Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft
File: q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft (raw, json)
Hash identifier: R0cgJ7GSygrZ2cyAwd5NxPAC9EhboLYFja9GdVT2uOs=
Subject key identifier: FD:A1:49:66:0C:B2:22:78:FE:1F:97:56:34:09:55:0A:72:94:F4:C9
Authority key identifier: AB:91:D5:26:25:61:A9:DD:71:3D:FA:39:16:3D:EC:84:9F:EE:46:36
Certificate issuer: /CN=ab91d5262561a9dd713dfa39163dec849fee4636
Certificate serial: 019A221B4E0BC83699C6237A541D78463000
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft
Manifest number: 16F7
Signing time: Sun 26 Oct 2025 20:00:05 +0000
Manifest this update: Sun 26 Oct 2025 20:00:05 +0000
Manifest next update: Mon 27 Oct 2025 20:00:05 +0000
Files and hashes: 1: 90qSTJbYoJhXhjJi4rtP_ZNlhJU.roa (hash: OSVSFtU4v1yfm+DOAOwZeidgdh2EY4LpmP/NOkKDmkg=)
2: JErXjXvKorGj9aJu1omld6wdpcs.roa (hash: kiyLNY+zTwPwB8AkdrotNIs7qiykrRwfggYUByu+C28=)
3: UscJiSEPN7-PYnIHOgT8LNjrioo.roa (hash: RVU014DpCH3z/tdVgprON9hggZk6wMumDABO2h4+Fx0=)
4: q5HVJiVhqd1xPfo5Fj3shJ_uRjY.crl (hash: ZhK14NTuX/kulSKDBqu2/0ClcZzcRe6rOQeTyYnaHu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:1b:4e:0b:c8:36:99:c6:23:7a:54:1d:78:46:30:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab91d5262561a9dd713dfa39163dec849fee4636
Validity
Not Before: Oct 26 20:00:05 2025 GMT
Not After : Oct 27 20:00:05 2025 GMT
Subject: CN=fda149660cb22278fe1f97563409550a7294f4c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:99:58:a8:a0:cb:50:ca:42:62:50:e0:46:a4:
d0:4a:0b:c9:ae:f8:a9:6d:88:41:d3:4a:08:26:c2:
43:8d:ca:25:52:8a:5d:07:3e:2a:0b:da:ee:18:de:
b8:93:02:d2:8f:82:d3:06:d4:f4:4d:ef:10:41:60:
f9:47:7d:25:24:11:6d:33:ad:bc:9d:fb:2c:8d:37:
a0:d7:24:d2:5e:69:02:88:93:82:f6:8a:56:57:f7:
0f:0d:36:74:bc:32:28:13:7d:73:20:5e:2f:37:cd:
01:62:97:84:22:f1:30:7c:cb:77:fb:5d:33:99:1f:
35:6c:2e:d3:91:39:64:23:ec:5e:1b:bf:29:63:4b:
e7:95:41:91:3f:e5:da:39:c5:12:f7:56:39:22:09:
91:7c:8f:38:39:96:92:bc:c0:e4:86:26:20:c5:02:
69:56:2e:35:58:df:32:7f:6b:54:e8:6a:5a:81:86:
d1:fa:bd:82:63:74:e1:ac:60:d4:a5:6e:f0:42:95:
c3:36:97:49:f5:37:f3:b0:55:e7:32:87:07:4e:c3:
92:0f:c5:57:63:99:b0:76:04:97:4b:fc:fc:8d:f0:
f1:56:b0:81:b4:de:33:ad:28:7e:e8:c1:34:d0:4e:
f1:98:af:13:c1:6b:7c:51:24:42:fb:3b:e2:fb:f8:
b9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A1:49:66:0C:B2:22:78:FE:1F:97:56:34:09:55:0A:72:94:F4:C9
X509v3 Authority Key Identifier:
keyid:AB:91:D5:26:25:61:A9:DD:71:3D:FA:39:16:3D:EC:84:9F:EE:46:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:1e:09:ae:9b:b0:de:0a:8d:6b:45:0a:b7:26:fb:40:f8:98:
df:0c:5c:f1:9b:63:be:26:2f:99:1e:46:51:02:4b:3d:ad:dc:
5b:15:30:39:f8:5e:65:7d:5d:49:7f:a2:70:db:50:54:3f:2e:
a3:48:5f:5e:c4:25:f5:0f:50:43:76:3b:36:5f:84:f4:5d:46:
c8:a2:e3:87:f2:83:e7:01:c8:4f:67:69:7e:64:c4:ac:06:98:
5f:97:14:e3:85:36:28:f6:b0:40:42:59:ad:06:d0:e2:c7:14:
ef:69:ee:e6:15:31:66:57:e1:34:27:bd:5b:48:30:2e:72:14:
5e:f6:61:f4:6a:88:66:ac:15:bb:67:0a:56:53:8b:c5:5f:c0:
3f:fb:cc:23:f8:66:66:08:39:a6:bd:31:9f:2d:38:6b:dc:23:
43:2c:9a:17:32:99:a8:90:15:25:e4:7e:e2:e7:a7:72:52:8d:
11:cd:66:36:5a:2c:c9:73:72:63:eb:43:ea:f0:55:74:f7:e0:
90:cb:21:72:0c:46:51:0e:01:fc:45:3b:ab:e2:13:d7:b6:d3:
20:8f:e0:a9:74:ca:3a:7c:f2:1b:9c:ef:63:16:ed:4c:1a:6a:
a9:37:a2:be:ae:aa:05:3d:0a:4d:d7:7c:98:c5:93:36:8e:21:
65:62:08:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:52:49 2025 by rpki-client