Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.mft
File: Q1lOVdyWy5uYClKqY35IqNhzicA.mft (raw, json)
Hash identifier: rV5zGFRZPZwkI5iddbx8QXyil2/xOcTXhZeBQLRGPt8=
Subject key identifier: 15:6D:E7:83:5F:82:6D:5E:07:A2:3C:6F:31:45:84:C1:0C:FA:2E:FF
Authority key identifier: 43:59:4E:55:DC:96:CB:9B:98:0A:52:AA:63:7E:48:A8:D8:73:89:C0
Certificate issuer: /CN=43594e55dc96cb9b980a52aa637e48a8d87389c0
Certificate serial: 019A722636B3A70279BD3E529BCD95C1CF89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1lOVdyWy5uYClKqY35IqNhzicA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 09:01:38 +0000
Manifest this update: Tue 11 Nov 2025 09:01:38 +0000
Manifest next update: Wed 12 Nov 2025 09:01:38 +0000
Files and hashes: 1: Hw_YSikfvPxyjT0Axd5BlNhcASU.roa (hash: r5NiDKMzZzkd/HZAp6j3JOaexr/ITFnq6zXIPbUaL0k=)
2: Q1lOVdyWy5uYClKqY35IqNhzicA.crl (hash: e6YUaZW+apYNStNJN50oatxWWJenT6Z1JzM8Ku29IWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q1lOVdyWy5uYClKqY35IqNhzicA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:36:b3:a7:02:79:bd:3e:52:9b:cd:95:c1:cf:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43594e55dc96cb9b980a52aa637e48a8d87389c0
Validity
Not Before: Nov 11 09:01:38 2025 GMT
Not After : Nov 12 09:01:38 2025 GMT
Subject: CN=156de7835f826d5e07a23c6f314584c10cfa2eff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fe:88:47:81:ad:fb:33:e1:3d:67:e1:2c:06:
c9:60:5a:eb:80:1e:bb:ba:5d:6c:d2:b9:4d:2e:ae:
b8:67:4b:23:8a:f7:88:76:4c:76:f8:d5:d2:4a:71:
8c:5d:a3:f4:4d:fa:34:70:13:87:00:ec:13:22:8e:
03:f0:d0:ba:7f:e0:ad:62:bc:b5:a5:ab:2d:87:35:
7e:68:0d:99:b2:7d:4b:88:14:5a:bf:13:04:50:dd:
a7:76:d1:5d:97:c2:66:0b:9d:26:49:4f:93:25:5f:
76:39:8c:cf:84:46:cc:bf:7a:b2:95:8b:dc:01:e8:
c0:63:f0:b0:32:2a:f2:bd:fe:7c:21:f6:fe:7b:95:
09:ce:fc:ca:85:18:d9:4e:3a:96:be:19:11:82:c5:
72:db:ab:55:67:15:c1:fb:10:f9:df:4b:4e:9b:a6:
73:a1:30:a5:63:96:87:66:a6:dc:f1:77:7d:7a:f2:
65:91:cb:a8:bc:88:b8:9c:92:45:d2:1c:74:df:29:
fc:c3:04:72:1f:b5:c3:2b:d6:a4:0c:37:10:97:68:
c2:cb:6e:8a:3c:50:59:7c:93:dd:af:c9:51:4e:f8:
c5:8d:45:c1:87:69:82:dd:6d:c8:e7:38:6f:cb:0e:
b9:d3:54:d8:6d:ad:ac:9e:66:f6:12:ca:55:03:e8:
07:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:6D:E7:83:5F:82:6D:5E:07:A2:3C:6F:31:45:84:C1:0C:FA:2E:FF
X509v3 Authority Key Identifier:
keyid:43:59:4E:55:DC:96:CB:9B:98:0A:52:AA:63:7E:48:A8:D8:73:89:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1lOVdyWy5uYClKqY35IqNhzicA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:f9:3d:b7:03:24:3e:3d:e1:58:f9:36:39:5e:9a:55:04:c7:
f8:78:4f:58:52:f4:fc:f6:ed:69:3c:e6:f2:06:27:db:48:57:
37:0c:97:bd:b6:81:31:f1:18:80:a7:05:60:93:b8:07:64:3a:
62:92:e0:cd:44:5e:ee:3a:b2:3b:df:4a:dc:27:2c:4f:47:a3:
09:b5:c6:19:30:5a:e1:ae:d7:bf:39:10:c1:d7:8b:1b:5e:f4:
59:f0:37:90:a3:88:e0:67:87:d4:83:86:67:e6:2a:f0:b9:80:
90:49:73:5a:68:f3:41:09:fb:8d:d2:34:b3:78:9d:f7:7c:15:
89:a8:c2:7e:9d:74:80:e2:f2:a7:92:7f:cc:09:8e:d9:5e:49:
31:f3:f6:b0:87:73:cf:06:81:d6:4c:08:6e:d4:b3:34:b9:18:
35:b3:4b:73:d1:85:9e:30:c4:41:b9:0a:d4:a6:26:85:7d:e0:
eb:12:88:73:f9:94:82:38:f4:35:03:d8:10:93:fe:d8:f1:71:
91:32:da:04:5e:aa:ef:a0:aa:90:65:64:45:f1:0b:9b:e7:ed:
08:0d:66:ac:58:36:a0:b4:a3:21:b7:95:a8:3f:89:d0:27:b6:
6b:e2:3d:16:be:1c:e2:42:b9:54:15:e7:03:ea:51:bf:17:26:
d1:42:ba:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:26 2025 by rpki-client