Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.mft
File: Q15Blg1ZDpmATpC5rwNlWExxLHI.mft (raw, json)
Hash identifier: lfFt8Vizc2t9C8LY4ggpohl6TunpmEoztvxP7lGGQ3Y=
Subject key identifier: 56:0F:E4:C2:E1:81:65:0C:F5:27:D9:67:6A:AB:BD:B3:63:D0:C3:34
Authority key identifier: 43:5E:41:96:0D:59:0E:99:80:4E:90:B9:AF:03:65:58:4C:71:2C:72
Certificate issuer: /CN=435e41960d590e99804e90b9af0365584c712c72
Certificate serial: 019A4F627AD83B4893B3C8975EC15648A014
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q15Blg1ZDpmATpC5rwNlWExxLHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.mft
Manifest number: 1463
Signing time: Tue 04 Nov 2025 15:00:45 +0000
Manifest this update: Tue 04 Nov 2025 15:00:45 +0000
Manifest next update: Wed 05 Nov 2025 15:00:45 +0000
Files and hashes: 1: Q15Blg1ZDpmATpC5rwNlWExxLHI.crl (hash: NVWJaBWiFKoXUXO38cEodPDi02aiDxzTcDCUuTdP+E8=)
2: Qgkf9isvn9G1i53cocvwB25dPG0.roa (hash: 7pOvhNxITVVpr4C2N2+h/b2aAgFP8cFKYE5FjzDD/YQ=)
3: XGxdWNZPiFptk-3w7OILGgkhItU.roa (hash: xf5heCAI8Pty8+MuLnNYj13qa72HA9enfkhk9E22KD4=)
4: XQLqdml-mlBf3Z-90xd5Tk9chkc.roa (hash: nSfERnt4sWaMf0P1jQhY7bLFNZayDQ04cDYTAEFX1MA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q15Blg1ZDpmATpC5rwNlWExxLHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:7a:d8:3b:48:93:b3:c8:97:5e:c1:56:48:a0:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=435e41960d590e99804e90b9af0365584c712c72
Validity
Not Before: Nov 4 15:00:45 2025 GMT
Not After : Nov 5 15:00:45 2025 GMT
Subject: CN=560fe4c2e181650cf527d9676aabbdb363d0c334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c4:8c:ed:d7:c1:4c:45:a3:0b:33:a5:b7:5c:
ef:53:d9:37:6d:78:4c:1d:81:6a:4a:2b:f9:22:e4:
f7:db:cd:49:49:9d:f9:22:89:35:45:4a:5c:3a:bb:
fb:07:ba:c5:d8:11:cd:1f:71:12:2b:94:ce:3e:2d:
4e:d7:84:d7:76:44:b0:c2:05:2e:a4:bd:b8:66:ba:
ee:ff:aa:c4:6d:3f:b2:2a:76:c6:d9:f9:62:0c:45:
7e:b8:ad:fe:2e:f4:f1:e7:55:0f:22:1b:0f:76:0d:
40:dc:f2:fe:3c:b5:f8:55:6a:c8:e8:c4:df:91:5d:
0b:70:67:dd:25:70:63:3f:f0:a9:50:08:9b:02:a0:
41:a6:86:f7:67:06:ce:9c:f0:c8:1e:af:cc:70:20:
e2:92:8f:e2:f6:23:54:1d:44:e5:76:8f:71:85:4a:
62:aa:f1:65:d7:36:0a:20:0c:6e:de:0b:fc:7d:19:
51:d9:92:5c:fb:57:49:09:2f:9c:31:97:30:88:34:
88:49:e0:05:22:ad:02:db:fc:f1:93:e7:0e:24:13:
fa:1d:dc:68:02:d0:8a:6b:00:ea:ba:94:8e:f0:b8:
a9:8e:e9:b0:07:f2:1c:4f:69:70:be:f3:72:66:f0:
e7:34:1a:c0:9d:4d:32:7b:dc:9e:ef:a8:c4:6d:6f:
06:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:0F:E4:C2:E1:81:65:0C:F5:27:D9:67:6A:AB:BD:B3:63:D0:C3:34
X509v3 Authority Key Identifier:
keyid:43:5E:41:96:0D:59:0E:99:80:4E:90:B9:AF:03:65:58:4C:71:2C:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q15Blg1ZDpmATpC5rwNlWExxLHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:c5:57:80:bc:2c:2c:d1:1e:79:30:85:17:7a:db:18:c5:fd:
d4:59:17:cb:08:60:4a:63:ad:b5:2b:4a:5f:cd:6d:29:f1:e3:
9c:fd:2d:ea:06:47:6e:6d:92:56:99:8f:21:09:a4:54:bf:1b:
22:47:35:47:69:ec:02:1a:9e:2e:b1:c8:c1:d2:75:26:34:53:
83:57:4d:5c:54:1d:d5:35:c8:0a:97:61:f2:25:d6:00:80:a5:
00:f6:de:5a:53:13:47:b6:17:d2:10:a0:95:4b:14:3a:e4:27:
3a:44:bd:44:9a:aa:85:ed:fe:f3:75:cb:63:f7:ab:48:46:30:
b7:2b:d8:aa:e0:cc:77:8b:24:4e:10:f4:fb:72:a4:72:f1:e1:
2f:18:22:9b:df:2a:99:30:72:5c:3c:98:c8:8b:47:a3:5e:0b:
54:6a:b6:ea:c6:e0:e7:95:05:af:8d:9e:2d:9f:82:0e:db:5b:
1c:91:4d:81:b8:0a:45:81:e7:3e:57:69:57:3e:3e:40:8f:41:
5f:2e:60:b2:69:08:7b:34:11:20:ac:aa:aa:1e:1c:b9:5b:85:
99:b0:78:9f:96:aa:ba:11:77:4f:14:61:fe:06:71:7a:4a:98:
44:e8:f0:88:b2:e9:c9:a5:a6:3b:14:10:9a:86:fb:f9:d8:67:
3b:41:b1:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:38:15 2025 by rpki-client