Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft
File: 3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft (raw, json)
Hash identifier: DdjFgFbWhPK6yOJuRAT2+DAHO9NdYL86gryE9ymDA8w=
Subject key identifier: E2:64:37:D8:80:B6:7B:96:0E:15:0A:78:1C:0C:0A:BF:0D:49:60:F6
Authority key identifier: DC:4F:90:A9:3D:C9:42:78:55:64:49:03:CB:70:C1:F7:4B:93:17:86
Certificate issuer: /CN=dc4f90a93dc9427855644903cb70c1f74b931786
Certificate serial: 019A7112D8D8A5B6688C277F473787B90466
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft
Manifest number: 0523
Signing time: Tue 11 Nov 2025 04:00:51 +0000
Manifest this update: Tue 11 Nov 2025 04:00:51 +0000
Manifest next update: Wed 12 Nov 2025 04:00:51 +0000
Files and hashes: 1: 3E-QqT3JQnhVZEkDy3DB90uTF4Y.crl (hash: 9I8W32nSI75fJy6u1LOz8nF9Mfqmm3n2rnP6K7o69s4=)
2: PT68lLdfHWq61L0p7mbOXLRwHhw.roa (hash: A4keDsv/7uOGmjAx+h6C5RlssIOEsmTqNcUP9OgH66s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:d8:d8:a5:b6:68:8c:27:7f:47:37:87:b9:04:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc4f90a93dc9427855644903cb70c1f74b931786
Validity
Not Before: Nov 11 04:00:51 2025 GMT
Not After : Nov 12 04:00:51 2025 GMT
Subject: CN=e26437d880b67b960e150a781c0c0abf0d4960f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4a:de:ac:11:18:d6:17:c3:df:fc:be:69:da:
04:d2:53:35:3c:37:eb:94:f3:cb:4d:94:88:90:58:
0d:4f:e9:dc:3c:14:c3:3a:1f:17:be:2d:63:53:d9:
83:d7:41:e5:2b:cf:0f:3b:a0:12:9d:11:30:54:d0:
e9:2b:6f:71:f6:e2:47:ce:c6:c1:b6:74:f7:ab:0a:
ff:fc:eb:d3:a7:3d:65:e5:3f:45:35:90:e7:f0:6b:
e7:d8:5b:3f:ae:60:d1:9c:22:ce:f6:81:89:14:91:
39:f5:6f:ea:22:f0:31:ca:f3:52:e0:fc:af:38:d3:
9f:0c:56:5a:3c:28:6a:b7:1f:a5:84:1e:20:d8:26:
15:4f:0e:98:2a:dc:13:4c:b7:4d:84:0d:5d:50:80:
2b:33:f8:90:e8:e2:ce:06:99:4b:60:1e:78:b8:cb:
36:65:c3:83:7d:92:d7:78:4a:9b:1b:e1:ac:6f:5e:
72:22:46:9d:f6:80:e5:81:62:39:48:25:a4:34:96:
69:fb:e8:25:b0:79:de:29:f1:e0:2a:75:8d:cd:4f:
90:ef:40:60:50:84:fe:c6:0c:30:ea:23:dd:f3:16:
2e:92:a9:30:f5:6f:6f:68:f1:ee:2a:a0:a9:39:0b:
e1:8a:4a:f6:4b:d7:96:7b:fa:a7:19:ba:3f:1c:2e:
4e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:64:37:D8:80:B6:7B:96:0E:15:0A:78:1C:0C:0A:BF:0D:49:60:F6
X509v3 Authority Key Identifier:
keyid:DC:4F:90:A9:3D:C9:42:78:55:64:49:03:CB:70:C1:F7:4B:93:17:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:d8:c7:1c:06:e9:35:a7:b9:2f:a8:ec:a0:ee:9e:0b:09:16:
b9:0e:be:a2:65:53:d8:71:24:75:74:b4:64:e1:ad:2e:61:dc:
f1:5b:78:a4:1c:f0:fb:fb:67:aa:d3:f8:a8:6e:7c:5c:12:08:
59:f2:b4:7a:c6:80:3c:c0:07:ca:46:0f:80:dc:04:7d:db:ee:
fb:3e:4c:49:00:97:26:ce:59:e6:cf:8d:fa:0f:dc:5d:8f:a4:
05:96:92:40:8f:d8:35:02:4a:1a:68:e4:19:dc:d2:b1:12:25:
c9:92:50:ff:57:4d:72:66:f8:05:89:a4:71:5b:5d:e9:85:be:
b5:4c:bf:ac:1e:40:8f:a5:b6:fd:50:18:a1:29:5b:8d:66:1c:
12:a6:43:a2:d4:0f:55:87:60:6c:f4:06:82:64:44:44:00:78:
af:0b:15:32:50:e6:e2:9e:7a:19:97:8f:96:35:7f:29:f3:f7:
3c:fd:8d:6f:65:d3:9b:cf:d9:34:4e:37:61:d1:53:4b:63:43:
5b:d6:42:89:b1:50:40:82:b4:7b:2c:a7:8f:70:34:df:44:e9:
d1:2a:f1:fe:cf:46:20:1b:dc:91:d2:5d:ab:d1:99:69:c3:e4:
ee:10:b3:e4:25:f9:27:0f:69:12:a4:34:4a:aa:54:c0:d5:9d:
d4:1f:c1:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:07:58 2025 by rpki-client