Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.mft
File: Q15Blg1ZDpmATpC5rwNlWExxLHI.mft (raw, json)
Hash identifier: iRBIiXOq/DwOMpq/IZVi3ME5fnqN26Em12NbpLo9pAg=
Subject key identifier: D6:FE:22:35:5A:07:6E:43:F2:A6:FF:3B:BF:D2:28:5A:0D:29:29:B9
Authority key identifier: 43:5E:41:96:0D:59:0E:99:80:4E:90:B9:AF:03:65:58:4C:71:2C:72
Certificate issuer: /CN=435e41960d590e99804e90b9af0365584c712c72
Certificate serial: 019A72265158354206A0BA5C56E2ED91DA86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q15Blg1ZDpmATpC5rwNlWExxLHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.mft
Manifest number: 1475
Signing time: Tue 11 Nov 2025 09:01:44 +0000
Manifest this update: Tue 11 Nov 2025 09:01:44 +0000
Manifest next update: Wed 12 Nov 2025 09:01:44 +0000
Files and hashes: 1: Q15Blg1ZDpmATpC5rwNlWExxLHI.crl (hash: 6ChI8iCMJjAyXi77k8wVMxSoZsZ9bwbLuuCxYBGq8oU=)
2: Qgkf9isvn9G1i53cocvwB25dPG0.roa (hash: 7pOvhNxITVVpr4C2N2+h/b2aAgFP8cFKYE5FjzDD/YQ=)
3: XGxdWNZPiFptk-3w7OILGgkhItU.roa (hash: xf5heCAI8Pty8+MuLnNYj13qa72HA9enfkhk9E22KD4=)
4: XQLqdml-mlBf3Z-90xd5Tk9chkc.roa (hash: nSfERnt4sWaMf0P1jQhY7bLFNZayDQ04cDYTAEFX1MA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q15Blg1ZDpmATpC5rwNlWExxLHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:51:58:35:42:06:a0:ba:5c:56:e2:ed:91:da:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=435e41960d590e99804e90b9af0365584c712c72
Validity
Not Before: Nov 11 09:01:44 2025 GMT
Not After : Nov 12 09:01:44 2025 GMT
Subject: CN=d6fe22355a076e43f2a6ff3bbfd2285a0d2929b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:42:da:95:bf:00:4e:12:51:7b:07:d2:35:7c:
a3:07:12:e0:a2:7f:1c:2c:57:82:27:4f:5a:ac:df:
97:69:8c:6e:b2:0b:cc:b3:87:ae:09:02:76:82:c4:
e7:5b:a8:6d:20:d3:25:b7:52:bf:11:ba:4b:8f:45:
0b:5d:52:9f:b1:ea:80:a3:28:93:5f:57:82:0f:27:
68:ae:19:be:97:e8:83:74:23:f0:db:5f:e0:ae:7c:
64:7b:a7:2c:05:f7:58:4d:31:e9:b0:56:78:ef:c3:
95:56:91:30:27:05:bd:34:d4:3a:5f:de:86:0a:74:
0c:ce:92:12:44:e9:e6:a5:a9:f2:8c:7c:ca:49:03:
ae:e2:90:c2:87:ff:aa:72:7f:d0:da:21:ea:6b:dc:
dc:78:9a:97:2c:66:31:d4:10:b8:0c:fd:91:47:ae:
47:b5:d5:46:19:e0:b7:fa:97:9d:5b:25:f9:37:30:
d6:4c:5c:16:b0:cc:64:c5:99:71:74:85:33:78:28:
35:99:71:d6:40:53:15:95:1b:36:ec:1b:76:76:ed:
f2:c7:51:27:24:9e:7d:61:5b:97:57:b2:7e:99:7f:
3d:ab:0d:00:67:15:13:61:58:0c:47:97:1e:f5:12:
9d:4e:5b:2b:88:03:ba:80:a7:32:b3:24:54:67:4d:
68:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:FE:22:35:5A:07:6E:43:F2:A6:FF:3B:BF:D2:28:5A:0D:29:29:B9
X509v3 Authority Key Identifier:
keyid:43:5E:41:96:0D:59:0E:99:80:4E:90:B9:AF:03:65:58:4C:71:2C:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q15Blg1ZDpmATpC5rwNlWExxLHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:c2:6b:c6:12:9c:2b:7a:5f:55:eb:98:30:40:d2:02:80:80:
69:4e:79:68:82:a4:58:0b:d4:45:ca:37:33:6c:61:87:ff:8b:
52:5e:68:8e:72:77:59:7f:5c:9d:03:47:6f:ce:2b:8c:45:92:
ac:ac:17:90:58:7f:50:f0:ff:75:23:bc:42:87:66:45:7f:a2:
d2:18:7e:19:ba:00:6c:51:3a:c7:dd:de:7f:6a:d3:d7:5a:a1:
70:96:02:70:e9:3e:75:ba:ec:11:6c:24:b0:4d:3b:fe:7a:f7:
10:ea:03:d5:65:01:ad:57:d8:cf:57:82:5e:84:0c:cf:a1:fb:
ac:7a:1f:12:54:f6:dc:50:00:fb:eb:13:3f:b1:10:ec:aa:86:
0f:39:16:ee:d6:fe:a2:8f:e1:01:54:0a:26:ef:40:c8:cc:7b:
38:27:3b:84:ba:84:3b:dd:02:d1:f2:07:78:3f:f9:b9:4b:d5:
74:1e:13:33:f2:e9:1d:83:dd:d9:3c:ab:0e:b6:97:ae:17:85:
b9:fc:17:4d:a5:d9:9d:4d:6b:7f:51:b7:16:dc:a0:24:d0:58:
ee:bc:cd:f7:2a:f1:22:d5:a4:e9:00:30:e1:5d:48:2d:8a:19:
0d:89:08:32:d2:cd:64:9a:63:a0:44:a3:40:ec:68:e5:7c:a7:
fe:c0:ce:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:25 2025 by rpki-client