Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft
File: ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft (raw, json)
Hash identifier: VfiEqwQu72tO4VVmBR/wUQyunUfwSfc0P+DXd3x+acs=
Subject key identifier: 6D:34:19:67:A1:75:19:0F:45:03:AA:F7:D8:BE:41:AD:10:67:0A:40
Authority key identifier: 00:B4:FE:43:94:E3:3F:C2:2A:C5:CB:B5:45:F9:CD:10:94:08:75:67
Certificate issuer: /CN=00b4fe4394e33fc22ac5cbb545f9cd1094087567
Certificate serial: 019A4F6256BF5F6BA5BA8C41EFD3E2100DE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft
Manifest number: 0853
Signing time: Tue 04 Nov 2025 15:00:36 +0000
Manifest this update: Tue 04 Nov 2025 15:00:36 +0000
Manifest next update: Wed 05 Nov 2025 15:00:36 +0000
Files and hashes: 1: ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.crl (hash: vLI9RE/WBPg2wOJ6POwXOOmIbSV+n2EcGTFwSzcQvv4=)
2: wMWuF3SVMuDIRng4fcNAPXQ4AjA.roa (hash: TLB7j9h/GLQ2Xf40vyUq/3XDhGfoA1ufwio0cDXXu5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:56:bf:5f:6b:a5:ba:8c:41:ef:d3:e2:10:0d:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00b4fe4394e33fc22ac5cbb545f9cd1094087567
Validity
Not Before: Nov 4 15:00:36 2025 GMT
Not After : Nov 5 15:00:36 2025 GMT
Subject: CN=6d341967a175190f4503aaf7d8be41ad10670a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:82:f9:4d:14:84:fe:98:48:3e:f0:fd:98:02:
30:f9:fa:bb:5d:e4:5d:a9:a6:aa:cf:4f:96:14:b9:
3d:ba:65:d0:27:54:39:52:60:71:cd:4b:10:31:61:
cc:66:ab:e3:5a:a0:ed:42:d5:22:a7:be:e5:64:e2:
ed:18:f5:8f:f7:e4:f5:42:e0:03:de:53:13:7c:0b:
e0:e7:31:94:41:21:b3:88:dc:68:cc:bb:63:cf:b2:
20:59:7b:b4:48:b8:8b:d5:26:ec:5f:bf:97:e5:c1:
12:d6:e8:04:e6:56:b3:41:c8:89:07:ed:36:be:1d:
a1:1c:d0:59:51:00:a7:c4:b8:ec:7b:a2:b4:7b:80:
e1:3e:2c:21:43:5d:fe:0f:98:91:d3:99:52:fd:73:
6d:e6:60:16:06:96:b3:6d:2e:87:fe:ba:70:ed:57:
ab:3b:5d:f7:49:92:70:06:f4:90:fb:11:cf:7c:66:
1c:7d:f4:d7:b6:ca:d1:75:df:0f:a7:b9:d5:fb:f6:
3d:3e:e3:8c:3c:a0:b0:e4:5a:08:a2:98:11:47:93:
eb:73:92:50:b7:b5:17:ac:c7:be:8b:04:1b:b0:80:
9d:b2:ed:76:ce:19:6c:0d:21:9b:cc:f6:ae:b7:33:
13:c2:05:66:dd:d4:45:bc:3a:1e:d4:0e:15:a9:ca:
12:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:34:19:67:A1:75:19:0F:45:03:AA:F7:D8:BE:41:AD:10:67:0A:40
X509v3 Authority Key Identifier:
keyid:00:B4:FE:43:94:E3:3F:C2:2A:C5:CB:B5:45:F9:CD:10:94:08:75:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:66:aa:89:36:64:50:5e:28:18:7e:66:d7:c1:06:ed:9c:d4:
bc:5a:e8:0f:ba:13:22:74:b3:a8:de:0b:c5:45:15:6c:da:fa:
91:56:bc:45:2c:40:93:ac:05:f8:a8:ca:21:cd:84:bd:7e:e3:
e0:95:83:5e:a7:e1:de:01:e9:5f:d0:78:c1:61:87:58:c0:06:
6b:73:df:3a:38:d8:55:cf:1a:56:6f:1a:36:c7:8a:68:9d:4e:
5a:3a:85:cf:2c:5e:59:9d:e4:e9:ca:89:e2:07:86:02:ff:98:
06:fe:15:ad:c2:24:dc:92:89:d2:34:b4:32:49:8e:93:b2:e0:
56:45:be:c1:f0:f2:06:30:61:10:e0:48:28:09:12:9f:3a:dd:
f2:da:88:6b:de:5b:9c:3e:5b:5b:f8:7c:99:22:ba:9b:ed:96:
12:8d:be:dc:1c:a1:58:0c:28:0d:c1:8f:18:b9:69:8a:b7:ec:
83:5c:21:31:ed:55:d0:4d:ad:c2:4c:b5:9d:98:c5:e3:0c:a1:
61:5f:d6:b6:d2:7e:33:98:3e:33:db:89:fa:88:5b:58:ce:b2:
8f:eb:29:b1:1e:e4:ec:a8:01:19:f8:bf:56:19:20:77:29:d5:
c6:0c:a1:94:0f:e1:1f:51:24:37:b1:ec:c6:aa:45:47:c8:14:
2e:9d:cd:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYla/X2uluoxB79PiEA3iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwYjRmZTQzOTRlMzNmYzIyYWM1Y2JiNTQ1ZjljZDEwOTQw
ODc1NjcwHhcNMjUxMTA0MTUwMDM2WhcNMjUxMTA1MTUwMDM2WjAzMTEwLwYDVQQD
Eyg2ZDM0MTk2N2ExNzUxOTBmNDUwM2FhZjdkOGJlNDFhZDEwNjcwYTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoL5TRSE/phIPvD9mAIw+fq7XeRd
qaaqz0+WFLk9umXQJ1Q5UmBxzUsQMWHMZqvjWqDtQtUip77lZOLtGPWP9+T1QuAD
3lMTfAvg5zGUQSGziNxozLtjz7IgWXu0SLiL1SbsX7+X5cES1ugE5lazQciJB+02
vh2hHNBZUQCnxLjse6K0e4DhPiwhQ13+D5iR05lS/XNt5mAWBpazbS6H/rpw7Ver
O133SZJwBvSQ+xHPfGYcffTXtsrRdd8Pp7nV+/Y9PuOMPKCw5FoIopgRR5Prc5JQ
t7UXrMe+iwQbsICdsu12zhlsDSGbzPautzMTwgVm3dRFvDoe1A4VqcoS/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG00GWehdRkPRQOq99i+Qa0QZwpAMB8GA1UdIwQY
MBaAFAC0/kOU4z/CKsXLtUX5zRCUCHVnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUxULVE1VGpQOElxeGN1MVJmbk5FSlFJZFdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9kYmU5MjMtYWFlZi00OTEyLTg0M2Yt
YTRlZmM0M2EwNDc4LzEvQUxULVE1VGpQOElxeGN1MVJmbk5FSlFJZFdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9kYmU5MjMtYWFlZi00OTEyLTg0M2YtYTRlZmM0M2EwNDc4
LzEvQUxULVE1VGpQOElxeGN1MVJmbk5FSlFJZFdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPmaqiTZk
UF4oGH5m18EG7ZzUvFroD7oTInSzqN4LxUUVbNr6kVa8RSxAk6wF+KjKIc2EvX7j
4JWDXqfh3gHpX9B4wWGHWMAGa3PfOjjYVc8aVm8aNseKaJ1OWjqFzyxeWZ3k6cqJ
4geGAv+YBv4VrcIk3JKJ0jS0MkmOk7LgVkW+wfDyBjBhEOBIKAkSnzrd8tqIa95b
nD5bW/h8mSK6m+2WEo2+3ByhWAwoDcGPGLlpirfsg1whMe1V0E2twky1nZjF4wyh
YV/WttJ+M5g+M9uJ+ohbWM6yj+spsR7k7KgBGfi/VhkgdynVxgyhlA/hH1EkN7Hs
xqpFR8gULp3NTA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:57:07 2025 by rpki-client