Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft
File: Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft (raw, json)
Hash identifier: m8g22IByDzgLsuVv8iralTUGd1bZZBESQFe2rNSeW1o=
Subject key identifier: A0:C6:25:3B:D8:0A:9A:DF:77:A6:EC:E8:37:7F:A4:87:02:62:6E:7E
Authority key identifier: 43:98:F6:24:D5:7F:46:13:C0:BF:65:11:61:C7:56:C3:16:65:9A:B9
Certificate issuer: /CN=4398f624d57f4613c0bf651161c756c316659ab9
Certificate serial: 019A2A44633102E671027B90D8EF5E5B0639
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5j2JNV_RhPAv2URYcdWwxZlmrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft
Manifest number: 16F9
Signing time: Tue 28 Oct 2025 10:01:56 +0000
Manifest this update: Tue 28 Oct 2025 10:01:56 +0000
Manifest next update: Wed 29 Oct 2025 10:01:56 +0000
Files and hashes: 1: Q5j2JNV_RhPAv2URYcdWwxZlmrk.crl (hash: cgxnYhpg8VVybMprwMIUq06U8hWXmRUOLq+9CRWz1LM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5j2JNV_RhPAv2URYcdWwxZlmrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 10:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:44:63:31:02:e6:71:02:7b:90:d8:ef:5e:5b:06:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4398f624d57f4613c0bf651161c756c316659ab9
Validity
Not Before: Oct 28 10:01:56 2025 GMT
Not After : Oct 29 10:01:56 2025 GMT
Subject: CN=a0c6253bd80a9adf77a6ece8377fa48702626e7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:96:ef:7b:42:5b:01:5f:6c:a3:a2:b9:c7:96:
20:71:7f:dd:74:23:e1:0b:c2:d3:81:f0:b8:42:ce:
aa:3b:c8:d6:aa:9c:af:6d:15:df:28:51:7e:c8:82:
d0:d5:4c:2f:72:5e:2c:d5:5f:76:ef:07:9e:22:39:
b9:90:0e:c9:19:d2:9b:f4:ee:75:61:9b:e8:1a:a4:
44:91:c5:c8:e8:23:f2:b9:d1:0a:83:66:7a:73:a9:
09:0d:2c:91:fe:aa:84:9c:72:6d:a1:24:29:b5:06:
87:08:45:27:83:52:a6:68:f5:13:da:82:94:49:99:
3f:70:da:f8:d8:40:42:86:a6:dc:57:eb:c3:de:04:
34:49:ff:f6:30:fd:58:2b:b2:32:ad:84:b8:12:ee:
f7:a0:52:78:bf:d1:b7:e9:2a:84:40:ff:0b:ae:b0:
57:ec:af:7f:29:0d:b1:fc:01:c3:b5:f4:35:b9:64:
f0:e0:ad:29:ac:26:7b:90:a3:5a:a7:21:e6:6e:9c:
03:c6:24:4d:d3:0d:12:8c:52:70:1b:a4:86:aa:27:
8c:16:2d:8d:5f:aa:2b:ee:a8:e4:4a:2d:5d:22:70:
de:43:fa:99:69:7f:e6:e2:0a:ec:be:2a:e2:4a:29:
e9:93:41:57:0b:af:17:ec:52:10:6e:a5:33:d6:25:
f5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C6:25:3B:D8:0A:9A:DF:77:A6:EC:E8:37:7F:A4:87:02:62:6E:7E
X509v3 Authority Key Identifier:
keyid:43:98:F6:24:D5:7F:46:13:C0:BF:65:11:61:C7:56:C3:16:65:9A:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5j2JNV_RhPAv2URYcdWwxZlmrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:0d:5e:76:c6:42:06:36:22:e1:02:08:10:a3:cd:97:d8:93:
1e:f6:93:30:40:98:c0:a4:7b:ec:b6:df:9a:d8:1e:eb:05:1d:
6a:d8:de:92:e1:ed:77:ed:bb:19:6b:41:ec:75:3e:9b:f0:05:
28:ae:e3:05:5f:2f:74:ee:34:8f:a1:41:17:a1:19:71:ea:ab:
f6:71:c2:97:19:2d:e9:0b:75:9e:fe:c1:21:8f:66:09:fb:f3:
77:ad:e5:78:84:af:4d:14:20:15:57:c9:08:2c:ca:fa:bb:60:
45:53:f9:cc:31:56:04:df:40:1f:b9:df:8d:b2:ba:ba:54:3e:
88:e8:d5:44:a5:b6:45:4f:f5:1e:08:77:c4:eb:6a:3a:9a:2b:
48:24:0f:27:c1:14:e0:f5:33:6a:b0:64:59:8a:b5:64:61:b2:
f8:bd:de:6e:ae:6c:17:0c:d5:4f:0f:c5:7f:5d:92:17:ca:1d:
fa:66:7b:d6:dc:2e:af:25:69:52:2f:cb:5c:10:5c:68:d9:41:
51:26:5d:b4:c9:15:c2:2a:4d:a7:6b:df:21:88:36:31:6c:36:
6e:93:3f:e5:83:7e:a5:7f:7f:d7:61:f7:98:d5:bb:74:a3:7b:
02:3b:40:90:cc:af:34:be:94:0a:6f:6f:57:6e:b0:ac:45:dd:
28:60:42:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoqRGMxAuZxAnuQ2O9eWwY5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzOThmNjI0ZDU3ZjQ2MTNjMGJmNjUxMTYxYzc1NmMzMTY2
NTlhYjkwHhcNMjUxMDI4MTAwMTU2WhcNMjUxMDI5MTAwMTU2WjAzMTEwLwYDVQQD
EyhhMGM2MjUzYmQ4MGE5YWRmNzdhNmVjZTgzNzdmYTQ4NzAyNjI2ZTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpbve0JbAV9so6K5x5YgcX/ddCPh
C8LTgfC4Qs6qO8jWqpyvbRXfKFF+yILQ1Uwvcl4s1V927weeIjm5kA7JGdKb9O51
YZvoGqREkcXI6CPyudEKg2Z6c6kJDSyR/qqEnHJtoSQptQaHCEUng1KmaPUT2oKU
SZk/cNr42EBChqbcV+vD3gQ0Sf/2MP1YK7IyrYS4Eu73oFJ4v9G36SqEQP8LrrBX
7K9/KQ2x/AHDtfQ1uWTw4K0prCZ7kKNapyHmbpwDxiRN0w0SjFJwG6SGqieMFi2N
X6or7qjkSi1dInDeQ/qZaX/m4grsviriSinpk0FXC68X7FIQbqUz1iX1ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKDGJTvYCprfd6bs6Dd/pIcCYm5+MB8GA1UdIwQY
MBaAFEOY9iTVf0YTwL9lEWHHVsMWZZq5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTVqMkpOVl9SaFBBdjJVUlljZFd3eFpsbXJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9kN2M0YTAtMjcyZS00NDA5LThkM2It
NmE3OWZlZTkxOWViLzEvUTVqMkpOVl9SaFBBdjJVUlljZFd3eFpsbXJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9kN2M0YTAtMjcyZS00NDA5LThkM2ItNmE3OWZlZTkxOWVi
LzEvUTVqMkpOVl9SaFBBdjJVUlljZFd3eFpsbXJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbw1edsZC
BjYi4QIIEKPNl9iTHvaTMECYwKR77Lbfmtge6wUdatjekuHtd+27GWtB7HU+m/AF
KK7jBV8vdO40j6FBF6EZceqr9nHClxkt6Qt1nv7BIY9mCfvzd63leISvTRQgFVfJ
CCzK+rtgRVP5zDFWBN9AH7nfjbK6ulQ+iOjVRKW2RU/1Hgh3xOtqOporSCQPJ8EU
4PUzarBkWYq1ZGGy+L3ebq5sFwzVTw/Ff12SF8od+mZ71twuryVpUi/LXBBcaNlB
USZdtMkVwipNp2vfIYg2MWw2bpM/5YN+pX9/12H3mNW7dKN7AjtAkMyvNL6UCm9v
V26wrEXdKGBCYA==
-----END CERTIFICATE-----
Generated at Tue Oct 28 16:23:56 2025 by rpki-client