Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft
File: qS5dl54DJTmZRrI5CCLTDx0vNeE.mft (raw, json)
Hash identifier: O5IYKEB6dsP0WMIMBNTs6qkeh6t1BpsNBoJV8inb0ks=
Subject key identifier: 2F:6B:E8:1E:AC:47:93:A7:93:C4:E9:FC:A9:9B:B5:68:99:0A:8C:94
Authority key identifier: A9:2E:5D:97:9E:03:25:39:99:46:B2:39:08:22:D3:0F:1D:2F:35:E1
Certificate issuer: /CN=a92e5d979e0325399946b2390822d30f1d2f35e1
Certificate serial: 019A5375A35F3CC9CDA45016790F2DEF3D12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qS5dl54DJTmZRrI5CCLTDx0vNeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft
Manifest number: 01C4
Signing time: Wed 05 Nov 2025 10:00:09 +0000
Manifest this update: Wed 05 Nov 2025 10:00:09 +0000
Manifest next update: Thu 06 Nov 2025 10:00:09 +0000
Files and hashes: 1: JQJmD49tR8jandeFHJ1IkrOGoDQ.roa (hash: qBRt18tQW7myUfjqyk6Za7F1LghK7qoZn+vndFJYSpM=)
2: qS5dl54DJTmZRrI5CCLTDx0vNeE.crl (hash: Fh6zCQbmdoSLBw6N7LCEeg21rQHjTcd9sVevh5BvXmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qS5dl54DJTmZRrI5CCLTDx0vNeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:75:a3:5f:3c:c9:cd:a4:50:16:79:0f:2d:ef:3d:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a92e5d979e0325399946b2390822d30f1d2f35e1
Validity
Not Before: Nov 5 10:00:09 2025 GMT
Not After : Nov 6 10:00:09 2025 GMT
Subject: CN=2f6be81eac4793a793c4e9fca99bb568990a8c94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fe:0c:31:74:c5:09:42:1f:1a:18:57:eb:28:
f0:f0:27:64:94:a4:79:84:47:45:a1:11:7d:ad:fc:
36:d9:af:e9:16:86:97:b8:92:0a:f5:f2:65:5c:6e:
09:b4:0a:db:7e:0e:87:5a:92:9e:b3:cd:6b:6f:b3:
00:ba:49:57:1c:dc:67:45:ed:64:2e:0f:c5:d0:49:
5c:43:5f:cb:ed:55:37:08:02:81:35:23:d6:1c:c7:
ad:0d:13:fc:77:67:fa:d3:8c:b4:06:6c:d8:ff:81:
c0:14:9e:a1:1a:85:9f:5a:21:10:02:5b:8e:8d:4c:
cf:0c:5f:32:fd:01:71:fe:b9:37:18:7c:90:9b:f6:
02:1c:4c:94:31:44:95:c9:4e:5a:40:b0:04:26:fe:
a4:f2:56:3f:9a:11:a4:b7:cb:e8:29:81:17:8d:57:
f7:db:67:4e:30:42:6c:5a:e9:bb:92:18:98:49:4d:
dc:2b:d0:84:4a:65:d6:39:8c:6b:e1:ec:4b:46:a4:
01:d0:bf:d1:97:04:c3:fc:02:72:68:00:a8:49:75:
b0:9a:f7:dd:34:5f:e0:f4:d0:79:96:41:f6:5b:f1:
47:79:12:df:9b:72:56:40:21:1e:21:1c:4a:ef:15:
a6:fd:7b:83:c1:7d:d9:0a:75:dc:81:5f:ea:53:1d:
fc:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:6B:E8:1E:AC:47:93:A7:93:C4:E9:FC:A9:9B:B5:68:99:0A:8C:94
X509v3 Authority Key Identifier:
keyid:A9:2E:5D:97:9E:03:25:39:99:46:B2:39:08:22:D3:0F:1D:2F:35:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS5dl54DJTmZRrI5CCLTDx0vNeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:c5:a4:bb:6c:a5:60:a7:ec:96:19:f8:de:62:e8:32:e4:c7:
c1:d6:75:7d:f1:20:8b:40:03:05:3f:fc:6f:ac:a7:a8:57:fc:
64:88:7c:00:33:31:a6:24:5f:40:b7:a2:34:fb:a2:de:95:b2:
d4:bb:ca:e7:7a:d2:ec:dd:bb:c9:b1:6b:df:d6:e6:bd:bc:49:
31:af:60:53:81:83:cf:91:a8:ef:d2:6d:60:89:92:92:4c:22:
08:6e:ac:2e:be:26:b6:99:23:ce:94:43:b0:1e:6b:09:df:d9:
fc:05:d3:cd:43:2d:08:67:80:e7:0a:ff:8c:9a:87:3e:67:ee:
6c:7f:36:0f:5a:7c:c8:7a:3d:68:c7:67:f8:09:1b:91:cc:e9:
5f:0e:05:1e:43:94:a4:55:52:9c:c1:56:10:ae:4c:c7:01:6d:
12:c8:45:26:e5:af:34:00:d8:53:33:fe:2a:aa:ba:f2:8c:74:
d9:bc:06:66:05:eb:56:22:bd:a0:80:5f:5f:66:19:78:01:61:
74:3e:42:26:20:47:f5:0b:81:f2:6b:69:d1:50:02:f4:a4:1d:
3d:f6:67:3c:be:09:58:35:e7:4d:1b:1c:20:76:bc:47:e4:63:
b3:2e:86:45:17:80:48:1f:2c:6a:6c:5e:ba:68:2b:dc:77:e3:
50:76:2f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:42:39 2025 by rpki-client