Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft
File: QSUTQuBdWLO3_JOhXLoetx5UI4U.mft (raw, json)
Hash identifier: ddNw7bI5c5bZAPrll9VNRzL5m8G3EBdhZlK88/0sBsQ=
Subject key identifier: 72:E4:E9:2F:B0:1E:4A:56:87:F3:87:56:F7:20:FC:66:47:5E:60:ED
Authority key identifier: 41:25:13:42:E0:5D:58:B3:B7:FC:93:A1:5C:BA:1E:B7:1E:54:23:85
Certificate issuer: /CN=41251342e05d58b3b7fc93a15cba1eb71e542385
Certificate serial: 0199FE7DB6894D84B6FD21AF530BAA483B36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSUTQuBdWLO3_JOhXLoetx5UI4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft
Manifest number: 0C40
Signing time: Sun 19 Oct 2025 22:01:15 +0000
Manifest this update: Sun 19 Oct 2025 22:01:15 +0000
Manifest next update: Mon 20 Oct 2025 22:01:15 +0000
Files and hashes: 1: QSUTQuBdWLO3_JOhXLoetx5UI4U.crl (hash: mi6VMGZMDvSVTSO0Qf/h6GnKwIP60JztDsXkKXMCJKo=)
2: mDj0VP-jqiKwJjt-lOQdn-slpWo.roa (hash: nmxfsT+G50uuChDyNePbK+N70F1vF7/NLgZyTdzlZ3A=)
3: qi8SjamVLTZcWUyfEiVS4BoqkZE.roa (hash: 6lwU9eJcpe8KWWxmMOizpAa94mxqfcksgtQmJaF4BYg=)
4: xJg857yIwhyEdYeIjcGRADD28jk.roa (hash: 5mboHsfsR9FT8/O1wonNqgc6c/V/+s+AZdj8ipNclaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSUTQuBdWLO3_JOhXLoetx5UI4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 22:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:b6:89:4d:84:b6:fd:21:af:53:0b:aa:48:3b:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41251342e05d58b3b7fc93a15cba1eb71e542385
Validity
Not Before: Oct 19 22:01:15 2025 GMT
Not After : Oct 20 22:01:15 2025 GMT
Subject: CN=72e4e92fb01e4a5687f38756f720fc66475e60ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:82:2a:84:59:48:de:ff:5a:d8:0e:72:77:3c:
6b:11:58:14:29:e7:2a:59:7a:40:4d:c8:51:03:a4:
17:45:3d:6a:ad:d6:84:b8:f1:ad:8b:72:ca:72:ca:
86:e7:0a:5d:53:43:62:c5:29:d0:06:af:19:6b:62:
8c:5c:34:80:ae:05:57:93:98:4c:72:33:b1:c6:5f:
74:3b:03:03:48:8a:fc:4d:cb:b8:4b:ac:b4:00:d5:
66:16:1d:1c:fe:95:2f:b7:b6:4b:1a:59:e8:a0:e4:
b3:b9:94:7e:be:9c:19:c7:2f:aa:3f:92:69:0d:d3:
4c:e7:a3:c2:3b:f5:36:0b:e7:2d:fd:60:5d:e7:9b:
5b:2b:e6:9b:80:aa:9e:5e:6d:ec:be:5a:76:76:fe:
4d:df:7b:d6:fe:86:15:6c:fe:d8:fa:54:f6:6f:5f:
bc:b0:fc:14:04:1f:7e:e0:c6:d3:a8:3c:ce:a8:b8:
08:53:04:b6:9f:1e:0b:7c:8d:2a:6a:2f:cd:ed:67:
54:f8:64:3e:92:4f:ab:c1:4b:8c:4d:07:49:9a:47:
47:9c:00:86:db:d0:45:9a:fc:31:31:75:93:76:dc:
b3:7b:bc:f7:53:5b:68:5a:95:71:a8:ef:54:a1:e1:
fa:51:54:68:4e:42:86:29:5a:61:e6:cf:02:45:57:
45:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:E4:E9:2F:B0:1E:4A:56:87:F3:87:56:F7:20:FC:66:47:5E:60:ED
X509v3 Authority Key Identifier:
keyid:41:25:13:42:E0:5D:58:B3:B7:FC:93:A1:5C:BA:1E:B7:1E:54:23:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSUTQuBdWLO3_JOhXLoetx5UI4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:b7:24:37:e7:cb:55:dd:43:d4:c5:11:98:42:04:57:1c:03:
df:f2:24:f5:5b:17:46:9b:c5:bf:52:b0:93:79:1b:f6:93:5a:
e2:29:99:40:e9:bc:23:4f:d4:18:85:90:3c:61:31:0a:31:8a:
66:30:ed:50:1f:83:10:85:d5:d6:6f:51:dc:35:b8:80:f0:b5:
15:17:be:46:27:c3:31:5c:f7:b7:b2:69:21:8f:0a:89:6b:2d:
72:a6:a6:cc:27:cd:2c:aa:02:fd:3c:13:1c:24:f6:a0:2b:51:
db:50:2a:0f:f9:1f:82:03:c9:de:dd:56:63:9d:57:53:ee:68:
86:3b:95:51:14:49:7b:6f:ef:82:dd:84:09:ec:3f:5c:60:f6:
d4:a7:af:04:ba:9b:33:60:46:7c:6a:ee:d2:06:f5:35:07:9a:
17:65:07:2e:15:f7:1e:2c:d9:7c:50:80:33:e3:60:36:89:c5:
09:70:d9:e8:a2:7c:af:29:5f:b8:c2:53:65:a2:1a:d8:54:29:
a9:b8:e1:73:ae:06:94:bb:9a:2b:4c:50:82:26:34:d5:9b:ab:
77:17:11:12:60:cb:8a:7e:25:5b:85:11:27:61:ae:9f:1e:26:
e2:05:84:85:9b:67:34:94:8c:bc:ad:a0:a9:ad:60:d4:00:9d:
9a:57:64:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:07:26 2025 by rpki-client