Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft
File: qS5dl54DJTmZRrI5CCLTDx0vNeE.mft (raw, json)
Hash identifier: RYgsQm9iRhaV5Xgt4HGGHEnpPI1SP6HNwd9VZPMkBsY=
Subject key identifier: 14:3D:1B:74:C2:9D:C4:69:8F:3E:57:C5:B6:FF:87:87:81:AB:E7:06
Authority key identifier: A9:2E:5D:97:9E:03:25:39:99:46:B2:39:08:22:D3:0F:1D:2F:35:E1
Certificate issuer: /CN=a92e5d979e0325399946b2390822d30f1d2f35e1
Certificate serial: 019A1F519EBD67079B1ACDDF0CF92F793A61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qS5dl54DJTmZRrI5CCLTDx0vNeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft
Manifest number: 01A9
Signing time: Sun 26 Oct 2025 07:00:33 +0000
Manifest this update: Sun 26 Oct 2025 07:00:33 +0000
Manifest next update: Mon 27 Oct 2025 07:00:33 +0000
Files and hashes: 1: JQJmD49tR8jandeFHJ1IkrOGoDQ.roa (hash: qBRt18tQW7myUfjqyk6Za7F1LghK7qoZn+vndFJYSpM=)
2: qS5dl54DJTmZRrI5CCLTDx0vNeE.crl (hash: CnbjXAkMBqDPI7pceZZ+ZuhZ+duUrmyno7QgzlZxjZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qS5dl54DJTmZRrI5CCLTDx0vNeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:51:9e:bd:67:07:9b:1a:cd:df:0c:f9:2f:79:3a:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a92e5d979e0325399946b2390822d30f1d2f35e1
Validity
Not Before: Oct 26 07:00:33 2025 GMT
Not After : Oct 27 07:00:33 2025 GMT
Subject: CN=143d1b74c29dc4698f3e57c5b6ff878781abe706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f1:81:43:2c:dd:93:6b:c0:d0:38:6a:18:2b:
91:c5:11:e1:cd:e2:ea:08:46:84:d8:07:11:d6:3e:
42:fb:54:e5:4e:ad:35:83:d3:5b:58:fd:cd:72:61:
1d:c0:ce:ea:08:3b:68:f7:00:30:b3:17:ac:a0:1b:
83:0f:e7:bd:cc:97:96:7e:ee:d9:1b:b5:6d:ac:a7:
b9:c1:06:f6:95:33:e4:c7:ea:d5:e2:85:44:cc:58:
18:e1:37:a0:59:d8:25:08:8a:c4:c9:de:0c:eb:db:
f2:28:67:59:c5:46:77:7b:9d:e5:3e:64:35:64:a8:
3c:e7:a8:c4:e3:fb:97:b3:ba:ef:5a:81:da:5c:a2:
e6:3b:57:1c:2e:37:2b:03:64:3d:fb:2e:0c:a8:ba:
5b:57:fa:3f:70:23:3a:c8:e9:9e:a8:b0:f2:27:26:
57:bf:8e:43:6b:fc:f5:8f:0a:44:7b:b3:de:c9:eb:
0b:a5:f6:ba:92:d3:e0:53:49:1b:e3:ff:c9:f3:3b:
db:e7:1d:b8:b2:c7:3b:ba:a9:b7:78:fe:7c:6e:b5:
3d:e6:3e:52:60:83:b7:c3:75:39:96:a3:d0:f4:3b:
2f:4e:3c:01:33:2c:df:f5:67:c0:4b:42:df:af:e2:
11:50:c9:7c:0e:76:d8:45:71:af:6d:cc:1a:60:2f:
67:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:3D:1B:74:C2:9D:C4:69:8F:3E:57:C5:B6:FF:87:87:81:AB:E7:06
X509v3 Authority Key Identifier:
keyid:A9:2E:5D:97:9E:03:25:39:99:46:B2:39:08:22:D3:0F:1D:2F:35:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS5dl54DJTmZRrI5CCLTDx0vNeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:14:87:db:bf:28:b1:d0:3d:fa:a8:ec:6a:c3:a4:0f:80:05:
5a:40:6d:af:2f:0c:dc:53:e0:52:e4:1c:c9:6f:39:a8:91:8b:
d5:78:98:54:c6:79:0b:ff:c5:4a:eb:99:79:c2:a0:5f:dc:25:
95:0e:f6:20:e3:da:4b:d2:a7:44:96:c5:09:bf:cc:98:6f:29:
96:ae:95:52:a2:a9:09:3a:4e:c5:97:05:c5:41:4c:15:0c:a9:
4c:08:86:5a:1b:a3:b2:a1:e2:c4:ed:bb:84:a4:77:75:1c:88:
e8:2d:bd:b2:7c:33:47:4c:b9:3c:a2:f3:67:36:d4:a1:d0:60:
21:ae:a1:53:32:93:08:1c:65:13:f2:fb:63:b6:7e:f3:1a:54:
70:bb:a6:17:dd:fd:d0:a6:e9:3f:c2:23:bf:a5:f3:38:78:a5:
e6:47:98:5f:f3:1e:a8:bd:d8:62:e6:3c:59:3f:b3:46:18:76:
05:d7:b7:1f:f9:dc:c9:c9:44:79:5f:77:8e:eb:36:6c:43:da:
74:64:3a:90:c5:40:a2:1e:ea:5e:6e:71:b3:3a:66:32:aa:3a:
67:bf:e5:f7:93:75:c1:62:b0:02:3c:31:21:df:f9:de:93:24:
f6:56:30:60:3e:5c:67:cd:01:14:4c:e1:8d:e5:96:78:b3:b7:
66:32:9a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 10:52:06 2025 by rpki-client