Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/582695-61a1-48e7-b6ac-7bc45340dd28/1/Q5i1d7IjtadjUSGadP2kRnBIkPc.mft
File: Q5i1d7IjtadjUSGadP2kRnBIkPc.mft (raw, json)
Hash identifier: WAbyCzTqpkW9GYnV7ZFq8T59vgmuvLQV7xkgKhMcvfA=
Subject key identifier: BD:D1:E0:6A:63:D8:D2:B5:AF:F7:56:F6:1A:7E:57:88:79:2C:36:BD
Authority key identifier: 43:98:B5:77:B2:23:B5:A7:63:51:21:9A:74:FD:A4:46:70:48:90:F7
Certificate issuer: /CN=4398b577b223b5a76351219a74fda446704890f7
Certificate serial: 019A725CE42438C49AA72B39D5483FB18524
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5i1d7IjtadjUSGadP2kRnBIkPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/582695-61a1-48e7-b6ac-7bc45340dd28/1/Q5i1d7IjtadjUSGadP2kRnBIkPc.mft
Manifest number: 1407
Signing time: Tue 11 Nov 2025 10:01:21 +0000
Manifest this update: Tue 11 Nov 2025 10:01:21 +0000
Manifest next update: Wed 12 Nov 2025 10:01:21 +0000
Files and hashes: 1: KL5bIat3Yk7dpaHmhHBN9ywSikg.roa (hash: 2Dm1yDCv5S4uhPon+c/p0fcUA41+SmoP2uLFsPOLfB0=)
2: Q5i1d7IjtadjUSGadP2kRnBIkPc.crl (hash: MVNwCGRdl4EqlfY0aSIWyoBc9Vt4gVT3wmuSNLFuIoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/582695-61a1-48e7-b6ac-7bc45340dd28/1/Q5i1d7IjtadjUSGadP2kRnBIkPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/582695-61a1-48e7-b6ac-7bc45340dd28/1/Q5i1d7IjtadjUSGadP2kRnBIkPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5i1d7IjtadjUSGadP2kRnBIkPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:e4:24:38:c4:9a:a7:2b:39:d5:48:3f:b1:85:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4398b577b223b5a76351219a74fda446704890f7
Validity
Not Before: Nov 11 10:01:21 2025 GMT
Not After : Nov 12 10:01:21 2025 GMT
Subject: CN=bdd1e06a63d8d2b5aff756f61a7e5788792c36bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f7:e0:24:90:d3:6b:18:34:84:5f:d1:e8:c9:
26:72:71:dd:58:a0:f3:e2:38:49:b4:89:6a:f6:42:
86:5c:6d:75:73:95:b9:75:58:31:61:c1:16:fd:ff:
98:f5:a9:51:b7:dd:41:43:b8:72:29:41:54:5d:b6:
4b:9e:01:b6:15:7e:9e:c1:a5:2d:53:ba:d1:dc:3a:
c9:20:1f:12:1e:88:45:60:a2:d4:0d:68:88:b2:11:
b2:e7:98:85:34:19:e0:1d:53:f9:1f:e8:95:9d:0d:
c9:8e:95:dd:36:43:ff:ab:54:f5:f2:9f:70:de:d0:
85:70:e2:df:48:56:3a:2f:db:16:1c:ab:58:c4:1e:
45:17:f4:b9:b2:b1:81:d8:ca:0b:b3:35:60:77:b4:
68:db:4d:c9:3d:ce:5b:08:90:66:01:44:f6:cf:90:
f4:29:8d:ca:18:a0:fc:20:99:0e:7e:bd:64:3c:ba:
db:64:af:f8:db:d8:52:e1:2e:dd:64:a3:be:6d:87:
2c:59:c6:67:73:62:cd:b7:d6:c5:a8:83:75:c6:b6:
e8:2e:31:da:5f:4f:52:17:b5:9f:22:97:4f:c5:26:
70:2a:af:20:0a:c9:37:fd:3e:18:62:10:d8:64:9c:
9c:ad:b3:ed:55:62:c9:96:fa:8e:06:99:10:05:4b:
f9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D1:E0:6A:63:D8:D2:B5:AF:F7:56:F6:1A:7E:57:88:79:2C:36:BD
X509v3 Authority Key Identifier:
keyid:43:98:B5:77:B2:23:B5:A7:63:51:21:9A:74:FD:A4:46:70:48:90:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5i1d7IjtadjUSGadP2kRnBIkPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/582695-61a1-48e7-b6ac-7bc45340dd28/1/Q5i1d7IjtadjUSGadP2kRnBIkPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/582695-61a1-48e7-b6ac-7bc45340dd28/1/Q5i1d7IjtadjUSGadP2kRnBIkPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:24:78:88:82:38:6a:7f:5f:d4:70:68:63:b5:1b:4b:30:e0:
6a:63:5e:56:d4:80:4d:34:d9:a8:0d:40:09:17:1f:d4:c7:c8:
1f:17:8e:94:3a:8a:ee:ca:ca:4c:0b:47:69:33:70:0e:18:9a:
6a:aa:3e:02:bb:f5:10:33:9c:44:1a:23:8d:78:ac:43:0e:21:
9b:0f:da:d3:26:e6:de:d5:83:fd:28:d1:e9:9c:6e:10:e8:94:
85:9d:30:7e:41:63:4b:be:b6:5b:77:b0:a1:f3:bc:03:b0:4c:
ce:86:4e:7f:5b:11:11:84:d6:1c:8c:16:03:5d:32:92:cd:ff:
ee:52:a7:26:0a:a1:92:08:61:7d:30:e2:37:a4:6d:76:dc:6c:
1f:a5:5b:e5:af:45:06:97:9d:a7:fa:f0:78:38:fa:26:6b:87:
f9:e8:0a:bb:51:49:e7:d6:31:0c:2a:5b:67:19:79:02:3e:f1:
c3:ba:8a:97:c0:b1:92:c3:a0:c0:de:cf:d3:5a:66:7b:49:36:
fb:0d:17:19:f8:c0:14:4e:b0:a4:a4:36:1b:56:de:72:8e:41:
22:ff:66:bd:3d:41:1b:74:b4:82:84:dc:ac:3f:36:4f:97:80:
f3:c0:fb:e1:45:e9:d5:ac:5d:03:aa:da:d9:7e:48:bc:3d:c5:
bc:17:ca:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:52:57 2025 by rpki-client