Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft
File: 1-QN586_ZTA8mtn__o01ulGwp1iQ.mft (raw, json)
Hash identifier: DdD0ffQ7iko7EVJ14gfw+x5Ofmvgkb29Mt6OuclCvt8=
Subject key identifier: 24:A8:B7:47:C5:F1:6D:BF:44:B6:73:36:A2:A4:8C:D6:E7:2F:DA:78
Authority key identifier: F9:03:79:F3:AF:D9:4C:0F:26:B6:7F:FF:A3:4D:6E:94:6C:29:D6:24
Certificate issuer: /CN=f90379f3afd94c0f26b67fffa34d6e946c29d624
Certificate serial: 019A4F2B0800F3DFE363705F98B0D38BBD79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft
Manifest number: 143C
Signing time: Tue 04 Nov 2025 14:00:11 +0000
Manifest this update: Tue 04 Nov 2025 14:00:11 +0000
Manifest next update: Wed 05 Nov 2025 14:00:11 +0000
Files and hashes: 1: 1-QN586_ZTA8mtn__o01ulGwp1iQ.crl (hash: mVt9grq28i8fjK5Vgadz3qTLRbfa5Ksf9OhAUtEKZyo=)
2: B9xdpXPKaKD7kATBDRUYPDrfJHM.roa (hash: xUpn/6yW+QKWLSXqnG2abjnoqVCxULjYMRU+slTa5PQ=)
3: YYzrkPDEMpFz0VlMFyfkPlvrIPc.roa (hash: ZTbSueGcUA5J+8KJD8a0DCRWPR/FrTGgSZg4efTERpc=)
4: z0hWnzSRmHLyAYMYl1nKCZOWbgw.roa (hash: GQY4W56WRkuweljajSL0/DPkbwKgksUsLIAtILepWM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:08:00:f3:df:e3:63:70:5f:98:b0:d3:8b:bd:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f90379f3afd94c0f26b67fffa34d6e946c29d624
Validity
Not Before: Nov 4 14:00:11 2025 GMT
Not After : Nov 5 14:00:11 2025 GMT
Subject: CN=24a8b747c5f16dbf44b67336a2a48cd6e72fda78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:74:09:1b:23:ff:e4:79:d5:22:29:4f:6d:96:
b6:1f:75:c9:b1:d1:c6:79:0c:2b:5a:20:68:40:ee:
d2:9f:6c:b4:6a:ef:e7:34:77:41:d6:02:61:eb:f8:
d3:af:1a:56:5b:b8:97:c3:97:01:77:93:9e:06:1c:
f4:02:26:65:f7:7c:d1:0c:81:ec:24:21:b5:56:97:
04:bd:21:26:77:82:b6:8d:e6:8f:49:97:e4:2d:0f:
5f:ec:45:2f:c6:88:69:1f:6a:6b:55:ad:7d:c9:0c:
d0:0c:a8:a6:64:00:95:e0:48:2c:78:79:24:e0:19:
df:30:1b:f3:d6:c8:70:d9:6d:6f:e8:08:e2:2a:33:
f9:63:85:34:42:97:2c:63:18:54:99:be:c1:9e:e1:
ad:24:bc:c1:e2:a9:6d:42:eb:57:24:e6:97:28:df:
87:9d:6d:0a:b4:99:5a:2e:66:8b:2e:2a:72:54:1c:
d5:88:10:4b:63:4d:5a:a2:b3:ae:4f:ff:57:ae:da:
6e:60:a3:17:7f:74:3f:ff:c4:e4:24:bf:28:d9:9b:
aa:22:15:c2:84:a5:cd:e2:52:5e:e2:3b:cc:be:ef:
2b:0e:77:86:b5:27:0f:b0:53:41:d7:26:d7:b5:ad:
03:96:39:3f:a3:bc:b2:c5:d3:5b:3f:66:e0:55:38:
25:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A8:B7:47:C5:F1:6D:BF:44:B6:73:36:A2:A4:8C:D6:E7:2F:DA:78
X509v3 Authority Key Identifier:
keyid:F9:03:79:F3:AF:D9:4C:0F:26:B6:7F:FF:A3:4D:6E:94:6C:29:D6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:77:4e:a9:e5:3b:f9:95:c3:8b:7f:ef:da:44:5e:01:73:cf:
90:3c:84:e5:fa:34:30:32:c1:75:d7:a1:75:61:af:05:72:33:
73:a6:8e:01:ca:4a:d5:d5:70:03:c0:fb:a5:b7:7d:9c:e3:bf:
1d:fd:7f:99:23:eb:e9:ed:3e:3c:9f:c1:a9:8d:63:0e:73:b8:
a7:32:fc:39:d8:5f:98:f2:f7:c5:bf:70:e2:a2:9b:8d:90:e8:
9d:03:40:ca:f0:86:a6:8d:f2:5b:6b:d6:93:4c:4d:a0:eb:f1:
82:3f:fe:b2:92:21:a2:21:e2:cb:13:f8:cc:1d:ff:1f:4a:d1:
25:d6:e4:5c:49:99:4b:5e:66:32:62:e5:78:ac:31:f8:3c:90:
08:30:f4:3a:3c:01:ac:45:ca:a3:44:ed:7a:d8:cd:ce:e3:ba:
a6:b0:3c:8b:be:59:77:d8:6a:24:a7:50:81:72:bc:37:07:e9:
9c:f9:ea:04:a0:67:bc:87:eb:1e:a3:0f:c4:41:e4:c4:1d:2f:
3e:94:b9:16:85:4b:d2:02:a0:04:f2:be:1b:ed:a9:bb:6e:8c:
3b:17:65:6b:55:d2:d1:1c:97:f6:1c:95:f2:64:79:1d:f1:1f:
92:bb:7a:3f:bb:02:13:a3:52:4c:18:b5:f8:b3:4a:d7:dd:61:
b3:38:bb:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:19:47 2025 by rpki-client