Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.mft
File: Q-ZRNoOGaONd1VLvDCH76avtE5s.mft (raw, json)
Hash identifier: VeertDrAJ9eHghy1vQqEdU2bGY/QMtPdbDXaIBNm1lc=
Subject key identifier: 5E:FA:F7:61:D5:E5:B8:8B:1F:25:D7:82:F3:13:F4:6F:3F:59:0C:CD
Authority key identifier: 43:E6:51:36:83:86:68:E3:5D:D5:52:EF:0C:21:FB:E9:AB:ED:13:9B
Certificate issuer: /CN=43e65136838668e35dd552ef0c21fbe9abed139b
Certificate serial: 019A4E4F8360F6D26067F9E5A9A6DCAA1E0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q-ZRNoOGaONd1VLvDCH76avtE5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.mft
Manifest number: 02E7
Signing time: Tue 04 Nov 2025 10:00:24 +0000
Manifest this update: Tue 04 Nov 2025 10:00:24 +0000
Manifest next update: Wed 05 Nov 2025 10:00:24 +0000
Files and hashes: 1: Q-ZRNoOGaONd1VLvDCH76avtE5s.crl (hash: XbK9Mp/ZaMYrI4kOUoWVn+n4iL4zg/23wsqQx2qO4xc=)
2: aIJd5q5n1BMhAvDcaHy6hyORixY.roa (hash: g4oLD9R9gouTz6cg2k+J0gSsSi5IKrB+jtKfUgG2zS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q-ZRNoOGaONd1VLvDCH76avtE5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:83:60:f6:d2:60:67:f9:e5:a9:a6:dc:aa:1e:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43e65136838668e35dd552ef0c21fbe9abed139b
Validity
Not Before: Nov 4 10:00:24 2025 GMT
Not After : Nov 5 10:00:24 2025 GMT
Subject: CN=5efaf761d5e5b88b1f25d782f313f46f3f590ccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3d:c9:06:bc:c0:21:60:78:25:26:7b:4f:6f:
77:2b:b5:f7:35:5e:11:4a:14:44:ea:6e:6a:cd:86:
1c:64:0c:fb:72:fe:55:e3:0b:56:8d:fa:18:c2:d4:
07:b7:a3:8e:71:9d:f2:74:5b:f3:0e:40:dd:ca:d7:
e0:ca:5e:39:15:e0:56:ec:0c:67:9e:6b:fd:a4:3d:
ce:a8:ad:eb:35:6a:b4:dc:b4:38:47:86:89:a1:89:
8f:28:3a:38:b4:a4:98:7e:ab:37:a5:1a:6d:20:6f:
19:e3:1a:ef:d9:92:9f:4c:b9:8b:80:15:f8:53:6d:
6b:69:f6:64:68:3c:4f:c9:95:27:1c:88:e5:97:0f:
d0:12:13:8e:1f:b8:a5:95:cd:a3:b2:bc:ee:c2:a9:
c7:41:e8:cf:ec:63:ef:c7:f3:c7:7e:8c:48:8e:1b:
2d:10:9c:9b:60:80:4e:52:fb:2d:83:db:9b:b8:f8:
f8:39:59:b7:d7:1d:b4:71:e0:33:74:3a:75:86:94:
f1:46:69:c0:c5:46:71:bd:10:b3:c7:13:d3:63:72:
cc:51:45:09:38:21:be:4d:6d:b9:80:90:88:c0:79:
9d:88:d2:db:dd:b8:07:df:dd:c5:18:c7:56:38:53:
43:30:1e:ae:d4:d5:31:98:5a:18:37:5b:34:fb:22:
fc:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:FA:F7:61:D5:E5:B8:8B:1F:25:D7:82:F3:13:F4:6F:3F:59:0C:CD
X509v3 Authority Key Identifier:
keyid:43:E6:51:36:83:86:68:E3:5D:D5:52:EF:0C:21:FB:E9:AB:ED:13:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q-ZRNoOGaONd1VLvDCH76avtE5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:2f:48:9d:20:49:46:bd:67:11:a4:be:7d:88:00:3b:3c:a2:
3e:28:74:2b:bc:8c:19:80:7f:7d:ce:08:61:1f:52:23:c2:74:
18:74:a6:90:df:aa:78:9e:71:5b:90:c1:50:fb:17:a0:df:54:
cb:31:b7:f0:60:d1:34:11:4c:ac:9a:b6:13:39:99:5f:d4:79:
4c:04:28:a6:df:dc:cd:e5:8d:65:eb:5b:8b:79:00:94:dc:af:
bd:05:8c:80:e8:db:a8:32:d8:f3:2b:20:b6:b0:56:15:5a:b6:
e7:26:9c:b8:e9:e7:39:00:1f:57:b4:43:7d:d1:75:30:01:df:
b0:71:4d:fc:b7:74:cc:21:6e:c3:1d:1a:db:2b:6e:2f:ac:2b:
c0:6b:33:a1:4d:48:f0:1f:91:30:d9:6f:20:4d:96:b0:d6:94:
10:9e:f1:6b:84:61:b5:a4:3c:3d:71:ac:33:78:18:3f:46:1a:
8f:6f:50:fb:5d:ff:29:7a:3b:35:96:f6:a3:4c:26:01:39:04:
62:82:0a:70:33:54:89:26:ca:4c:9b:0e:18:7a:3d:35:ef:1d:
86:77:65:0b:eb:e0:18:50:3d:84:93:99:d0:cc:09:f8:48:32:
cc:1c:3f:b3:c0:b0:ce:bf:3c:ac:c0:99:5c:42:03:b7:39:98:
6a:6f:3c:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT4Ng9tJgZ/nlqabcqh4KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzZTY1MTM2ODM4NjY4ZTM1ZGQ1NTJlZjBjMjFmYmU5YWJl
ZDEzOWIwHhcNMjUxMTA0MTAwMDI0WhcNMjUxMTA1MTAwMDI0WjAzMTEwLwYDVQQD
Eyg1ZWZhZjc2MWQ1ZTViODhiMWYyNWQ3ODJmMzEzZjQ2ZjNmNTkwY2NkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsT3JBrzAIWB4JSZ7T293K7X3NV4R
ShRE6m5qzYYcZAz7cv5V4wtWjfoYwtQHt6OOcZ3ydFvzDkDdytfgyl45FeBW7Axn
nmv9pD3OqK3rNWq03LQ4R4aJoYmPKDo4tKSYfqs3pRptIG8Z4xrv2ZKfTLmLgBX4
U21rafZkaDxPyZUnHIjllw/QEhOOH7illc2jsrzuwqnHQejP7GPvx/PHfoxIjhst
EJybYIBOUvstg9ubuPj4OVm31x20ceAzdDp1hpTxRmnAxUZxvRCzxxPTY3LMUUUJ
OCG+TW25gJCIwHmdiNLb3bgH393FGMdWOFNDMB6u1NUxmFoYN1s0+yL8kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF7692HV5biLHyXXgvMT9G8/WQzNMB8GA1UdIwQY
MBaAFEPmUTaDhmjjXdVS7wwh++mr7RObMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUS1aUk5vT0dhT05kMVZMdkRDSDc2YXZ0RTVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9hMTllN2UtYjViNC00NGY3LWI5Mzct
MGRhNmRjMmM3ODJjLzEvUS1aUk5vT0dhT05kMVZMdkRDSDc2YXZ0RTVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9hMTllN2UtYjViNC00NGY3LWI5MzctMGRhNmRjMmM3ODJj
LzEvUS1aUk5vT0dhT05kMVZMdkRDSDc2YXZ0RTVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkS9InSBJ
Rr1nEaS+fYgAOzyiPih0K7yMGYB/fc4IYR9SI8J0GHSmkN+qeJ5xW5DBUPsXoN9U
yzG38GDRNBFMrJq2EzmZX9R5TAQopt/czeWNZetbi3kAlNyvvQWMgOjbqDLY8ysg
trBWFVq25yacuOnnOQAfV7RDfdF1MAHfsHFN/Ld0zCFuwx0a2ytuL6wrwGszoU1I
8B+RMNlvIE2WsNaUEJ7xa4RhtaQ8PXGsM3gYP0Yaj29Q+13/KXo7NZb2o0wmATkE
YoIKcDNUiSbKTJsOGHo9Ne8dhndlC+vgGFA9hJOZ0MwJ+EgyzBw/s8Cwzr88rMCZ
XEIDtzmYam88VA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:33 2025 by rpki-client