88:43:a3:7d:1a:43:5f:6b:eb:f5:a9:4e:fd:
cb:81:21:25:40:95:59:8a:88:8e:f3:4f:28:b4:20:
90:26:3c:43:ce:ad:9d:ac:45:5d:f3:d4:3b:8f:4f:
15:4b:86:28:74:b0:be:51:94:52:72:d9:83:2e:f0:
94:5d:5d:8c:93:f5:36:a0:6f:77:8c:9d:ba:e5:77:
16:fc:4d:38:9a:9b:95:72:cd:0f:b4:0e:8c:05:de:
26:f8:bb:cc:f4:79:34:60:ce:24:4f:8f:02:94:1c:
bc:fc:e7:bf:e7:b7:cf:40:0c:ce:ba:ab:aa:d3:58:
19:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:CB:CF:D7:A5:1A:A8:31:97:A3:5C:82:5A:54:45:5B:D4:03:6D:AD
X509v3 Authority Key Identifier:
keyid:F9:03:79:F3:AF:D9:4C:0F:26:B6:7F:FF:A3:4D:6E:94:6C:29:D6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:a5:8f:ba:fb:fd:62:de:a6:77:48:68:10:8e:d1:9c:d1:df:
22:63:20:8c:d1:e7:ee:1f:80:71:97:e8:e4:b5:31:3a:a7:d9:
9f:e1:96:bf:2e:c0:48:44:3b:7c:5a:a0:53:87:0d:23:d2:b9:
50:62:71:7c:ed:d9:6e:2a:8c:3e:98:2c:c1:8b:90:69:23:70:
5b:68:78:05:52:fc:68:af:0b:3a:66:93:52:ae:74:71:d0:dc:
df:1c:7b:4a:1e:00:46:cf:87:59:cc:0c:9d:22:71:6e:85:f8:
0c:3d:30:ed:97:c7:65:2a:f7:44:21:53:cd:9d:51:a8:b9:ec:
64:45:be:7b:4b:f8:66:53:6c:de:f6:a3:27:8d:c0:b8:fe:d5:
45:ba:54:3a:8e:ae:a8:c9:b7:2a:6d:86:4f:13:76:39:52:c6:
fe:77:22:d9:c8:b5:e1:b9:55:1f:f0:ed:8a:83:c5:0c:6c:ff:
2b:fc:08:eb:83:2e:a3:0b:39:91:da:5e:ff:f0:82:e6:5d:14:
58:4c:c4:14:67:82:99:b5:46:30:5f:2c:3b:1a:af:9f:5c:a2:
b2:c8:72:9f:6b:c7:db:31:a3:72:6e:c9:0d:eb:9f:eb:1d:fd:
63:5c:3a:25:04:24:1a:8f:20:5b:b4:cf:06:96:21:03:f9:d6:
91:da:58:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 11:27:56 2025 by rpki-client