Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
File: Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft (raw, json)
Hash identifier: riLjVHPdrt0AJp951iCKqyDAW4AkRXSO26xGSrQ42Y8=
Subject key identifier: 47:28:DE:5C:42:B8:4A:02:9A:B2:D1:51:89:FC:84:E5:9D:A4:4F:3B
Authority key identifier: 43:A4:38:81:37:50:13:3E:55:00:1B:F8:96:70:A0:DB:3A:E5:BE:1F
Certificate issuer: /CN=43a438813750133e55001bf89670a0db3ae5be1f
Certificate serial: 019A4F2B36FADC20DBE5B8EC147BE262196B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 14:00:23 +0000
Manifest this update: Tue 04 Nov 2025 14:00:23 +0000
Manifest next update: Wed 05 Nov 2025 14:00:23 +0000
Files and hashes: 1: Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl (hash: oVQNwJBWaW0qCjqIP0tVmJ1+PjIb3kUUrJRzOIeah0g=)
2: RyUHQEgGXjRJvvBofzPoVBVvJLI.roa (hash: 8LvL1DJ5MAmrFF0fUbGtnSpplfiMkmqva41THaM74ck=)
3: s_oUhLMqLfuuuJ5GAra3RGPGuEo.roa (hash: lMo8tMkOr3gYSijDEd95RyC1UxQ+xYW4gIbbh74Ckwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:36:fa:dc:20:db:e5:b8:ec:14:7b:e2:62:19:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a438813750133e55001bf89670a0db3ae5be1f
Validity
Not Before: Nov 4 14:00:23 2025 GMT
Not After : Nov 5 14:00:23 2025 GMT
Subject: CN=4728de5c42b84a029ab2d15189fc84e59da44f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9f:45:7a:94:53:3c:f5:4c:2b:44:6a:96:13:
39:58:83:2c:33:08:3a:b5:4b:3b:d5:49:16:e4:65:
30:52:f3:36:f8:61:bc:18:c0:89:63:c6:e8:0b:d4:
f2:d0:54:21:1a:dd:f6:8f:03:c7:dd:72:ba:b8:48:
18:f0:19:72:9b:be:22:f0:e0:3c:61:de:81:3d:e3:
f3:f4:89:0b:9e:e4:78:c0:5a:d9:0f:29:98:44:d8:
69:31:36:69:a9:fe:f2:45:9f:b2:a3:35:ab:d5:79:
be:b8:f6:4b:0c:8b:5c:8d:9d:62:8a:8b:91:aa:bf:
03:7d:fa:45:95:b4:e5:01:eb:0e:60:cc:cf:96:48:
3b:2a:a3:46:cf:9d:db:14:36:b7:b5:4e:c9:52:fe:
15:2f:cc:3d:76:c7:11:a7:75:f6:21:ed:ce:ad:0c:
9d:bc:06:e0:d0:53:72:7c:33:8f:a1:49:32:c0:b1:
50:df:f9:0f:9c:c0:ec:eb:44:23:09:33:9b:4d:5b:
24:87:47:6d:56:0d:1c:76:f1:4b:ff:8d:8d:3f:ee:
3d:69:94:82:97:71:00:23:14:16:97:7b:1c:54:0e:
99:e8:fe:06:29:f0:f0:c4:bb:c3:9b:f4:0b:15:8a:
58:1a:43:0b:50:60:ec:fd:13:3e:1a:a7:ff:89:bb:
20:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:28:DE:5C:42:B8:4A:02:9A:B2:D1:51:89:FC:84:E5:9D:A4:4F:3B
X509v3 Authority Key Identifier:
keyid:43:A4:38:81:37:50:13:3E:55:00:1B:F8:96:70:A0:DB:3A:E5:BE:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:42:42:7b:11:c2:1a:ac:32:b4:d9:85:2d:84:69:71:a6:cd:
96:5e:b8:7c:00:64:a3:3b:f4:c4:46:e1:ed:1e:79:d2:54:88:
1a:d7:b4:ba:02:47:a3:09:ff:b8:7a:5e:11:51:c2:22:d1:ff:
7f:ec:72:a3:f1:0c:29:24:de:bc:e6:6d:8f:b9:5a:d2:56:aa:
0c:64:ed:ca:89:7f:6a:24:cf:c2:e1:3d:69:a5:58:5e:f5:34:
6c:9f:c9:ef:30:69:a3:17:fa:87:76:20:49:96:9d:af:8e:ea:
81:67:53:a9:38:e9:2a:48:f2:59:5f:84:2b:fc:a0:5e:57:fb:
7a:53:44:56:82:04:99:15:a5:d7:04:55:66:c3:f9:c7:53:3c:
85:e1:c9:94:78:ec:63:28:c6:f0:ae:df:70:20:d1:ec:11:ef:
67:0e:b4:b5:6c:b7:6d:52:b1:c9:50:aa:0b:d9:2d:45:38:3f:
02:63:23:c1:7e:26:b1:c4:40:87:64:65:15:71:1f:56:d4:a8:
65:03:1a:84:41:06:86:4e:ed:ba:4b:20:03:b5:c7:d7:96:99:
1f:0c:bd:f2:51:2d:22:b6:c3:c9:2d:bb:49:e9:2a:f9:00:ca:
7f:b1:a6:47:fa:73:81:8c:b9:aa:0f:e4:ba:4d:04:c2:a4:8c:
3a:a5:4b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:06:18 2025 by rpki-client