
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.mft
File: t3Ynyv51V4V1C95bpJ5sEJG_Qkc.mft (raw, json)
Hash identifier: ynFMpJu2BRTgnMj7eHLymjSedvL2cFia0qqKDMVdeoI=
Subject key identifier: 13:71:61:3D:32:AD:40:53:5E:14:DD:8B:B1:F2:CF:38:92:C7:04:7E
Authority key identifier: B7:76:27:CA:FE:75:57:85:75:0B:DE:5B:A4:9E:6C:10:91:BF:42:47
Certificate issuer: /CN=b77627cafe755785750bde5ba49e6c1091bf4247
Certificate serial: 019A503E5A0178F3D7C37FF94096A0C0FB00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.mft
Manifest number: 0F03
Signing time: Tue 04 Nov 2025 19:00:54 +0000
Manifest this update: Tue 04 Nov 2025 19:00:54 +0000
Manifest next update: Wed 05 Nov 2025 19:00:54 +0000
Files and hashes: 1: QR0_yngod2ytYXVRxBdIJaGQtD8.roa (hash: ltA6YElUsxrQZ+fMVYaCHWCNPW6fU+6PIrwsYryAwAU=)
2: t3Ynyv51V4V1C95bpJ5sEJG_Qkc.crl (hash: 4p1rg5iIdhdFOEdWE+puUzdks0pn+FaZXLbrixe2Mgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:5a:01:78:f3:d7:c3:7f:f9:40:96:a0:c0:fb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b77627cafe755785750bde5ba49e6c1091bf4247
Validity
Not Before: Nov 4 19:00:54 2025 GMT
Not After : Nov 5 19:00:54 2025 GMT
Subject: CN=1371613d32ad40535e14dd8bb1f2cf3892c7047e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1d:4b:a5:8f:b3:24:de:cc:7f:fe:e0:49:af:
ee:87:f3:74:9a:d0:d6:18:1c:ea:dc:25:33:c3:a8:
6a:25:56:06:29:9e:26:9c:e7:b3:26:f7:e8:f4:3f:
9a:88:7e:36:49:e6:56:bc:67:02:c7:eb:74:70:7c:
49:58:48:55:b3:29:b7:5d:c8:0e:92:b2:ed:a3:33:
35:8f:ec:6e:5a:93:cf:48:4c:f9:d3:61:b9:75:5c:
76:f3:49:c7:ed:e4:74:0c:62:f4:5b:6a:cf:cc:ef:
9b:54:c9:99:11:53:b2:5d:47:81:d1:72:45:af:e3:
39:ce:36:12:4a:76:73:a6:14:ce:b5:b4:e2:5f:a9:
10:73:8b:43:57:83:e8:34:18:31:34:52:c9:d1:37:
0c:65:06:3c:ed:85:9d:f3:23:37:8a:48:56:e1:57:
21:b4:c9:1c:62:92:54:ec:07:ec:ec:7e:34:61:0b:
4b:47:cf:96:9d:20:8f:11:6b:98:eb:e3:34:db:94:
d8:59:50:1f:ba:f5:60:38:e1:7d:06:7d:b9:f2:f8:
35:08:cd:ca:45:90:6f:c7:2e:f7:6a:2e:bb:e2:f4:
a7:1d:fd:5b:b1:5d:e2:c3:90:72:5c:6f:7c:c3:7f:
91:58:22:8a:fa:a0:b6:16:85:67:fe:95:f9:86:fe:
73:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:71:61:3D:32:AD:40:53:5E:14:DD:8B:B1:F2:CF:38:92:C7:04:7E
X509v3 Authority Key Identifier:
keyid:B7:76:27:CA:FE:75:57:85:75:0B:DE:5B:A4:9E:6C:10:91:BF:42:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:7b:86:b4:3d:32:db:a6:0c:f0:13:7d:05:69:81:03:92:14:
a0:d0:fd:fa:28:fe:ab:4a:72:b5:c3:c7:33:f0:f4:c5:e3:4c:
6c:3d:58:03:e2:33:99:f8:d7:b5:d7:48:4a:73:62:10:04:b5:
e8:70:97:d1:ff:db:18:8f:c3:b5:4a:74:b7:4c:b1:5c:1f:14:
5e:c7:c5:5d:fb:92:69:34:fb:a3:57:d2:f1:6d:4e:be:f1:34:
52:73:a3:dc:25:f5:da:8c:de:f8:d0:14:67:3b:fa:ac:62:05:
24:e3:1e:bf:9c:f1:e3:0f:09:de:c6:65:80:b5:26:0f:46:6b:
6f:00:f0:00:f2:a4:cb:6e:41:17:7f:ba:ec:1a:76:cf:52:68:
26:0b:f5:bf:af:11:44:0a:09:81:cb:75:46:3c:0a:d6:80:a0:
c4:fe:28:00:ae:c5:81:ed:ae:c5:53:62:29:f4:9d:52:b4:fb:
74:c1:50:11:7e:c9:64:58:18:be:7b:57:f0:4c:b3:a8:1d:61:
d7:9c:c2:a5:25:d8:0c:b4:32:3b:b3:4f:34:4a:a9:d7:73:5c:
4a:10:56:62:76:dc:f8:95:7f:ce:89:72:20:ea:b9:79:d2:3d:
8c:a4:95:cf:53:53:ea:d2:4f:65:9f:de:c6:0a:89:d8:ec:b2:
52:5e:78:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:36:46 2025 by rpki-client