Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2408e1-e42f-4915-a715-a1d6d91cde68/1/Q5_i1RcHd00tDCv50SrQercmQqI.mft
File: Q5_i1RcHd00tDCv50SrQercmQqI.mft (raw, json)
Hash identifier: DA09lUoOA/JrNbjFy24MTuFVUNULbeBmputj5ohRrUo=
Subject key identifier: 01:CC:64:BC:47:59:0E:5E:4C:94:A6:64:79:31:42:DC:CE:C1:44:F3
Authority key identifier: 43:9F:E2:D5:17:07:77:4D:2D:0C:2B:F9:D1:2A:D0:7A:B7:26:42:A2
Certificate issuer: /CN=439fe2d51707774d2d0c2bf9d12ad07ab72642a2
Certificate serial: 0199FD349300F99B441C8DA71E68BEB54927
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5_i1RcHd00tDCv50SrQercmQqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/2408e1-e42f-4915-a715-a1d6d91cde68/1/Q5_i1RcHd00tDCv50SrQercmQqI.mft
Manifest number: 0F47
Signing time: Sun 19 Oct 2025 16:01:45 +0000
Manifest this update: Sun 19 Oct 2025 16:01:45 +0000
Manifest next update: Mon 20 Oct 2025 16:01:45 +0000
Files and hashes: 1: Q5_i1RcHd00tDCv50SrQercmQqI.crl (hash: cKmb4SgizePn/OszEK4CZhzBKCRbXQ2UZ+LU6FZXQew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/2408e1-e42f-4915-a715-a1d6d91cde68/1/Q5_i1RcHd00tDCv50SrQercmQqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/2408e1-e42f-4915-a715-a1d6d91cde68/1/Q5_i1RcHd00tDCv50SrQercmQqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5_i1RcHd00tDCv50SrQercmQqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:93:00:f9:9b:44:1c:8d:a7:1e:68:be:b5:49:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439fe2d51707774d2d0c2bf9d12ad07ab72642a2
Validity
Not Before: Oct 19 16:01:45 2025 GMT
Not After : Oct 20 16:01:45 2025 GMT
Subject: CN=01cc64bc47590e5e4c94a664793142dccec144f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:06:b8:73:8d:d4:5e:27:4a:22:c6:28:4b:a5:
e5:ef:34:ca:d2:60:19:12:e4:9d:02:5c:1c:52:a9:
db:67:aa:28:5c:e4:c4:7d:ee:77:bf:1c:af:e0:37:
04:c7:5f:24:a5:2e:b3:0e:25:3a:85:27:0d:d5:9d:
aa:a7:34:ac:42:81:f4:93:48:7e:72:e8:d9:d0:ad:
0b:9e:0f:d4:c6:cd:fb:29:d3:51:45:74:be:9e:f9:
e1:d6:e6:08:d6:72:a6:8c:8b:02:47:f5:85:79:41:
88:b5:a9:ce:1a:ad:ab:fb:46:98:9d:aa:d5:33:83:
1c:97:29:cd:de:b5:08:d1:73:d3:fa:77:64:68:5f:
2f:58:96:d5:af:9d:3d:e5:7a:20:29:37:2c:ae:64:
1a:a8:b6:77:25:d8:9d:e5:52:35:55:ae:9f:79:16:
54:6c:49:b0:48:89:72:9a:04:56:24:c6:2f:e4:c8:
2f:ee:3c:01:07:be:aa:63:c7:66:e2:ee:b9:8e:f3:
5a:24:21:de:32:81:93:13:bd:79:6f:d0:c7:e3:db:
5c:e7:48:94:11:57:e0:4e:e3:2d:8c:90:cf:67:7e:
a2:60:1c:40:4b:c4:b3:00:62:33:53:3d:d4:5c:ff:
48:01:82:5c:06:2f:37:d6:33:00:6e:45:bf:8c:32:
23:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:CC:64:BC:47:59:0E:5E:4C:94:A6:64:79:31:42:DC:CE:C1:44:F3
X509v3 Authority Key Identifier:
keyid:43:9F:E2:D5:17:07:77:4D:2D:0C:2B:F9:D1:2A:D0:7A:B7:26:42:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5_i1RcHd00tDCv50SrQercmQqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2408e1-e42f-4915-a715-a1d6d91cde68/1/Q5_i1RcHd00tDCv50SrQercmQqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2408e1-e42f-4915-a715-a1d6d91cde68/1/Q5_i1RcHd00tDCv50SrQercmQqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:d7:5a:89:52:bf:b6:cc:dd:52:22:c3:b0:cf:1f:51:b2:39:
a5:9b:85:fe:f7:a0:4a:f6:d9:ff:51:c3:bd:5a:21:bd:70:8e:
d1:3c:f5:43:69:3f:d0:5e:ca:18:a8:ee:0d:b3:84:de:24:09:
e1:80:03:42:80:d8:67:3a:c2:8e:a8:e3:27:e4:83:52:1e:9d:
8c:63:75:e2:a9:2d:9d:5b:d8:0c:b2:f3:fc:aa:70:6a:f6:ab:
e8:bb:98:71:c1:92:68:70:e3:1a:5f:59:ba:3c:2c:85:d8:99:
d4:42:97:51:b3:6d:b5:4b:d5:fc:4c:d4:73:df:72:44:5f:f2:
01:5b:05:b9:01:ab:1b:cf:d1:f0:a1:02:df:1e:e1:51:9f:db:
39:83:5e:64:07:6a:ea:b6:dd:cb:55:77:2f:cc:68:31:77:6f:
98:34:47:1e:1b:8c:e3:6a:bd:f8:3c:4f:7b:58:15:79:11:95:
88:92:32:24:b2:6c:68:00:36:50:06:ac:6d:da:7e:9a:9f:2b:
cb:eb:82:da:66:29:0e:fc:00:16:20:07:f5:28:ff:6b:3d:05:
49:e4:8a:ed:36:8e:8a:56:50:26:1b:bf:3e:b3:d3:60:21:ad:
59:ca:09:65:8a:ef:1a:01:49:55:71:b3:e0:0a:fc:d1:bb:1f:
54:46:e4:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:31 2025 by rpki-client