Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft
File: q5z9FXRB9pQo3R9jYcpPSuQss4o.mft (raw, json)
Hash identifier: P5CRAJvih0o/R3GOV+lnp071PSLA4v3uvk53PW5FI4k=
Subject key identifier: 09:84:48:24:A4:A9:1B:00:9B:32:10:83:8B:35:18:FB:56:5C:67:7F
Authority key identifier: AB:9C:FD:15:74:41:F6:94:28:DD:1F:63:61:CA:4F:4A:E4:2C:B3:8A
Certificate issuer: /CN=ab9cfd157441f69428dd1f6361ca4f4ae42cb38a
Certificate serial: 019A416FA684F6C4775DD5F59C818F4D2737
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5z9FXRB9pQo3R9jYcpPSuQss4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft
Manifest number: 1707
Signing time: Sat 01 Nov 2025 22:00:27 +0000
Manifest this update: Sat 01 Nov 2025 22:00:27 +0000
Manifest next update: Sun 02 Nov 2025 22:00:27 +0000
Files and hashes: 1: dCfTqcxg62Lir67qVkgBChTuqA4.roa (hash: UBu+ymeFM9aQ8J18E3tvVpuPsYqEYn9P+xx2d6+/UxI=)
2: q5z9FXRB9pQo3R9jYcpPSuQss4o.crl (hash: RujJIetVTqfop2Y0EiSL9fxttaqrlMn23hhZNHX3how=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5z9FXRB9pQo3R9jYcpPSuQss4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Nov 2025 21:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:41:6f:a6:84:f6:c4:77:5d:d5:f5:9c:81:8f:4d:27:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9cfd157441f69428dd1f6361ca4f4ae42cb38a
Validity
Not Before: Nov 1 22:00:27 2025 GMT
Not After : Nov 2 22:00:27 2025 GMT
Subject: CN=09844824a4a91b009b3210838b3518fb565c677f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6b:a5:d1:c4:bf:60:e0:20:95:5e:ed:3f:dd:
35:64:81:31:59:e8:66:94:3d:74:99:6f:dc:04:de:
f7:89:a7:03:ae:64:51:9a:f5:5a:2b:4e:71:51:16:
91:6e:5a:fd:2a:8a:2e:10:9c:41:2f:0e:68:3e:d4:
4b:a4:ca:e8:b8:a9:83:e6:63:e9:2d:d8:2a:83:63:
7a:8a:a0:c8:fd:4d:3f:28:f5:ae:11:c9:de:95:e2:
f8:5e:d5:74:e7:04:84:16:fd:c6:ba:3b:d6:81:b0:
a8:e2:3e:e0:01:9e:07:4f:dd:cd:9b:8f:ce:d7:77:
41:de:f3:6a:ab:7c:c9:e8:2e:ab:5e:de:50:20:6e:
31:e7:a2:0c:04:d5:87:55:12:35:7d:0a:21:c8:e2:
c3:81:9d:98:10:10:48:73:72:45:cf:25:76:6e:fd:
8a:19:a0:78:2b:fc:06:09:8f:6a:96:bc:3b:ed:62:
be:6c:01:0b:b7:03:1a:de:c1:50:6b:39:e9:9a:c9:
de:ab:a8:f7:35:fd:76:45:9b:bd:65:fa:f4:48:f5:
7c:2f:c9:54:26:21:3a:e7:c5:2d:bf:87:0e:c9:8e:
63:1a:0e:72:8b:94:c8:a7:c4:f4:80:f2:80:ce:6b:
ac:f0:cd:cf:27:01:b5:2b:5c:72:44:12:2c:ba:ed:
9a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:84:48:24:A4:A9:1B:00:9B:32:10:83:8B:35:18:FB:56:5C:67:7F
X509v3 Authority Key Identifier:
keyid:AB:9C:FD:15:74:41:F6:94:28:DD:1F:63:61:CA:4F:4A:E4:2C:B3:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5z9FXRB9pQo3R9jYcpPSuQss4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:54:1d:4b:bb:7f:e8:69:fa:66:9c:e2:37:b3:80:4e:2e:4f:
bb:9e:75:b9:71:fe:10:93:df:e3:42:97:dd:bd:20:67:d9:c7:
1d:6f:9a:dc:ae:9e:6e:99:e2:24:55:05:29:04:7f:9c:61:51:
ba:93:eb:1a:d6:df:51:82:e7:82:b5:fb:fd:40:cf:87:81:fd:
e2:96:24:e8:08:d0:5b:b0:d1:b9:dd:0b:91:a6:91:a9:24:28:
c8:50:35:ba:34:ea:3d:da:00:b4:89:88:9a:a4:0c:47:90:1c:
47:75:90:80:7d:ee:02:62:35:5e:b6:7c:48:d7:4f:01:25:50:
e9:d6:68:55:6d:4c:6c:94:2d:23:14:86:d4:4f:30:9b:86:59:
0f:55:9f:ad:57:e6:51:c5:71:67:e5:d6:a3:7b:58:76:22:67:
b0:e9:d3:05:ec:e5:0b:26:23:17:f4:17:85:62:d5:ee:a2:12:
db:b2:d1:79:fc:c1:35:a6:64:eb:da:44:47:18:1d:a7:08:3b:
4f:46:5b:f6:8e:2a:52:5d:9d:1b:5b:ac:b9:ce:e5:0a:ad:8d:
20:d3:e6:e5:e6:2b:e7:5f:b5:7e:9b:57:7c:11:0b:60:cc:38:
0f:71:e3:d9:95:34:8f:9d:5f:cc:14:82:f5:58:a4:0b:a1:3a:
81:50:0f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 05:54:35 2025 by rpki-client