Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft
File: Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft (raw, json)
Hash identifier: ia60kUP/HJVb07VzHT7I5TLDQGbbdzrqfyLMdN+fXMw=
Subject key identifier: BB:B5:5A:E5:20:CD:5A:1D:0E:3B:A8:D2:4C:6C:A2:83:87:A3:FC:43
Authority key identifier: 43:9D:D1:CE:AE:0F:65:D6:2A:2E:B7:C6:7C:48:DD:43:0E:7D:A6:96
Certificate issuer: /CN=439dd1ceae0f65d62a2eb7c67c48dd430e7da696
Certificate serial: 0199FCFD2640A0F82DD1E7078759DCEF11AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q53Rzq4PZdYqLrfGfEjdQw59ppY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft
Manifest number: 051B
Signing time: Sun 19 Oct 2025 15:01:12 +0000
Manifest this update: Sun 19 Oct 2025 15:01:12 +0000
Manifest next update: Mon 20 Oct 2025 15:01:12 +0000
Files and hashes: 1: Q53Rzq4PZdYqLrfGfEjdQw59ppY.crl (hash: VBnf5EGyS8fyhUYZaGVAKG431pW75ju/Mz8U5IiuQYc=)
2: oskd316tBTAUTSHf0wsKURHXyDc.roa (hash: IsLUQsw+ev9Voy8iNeiPun8V5Wlg4SPwA/B548IB55M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q53Rzq4PZdYqLrfGfEjdQw59ppY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:26:40:a0:f8:2d:d1:e7:07:87:59:dc:ef:11:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439dd1ceae0f65d62a2eb7c67c48dd430e7da696
Validity
Not Before: Oct 19 15:01:12 2025 GMT
Not After : Oct 20 15:01:12 2025 GMT
Subject: CN=bbb55ae520cd5a1d0e3ba8d24c6ca28387a3fc43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e8:b4:b6:26:9d:02:18:82:77:41:39:7b:c2:
6b:4a:c0:7c:d9:7e:d0:cf:fe:08:af:7e:07:80:59:
7a:c3:1c:bc:56:60:86:cb:39:a6:96:5f:b9:77:fe:
73:31:42:74:41:62:33:b6:79:cf:b3:cc:9d:a0:bb:
0e:cd:2b:ee:e4:d4:41:65:23:a6:2b:36:40:24:55:
64:57:da:53:d7:04:a3:5a:fc:01:ff:03:4e:b0:64:
a0:9b:90:b1:e3:9e:fc:7b:b5:79:05:16:85:e2:8b:
d8:b7:37:18:7e:c0:9d:53:2c:d8:7b:5e:1a:d3:87:
49:df:44:1b:71:86:73:85:0d:80:6b:3c:97:eb:7a:
d0:b5:09:61:88:8c:1f:0f:34:f7:1f:b9:c1:3b:67:
1e:bb:87:27:64:b5:6f:db:b1:03:f6:35:40:09:35:
66:1b:64:ee:43:a7:cb:65:39:11:94:04:51:a8:a6:
4f:97:22:08:c1:58:b3:b0:8c:d3:ee:37:54:3b:82:
32:e7:0e:88:4f:cf:08:a7:11:d3:b1:00:ad:7c:66:
24:c1:fd:c1:02:97:e3:88:25:c3:03:b7:a6:6b:da:
7e:86:e3:c3:e6:e7:50:8e:c1:5b:99:65:06:4f:e9:
69:bc:6e:8f:c0:6a:bd:2e:59:88:2a:eb:7b:3f:64:
de:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:B5:5A:E5:20:CD:5A:1D:0E:3B:A8:D2:4C:6C:A2:83:87:A3:FC:43
X509v3 Authority Key Identifier:
keyid:43:9D:D1:CE:AE:0F:65:D6:2A:2E:B7:C6:7C:48:DD:43:0E:7D:A6:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q53Rzq4PZdYqLrfGfEjdQw59ppY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:9c:ba:29:4a:e1:c1:e5:6d:56:8b:96:b0:03:6a:3b:46:53:
a7:49:9b:d1:d3:bf:7f:b9:ae:bf:74:ff:23:4a:31:f5:50:d7:
68:7e:ff:c0:d0:2a:fd:d1:8e:41:59:0d:2d:de:b7:44:7b:bb:
6a:76:ab:83:96:59:d4:2f:16:6a:64:cd:18:bd:84:bb:e9:54:
8d:8e:bb:95:a5:a9:20:b8:c0:9b:e3:57:e1:88:bf:75:15:18:
cf:e1:33:2f:b4:3e:0c:58:66:18:66:6a:46:0d:8c:e8:37:43:
e9:d1:dd:e3:04:0b:c0:04:cd:f6:0f:e5:06:f4:48:b3:64:54:
91:65:fa:23:a7:01:9e:3a:75:32:17:16:cf:55:82:5e:3c:14:
dd:d8:c2:96:ed:7b:47:88:ee:42:42:4e:84:c2:bc:6e:c8:c9:
ba:9d:88:af:89:4f:fa:86:7e:c0:67:d3:df:a6:71:dd:22:80:
87:c3:0e:ec:ac:d5:43:67:55:38:b9:2e:c1:70:53:dc:21:82:
40:bc:26:07:57:5b:da:01:19:f4:89:75:f2:80:c7:29:ef:26:
b8:12:ab:5b:74:2a:ac:a8:bd:72:1e:11:67:67:3d:aa:ec:f1:
5a:84:31:fc:0a:5f:25:9a:e4:df:f7:a4:99:46:f0:30:bc:d0:
d2:e6:5a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:43 2025 by rpki-client