Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/0aea0d-11c9-4134-9825-743e56095499/1/QiDU__u-ArE02Y5KK0X6e39Vh0w.mft
File: QiDU__u-ArE02Y5KK0X6e39Vh0w.mft (raw, json)
Hash identifier: T3UWcwBLHSkSMAf0dRdslD+rYry9zAiv37vrsIu5A5o=
Subject key identifier: F6:93:9B:CC:42:0C:CC:3E:DB:49:B0:14:32:C0:08:BE:B1:C9:46:25
Authority key identifier: 42:20:D4:FF:FB:BE:02:B1:34:D9:8E:4A:2B:45:FA:7B:7F:55:87:4C
Certificate issuer: /CN=4220d4fffbbe02b134d98e4a2b45fa7b7f55874c
Certificate serial: 019A533F1F72D2F7B8D63BF8B9BE287DC6F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiDU__u-ArE02Y5KK0X6e39Vh0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/0aea0d-11c9-4134-9825-743e56095499/1/QiDU__u-ArE02Y5KK0X6e39Vh0w.mft
Manifest number: 2E
Signing time: Wed 05 Nov 2025 09:00:36 +0000
Manifest this update: Wed 05 Nov 2025 09:00:36 +0000
Manifest next update: Thu 06 Nov 2025 09:00:36 +0000
Files and hashes: 1: 782H0AxcAlnljl-2jFvv_NnZLbE.roa (hash: VtnC37cIAKhdxlf0IOiEtkDfSYl3vVtBsHHBKTDNM08=)
2: QiDU__u-ArE02Y5KK0X6e39Vh0w.crl (hash: ERVyU5YaCJN8ONLdUWbLSxDaK8CQnMxbSzah17BakrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/0aea0d-11c9-4134-9825-743e56095499/1/QiDU__u-ArE02Y5KK0X6e39Vh0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/0aea0d-11c9-4134-9825-743e56095499/1/QiDU__u-ArE02Y5KK0X6e39Vh0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiDU__u-ArE02Y5KK0X6e39Vh0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 09:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:1f:72:d2:f7:b8:d6:3b:f8:b9:be:28:7d:c6:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4220d4fffbbe02b134d98e4a2b45fa7b7f55874c
Validity
Not Before: Nov 5 09:00:36 2025 GMT
Not After : Nov 6 09:00:36 2025 GMT
Subject: CN=f6939bcc420ccc3edb49b01432c008beb1c94625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8d:97:af:cf:1b:e3:53:7f:bc:f6:81:dd:a4:
7a:6c:17:b3:57:92:7a:16:8c:17:73:7c:25:a6:71:
0f:02:26:78:62:5e:e7:7f:98:bf:bd:50:8b:84:e3:
99:2a:92:75:08:03:36:cb:0f:3f:84:c5:7e:d7:50:
60:fe:8b:56:b8:fa:bb:2d:38:e2:44:04:43:45:ab:
7f:61:b3:7b:88:80:b9:22:e6:40:31:98:95:2f:17:
2e:22:d9:a1:57:29:90:7c:2e:54:56:50:dd:e8:f4:
1d:c4:d2:d1:8e:91:83:ba:a7:27:a6:de:1e:20:9a:
c0:14:93:70:3d:71:89:fb:98:f4:fc:8b:bb:f5:e7:
fe:41:e4:85:53:ae:d4:c2:86:d4:3f:b1:04:f1:ef:
70:33:fb:70:57:34:bd:3b:c5:70:fe:7e:2d:85:b6:
42:c4:93:6d:be:28:1c:88:ca:38:b3:95:bd:15:7b:
18:6c:26:d3:3a:b7:33:22:27:15:43:ce:db:04:73:
bc:11:01:4a:25:ab:83:9b:f4:04:92:96:76:01:49:
69:6d:1f:69:2f:fa:82:b3:1d:9a:f3:55:7a:5d:79:
02:87:cd:27:62:9d:a5:5b:36:d2:a4:85:da:96:b4:
d7:3e:32:e3:b2:95:30:b1:fd:f3:5f:ca:1f:69:a0:
09:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:93:9B:CC:42:0C:CC:3E:DB:49:B0:14:32:C0:08:BE:B1:C9:46:25
X509v3 Authority Key Identifier:
keyid:42:20:D4:FF:FB:BE:02:B1:34:D9:8E:4A:2B:45:FA:7B:7F:55:87:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiDU__u-ArE02Y5KK0X6e39Vh0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/0aea0d-11c9-4134-9825-743e56095499/1/QiDU__u-ArE02Y5KK0X6e39Vh0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/0aea0d-11c9-4134-9825-743e56095499/1/QiDU__u-ArE02Y5KK0X6e39Vh0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:ca:35:9a:f5:c0:a7:9e:e1:2c:52:1e:b3:27:7b:cc:ae:41:
06:3f:cd:82:4b:1e:7a:23:bb:29:0b:1c:cd:9b:99:20:81:bf:
fd:9c:40:b5:1a:15:9a:5f:6b:ba:b4:d5:85:9e:c0:a1:f1:d6:
cc:cf:8f:d5:b9:16:50:9f:30:2f:e8:d0:b6:b4:22:a9:be:df:
55:51:13:f9:8f:fa:f5:e1:4d:8f:cc:f8:50:cd:f7:1f:08:33:
ec:d0:da:9f:74:97:d9:f0:31:64:2f:3d:39:a1:75:34:8f:d1:
d4:8a:c8:11:94:22:8e:e4:40:88:15:3d:0d:0c:f6:85:82:04:
19:16:c3:00:a0:ca:b6:ab:5e:7e:24:25:39:3e:8e:60:f6:07:
af:d7:76:a2:5d:7b:fc:c7:13:e0:7a:29:9f:1b:73:14:30:2d:
51:4c:5c:19:02:cc:7d:97:2e:35:eb:e7:c2:ae:fa:79:20:14:
0c:35:dd:66:ab:8e:68:63:cc:7c:47:cf:d3:c9:c6:7e:a5:6a:
f1:18:4a:9f:0e:cc:3e:da:f0:c7:d6:38:48:fc:9e:c1:b4:54:
e6:a9:34:fb:66:b2:25:0f:9c:3b:be:1d:df:06:46:72:c2:0a:
33:0d:61:27:d0:a1:ba:db:18:64:a7:ef:4f:de:74:ed:df:a5:
f8:db:ac:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:02:47 2025 by rpki-client