Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/fd59b3-23cc-40fe-8064-371d5c842f2c/1/Q2K8kLpELu8Z1eglNlIyYsXrcqA.mft
File: Q2K8kLpELu8Z1eglNlIyYsXrcqA.mft (raw, json)
Hash identifier: 9X2JMHt70fgpV7rrrqX1fjUL3wzVeWRDMzrcvulCj3I=
Subject key identifier: 5A:01:90:23:2C:DB:6D:6A:7D:60:D2:E4:BE:E5:F6:6F:54:FC:46:44
Authority key identifier: 43:62:BC:90:BA:44:2E:EF:19:D5:E8:25:36:52:32:62:C5:EB:72:A0
Certificate issuer: /CN=4362bc90ba442eef19d5e82536523262c5eb72a0
Certificate serial: 0199FB7C9FBDFC64D1CCB741C782AF068FDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q2K8kLpELu8Z1eglNlIyYsXrcqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/fd59b3-23cc-40fe-8064-371d5c842f2c/1/Q2K8kLpELu8Z1eglNlIyYsXrcqA.mft
Manifest number: 5B
Signing time: Sun 19 Oct 2025 08:01:12 +0000
Manifest this update: Sun 19 Oct 2025 08:01:12 +0000
Manifest next update: Mon 20 Oct 2025 08:01:12 +0000
Files and hashes: 1: Q2K8kLpELu8Z1eglNlIyYsXrcqA.crl (hash: 0NESWHknnQsl5LHtk6OoWu7x5QKcK79AbP5gmwQPZqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/fd59b3-23cc-40fe-8064-371d5c842f2c/1/Q2K8kLpELu8Z1eglNlIyYsXrcqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/fd59b3-23cc-40fe-8064-371d5c842f2c/1/Q2K8kLpELu8Z1eglNlIyYsXrcqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q2K8kLpELu8Z1eglNlIyYsXrcqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:9f:bd:fc:64:d1:cc:b7:41:c7:82:af:06:8f:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4362bc90ba442eef19d5e82536523262c5eb72a0
Validity
Not Before: Oct 19 08:01:12 2025 GMT
Not After : Oct 20 08:01:12 2025 GMT
Subject: CN=5a0190232cdb6d6a7d60d2e4bee5f66f54fc4644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:f8:03:95:d9:de:72:a9:54:59:8e:43:f7:70:
dc:7a:49:b5:66:4b:35:94:d9:f6:b2:7c:83:b8:06:
f5:a3:29:64:ce:61:10:b5:5d:ac:73:c0:65:5e:cb:
29:d0:48:4d:9a:9c:0b:6a:23:22:73:44:5e:de:20:
d1:6e:16:99:cc:6b:1a:e5:b4:84:2f:4e:94:94:3f:
66:4c:21:a8:b2:da:e6:24:22:7d:93:95:6b:3b:81:
92:84:ed:94:bc:70:fd:95:0e:9b:f1:dd:f3:ac:9e:
e9:ab:d9:76:66:a6:52:86:bd:47:3a:35:22:fc:9f:
48:48:08:33:c2:11:eb:c2:ed:5e:25:1c:dd:1c:72:
5c:bb:b9:f3:01:d2:2d:87:ac:2d:9e:b2:d2:05:21:
c8:3f:25:9a:03:bb:62:54:0d:c9:38:51:06:5f:89:
48:98:fc:7d:80:28:fe:c0:97:9e:2c:d6:fc:a7:88:
02:2f:e6:5f:34:cb:a8:b1:61:4d:ec:9e:46:46:43:
f4:4c:96:2b:71:28:fe:38:c2:8e:03:32:10:93:ba:
b9:3e:e7:6c:da:79:60:35:fb:6a:f7:78:8e:3a:85:
72:c1:52:30:b0:94:e9:d8:7c:e4:2f:f7:d9:a6:52:
f8:dd:2a:9c:04:e5:a3:76:41:99:9d:04:f8:cc:51:
e0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:01:90:23:2C:DB:6D:6A:7D:60:D2:E4:BE:E5:F6:6F:54:FC:46:44
X509v3 Authority Key Identifier:
keyid:43:62:BC:90:BA:44:2E:EF:19:D5:E8:25:36:52:32:62:C5:EB:72:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2K8kLpELu8Z1eglNlIyYsXrcqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/fd59b3-23cc-40fe-8064-371d5c842f2c/1/Q2K8kLpELu8Z1eglNlIyYsXrcqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/fd59b3-23cc-40fe-8064-371d5c842f2c/1/Q2K8kLpELu8Z1eglNlIyYsXrcqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:12:17:3c:c5:f8:d6:b3:50:93:2d:c9:6c:89:53:2c:9a:48:
42:01:e9:95:4d:f8:84:75:7e:f9:6e:1d:5a:28:9c:e9:23:70:
f9:a5:72:b9:ef:cb:24:d6:99:07:e1:67:ec:79:90:4a:4c:fc:
1c:c7:63:44:d4:aa:e7:24:af:4a:51:1c:bb:ea:d3:87:95:f0:
10:3d:d0:a0:2e:72:d6:7e:cc:8e:6a:3f:6f:21:47:2d:ee:cf:
31:44:67:27:e0:77:ad:6b:1d:5c:23:36:be:ba:ee:55:24:6b:
55:41:2d:55:b0:e5:42:20:52:76:ea:1c:b8:e6:b0:0c:92:98:
24:ee:e8:ce:31:38:66:19:6e:89:9f:08:b1:23:d9:ad:10:6f:
c0:7e:7c:4f:ac:4f:b2:f3:b2:96:98:ff:40:8b:f9:d4:0d:ba:
7e:39:46:d2:d8:ff:0e:8d:e4:5b:08:3e:5a:d8:f0:b7:e6:32:
6a:3b:55:26:d8:4d:80:25:7c:ba:42:f2:df:cb:c6:a1:77:ca:
12:ac:9a:db:df:89:46:11:06:88:f5:38:96:ff:d9:51:ea:a8:
de:41:b5:c2:c7:ea:c7:62:15:1d:55:ac:09:4b:bc:b0:22:22:
f8:07:93:07:ee:fe:75:a1:0b:46:0e:a1:c9:57:6a:3e:18:99:
03:39:d0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:02 2025 by rpki-client