Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.mft
File: t3Ynyv51V4V1C95bpJ5sEJG_Qkc.mft (raw, json)
Hash identifier: aWVDaB1IyKm+/giBJaLn3PasTd+vN7/7vvmaj9RFNJg=
Subject key identifier: 53:B8:4A:67:76:1A:E3:5E:CB:5D:64:B9:35:39:9F:F2:D7:6B:16:E6
Authority key identifier: B7:76:27:CA:FE:75:57:85:75:0B:DE:5B:A4:9E:6C:10:91:BF:42:47
Certificate issuer: /CN=b77627cafe755785750bde5ba49e6c1091bf4247
Certificate serial: 019A73012B3BC7F1B40BB13FA0A98213D5C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.mft
Manifest number: 0F15
Signing time: Tue 11 Nov 2025 13:00:47 +0000
Manifest this update: Tue 11 Nov 2025 13:00:47 +0000
Manifest next update: Wed 12 Nov 2025 13:00:47 +0000
Files and hashes: 1: QR0_yngod2ytYXVRxBdIJaGQtD8.roa (hash: ltA6YElUsxrQZ+fMVYaCHWCNPW6fU+6PIrwsYryAwAU=)
2: t3Ynyv51V4V1C95bpJ5sEJG_Qkc.crl (hash: BnLUm8CWLGVuLjb246Xr58lccl2n8X28kPI+SYzgZyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:2b:3b:c7:f1:b4:0b:b1:3f:a0:a9:82:13:d5:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b77627cafe755785750bde5ba49e6c1091bf4247
Validity
Not Before: Nov 11 13:00:47 2025 GMT
Not After : Nov 12 13:00:47 2025 GMT
Subject: CN=53b84a67761ae35ecb5d64b935399ff2d76b16e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f2:11:e8:6c:9c:ea:18:ba:ac:e0:81:98:e2:
89:2d:a6:f7:47:e7:76:ec:75:be:e1:f9:e7:aa:7f:
47:91:18:4c:21:de:a0:25:27:b3:75:7b:cc:51:64:
59:39:da:5e:f7:f2:47:a8:d2:e8:11:5d:25:bf:68:
74:cd:11:dc:e1:59:ff:7c:3a:0e:b2:09:b1:a6:96:
13:b5:b5:33:01:9c:46:7e:02:d4:33:42:40:e2:ba:
14:f4:e7:2c:d9:e0:a0:e0:b3:2d:9e:c7:a5:ea:7a:
97:70:3f:d6:74:be:40:bf:09:9d:cc:e9:0b:dd:c6:
8f:44:13:2d:28:89:09:c5:39:70:6b:75:38:de:54:
a5:f1:1b:48:f1:9a:c2:4b:a1:b2:bc:2a:b1:17:b6:
33:1a:48:24:60:25:bb:53:a1:2d:13:da:72:b0:85:
8a:1a:80:ed:a4:ac:a0:b5:92:a5:7e:21:68:04:22:
3d:92:db:39:15:f1:36:3e:d4:7a:86:67:14:31:ca:
05:58:ab:d5:cc:71:9c:aa:fa:53:3d:f9:4b:c3:e6:
e9:d0:9c:9e:c6:15:07:e9:f5:7c:97:35:da:fa:70:
97:5a:b2:32:4d:69:6c:65:96:a4:43:5c:40:d3:39:
90:8a:fe:36:01:24:be:13:ba:f0:d5:ca:86:9a:f1:
17:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B8:4A:67:76:1A:E3:5E:CB:5D:64:B9:35:39:9F:F2:D7:6B:16:E6
X509v3 Authority Key Identifier:
keyid:B7:76:27:CA:FE:75:57:85:75:0B:DE:5B:A4:9E:6C:10:91:BF:42:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:c8:58:9a:32:6d:8b:19:ed:df:ae:a4:41:e6:b9:e1:ac:4b:
90:a2:27:82:87:49:30:70:24:78:97:c8:b5:77:04:28:c5:08:
3d:71:db:ae:37:e2:df:c9:6e:11:d2:de:c6:7b:26:d4:ec:a4:
b7:7e:13:0f:15:44:66:f0:a5:fd:f5:31:92:ca:41:4f:ed:43:
3d:a1:d8:ec:a5:de:06:a7:db:ce:c0:08:19:95:f7:89:db:de:
07:7e:db:88:9a:90:e8:83:79:65:a0:6e:70:7c:74:2f:82:26:
8f:f0:8d:a4:c2:f6:68:16:be:68:f4:9d:0c:9d:16:6e:bb:9d:
8d:28:80:95:72:e1:29:ca:64:c2:af:12:8d:e9:a8:8b:b4:9f:
59:67:6b:37:6a:2f:94:d1:42:80:fb:ef:aa:f0:f6:c7:9a:55:
67:13:33:d5:6d:d8:db:9b:5c:a2:41:cb:69:b0:42:fc:a6:c9:
19:af:a3:d9:d1:04:8b:4a:ba:d2:69:99:20:9c:66:70:78:11:
ad:e0:88:e4:49:30:1b:15:b7:10:d3:91:95:03:00:1a:4b:2a:
b1:ab:60:63:f9:0d:40:3e:76:a2:14:20:12:4a:15:ce:b1:88:
6b:00:ad:48:15:7d:50:83:86:39:cd:f4:5c:ae:77:ec:d5:b0:
de:8c:3a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:36:18 2025 by rpki-client