Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft
File: CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft (raw, json)
Hash identifier: pJQghx2Z9x4vbp4+wDAnkpNnDkOPewN5EBFFxrf+sC0=
Subject key identifier: AC:3A:65:FD:A1:CA:71:24:93:40:4E:98:39:06:8A:04:4E:EF:B3:55
Authority key identifier: 09:0E:59:2A:2E:0D:42:7A:09:AA:2D:E1:B9:BA:F0:8C:CD:14:F0:A0
Certificate issuer: /CN=090e592a2e0d427a09aa2de1b9baf08ccd14f0a0
Certificate serial: 019A4C2A17557F39BC67DBC20F233141FBA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft
Manifest number: 07F9
Signing time: Tue 04 Nov 2025 00:00:18 +0000
Manifest this update: Tue 04 Nov 2025 00:00:18 +0000
Manifest next update: Wed 05 Nov 2025 00:00:18 +0000
Files and hashes: 1: CQ5ZKi4NQnoJqi3hubrwjM0U8KA.crl (hash: 2IkIfL+JekpUY+7kQDr+/vmPA8q/67fiJD8aV7CKWAU=)
2: epomSlopw6iOX1fCpUz6uqeG0uA.roa (hash: F8Xll1o9j2cBCVD/H73mG3PpAM3zIcN16DxPcP7RZWA=)
3: hqflcP10fGd_ugaqcibuFjfMGsQ.roa (hash: Ko25/+lhloUhGb/yVx2/b28QF0QoFlF426ib4Pcz3zE=)
4: mDn_ek0LdNpvLytd6eLimQlfMOA.roa (hash: k3ggKWgy0oimppyNKUN+UMdt+c+CO5ZzgliWJ2+YYxU=)
5: unvmuKqROUfBv3e0sgdNxPiAc_g.roa (hash: rF6TRtskqMXcRCi7rD7nNhDfGn67uQw9dBuhX54qa6c=)
6: zYzxKNvhe6o0TwA72geMxA7neJY.roa (hash: 40MueLGTRXMqHBaO83q9/dqRBs6784OM0Nkp+d6Np9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:2a:17:55:7f:39:bc:67:db:c2:0f:23:31:41:fb:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090e592a2e0d427a09aa2de1b9baf08ccd14f0a0
Validity
Not Before: Nov 4 00:00:18 2025 GMT
Not After : Nov 5 00:00:18 2025 GMT
Subject: CN=ac3a65fda1ca712493404e9839068a044eefb355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:52:3a:4d:80:0d:62:a8:93:ee:1e:3e:2e:f4:
fa:a9:5e:b4:5e:d3:d2:60:d2:c8:67:03:b5:17:74:
1c:7e:c6:40:15:a2:06:b3:73:1f:c6:eb:4f:d2:f2:
e5:24:41:3e:dc:7c:da:3b:79:3d:cf:fb:27:0d:a6:
23:f2:5c:8c:2a:64:b7:98:63:bb:2c:c9:11:22:ba:
25:ea:32:dc:91:44:ac:31:15:cb:e5:63:49:b5:69:
a2:80:cf:ea:f4:32:58:21:0c:5d:ee:1b:9a:f4:90:
92:ef:fd:4f:5b:9c:51:da:af:66:9e:27:58:09:e1:
90:a7:2b:45:20:8b:48:f8:42:b8:60:6d:70:dc:36:
6a:96:9d:6b:4a:bc:ed:4e:f7:b6:f7:f3:20:ba:05:
40:90:0d:cf:c9:20:3f:a3:a5:c6:6b:80:49:4c:1d:
45:c9:7b:e6:15:63:20:b0:a5:22:39:fd:b3:bd:8b:
76:17:1a:14:60:be:44:1d:70:22:3a:11:34:d3:9f:
20:08:07:d2:7d:f9:83:e2:21:17:90:cf:f9:31:de:
4f:54:aa:e2:12:7a:59:c2:21:81:58:22:3d:09:86:
e5:c8:7b:e2:c4:c4:2e:77:cc:a0:c7:08:b9:dd:d8:
99:df:b6:57:03:8d:03:76:da:d4:5f:18:7c:54:ae:
dd:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:3A:65:FD:A1:CA:71:24:93:40:4E:98:39:06:8A:04:4E:EF:B3:55
X509v3 Authority Key Identifier:
keyid:09:0E:59:2A:2E:0D:42:7A:09:AA:2D:E1:B9:BA:F0:8C:CD:14:F0:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:09:4b:37:f8:4b:11:c5:5a:c0:c9:b9:6f:f6:59:07:df:70:
a5:ba:b8:1a:73:e8:e6:a2:71:53:c7:b4:a2:87:28:ff:c2:ab:
9a:8c:a4:ca:8e:7f:a0:eb:95:08:73:b2:cc:56:7e:06:e8:f6:
92:e8:d1:d6:20:60:69:a4:83:8e:15:fd:47:91:5c:dc:f6:0b:
f9:9f:e3:26:b0:4e:8b:71:1a:91:ff:04:6b:4c:bd:10:a2:46:
35:6e:78:94:bf:b7:30:d0:2d:86:57:46:ac:4c:f3:79:4e:39:
84:25:12:b6:b6:f3:8e:a4:87:d4:c2:e4:da:68:a2:ef:e8:cf:
30:67:12:01:c1:53:82:0c:2b:de:b0:9f:e9:ef:f5:c9:a2:5d:
b5:a0:20:b6:99:28:6d:9a:3d:8e:87:8b:2e:1a:29:d4:22:d8:
2d:2b:46:83:a3:fb:78:ec:df:0f:d5:0e:45:7d:90:97:64:f6:
82:ff:cc:88:d8:03:19:4c:bd:4a:a1:58:95:30:e2:59:a3:17:
d1:79:fd:f0:15:91:60:d4:fa:1e:8b:86:e3:24:08:52:79:ba:
9c:2d:9b:2b:66:ae:b4:03:af:89:86:e8:83:d4:38:a7:ef:f4:
c9:f6:58:12:59:ab:d3:05:13:b6:d3:2a:46:67:5d:ac:9b:39:
c8:b6:e5:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 09:45:23 2025 by rpki-client