Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/0aea0d-11c9-4134-9825-743e56095499/1/QiDU__u-ArE02Y5KK0X6e39Vh0w.mft
File: QiDU__u-ArE02Y5KK0X6e39Vh0w.mft (raw, json)
Hash identifier: KapjEgCIHCHabWtmI0gLAGzSNYTMX/mk1XLBtfOnopM=
Subject key identifier: 4F:47:DC:C3:AA:4D:F4:D3:14:AB:A1:2E:80:C5:6A:56:CA:CB:F7:72
Authority key identifier: 42:20:D4:FF:FB:BE:02:B1:34:D9:8E:4A:2B:45:FA:7B:7F:55:87:4C
Certificate issuer: /CN=4220d4fffbbe02b134d98e4a2b45fa7b7f55874c
Certificate serial: 019A7225B446F28AA421CA4DFD0525CF1C7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiDU__u-ArE02Y5KK0X6e39Vh0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/0aea0d-11c9-4134-9825-743e56095499/1/QiDU__u-ArE02Y5KK0X6e39Vh0w.mft
Manifest number: 3E
Signing time: Tue 11 Nov 2025 09:01:04 +0000
Manifest this update: Tue 11 Nov 2025 09:01:04 +0000
Manifest next update: Wed 12 Nov 2025 09:01:04 +0000
Files and hashes: 1: 782H0AxcAlnljl-2jFvv_NnZLbE.roa (hash: VtnC37cIAKhdxlf0IOiEtkDfSYl3vVtBsHHBKTDNM08=)
2: QiDU__u-ArE02Y5KK0X6e39Vh0w.crl (hash: aJiUsDf+j2hBy/osgI1y3qNvGaVTbxWYJmuj/nA5Kgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/0aea0d-11c9-4134-9825-743e56095499/1/QiDU__u-ArE02Y5KK0X6e39Vh0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/0aea0d-11c9-4134-9825-743e56095499/1/QiDU__u-ArE02Y5KK0X6e39Vh0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiDU__u-ArE02Y5KK0X6e39Vh0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:b4:46:f2:8a:a4:21:ca:4d:fd:05:25:cf:1c:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4220d4fffbbe02b134d98e4a2b45fa7b7f55874c
Validity
Not Before: Nov 11 09:01:04 2025 GMT
Not After : Nov 12 09:01:04 2025 GMT
Subject: CN=4f47dcc3aa4df4d314aba12e80c56a56cacbf772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:51:7b:36:ec:53:98:a1:66:d6:33:23:c1:b4:
58:5e:a5:e8:8e:66:5c:73:75:7b:81:c5:81:d7:97:
5e:c7:c4:9f:96:cf:f2:ae:45:f5:57:10:64:f1:2c:
88:07:8d:4c:ee:95:7f:17:0f:5a:d8:e2:d0:4f:fb:
3c:6f:15:d7:68:9f:b2:82:5e:0f:35:c7:ed:43:f0:
89:f2:79:e1:64:b2:39:87:c0:e2:66:d7:cb:fa:b0:
30:ad:67:03:8e:76:26:dd:15:db:24:52:38:0c:07:
c3:ed:ea:d2:6c:ce:c8:45:36:ba:74:13:df:48:22:
11:c6:d0:e4:0e:dc:36:1e:08:a3:68:9b:de:95:33:
1a:14:94:04:ce:7e:b8:89:f7:7a:cc:e9:10:c2:93:
ba:21:c9:a4:fd:a9:2c:7c:27:ca:21:3c:ab:8d:fd:
62:7d:2b:a5:f4:20:22:95:92:26:3f:ec:6a:70:cd:
96:c3:22:95:b4:50:90:3c:f5:17:cc:3d:00:19:9f:
ed:a4:ad:71:4e:e5:4d:9c:2b:0b:23:13:2c:33:8b:
9c:9e:ac:07:90:0a:69:86:dc:b6:e0:ae:b8:01:58:
9a:ab:5d:bd:99:80:02:30:fd:3e:7b:68:8e:9d:db:
9f:6a:f0:1d:70:71:5f:da:07:2c:39:73:3e:11:ea:
eb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:47:DC:C3:AA:4D:F4:D3:14:AB:A1:2E:80:C5:6A:56:CA:CB:F7:72
X509v3 Authority Key Identifier:
keyid:42:20:D4:FF:FB:BE:02:B1:34:D9:8E:4A:2B:45:FA:7B:7F:55:87:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiDU__u-ArE02Y5KK0X6e39Vh0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/0aea0d-11c9-4134-9825-743e56095499/1/QiDU__u-ArE02Y5KK0X6e39Vh0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/0aea0d-11c9-4134-9825-743e56095499/1/QiDU__u-ArE02Y5KK0X6e39Vh0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:41:61:0e:c3:e5:45:09:5a:b0:c4:91:01:e3:81:74:77:cf:
b5:59:b5:49:eb:72:0f:c0:bf:fd:b9:1b:84:51:62:0a:04:dd:
4d:ea:af:be:5a:66:bd:40:24:d3:58:59:51:a5:c3:42:3a:ed:
76:63:91:1b:f0:ef:60:a4:b8:ea:c8:b5:7d:63:12:18:e7:15:
87:23:26:e5:06:d7:5a:29:b4:94:47:9a:c3:2b:51:bc:21:d4:
48:1c:bb:81:2d:57:4d:ad:2e:4d:c6:44:63:da:1f:d2:3a:51:
91:4e:79:7f:12:11:cb:dc:10:70:bc:eb:b9:65:95:d8:17:4b:
e1:f3:66:82:ad:ee:07:21:60:30:d1:ed:7a:af:90:66:c8:43:
c5:1d:f9:9d:a6:67:ab:1f:64:95:54:14:81:07:ca:04:84:16:
44:68:01:14:d0:f1:f8:f6:86:3d:2a:c0:ea:66:09:bd:f8:06:
69:3e:4c:e0:b2:c6:1f:d5:cb:c3:e6:56:f2:16:15:f4:91:0e:
24:05:24:de:c4:03:1e:f3:46:c3:c3:3a:67:bd:a6:9c:52:e6:
e5:bb:9e:a4:b2:91:d8:26:5a:13:e4:dc:02:4e:1f:0e:3d:c1:
5b:b5:5d:3c:ef:c6:78:82:17:20:69:03:87:05:81:bc:a1:fc:
3b:e0:c4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:24:39 2025 by rpki-client