Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2408e1-e42f-4915-a715-a1d6d91cde68/1/Q5_i1RcHd00tDCv50SrQercmQqI.mft
File: Q5_i1RcHd00tDCv50SrQercmQqI.mft (raw, json)
Hash identifier: TqZl/puNnCxhjpDwG2A6j4dUVzhHb062xlvd0LSX3II=
Subject key identifier: 0E:F4:99:D8:14:3B:FA:32:08:05:05:1A:A9:BF:64:F5:B7:AC:CD:06
Authority key identifier: 43:9F:E2:D5:17:07:77:4D:2D:0C:2B:F9:D1:2A:D0:7A:B7:26:42:A2
Certificate issuer: /CN=439fe2d51707774d2d0c2bf9d12ad07ab72642a2
Certificate serial: 019A503E648479EFC2E9D353F1C22E05567F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5_i1RcHd00tDCv50SrQercmQqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/2408e1-e42f-4915-a715-a1d6d91cde68/1/Q5_i1RcHd00tDCv50SrQercmQqI.mft
Manifest number: 0F72
Signing time: Tue 04 Nov 2025 19:00:57 +0000
Manifest this update: Tue 04 Nov 2025 19:00:57 +0000
Manifest next update: Wed 05 Nov 2025 19:00:57 +0000
Files and hashes: 1: Q5_i1RcHd00tDCv50SrQercmQqI.crl (hash: cjcU22e3NsWihdISU9uouDmqzZjrCJkR9OAdlufKEaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/2408e1-e42f-4915-a715-a1d6d91cde68/1/Q5_i1RcHd00tDCv50SrQercmQqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/2408e1-e42f-4915-a715-a1d6d91cde68/1/Q5_i1RcHd00tDCv50SrQercmQqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5_i1RcHd00tDCv50SrQercmQqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 19:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:64:84:79:ef:c2:e9:d3:53:f1:c2:2e:05:56:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439fe2d51707774d2d0c2bf9d12ad07ab72642a2
Validity
Not Before: Nov 4 19:00:57 2025 GMT
Not After : Nov 5 19:00:57 2025 GMT
Subject: CN=0ef499d8143bfa320805051aa9bf64f5b7accd06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:37:f4:28:eb:a5:84:ca:d9:4d:a9:a0:63:1b:
9f:08:26:43:86:48:3a:58:dc:84:ef:a4:30:a6:f6:
1a:55:15:a2:75:bd:c9:eb:2f:36:9a:3e:13:30:f3:
e2:8e:e7:a1:72:25:d3:0c:22:6e:7a:e3:fb:13:d2:
fa:64:36:0c:71:2e:8e:b9:27:db:5e:f9:2f:46:cf:
61:06:98:da:99:ea:fb:c6:fa:38:a1:87:b6:0b:b6:
e9:1c:23:6c:07:96:fb:92:03:8b:b2:59:45:d9:ed:
ea:f2:c3:21:d8:1b:0d:ac:84:ac:f2:c7:23:4e:c2:
73:1e:8f:fc:39:49:ac:8d:48:f2:f3:b3:aa:6b:eb:
66:5b:60:96:f4:3f:75:2f:2f:4d:d7:05:47:67:2b:
3f:9a:71:88:65:9c:d3:46:9e:5f:96:79:a7:37:77:
03:32:3f:18:b7:b7:1c:eb:b1:6f:bb:2d:7d:99:67:
8d:2c:ea:56:42:08:61:94:8b:8e:d5:7b:53:0e:53:
a9:17:44:ad:6a:ef:17:4f:61:99:4c:a4:1f:a1:02:
12:40:3b:bb:aa:56:dd:4b:cb:a6:f5:64:2e:63:7d:
6c:99:07:80:91:aa:6c:48:50:36:52:51:d9:6f:e1:
bb:27:f4:28:f5:0b:f4:9f:f3:f1:db:43:2d:a2:c8:
89:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F4:99:D8:14:3B:FA:32:08:05:05:1A:A9:BF:64:F5:B7:AC:CD:06
X509v3 Authority Key Identifier:
keyid:43:9F:E2:D5:17:07:77:4D:2D:0C:2B:F9:D1:2A:D0:7A:B7:26:42:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5_i1RcHd00tDCv50SrQercmQqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2408e1-e42f-4915-a715-a1d6d91cde68/1/Q5_i1RcHd00tDCv50SrQercmQqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2408e1-e42f-4915-a715-a1d6d91cde68/1/Q5_i1RcHd00tDCv50SrQercmQqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:30:d9:49:9f:66:52:a4:d8:6e:4d:b2:7f:cf:52:93:64:ca:
95:4c:4e:a8:05:32:8a:f2:ad:b7:b3:b6:57:b9:95:13:1b:8b:
8d:6b:a2:1b:44:58:f5:c0:04:97:bc:d6:e9:49:ea:66:dd:2b:
fa:02:f2:bf:e3:07:3e:8b:13:bb:f4:e2:79:53:a8:09:a4:6d:
2c:f4:3f:0c:34:0e:e0:56:ca:24:22:f0:d7:1c:d3:a9:ef:d0:
8c:97:3e:46:ea:8b:b7:bc:e7:49:67:fb:26:da:b2:89:90:87:
e2:4e:e9:cc:74:78:42:93:1b:8a:83:21:67:e9:c8:09:f7:50:
db:c2:3d:4b:7a:5d:e4:f8:9c:0d:db:5c:37:2a:ba:68:51:56:
87:a4:b2:74:d6:e8:eb:a4:f4:38:c4:9a:ee:6b:73:38:c6:04:
5e:d2:e8:ad:dc:e2:e0:c7:90:c9:13:d4:73:3d:3a:cf:2c:d2:
e7:2d:78:dd:eb:89:14:0a:b5:88:68:53:96:36:e6:2a:fe:64:
ff:17:6d:ab:d6:22:05:03:11:b9:42:50:28:37:6b:f3:e7:27:
be:c2:f7:3c:93:a0:15:07:55:9a:c1:95:72:68:10:d9:1e:cb:
88:32:2e:2a:2c:be:81:2d:ea:e5:c6:60:ca:4b:bb:e9:2d:ca:
25:c5:de:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQPmSEee/C6dNT8cIuBVZ/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzOWZlMmQ1MTcwNzc3NGQyZDBjMmJmOWQxMmFkMDdhYjcy
NjQyYTIwHhcNMjUxMTA0MTkwMDU3WhcNMjUxMTA1MTkwMDU3WjAzMTEwLwYDVQQD
EygwZWY0OTlkODE0M2JmYTMyMDgwNTA1MWFhOWJmNjRmNWI3YWNjZDA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTf0KOulhMrZTamgYxufCCZDhkg6
WNyE76QwpvYaVRWidb3J6y82mj4TMPPijuehciXTDCJueuP7E9L6ZDYMcS6OuSfb
XvkvRs9hBpjamer7xvo4oYe2C7bpHCNsB5b7kgOLsllF2e3q8sMh2BsNrISs8scj
TsJzHo/8OUmsjUjy87Oqa+tmW2CW9D91Ly9N1wVHZys/mnGIZZzTRp5flnmnN3cD
Mj8Yt7cc67Fvuy19mWeNLOpWQghhlIuO1XtTDlOpF0Stau8XT2GZTKQfoQISQDu7
qlbdS8um9WQuY31smQeAkapsSFA2UlHZb+G7J/Qo9Qv0n/Px20MtosiJhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA70mdgUO/oyCAUFGqm/ZPW3rM0GMB8GA1UdIwQY
MBaAFEOf4tUXB3dNLQwr+dEq0Hq3JkKiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTVfaTFSY0hkMDB0REN2NTBTclFlcmNtUXFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8yNDA4ZTEtZTQyZi00OTE1LWE3MTUt
YTFkNmQ5MWNkZTY4LzEvUTVfaTFSY0hkMDB0REN2NTBTclFlcmNtUXFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8yNDA4ZTEtZTQyZi00OTE1LWE3MTUtYTFkNmQ5MWNkZTY4
LzEvUTVfaTFSY0hkMDB0REN2NTBTclFlcmNtUXFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqzDZSZ9m
UqTYbk2yf89Sk2TKlUxOqAUyivKtt7O2V7mVExuLjWuiG0RY9cAEl7zW6UnqZt0r
+gLyv+MHPosTu/TieVOoCaRtLPQ/DDQO4FbKJCLw1xzTqe/QjJc+RuqLt7znSWf7
JtqyiZCH4k7pzHR4QpMbioMhZ+nICfdQ28I9S3pd5PicDdtcNyq6aFFWh6SydNbo
66T0OMSa7mtzOMYEXtLordzi4MeQyRPUcz06zyzS5y143euJFAq1iGhTljbmKv5k
/xdtq9YiBQMRuUJQKDdr8+cnvsL3PJOgFQdVmsGVcmgQ2R7LiDIuKiy+gS3q5cZg
yku76S3KJcXexw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 04:30:43 2025 by rpki-client