Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
File: Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft (raw, json)
Hash identifier: vIQd6mAUFRhmQEnKxESr28xdGGlFh/snLVaU9XCw3E8=
Subject key identifier: 1F:87:14:06:BF:DC:92:5B:53:58:B4:BF:0A:DA:C7:27:3F:56:9E:2B
Authority key identifier: 43:96:5D:D1:F6:F2:4A:46:D7:CC:4B:CC:FE:CD:41:51:C6:DD:1B:FB
Certificate issuer: /CN=43965dd1f6f24a46d7cc4bccfecd4151c6dd1bfb
Certificate serial: 019A202D0DF1C3727FE9C0D6AE6D46AC2451
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
Manifest number: 1709
Signing time: Sun 26 Oct 2025 11:00:14 +0000
Manifest this update: Sun 26 Oct 2025 11:00:14 +0000
Manifest next update: Mon 27 Oct 2025 11:00:14 +0000
Files and hashes: 1: M9YJnMZq-Qo4sKyFoXRkAaUtrDA.roa (hash: lb64jsKs0riSb1j7+rgbV5185uMxPtGDDu6H1Pf3T8s=)
2: P0fCccGAGT3P2tDw-rs5ORyPyrw.roa (hash: zsjstCOlxud3vr07JZ7SKJe39jYJRrodk6RlxTPhlQE=)
3: Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl (hash: HsGdOoyfwYBP98MNHgijpW70eG3BxxkoI5ObxrBht7A=)
4: bOyfi-z2wqC5OBTk4v100ve7CxI.roa (hash: WiyMw0UdlKQAlB0ieoJy4RAqYir7UCqclb4nu/UNQCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 11:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:2d:0d:f1:c3:72:7f:e9:c0:d6:ae:6d:46:ac:24:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43965dd1f6f24a46d7cc4bccfecd4151c6dd1bfb
Validity
Not Before: Oct 26 11:00:14 2025 GMT
Not After : Oct 27 11:00:14 2025 GMT
Subject: CN=1f871406bfdc925b5358b4bf0adac7273f569e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ed:1e:d2:2c:84:27:38:5c:1a:ab:3a:de:72:
12:16:a8:ea:b2:b2:c5:31:ee:ce:01:c2:58:41:bf:
bc:ba:57:0b:eb:22:91:ec:d4:bb:ca:f1:14:65:10:
85:82:d6:fe:1f:61:19:ec:c4:9f:48:f0:a3:19:48:
17:ff:95:c6:c1:59:30:9b:b9:d2:fc:fb:07:b4:f6:
f5:6e:60:dc:3c:98:62:a7:b4:7f:8c:49:d8:3d:9c:
29:84:74:a8:f5:18:7d:9d:b8:74:7f:0a:6e:85:41:
cb:0d:e0:80:a5:c9:15:76:a4:b4:48:cb:a2:ff:9c:
0e:be:87:bd:ff:39:23:45:79:98:7e:a0:9b:8a:46:
0d:51:91:40:d8:e6:81:2c:8b:6f:c7:6e:1d:b6:a5:
2d:5f:2e:61:bf:84:06:9d:ed:aa:55:22:ae:ee:95:
42:eb:f5:e0:57:9d:6e:fa:eb:e7:21:e7:23:c0:a4:
bb:ac:ec:fb:c8:e4:2c:71:96:8e:34:07:88:2b:48:
62:95:a5:d2:50:72:a8:08:74:2c:24:8b:36:bb:f3:
93:c9:b3:44:b1:ee:1d:41:c9:bc:60:9f:c8:14:39:
d2:27:15:6d:12:80:04:07:bd:98:49:9f:04:d4:73:
ff:66:cb:77:92:5f:c3:41:d0:de:0e:a3:60:22:28:
b8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:87:14:06:BF:DC:92:5B:53:58:B4:BF:0A:DA:C7:27:3F:56:9E:2B
X509v3 Authority Key Identifier:
keyid:43:96:5D:D1:F6:F2:4A:46:D7:CC:4B:CC:FE:CD:41:51:C6:DD:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:05:de:19:19:75:a5:93:98:9c:89:e4:73:f6:6f:50:53:ed:
31:fa:cb:98:f4:9e:08:3b:79:02:92:83:c9:43:e1:2f:b6:3f:
e6:f2:4e:55:a1:1e:80:68:dc:d8:6d:87:e1:a3:e3:7b:f6:04:
b1:c1:b2:d1:51:45:25:ae:4e:fd:e5:4c:af:2f:ba:d4:ba:78:
f2:70:6f:18:fb:d7:d4:cd:83:6a:0b:d0:e9:01:4b:98:a1:ff:
d0:ae:51:aa:0c:6f:fa:00:b1:b8:03:4e:30:cf:c8:b4:7c:59:
fd:80:93:b7:f6:51:85:9b:aa:78:51:aa:c8:19:7c:4b:59:28:
25:7e:62:ee:b9:5d:c7:c1:2d:28:c3:4b:fd:e5:1e:c5:be:c2:
a7:96:10:45:72:d0:e1:9b:be:dc:cb:9d:fc:b0:b9:fb:9a:f8:
28:87:ab:97:27:68:0f:bd:55:37:83:d9:b5:47:1c:5b:16:50:
5a:83:f5:6a:c9:c4:66:ef:34:6a:c9:ab:c8:e4:01:01:c5:3b:
85:12:45:e5:a6:4a:03:99:82:83:11:d7:24:a5:69:9a:9e:e0:
9d:2f:0f:98:e4:0e:13:23:da:91:97:9e:d0:a5:5f:ae:36:e7:
2e:30:08:8a:de:23:d5:46:26:b3:ad:dd:8f:45:dc:d8:38:86:
3c:db:5b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 17:35:22 2025 by rpki-client