Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft
File: Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft (raw, json)
Hash identifier: v34haA+ZahFLamReNIeTQ8VdMXcrrHV0JYwIzu/CIKg=
Subject key identifier: 7F:24:D1:8F:8F:26:70:A5:79:E7:C7:47:CD:4F:E3:9E:08:28:D8:7F
Authority key identifier: 43:9D:D1:CE:AE:0F:65:D6:2A:2E:B7:C6:7C:48:DD:43:0E:7D:A6:96
Certificate issuer: /CN=439dd1ceae0f65d62a2eb7c67c48dd430e7da696
Certificate serial: 019A72CA86357B493F8B6A294669030F726B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q53Rzq4PZdYqLrfGfEjdQw59ppY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft
Manifest number: 0558
Signing time: Tue 11 Nov 2025 12:01:06 +0000
Manifest this update: Tue 11 Nov 2025 12:01:06 +0000
Manifest next update: Wed 12 Nov 2025 12:01:06 +0000
Files and hashes: 1: Q53Rzq4PZdYqLrfGfEjdQw59ppY.crl (hash: 1ns/a3KhdogFgaLIzLr+fcKwXG0WhvpGLS20+eyY0FY=)
2: oskd316tBTAUTSHf0wsKURHXyDc.roa (hash: IsLUQsw+ev9Voy8iNeiPun8V5Wlg4SPwA/B548IB55M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q53Rzq4PZdYqLrfGfEjdQw59ppY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:86:35:7b:49:3f:8b:6a:29:46:69:03:0f:72:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439dd1ceae0f65d62a2eb7c67c48dd430e7da696
Validity
Not Before: Nov 11 12:01:06 2025 GMT
Not After : Nov 12 12:01:06 2025 GMT
Subject: CN=7f24d18f8f2670a579e7c747cd4fe39e0828d87f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4d:5a:f2:41:25:13:eb:97:49:54:c5:73:18:
96:b4:3f:78:46:15:13:01:5a:2b:9b:28:cd:8d:e6:
d6:c4:6f:f6:68:db:2d:6f:6d:ad:94:88:78:f4:44:
48:4d:de:70:85:6a:61:13:77:88:81:6d:ca:4b:3a:
a9:76:f0:3d:59:e8:9f:61:35:b2:e2:05:32:30:38:
10:63:9b:5c:90:de:9e:1b:da:ed:7b:d5:6b:3e:2d:
6c:5c:11:d1:5e:e5:62:a0:77:70:63:78:28:6f:ae:
44:ee:23:da:9c:b7:62:92:fb:50:72:e7:31:4e:18:
4c:61:70:45:24:d8:13:e1:6f:21:c5:72:b6:4a:2d:
1e:4f:82:c5:05:87:cd:c9:20:2c:39:27:73:9c:de:
65:ae:22:4d:03:cb:64:62:27:cc:6a:74:72:24:34:
1c:2c:33:a5:c2:b3:90:5a:27:42:19:c0:ba:ca:23:
82:96:b9:16:fa:b4:69:c5:ce:93:e2:5f:f3:a4:42:
8e:fe:3c:c5:c7:72:ec:42:0b:80:d9:f5:1b:d7:e3:
c7:d9:40:69:1b:5c:26:82:0e:95:e5:fd:db:94:bd:
67:e3:fd:66:55:b1:0e:0c:37:aa:6a:9d:85:29:bf:
a4:ea:2a:3f:3d:9d:15:39:d1:96:f1:ce:e2:9b:76:
e4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:24:D1:8F:8F:26:70:A5:79:E7:C7:47:CD:4F:E3:9E:08:28:D8:7F
X509v3 Authority Key Identifier:
keyid:43:9D:D1:CE:AE:0F:65:D6:2A:2E:B7:C6:7C:48:DD:43:0E:7D:A6:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q53Rzq4PZdYqLrfGfEjdQw59ppY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:85:c6:fd:5c:78:fa:ee:cd:84:50:8c:bb:16:33:4e:ce:0d:
0d:2c:60:c8:7d:48:d7:eb:58:bf:dc:43:42:c8:1c:0d:1c:92:
e2:ab:a3:f8:54:80:2f:d5:42:0f:e8:d4:8e:45:b6:e6:e5:3f:
03:02:2a:91:10:9d:8d:63:eb:f8:56:06:e3:09:cf:59:e8:04:
bb:72:ce:7f:02:5b:90:f4:c9:1e:06:16:3d:c5:29:ba:34:f8:
1e:67:75:dd:94:86:fa:78:1d:b5:4b:ac:1e:97:ab:e9:59:07:
dc:89:fd:cd:cd:24:ad:bf:f3:af:88:9b:c7:c1:48:ee:bb:53:
4a:ff:28:36:ea:9e:5f:21:a0:57:31:70:35:c9:20:07:4e:e3:
7a:26:23:1a:fc:42:37:18:4b:cb:b8:28:87:b0:90:e9:42:3a:
ab:a2:48:12:34:7c:34:77:d3:f8:bc:bc:c1:56:5e:37:76:95:
26:69:7f:af:c7:fb:e4:da:be:27:22:46:d7:af:43:0f:f9:11:
63:40:a8:56:53:80:b2:0d:05:68:08:14:29:ec:95:00:ec:63:
03:7d:d9:d8:b3:7c:2b:bc:cd:12:81:7c:54:af:29:dc:61:31:
63:24:52:63:0f:fc:fe:f7:89:87:2e:e5:eb:2b:c5:0c:4d:5d:
ba:95:89:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:47:51 2025 by rpki-client