Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft
File: ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft (raw, json)
Hash identifier: SrbLHaKJz3CGd5SqbxyDDPJ2nsF0oGE/6iOXfY4wN3E=
Subject key identifier: 35:74:45:F1:75:42:28:6C:17:B2:1C:21:28:AB:4A:9D:91:3D:BF:01
Authority key identifier: 00:B4:FE:43:94:E3:3F:C2:2A:C5:CB:B5:45:F9:CD:10:94:08:75:67
Certificate issuer: /CN=00b4fe4394e33fc22ac5cbb545f9cd1094087567
Certificate serial: 019A72259E1A443EBA1ED552B41D929B2D6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft
Manifest number: 0865
Signing time: Tue 11 Nov 2025 09:00:59 +0000
Manifest this update: Tue 11 Nov 2025 09:00:59 +0000
Manifest next update: Wed 12 Nov 2025 09:00:59 +0000
Files and hashes: 1: ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.crl (hash: omzi+tE9NHhLZwRpT0NkzN8YUSJ2vF+7oMWntmEZRmc=)
2: wMWuF3SVMuDIRng4fcNAPXQ4AjA.roa (hash: TLB7j9h/GLQ2Xf40vyUq/3XDhGfoA1ufwio0cDXXu5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:9e:1a:44:3e:ba:1e:d5:52:b4:1d:92:9b:2d:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00b4fe4394e33fc22ac5cbb545f9cd1094087567
Validity
Not Before: Nov 11 09:00:59 2025 GMT
Not After : Nov 12 09:00:59 2025 GMT
Subject: CN=357445f17542286c17b21c2128ab4a9d913dbf01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b8:09:fc:9b:57:39:09:73:28:cc:f9:be:78:
26:77:95:2d:af:93:30:71:33:8c:c9:f1:09:45:b0:
6d:e3:8c:80:29:5d:d5:b4:90:2c:fc:78:9a:2e:83:
93:99:68:2e:80:ca:e8:6c:80:68:4d:a0:89:c8:5c:
3e:fe:c3:c5:55:64:b8:5c:7a:76:5e:49:1b:c8:d9:
0a:cf:de:39:97:0d:a4:c4:e4:90:b3:22:e8:69:dd:
68:4c:e5:18:14:2a:e8:97:36:76:15:91:74:c7:fe:
30:23:fb:ec:21:65:4b:fa:24:35:9c:6d:38:dc:49:
06:b7:0b:40:f4:96:61:64:33:7a:3d:31:07:19:23:
17:ec:0d:71:66:6b:5f:20:dc:2b:76:da:d0:ed:de:
28:39:d3:78:8f:25:35:bc:b9:23:ce:bd:75:81:d2:
65:90:7c:32:3d:9c:a8:b8:91:1b:d1:2e:96:5b:4e:
73:64:4d:e5:1c:88:1e:ee:9c:40:b8:4d:65:d5:a6:
16:06:4b:d1:0b:ae:22:a8:11:d5:9e:45:3e:40:04:
ab:27:4b:57:76:cf:29:5c:42:00:e3:5a:79:dd:79:
91:56:4c:eb:40:27:15:d3:04:02:1f:d4:b5:fa:32:
9c:50:5d:54:39:45:a9:b4:29:70:b0:3a:d3:8a:62:
5d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:74:45:F1:75:42:28:6C:17:B2:1C:21:28:AB:4A:9D:91:3D:BF:01
X509v3 Authority Key Identifier:
keyid:00:B4:FE:43:94:E3:3F:C2:2A:C5:CB:B5:45:F9:CD:10:94:08:75:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:63:1e:fc:90:03:6b:dd:dc:91:6c:20:e0:31:ff:d6:73:61:
44:a5:93:ee:17:23:d5:3a:d7:4a:1d:17:42:ef:d4:2e:60:63:
b6:3f:16:b0:c3:ba:bc:c3:57:c8:e5:e9:a7:45:2f:9f:ec:89:
ac:db:50:84:89:96:73:cc:bf:8f:3e:23:26:1f:44:c7:c2:7c:
54:40:84:2f:5c:d5:f3:d5:dc:c3:70:ea:5d:35:0f:b2:3b:dc:
cf:3c:21:40:29:94:01:9e:1e:27:b7:17:fe:07:a9:09:fe:f4:
08:96:e7:a5:98:6c:e4:48:b3:7e:a0:a9:71:23:dc:bf:8c:46:
ec:d8:bc:ea:8a:22:58:d1:89:5c:48:f4:b2:7f:2d:77:b8:54:
6a:6e:ad:ab:50:dd:cb:a6:bf:0b:c0:33:1a:ba:7e:f4:27:66:
88:df:2a:64:3e:1a:fb:cb:3d:eb:49:2b:25:e1:b4:bc:33:58:
fc:86:45:cf:7c:d7:d8:18:e6:0a:23:33:37:3f:8a:44:b4:a3:
6e:0f:44:07:4a:cc:00:e0:84:d8:d1:83:68:d9:94:9a:82:e4:
e4:d4:13:82:aa:12:27:1a:e2:ac:dd:5f:98:32:55:6f:c7:e8:
cd:a7:60:23:a6:77:7f:14:1e:34:a6:fe:51:9d:8e:d9:f9:19:
e4:25:e8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:39:09 2025 by rpki-client