Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.mft
File: Q5p_k_yoCMgtJvv-D94bloz26NM.mft (raw, json)
Hash identifier: 0Je2J+WNkrAcTZ9lAWPyfj+uBeCWgZNu8jsJd/EeD/U=
Subject key identifier: 44:75:CA:27:46:B7:CC:67:7D:B5:A7:D9:87:A9:9B:E5:FC:8C:DC:F0
Authority key identifier: 43:9A:7F:93:FC:A8:08:C8:2D:26:FB:FE:0F:DE:1B:96:8C:F6:E8:D3
Certificate issuer: /CN=439a7f93fca808c82d26fbfe0fde1b968cf6e8d3
Certificate serial: 019A71EEE60FF42968AF0F582AC527CB1EDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5p_k_yoCMgtJvv-D94bloz26NM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.mft
Manifest number: 093F
Signing time: Tue 11 Nov 2025 08:01:13 +0000
Manifest this update: Tue 11 Nov 2025 08:01:13 +0000
Manifest next update: Wed 12 Nov 2025 08:01:13 +0000
Files and hashes: 1: O9UxuLNdjVpPMRVJ8_xamVbi3ck.roa (hash: w7PnuXi3vgOvtTP6oScaXCDqYyS0FwVpkDFtt58ndZ4=)
2: Q5p_k_yoCMgtJvv-D94bloz26NM.crl (hash: 1izwye12Ry8Qv2fgUSADbNfBtijUClQmpIcTHiRZO4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5p_k_yoCMgtJvv-D94bloz26NM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:e6:0f:f4:29:68:af:0f:58:2a:c5:27:cb:1e:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439a7f93fca808c82d26fbfe0fde1b968cf6e8d3
Validity
Not Before: Nov 11 08:01:13 2025 GMT
Not After : Nov 12 08:01:13 2025 GMT
Subject: CN=4475ca2746b7cc677db5a7d987a99be5fc8cdcf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:13:a4:19:d7:99:c7:ef:87:c1:5a:57:39:2b:
23:3c:39:bb:ff:42:61:bc:51:4f:51:65:2b:c4:ae:
5b:20:0e:5a:f9:08:15:2c:60:39:c3:45:f1:05:85:
6e:ea:14:d3:56:90:37:f2:71:99:d4:88:a6:53:7e:
91:02:a4:07:de:34:cb:9f:f2:cb:68:c9:f0:4d:91:
35:75:25:c9:f2:e0:1f:b5:96:a3:10:d7:a2:05:e1:
24:1c:03:dc:e4:1c:d6:8f:86:c2:48:b6:ea:c2:1b:
8f:dd:d1:c4:e8:d4:8e:8e:6c:7c:7a:b4:2e:72:da:
ab:6a:42:34:ac:50:19:39:cf:a9:13:2e:70:c4:22:
5d:c2:eb:a9:7d:11:60:7c:a6:ba:49:86:99:39:f8:
f9:3c:b2:09:7c:e1:be:a2:4b:1d:1f:fd:20:03:e7:
2f:bb:dc:0d:d9:a0:8a:41:63:0a:7f:3b:27:34:6f:
29:cc:b3:ee:b3:e4:c9:8f:23:df:92:46:83:95:93:
95:e7:f5:16:dd:0f:26:f0:86:32:e0:f6:4e:69:b1:
d7:03:52:44:11:ac:65:c8:4b:5f:27:95:24:76:bd:
99:32:8c:15:a0:d2:00:ce:00:41:8f:7f:d0:10:eb:
20:4d:ff:40:f3:5e:fb:f4:1f:bd:0a:84:f4:cf:e2:
1d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:75:CA:27:46:B7:CC:67:7D:B5:A7:D9:87:A9:9B:E5:FC:8C:DC:F0
X509v3 Authority Key Identifier:
keyid:43:9A:7F:93:FC:A8:08:C8:2D:26:FB:FE:0F:DE:1B:96:8C:F6:E8:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5p_k_yoCMgtJvv-D94bloz26NM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:27:12:54:17:83:28:79:fe:b5:97:e0:86:dd:5d:41:f8:47:
ea:59:ca:bd:a5:2a:79:37:58:96:b1:22:ab:fb:a8:71:04:70:
39:ad:ef:91:27:7a:83:2f:e9:3b:68:8c:e2:c5:0e:a8:a9:33:
fb:e3:03:d7:97:8a:77:b2:b3:ca:fc:21:2b:60:68:cf:2a:52:
24:89:40:a8:61:9b:df:07:d8:33:a1:49:16:58:13:c3:f3:6a:
6a:0a:94:d9:2c:28:32:15:65:7c:2f:5b:d2:ec:94:03:1e:d2:
ce:e0:50:1f:c9:98:7a:d1:44:40:c3:7e:86:f2:1e:b5:67:9d:
65:8a:9e:c6:70:bc:ae:b9:6c:bb:9f:24:5a:5f:9a:d9:1a:2d:
87:40:74:84:ab:13:07:e7:3c:50:75:79:59:53:4a:2e:62:50:
bf:cc:65:36:6a:81:e2:7d:02:d5:00:a3:7d:90:55:23:6b:c2:
8c:6b:3f:c8:31:a4:25:22:06:03:c5:93:4e:12:05:25:12:d9:
b7:c6:c9:ac:84:7f:ac:84:12:28:67:21:88:8b:99:03:fd:c4:
45:fc:4e:38:22:1a:04:be:b8:3d:d3:d3:4c:f3:ff:6c:34:a8:
97:34:ae:2b:dc:f4:99:c2:15:a1:8e:50:24:77:78:ec:3d:8c:
43:05:6d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:15:56 2025 by rpki-client