Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.mft
File: Q-ZRNoOGaONd1VLvDCH76avtE5s.mft (raw, json)
Hash identifier: eFeUyNuJ+YDJFg+ZZkBfqATr8zDMlJc8PBfc7ZDMK3E=
Subject key identifier: A4:74:8B:BF:9E:3E:90:73:08:C3:F0:36:BF:36:E3:3B:BA:F1:66:D4
Authority key identifier: 43:E6:51:36:83:86:68:E3:5D:D5:52:EF:0C:21:FB:E9:AB:ED:13:9B
Certificate issuer: /CN=43e65136838668e35dd552ef0c21fbe9abed139b
Certificate serial: 019A711338C1EE53CEC486C92DB480B9744B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q-ZRNoOGaONd1VLvDCH76avtE5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.mft
Manifest number: 02F9
Signing time: Tue 11 Nov 2025 04:01:16 +0000
Manifest this update: Tue 11 Nov 2025 04:01:16 +0000
Manifest next update: Wed 12 Nov 2025 04:01:16 +0000
Files and hashes: 1: Q-ZRNoOGaONd1VLvDCH76avtE5s.crl (hash: sdSK3wdl7otiXUR3YRVHgeS/N3oa6pd3diITNvzonAY=)
2: aIJd5q5n1BMhAvDcaHy6hyORixY.roa (hash: g4oLD9R9gouTz6cg2k+J0gSsSi5IKrB+jtKfUgG2zS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q-ZRNoOGaONd1VLvDCH76avtE5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:38:c1:ee:53:ce:c4:86:c9:2d:b4:80:b9:74:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43e65136838668e35dd552ef0c21fbe9abed139b
Validity
Not Before: Nov 11 04:01:16 2025 GMT
Not After : Nov 12 04:01:16 2025 GMT
Subject: CN=a4748bbf9e3e907308c3f036bf36e33bbaf166d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b1:3b:4f:73:48:2a:41:3b:e8:01:b9:c4:a0:
47:07:ee:81:2c:1b:66:c8:fd:92:cf:3a:f8:2c:da:
2a:b7:66:01:29:9f:35:87:06:3c:b5:c6:4d:d3:99:
32:f3:dc:72:97:a0:59:89:1b:0b:af:1e:c3:91:6d:
d1:4b:b8:a2:ef:32:53:62:cf:e0:da:9e:13:96:dc:
16:9d:46:1a:b5:4a:22:83:67:b6:c3:a8:fe:0d:5f:
82:dc:c5:17:da:71:ca:0a:41:39:12:b3:92:4e:01:
0a:c1:21:d2:a5:03:07:ba:33:ee:73:36:b8:e0:7c:
3b:bf:e2:29:b9:83:7e:a8:38:81:9a:d2:bc:eb:6b:
90:d5:83:56:b5:09:d6:94:56:73:55:9d:a4:e0:a6:
fb:cb:bc:2a:65:00:1a:30:58:7f:4c:77:73:de:6e:
9c:db:7a:cc:fb:52:9b:04:d9:e0:b6:6e:3d:6a:de:
15:1f:88:47:ea:ae:bc:22:9c:f1:b8:be:44:e6:46:
4f:1f:b5:9c:fe:84:e8:82:03:e3:ea:92:c4:54:31:
22:0d:f1:81:38:9c:0d:64:28:6b:c2:76:c2:32:a7:
61:28:c5:4a:59:3b:96:5d:0e:1f:7b:f7:f7:69:1e:
41:08:e7:65:fa:e6:cf:99:a5:2c:e3:80:32:f2:67:
fd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:74:8B:BF:9E:3E:90:73:08:C3:F0:36:BF:36:E3:3B:BA:F1:66:D4
X509v3 Authority Key Identifier:
keyid:43:E6:51:36:83:86:68:E3:5D:D5:52:EF:0C:21:FB:E9:AB:ED:13:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q-ZRNoOGaONd1VLvDCH76avtE5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:5c:ac:87:81:8f:8d:62:5f:6e:b2:4f:3a:f1:f9:f2:a2:9e:
fc:3a:17:53:8e:ec:95:44:36:65:6d:7f:17:96:75:b1:25:54:
9e:f8:c4:53:5d:77:5b:1c:df:59:c9:f1:a4:e2:70:fc:e8:c8:
da:0c:d4:25:8d:0f:c9:3d:5c:cf:ef:68:c1:13:1d:2b:1d:40:
97:24:28:e8:10:ef:8f:10:a3:2c:f4:64:96:d2:09:84:f6:0e:
67:b7:a8:1b:a3:cb:e0:e3:0f:a2:d2:1f:0b:71:6a:56:b5:0f:
2a:34:04:78:5d:4e:be:72:46:8a:12:3b:9b:b4:bd:43:cd:07:
e2:96:74:d8:af:97:17:f6:37:bf:06:46:3f:f7:11:43:7c:d9:
44:7c:8b:8e:ba:94:2c:fc:c2:34:3b:12:c9:4d:ff:28:86:b0:
e5:b6:3d:1a:a6:dd:55:6f:5b:ee:05:68:88:09:8e:75:5e:6d:
61:11:c1:ef:58:90:0c:66:d8:0a:d5:45:f4:61:bd:c8:12:6d:
46:5b:40:6c:f3:9b:e6:f3:63:49:a0:e6:05:19:f6:0a:19:fb:
4f:14:51:68:eb:14:ce:e6:08:20:4a:f0:81:9a:5f:cd:c9:b4:
47:c2:ec:64:f4:99:38:e8:fa:25:49:76:3b:95:26:80:fb:71:
1b:d7:f7:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:40 2025 by rpki-client