Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft
File: CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft (raw, json)
Hash identifier: KK35PQ8OoiStP8/n29OTs/JgHnZiKyYYNxOYd+I4YXg=
Subject key identifier: 64:04:9B:D6:C1:82:45:5C:AA:84:C1:95:02:F7:A2:29:05:32:30:33
Authority key identifier: 09:0E:59:2A:2E:0D:42:7A:09:AA:2D:E1:B9:BA:F0:8C:CD:14:F0:A0
Certificate issuer: /CN=090e592a2e0d427a09aa2de1b9baf08ccd14f0a0
Certificate serial: 019A4E18D89ECA8D3A9D3606CBF3592C64A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft
Manifest number: 07FA
Signing time: Tue 04 Nov 2025 09:00:42 +0000
Manifest this update: Tue 04 Nov 2025 09:00:42 +0000
Manifest next update: Wed 05 Nov 2025 09:00:42 +0000
Files and hashes: 1: CQ5ZKi4NQnoJqi3hubrwjM0U8KA.crl (hash: 3DIKkyvMqp0+1sQhHfW5KUIWvdyXgLEQMBBffB4ymQ0=)
2: epomSlopw6iOX1fCpUz6uqeG0uA.roa (hash: F8Xll1o9j2cBCVD/H73mG3PpAM3zIcN16DxPcP7RZWA=)
3: hqflcP10fGd_ugaqcibuFjfMGsQ.roa (hash: Ko25/+lhloUhGb/yVx2/b28QF0QoFlF426ib4Pcz3zE=)
4: mDn_ek0LdNpvLytd6eLimQlfMOA.roa (hash: k3ggKWgy0oimppyNKUN+UMdt+c+CO5ZzgliWJ2+YYxU=)
5: unvmuKqROUfBv3e0sgdNxPiAc_g.roa (hash: rF6TRtskqMXcRCi7rD7nNhDfGn67uQw9dBuhX54qa6c=)
6: zYzxKNvhe6o0TwA72geMxA7neJY.roa (hash: 40MueLGTRXMqHBaO83q9/dqRBs6784OM0Nkp+d6Np9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:d8:9e:ca:8d:3a:9d:36:06:cb:f3:59:2c:64:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090e592a2e0d427a09aa2de1b9baf08ccd14f0a0
Validity
Not Before: Nov 4 09:00:42 2025 GMT
Not After : Nov 5 09:00:42 2025 GMT
Subject: CN=64049bd6c182455caa84c19502f7a22905323033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a0:d8:91:15:f3:c7:0d:e3:92:e9:0e:6c:86:
de:7d:80:6d:1f:ee:74:79:5b:40:a2:50:8c:49:9b:
79:f7:f1:88:bb:6d:d1:80:94:5a:3e:15:d6:61:1c:
24:10:48:32:0a:3c:72:dc:a8:ad:dc:3d:e6:1e:38:
d5:f4:46:50:3f:56:ba:07:43:28:35:e6:5d:56:de:
37:1f:21:ac:41:3a:ae:ac:1b:65:6f:99:23:d9:09:
63:f7:47:5c:78:6b:f6:05:82:46:ab:1c:a6:ff:a9:
17:d7:4c:0b:6f:0f:fd:de:5b:6d:78:74:59:9d:bb:
02:04:d3:5c:80:3f:5d:37:20:d3:6c:72:73:ce:e5:
b2:fa:59:c4:d5:78:57:f7:f2:c6:76:42:f4:ce:8b:
3f:76:67:81:48:7e:e4:d8:6b:ef:fc:aa:44:da:f5:
e9:c4:24:7d:a1:89:38:32:f7:ff:16:ab:de:b0:b0:
c3:70:10:03:19:5e:af:6e:dd:9b:40:0b:b8:7b:1c:
29:13:48:84:70:9e:52:31:9f:a2:03:d6:7e:2b:3a:
2b:bc:2e:c8:3b:ef:a6:79:5c:d4:f4:ed:8f:a9:a3:
be:d8:69:1a:59:b7:b1:d8:92:47:2f:92:8e:da:c7:
de:9d:73:54:fc:04:17:2f:a1:89:34:25:81:d1:fc:
47:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:04:9B:D6:C1:82:45:5C:AA:84:C1:95:02:F7:A2:29:05:32:30:33
X509v3 Authority Key Identifier:
keyid:09:0E:59:2A:2E:0D:42:7A:09:AA:2D:E1:B9:BA:F0:8C:CD:14:F0:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:1f:ab:3a:40:fa:51:af:14:d0:a8:2b:4b:a1:eb:b8:bb:9e:
9b:f3:82:f9:c0:8c:f8:d8:43:93:ae:79:15:03:30:4b:a0:b1:
2e:db:b0:0b:15:9c:91:00:c2:1a:93:d0:0d:39:83:bb:1d:dc:
96:d6:8d:01:3e:e9:ba:71:01:fb:cd:13:70:55:57:bf:25:89:
12:73:17:50:d0:d4:c6:66:56:ff:8a:8a:05:66:bb:6d:6b:60:
78:f8:c6:0a:69:ad:d1:ec:d8:e9:1d:94:41:73:06:ec:ab:0a:
3c:7b:3e:ce:d3:7f:5d:f3:72:63:3e:c5:64:b1:55:32:68:6d:
a8:99:63:40:95:ac:36:49:79:cc:f4:27:6d:c7:6d:11:96:71:
47:37:62:54:68:40:85:f4:77:98:d8:36:59:51:2b:d1:2c:17:
1e:27:2f:42:be:a2:d1:b0:b2:75:e4:f1:ea:c0:cb:39:e2:48:
6c:cf:65:2b:cf:f8:d0:44:20:17:41:43:51:a9:46:e2:db:a0:
cd:be:ab:6a:72:c0:3e:12:e3:36:3a:04:c6:82:aa:03:70:24:
63:ef:99:5a:39:d6:e3:e8:47:e9:a8:dc:68:b1:55:b3:7c:88:
7b:9c:a7:d7:db:e0:98:fd:83:d2:49:f7:61:56:5a:3f:ad:f3:
69:f0:a0:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:49 2025 by rpki-client