Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/42bed4-44d7-480b-bbda-16ab5746ef4e/1/qtT1OyE_1fbkbdPuO36dKH_JFzI.mft
File: qtT1OyE_1fbkbdPuO36dKH_JFzI.mft (raw, json)
Hash identifier: EeW9/fieb8NeMWJ89kkUWAw8DBPlQQYRqMdxxdeJjPw=
Subject key identifier: 7F:B7:5C:E9:32:35:37:FA:7D:7A:9B:DC:A1:1F:B4:63:3C:00:61:5B
Authority key identifier: AA:D4:F5:3B:21:3F:D5:F6:E4:6D:D3:EE:3B:7E:9D:28:7F:C9:17:32
Certificate issuer: /CN=aad4f53b213fd5f6e46dd3ee3b7e9d287fc91732
Certificate serial: 019A71808C277334844CF046B0748F2FD7CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qtT1OyE_1fbkbdPuO36dKH_JFzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/42bed4-44d7-480b-bbda-16ab5746ef4e/1/qtT1OyE_1fbkbdPuO36dKH_JFzI.mft
Manifest number: 47
Signing time: Tue 11 Nov 2025 06:00:41 +0000
Manifest this update: Tue 11 Nov 2025 06:00:41 +0000
Manifest next update: Wed 12 Nov 2025 06:00:41 +0000
Files and hashes: 1: QH7PkD5ZK8D91RHK6lOrj_AnwS0.roa (hash: 3W6raDOuTY1+pLUCyy05Kr7smlg3BwEP4vah6MOQHS0=)
2: qtT1OyE_1fbkbdPuO36dKH_JFzI.crl (hash: JL0GIpcMQqtfhLmiP4+6UsnTuNLRR8rgIEkhOf4Wipg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/42bed4-44d7-480b-bbda-16ab5746ef4e/1/qtT1OyE_1fbkbdPuO36dKH_JFzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/42bed4-44d7-480b-bbda-16ab5746ef4e/1/qtT1OyE_1fbkbdPuO36dKH_JFzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qtT1OyE_1fbkbdPuO36dKH_JFzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:8c:27:73:34:84:4c:f0:46:b0:74:8f:2f:d7:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aad4f53b213fd5f6e46dd3ee3b7e9d287fc91732
Validity
Not Before: Nov 11 06:00:41 2025 GMT
Not After : Nov 12 06:00:41 2025 GMT
Subject: CN=7fb75ce9323537fa7d7a9bdca11fb4633c00615b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:64:92:f9:46:65:6f:c1:15:fa:7a:0c:30:8b:
ed:17:27:90:82:07:cf:c4:4d:2e:6b:2f:bc:4b:9c:
c2:ec:2b:3c:2d:6e:15:5e:84:39:b2:07:ba:63:a2:
dd:40:96:1f:15:14:07:cd:55:23:c7:2c:cb:65:15:
f8:d4:2a:10:8b:a2:bd:39:8a:4e:4e:dd:cc:92:cc:
df:c9:49:80:71:ac:e0:de:e2:06:36:53:f1:eb:9f:
d1:24:51:24:66:2f:01:23:cc:89:b6:5d:e7:7b:da:
94:b3:0f:d5:c9:4d:3f:61:73:a3:17:97:6e:ea:7c:
80:07:70:0d:9a:d1:05:b4:bf:7e:5c:2f:b1:99:56:
24:88:bb:81:9c:9a:ee:3a:b8:af:85:16:8c:ca:2c:
ea:c2:b7:84:8d:c0:8b:d9:34:2e:5b:e7:8c:c7:87:
c9:c6:7a:d7:7d:6e:16:a8:6b:14:56:d4:89:60:77:
b0:8b:f2:69:69:73:cd:84:cd:87:c8:1b:35:58:66:
26:43:8c:55:40:e6:07:74:4c:af:a9:39:3a:53:db:
57:68:12:58:dc:5a:4b:c3:32:b4:c5:23:30:57:12:
4d:3e:f5:76:bf:db:27:05:f5:e1:f7:17:6b:ca:7a:
94:8c:a6:04:95:bc:40:28:53:96:a5:7b:86:d8:63:
b2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B7:5C:E9:32:35:37:FA:7D:7A:9B:DC:A1:1F:B4:63:3C:00:61:5B
X509v3 Authority Key Identifier:
keyid:AA:D4:F5:3B:21:3F:D5:F6:E4:6D:D3:EE:3B:7E:9D:28:7F:C9:17:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qtT1OyE_1fbkbdPuO36dKH_JFzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/42bed4-44d7-480b-bbda-16ab5746ef4e/1/qtT1OyE_1fbkbdPuO36dKH_JFzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/42bed4-44d7-480b-bbda-16ab5746ef4e/1/qtT1OyE_1fbkbdPuO36dKH_JFzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:44:47:20:2e:8e:5f:77:07:19:ca:28:74:61:ac:1f:24:9b:
ec:74:a4:06:95:8d:93:55:c8:9a:bc:7e:b1:36:89:25:7b:97:
bd:2f:99:a5:a0:8e:a0:d1:24:45:b9:0d:2f:38:21:62:55:80:
6e:62:7d:45:8b:4f:a7:f8:ca:25:83:e2:d5:12:10:d0:8f:0f:
03:d2:62:c5:76:7b:16:76:2c:f4:5f:5b:29:39:2f:a8:27:49:
a8:37:28:4f:33:bb:03:74:26:d8:4e:f0:7c:53:49:b1:a6:52:
ec:99:e8:86:aa:13:fe:8a:ec:98:f9:f6:da:7a:17:a5:3f:97:
6f:7f:1d:c5:34:a4:3b:60:af:84:3f:e6:32:1d:43:6a:29:35:
af:b7:ee:de:84:cc:11:2c:c4:2a:3a:28:74:7e:52:62:06:a3:
bc:8a:38:08:76:1c:86:70:05:c1:73:05:d0:ea:a3:a8:09:fe:
c1:c5:16:57:af:20:01:cb:96:59:8e:2d:df:55:ed:f9:72:8e:
40:64:0c:46:d0:9d:23:c1:cd:7c:23:56:1b:ba:ae:53:2c:67:
a5:2c:b9:70:da:d4:e7:1c:5b:52:43:6b:1b:7c:72:48:3d:a9:
eb:a8:75:91:36:14:e2:6b:c0:18:67:74:c6:44:74:7f:da:67:
b8:6d:84:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:56:45 2025 by rpki-client