Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/582695-61a1-48e7-b6ac-7bc45340dd28/1/Q5i1d7IjtadjUSGadP2kRnBIkPc.mft
File: Q5i1d7IjtadjUSGadP2kRnBIkPc.mft (raw, json)
Hash identifier: 5vtBJfO6bOMJi9bSpQ+M/ix+oob2gRQanucYPE9UgTU=
Subject key identifier: DC:75:CD:D2:77:D2:CD:8F:2E:79:18:1E:6A:AC:C8:22:B8:4E:AE:7B
Authority key identifier: 43:98:B5:77:B2:23:B5:A7:63:51:21:9A:74:FD:A4:46:70:48:90:F7
Certificate issuer: /CN=4398b577b223b5a76351219a74fda446704890f7
Certificate serial: 019A4F997AA398DD4C7E5730289151E0286E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5i1d7IjtadjUSGadP2kRnBIkPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/582695-61a1-48e7-b6ac-7bc45340dd28/1/Q5i1d7IjtadjUSGadP2kRnBIkPc.mft
Manifest number: 13F5
Signing time: Tue 04 Nov 2025 16:00:49 +0000
Manifest this update: Tue 04 Nov 2025 16:00:49 +0000
Manifest next update: Wed 05 Nov 2025 16:00:49 +0000
Files and hashes: 1: KL5bIat3Yk7dpaHmhHBN9ywSikg.roa (hash: 2Dm1yDCv5S4uhPon+c/p0fcUA41+SmoP2uLFsPOLfB0=)
2: Q5i1d7IjtadjUSGadP2kRnBIkPc.crl (hash: RZSwZ/eyy6gMr2h4+8NlJdwJU8e4ma/A4hwHTbwNdQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/582695-61a1-48e7-b6ac-7bc45340dd28/1/Q5i1d7IjtadjUSGadP2kRnBIkPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/582695-61a1-48e7-b6ac-7bc45340dd28/1/Q5i1d7IjtadjUSGadP2kRnBIkPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5i1d7IjtadjUSGadP2kRnBIkPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:7a:a3:98:dd:4c:7e:57:30:28:91:51:e0:28:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4398b577b223b5a76351219a74fda446704890f7
Validity
Not Before: Nov 4 16:00:49 2025 GMT
Not After : Nov 5 16:00:49 2025 GMT
Subject: CN=dc75cdd277d2cd8f2e79181e6aacc822b84eae7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:86:58:d6:c7:c9:57:2d:33:3c:a8:9e:e8:6f:
2d:7d:a4:59:8f:b7:10:f3:9a:06:64:ec:59:ca:29:
79:34:1c:a7:d4:46:49:05:af:b3:3f:ba:d3:cd:97:
b1:61:61:11:9c:e5:eb:1e:71:e5:41:c3:db:64:6a:
b4:fd:78:19:8c:43:d1:84:0a:d0:b6:c3:ca:ef:47:
4c:8b:37:09:a8:f5:15:b1:50:bd:35:62:cb:ce:63:
97:e5:1d:13:76:bd:68:2c:aa:37:6f:21:0f:d0:6b:
d5:be:62:70:83:c9:0a:7e:17:84:b5:3b:a0:64:09:
a5:d5:72:86:b6:29:6a:47:4f:c0:f6:50:4f:d1:2a:
ea:03:aa:83:80:8f:51:72:07:bb:68:be:eb:02:39:
20:2a:ad:22:08:b2:ca:ab:95:53:51:6d:28:51:fe:
e0:46:4f:c9:e2:dc:31:5a:d0:72:a8:e9:b0:bc:35:
97:37:ed:3f:7d:63:e0:e2:0b:53:d0:1f:94:a9:30:
94:d1:65:35:15:11:37:f5:8c:84:15:b6:f4:fa:69:
6a:b6:72:e6:34:8d:41:80:71:13:be:89:a6:1e:83:
b1:bc:d8:87:73:2c:cc:24:ef:05:0f:26:af:33:13:
e7:0d:1a:89:5b:3e:74:9b:4d:99:59:c3:7e:42:c4:
45:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:75:CD:D2:77:D2:CD:8F:2E:79:18:1E:6A:AC:C8:22:B8:4E:AE:7B
X509v3 Authority Key Identifier:
keyid:43:98:B5:77:B2:23:B5:A7:63:51:21:9A:74:FD:A4:46:70:48:90:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5i1d7IjtadjUSGadP2kRnBIkPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/582695-61a1-48e7-b6ac-7bc45340dd28/1/Q5i1d7IjtadjUSGadP2kRnBIkPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/582695-61a1-48e7-b6ac-7bc45340dd28/1/Q5i1d7IjtadjUSGadP2kRnBIkPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:c0:81:03:21:61:92:f5:ef:d6:7d:f9:f6:90:c5:ad:35:26:
fe:58:c9:dd:65:a3:1e:ad:f3:5d:a4:5d:61:56:94:df:9a:24:
6d:23:f8:33:23:29:c9:ba:cc:df:75:60:f1:ce:d1:ea:ac:85:
40:46:bc:d8:22:25:b1:2b:9e:f7:88:9e:41:dd:10:22:1e:46:
37:d1:45:dd:a1:86:91:34:63:c7:8d:a0:d6:10:b0:94:ac:3c:
ca:cc:13:38:52:d9:c7:78:57:a0:8e:57:ee:e9:2e:af:c7:87:
a6:62:af:c9:8d:9b:eb:a9:37:e9:7a:db:9f:58:72:db:08:06:
18:9b:c5:07:b9:02:0f:71:32:1e:71:b0:c2:84:38:59:be:0e:
25:d7:0b:0b:4f:d0:29:30:ad:68:6d:e3:d0:1e:f2:c0:16:42:
fe:fd:68:3a:f2:aa:c8:ce:5d:a9:96:f1:23:52:3c:09:88:4c:
04:49:cc:dc:67:e8:ea:5b:01:94:fd:49:4a:8f:c8:0b:10:04:
05:c3:2d:d4:c1:97:2a:f4:90:34:97:53:5e:35:73:35:1b:ae:
28:13:b3:d9:49:71:ef:d1:9c:cf:31:95:b4:5f:a1:90:00:7c:
eb:10:37:e8:e9:b6:d7:9a:c3:89:4d:06:fe:55:d2:28:5d:f4:
db:7c:3f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:51:14 2025 by rpki-client