Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft
File: Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft (raw, json)
Hash identifier: amWU35tr5EC6BQ5XnlP7XMru+H4yuJ3Q/OqSwMCJBRk=
Subject key identifier: 0D:2D:57:7D:07:80:95:72:CD:E7:33:14:6A:98:05:AA:36:88:1A:5C
Authority key identifier: 43:91:37:BE:FE:8B:C5:59:03:69:0C:7C:46:AF:19:7C:C9:1A:70:3C
Certificate issuer: /CN=439137befe8bc55903690c7c46af197cc91a703c
Certificate serial: 019A1F517962A7B73AEF2F89FED8B1B83557
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft
Manifest number: 02DF
Signing time: Sun 26 Oct 2025 07:00:24 +0000
Manifest this update: Sun 26 Oct 2025 07:00:24 +0000
Manifest next update: Mon 27 Oct 2025 07:00:24 +0000
Files and hashes: 1: Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.crl (hash: dy4HwEtwuyZvhdXqW9GUA8W8Y9Ucj21AYTs1miEJBPc=)
2: wVZ7Q_yh7vY87ipQHKXps_Y5QUU.roa (hash: F0pmi/wk6PrJmlY3U42fDKf/ChECXrlPOqHq8mmS3J0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:51:79:62:a7:b7:3a:ef:2f:89:fe:d8:b1:b8:35:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439137befe8bc55903690c7c46af197cc91a703c
Validity
Not Before: Oct 26 07:00:24 2025 GMT
Not After : Oct 27 07:00:24 2025 GMT
Subject: CN=0d2d577d07809572cde733146a9805aa36881a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f1:5a:a6:50:08:52:1d:79:b7:a6:7d:c2:c5:
84:45:e2:d6:47:7b:fb:cc:c7:36:f7:6d:a2:3a:c3:
10:4c:39:67:b7:b8:a8:3b:cc:d8:9c:55:60:a8:0f:
b3:66:a6:b4:52:87:6a:fe:1f:c2:b9:2b:d7:db:aa:
67:af:ad:fd:08:96:93:36:83:04:c0:92:6a:46:b9:
a7:57:a3:7c:cc:bd:3c:81:c8:e2:b9:47:a7:5c:08:
57:b6:27:2b:76:84:e5:6f:80:a0:8e:c8:78:8a:34:
1b:cf:ec:63:52:68:0a:8b:f9:c3:d9:62:39:e2:14:
1b:0e:0a:c7:b0:ac:eb:e9:4d:84:41:32:d4:4e:91:
18:5f:24:e5:d8:75:89:86:b5:8a:fb:a3:25:61:08:
40:cf:f5:89:ef:2c:2b:9f:45:bf:d1:a1:be:c8:e5:
12:61:a6:1e:b1:75:19:f2:8f:41:ca:55:fd:d4:37:
f0:9a:6f:68:28:90:7d:22:c7:15:32:a1:b2:de:9d:
ee:55:01:2b:83:ad:5b:61:0d:a5:c6:73:0c:ea:e7:
e7:61:4d:14:99:b5:b1:6e:0f:09:e4:e0:e7:4d:fa:
76:0d:6c:94:6a:81:46:36:d5:39:7d:6e:b6:92:a7:
3b:2e:87:2a:83:72:c0:66:64:cc:ec:d8:2c:90:5c:
de:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:2D:57:7D:07:80:95:72:CD:E7:33:14:6A:98:05:AA:36:88:1A:5C
X509v3 Authority Key Identifier:
keyid:43:91:37:BE:FE:8B:C5:59:03:69:0C:7C:46:AF:19:7C:C9:1A:70:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:23:de:70:6c:95:46:0f:2c:25:8a:94:64:a1:f4:89:72:27:
4c:9f:a2:15:30:e5:7a:10:50:1f:32:c5:9f:6f:6a:50:02:04:
a0:77:f7:51:b4:84:66:f7:09:12:c7:23:f8:ff:fc:d9:3f:04:
a5:44:f7:eb:93:06:56:b5:7f:86:a2:c6:fe:a1:76:d3:52:9d:
7d:b2:ed:94:28:91:84:5d:ae:3d:71:90:7b:5b:70:60:3f:58:
76:30:2e:8c:6e:96:b4:20:33:64:68:29:cc:79:0e:b9:56:2f:
50:a5:a4:eb:2b:f8:70:7b:2c:54:d4:3f:55:3a:2a:ca:3d:24:
c5:57:ef:00:73:ba:cd:48:15:17:4e:2a:7d:02:81:9f:e2:ba:
d2:d6:25:85:69:c1:52:6c:a8:fe:78:42:c1:e3:6e:9d:d6:0b:
05:4b:ef:67:66:45:3d:c6:9e:eb:bb:1a:ad:7e:9d:98:95:7e:
6c:b3:c3:35:83:00:68:eb:5a:ff:34:ca:27:20:93:dd:f1:5f:
9d:f2:eb:88:c1:40:20:a4:a1:5a:9f:f3:a7:cb:b6:2d:a6:b9:
86:c5:9c:b9:9d:33:9f:f0:5c:41:75:c4:72:e8:ff:22:f6:59:
b7:fa:a6:80:9a:48:8d:95:b7:e5:20:c6:f9:dd:fd:f1:05:f9:
a6:f7:cb:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 13:02:35 2025 by rpki-client