Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.mft
File: t3Ynyv51V4V1C95bpJ5sEJG_Qkc.mft (raw, json)
Hash identifier: attBOrCdatBW+7eEaY7O3dUQq2H0VvCPhB/IgwvLbTQ=
Subject key identifier: A8:70:FE:7E:DE:73:FF:54:A1:DC:BC:0B:46:D8:DD:11:2D:C1:AE:B1
Authority key identifier: B7:76:27:CA:FE:75:57:85:75:0B:DE:5B:A4:9E:6C:10:91:BF:42:47
Certificate issuer: /CN=b77627cafe755785750bde5ba49e6c1091bf4247
Certificate serial: 0199FD341F4720019A935059682847B00ACB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.mft
Manifest number: 0ED8
Signing time: Sun 19 Oct 2025 16:01:15 +0000
Manifest this update: Sun 19 Oct 2025 16:01:15 +0000
Manifest next update: Mon 20 Oct 2025 16:01:15 +0000
Files and hashes: 1: QR0_yngod2ytYXVRxBdIJaGQtD8.roa (hash: ltA6YElUsxrQZ+fMVYaCHWCNPW6fU+6PIrwsYryAwAU=)
2: t3Ynyv51V4V1C95bpJ5sEJG_Qkc.crl (hash: mtjKKNrR8PbVaf1IxhRNRQL73O8EROW9Lk2zGbImeUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:1f:47:20:01:9a:93:50:59:68:28:47:b0:0a:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b77627cafe755785750bde5ba49e6c1091bf4247
Validity
Not Before: Oct 19 16:01:15 2025 GMT
Not After : Oct 20 16:01:15 2025 GMT
Subject: CN=a870fe7ede73ff54a1dcbc0b46d8dd112dc1aeb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:93:9f:27:45:f8:f5:61:64:77:60:bd:7f:10:
45:69:41:ec:75:65:d2:da:9b:67:98:e4:cd:50:98:
6e:19:a7:da:4a:cc:6b:11:6b:8f:fc:0c:0f:f5:ba:
a0:ec:c4:37:d4:3d:f4:cc:d5:ed:13:eb:1f:97:b7:
7f:df:48:7b:3d:18:40:9d:7d:1d:89:81:93:28:47:
53:20:be:f9:73:bc:fc:94:d5:90:fa:39:d1:e2:d4:
aa:a8:57:93:00:0d:0b:3e:a3:8b:7f:74:a3:27:3e:
64:af:d7:15:22:03:c3:8c:50:d6:31:50:e9:61:2c:
35:42:3b:28:2f:31:80:dc:c8:b5:bc:4d:0f:2c:52:
74:37:4e:98:80:c6:ff:6b:67:a3:9d:5c:54:dc:a7:
b8:b6:33:bc:54:fc:a6:de:4d:e3:4a:7e:74:c1:e5:
56:55:e1:5d:49:87:f2:21:1e:85:c3:6d:8c:e6:2a:
3a:4f:0b:23:32:ea:20:ef:a2:d6:c7:9d:02:be:a8:
7e:bc:01:45:91:f7:82:8b:2f:cc:1d:9d:ee:e6:29:
c2:d6:8d:f1:e5:bc:02:22:7c:a7:d5:6f:b0:5f:f7:
dd:b7:1c:69:6f:4d:be:38:78:25:4f:cd:f3:4c:b4:
ce:28:60:f2:3e:e3:df:47:17:14:14:25:ca:29:a9:
ed:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:70:FE:7E:DE:73:FF:54:A1:DC:BC:0B:46:D8:DD:11:2D:C1:AE:B1
X509v3 Authority Key Identifier:
keyid:B7:76:27:CA:FE:75:57:85:75:0B:DE:5B:A4:9E:6C:10:91:BF:42:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:2e:29:bf:26:9b:aa:a7:67:34:c1:61:60:5f:0d:ed:9a:6a:
c3:1c:12:8c:9e:10:e4:9d:a2:6c:c8:69:22:ba:2d:43:e7:ce:
df:89:b5:80:99:0c:b6:61:9d:ca:33:65:c5:48:55:43:1a:48:
b8:e5:26:fc:03:78:d7:70:7a:4c:66:5a:92:84:71:dd:24:66:
61:b6:ff:75:bb:2e:2f:6f:8c:bd:50:e0:97:d8:d6:5e:02:f2:
40:db:13:ca:db:c4:2b:0b:13:ab:46:6b:dc:e5:c2:96:ed:84:
c0:eb:88:5d:26:a8:d7:39:64:f3:be:e4:6c:66:0b:16:83:a3:
89:06:d8:78:53:f4:4b:15:ff:15:0d:76:f2:d5:f0:fd:92:09:
f5:65:e1:02:24:92:34:fa:46:cb:df:ff:1e:07:72:7e:d3:78:
90:ee:34:8f:d4:35:fa:5d:df:c6:00:f8:7e:f7:bc:fa:35:16:
66:42:d8:0a:39:a2:a2:f9:4e:b7:df:4c:cb:07:6c:d1:c7:5b:
39:60:e4:bf:89:05:42:31:92:b6:9e:ba:da:1b:1e:bb:f0:31:
c1:fd:02:b0:48:e1:2c:ea:c0:19:45:3f:3a:99:3e:84:9a:33:
e7:b2:be:5b:9e:e1:ba:45:90:82:3f:39:1d:8f:81:25:2b:fb:
53:55:e2:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:31 2025 by rpki-client