Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft
File: Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft (raw, json)
Hash identifier: UzSH5IkogLEqeL1VIWe2arkqQ0mvbvSs0ynP9zmBcss=
Subject key identifier: F4:71:A6:6C:15:54:54:56:59:E8:FD:8D:FC:A1:2B:A7:2E:A3:AB:96
Authority key identifier: 43:91:37:BE:FE:8B:C5:59:03:69:0C:7C:46:AF:19:7C:C9:1A:70:3C
Certificate issuer: /CN=439137befe8bc55903690c7c46af197cc91a703c
Certificate serial: 0199FE7DA727E3E1DB6C9B013B0AAB42DEFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft
Manifest number: 02CE
Signing time: Sun 19 Oct 2025 22:01:11 +0000
Manifest this update: Sun 19 Oct 2025 22:01:11 +0000
Manifest next update: Mon 20 Oct 2025 22:01:11 +0000
Files and hashes: 1: Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.crl (hash: 9iQ1Zf+MbcTPGXUBkx36GL+nhoGEACzWcpN3txMx1yg=)
2: wVZ7Q_yh7vY87ipQHKXps_Y5QUU.roa (hash: F0pmi/wk6PrJmlY3U42fDKf/ChECXrlPOqHq8mmS3J0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:a7:27:e3:e1:db:6c:9b:01:3b:0a:ab:42:de:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439137befe8bc55903690c7c46af197cc91a703c
Validity
Not Before: Oct 19 22:01:11 2025 GMT
Not After : Oct 20 22:01:11 2025 GMT
Subject: CN=f471a66c1554545659e8fd8dfca12ba72ea3ab96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:af:23:ee:88:11:50:9a:f4:94:74:90:c1:f7:
01:01:c4:5b:55:1f:3d:36:68:39:18:b3:16:fb:6e:
b4:f0:8f:0f:fe:c1:12:f7:1d:82:ab:26:50:82:ba:
61:10:70:4b:ce:2e:f8:4e:f5:85:15:de:6d:f7:2c:
2b:22:1b:42:f0:24:1f:26:79:f2:d5:33:66:cb:f4:
c5:17:94:f7:ec:81:71:b3:e7:74:f5:e5:55:b6:c4:
8b:7d:44:1c:da:a7:d3:65:64:f1:33:b4:e3:13:b4:
a0:55:56:69:d3:c7:e9:61:f0:4e:5a:d5:85:d9:dc:
11:43:b3:b5:15:dd:ec:19:f1:d7:da:1a:d7:cd:bf:
10:28:e7:74:a3:70:7c:b4:22:b9:59:d8:7f:cb:60:
4b:9b:76:c8:91:b2:2b:cc:ce:dd:b7:c8:55:7e:61:
54:5d:28:bf:b5:bc:74:a8:17:a8:fe:c4:6d:c9:66:
16:8f:33:8a:96:ac:97:1e:9f:5b:e0:8b:08:35:31:
8a:a4:72:45:8c:d0:ca:b1:39:17:57:67:31:2c:fb:
3f:71:8b:79:42:48:ce:0e:6e:57:99:f8:d5:11:78:
7d:4d:79:84:37:e3:5d:14:b1:e3:0c:ea:f4:92:da:
26:b7:64:1a:35:5c:62:c3:58:d6:36:8f:c2:aa:74:
a6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:71:A6:6C:15:54:54:56:59:E8:FD:8D:FC:A1:2B:A7:2E:A3:AB:96
X509v3 Authority Key Identifier:
keyid:43:91:37:BE:FE:8B:C5:59:03:69:0C:7C:46:AF:19:7C:C9:1A:70:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:bd:05:0b:c2:f6:fb:77:07:96:21:b4:cc:05:90:d6:dd:8c:
b4:f5:4e:03:03:4a:ae:b1:0e:33:82:2a:d8:d2:49:86:a5:f6:
0b:db:73:0c:c2:5c:2e:ab:79:ed:95:8b:d0:2a:3d:7d:2d:b1:
b1:e4:37:bf:b4:ca:5a:0a:11:7a:b6:a0:84:af:4d:3d:d5:33:
f8:76:59:22:f0:2d:49:cf:4b:b3:87:1c:a4:31:2b:3b:37:ed:
26:9b:06:d1:ef:40:cb:1d:ba:00:45:f7:91:05:f6:d2:84:c3:
6b:15:fd:50:b0:73:55:d1:22:c1:3f:37:fd:60:22:27:60:b9:
48:45:a4:a7:d5:2a:7f:db:e3:0a:ac:df:7f:d0:84:84:70:37:
6f:b9:07:a0:05:66:92:51:8f:b2:64:92:fc:75:65:36:0c:58:
b0:86:d5:b2:fd:90:03:c3:66:cd:1c:26:a1:bc:35:d2:8e:76:
e6:85:71:33:5f:82:7d:0c:5b:97:88:63:9c:73:2d:e5:4f:c1:
bb:f1:57:db:96:ed:11:9a:b7:f0:c9:ea:37:fb:6c:69:21:d8:
e9:4c:35:51:f6:a0:5b:06:bf:3c:59:f1:b3:34:83:ff:27:b5:
8c:a8:53:d4:f0:6e:2e:da:9f:f1:3e:f3:28:9d:90:cd:00:29:
41:e9:70:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:49:22 2025 by rpki-client