Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/ce21b3-c4de-456d-b538-97975d34fc6c/1/QUjLrRdIIFtPQzS7pjjGTCsh_A4.mft
File: QUjLrRdIIFtPQzS7pjjGTCsh_A4.mft (raw, json)
Hash identifier: eYoMDKU2te53CEGA+m12Ubgsu5gLwmOuTJdcyeoKNww=
Subject key identifier: 40:CD:02:64:6D:CF:CA:C0:BA:3B:1F:36:05:B9:D4:72:04:D9:15:58
Authority key identifier: 41:48:CB:AD:17:48:20:5B:4F:43:34:BB:A6:38:C6:4C:2B:21:FC:0E
Certificate issuer: /CN=4148cbad1748205b4f4334bba638c64c2b21fc0e
Certificate serial: 0198D698802201889BB8275F15A3339ED6D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QUjLrRdIIFtPQzS7pjjGTCsh_A4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/ce21b3-c4de-456d-b538-97975d34fc6c/1/QUjLrRdIIFtPQzS7pjjGTCsh_A4.mft
Manifest number: 1078
Signing time: Sat 23 Aug 2025 11:02:55 +0000
Manifest this update: Sat 23 Aug 2025 11:02:55 +0000
Manifest next update: Sun 24 Aug 2025 11:02:55 +0000
Files and hashes: 1: 4ylLEVDeXKrfF8Se5wkM9llLd1w.roa (hash: 4hQQfVDyFUxXBSnxIrSQDsLfslrlkzzZ+2tzn4mkErM=)
2: QUjLrRdIIFtPQzS7pjjGTCsh_A4.crl (hash: lLLsGMMnU9L+8Eqgj1Ehao2EmSRkr53yQzozh20ZTXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/ce21b3-c4de-456d-b538-97975d34fc6c/1/QUjLrRdIIFtPQzS7pjjGTCsh_A4.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/ce21b3-c4de-456d-b538-97975d34fc6c/1/QUjLrRdIIFtPQzS7pjjGTCsh_A4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QUjLrRdIIFtPQzS7pjjGTCsh_A4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:80:22:01:88:9b:b8:27:5f:15:a3:33:9e:d6:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4148cbad1748205b4f4334bba638c64c2b21fc0e
Validity
Not Before: Aug 23 11:02:55 2025 GMT
Not After : Aug 24 11:02:55 2025 GMT
Subject: CN=40cd02646dcfcac0ba3b1f3605b9d47204d91558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:47:1f:9f:e2:49:f8:14:23:d6:0f:36:fa:19:
43:59:97:af:c2:42:59:28:70:70:43:74:3f:e5:c1:
c1:24:25:0c:e2:5d:21:25:2d:1b:8e:c1:e7:50:4b:
29:0d:f6:11:c0:ad:92:f7:11:ba:38:79:20:d3:c7:
1e:53:64:e9:0c:3e:0a:3d:ea:16:aa:18:35:ee:8e:
fa:9d:dc:32:3e:30:1d:6e:78:61:47:a6:86:d3:28:
43:ef:13:f2:2e:b1:8c:c8:6c:32:df:d0:6f:be:a2:
65:9d:7a:13:68:e7:0e:a6:0a:9c:9b:47:b4:84:8f:
53:7d:92:26:b7:81:07:11:a4:4d:69:5d:dc:19:35:
0a:b7:bb:02:71:49:c5:72:78:b8:34:f8:6c:33:14:
e1:50:d2:de:df:3d:40:67:25:26:a6:6b:aa:d2:4e:
c6:31:52:f2:6e:52:0e:94:42:86:93:ed:33:50:5b:
7b:68:81:b4:6a:86:92:13:05:67:85:2f:d4:0f:e2:
c9:2c:35:57:5e:7e:9e:f4:30:b5:ca:e0:a2:f6:65:
89:a4:62:ee:40:30:e4:05:de:2f:ec:28:41:ca:a5:
da:88:0c:f4:e9:1e:54:a4:69:6c:73:35:02:af:e9:
54:39:6b:6b:53:5a:e9:a5:67:7d:ad:fc:34:85:60:
a1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:CD:02:64:6D:CF:CA:C0:BA:3B:1F:36:05:B9:D4:72:04:D9:15:58
X509v3 Authority Key Identifier:
keyid:41:48:CB:AD:17:48:20:5B:4F:43:34:BB:A6:38:C6:4C:2B:21:FC:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QUjLrRdIIFtPQzS7pjjGTCsh_A4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ce21b3-c4de-456d-b538-97975d34fc6c/1/QUjLrRdIIFtPQzS7pjjGTCsh_A4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ce21b3-c4de-456d-b538-97975d34fc6c/1/QUjLrRdIIFtPQzS7pjjGTCsh_A4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:a2:80:d3:a3:01:c9:b8:d0:88:13:f2:2b:f4:67:fa:e5:ef:
5a:b4:73:92:70:5d:4e:55:2f:ce:b7:bf:e2:2e:52:3d:3c:aa:
30:12:1b:27:b1:22:8b:10:db:5e:3e:dc:9e:f1:dc:3d:2f:4e:
78:89:32:64:d2:01:bd:b9:65:e0:82:cd:b7:24:6c:28:06:dd:
3c:86:ea:fe:8d:0f:9b:e2:22:d0:68:47:bf:01:73:58:e6:3c:
16:a1:1c:99:8e:36:9b:9b:6a:16:25:f9:d4:97:7d:6c:d7:d8:
51:ab:4c:6d:45:63:04:13:b5:4d:52:15:cf:80:2b:96:14:70:
a4:4f:5b:01:71:0f:00:ff:be:0f:3a:95:8c:c2:69:1d:30:66:
08:7e:a7:9c:ef:a9:6e:9f:6b:f3:57:fa:76:e8:1a:66:92:9e:
d4:32:3a:f4:e9:bc:b1:60:16:9b:06:cd:be:5d:c3:a0:d2:c6:
0c:56:e7:b3:bb:e7:10:91:b1:d7:00:c8:c8:b7:59:92:14:be:
aa:06:53:5c:76:d1:a1:29:80:e6:09:02:54:15:8e:1d:5d:b3:
aa:8f:2d:11:2b:f6:d7:ef:9b:b0:11:49:18:8b:f9:0a:a7:bc:
09:90:14:65:b1:0d:84:f6:4b:47:f6:68:76:1f:01:6c:e1:68:
4a:00:7b:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWmIAiAYibuCdfFaMzntbZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxNDhjYmFkMTc0ODIwNWI0ZjQzMzRiYmE2MzhjNjRjMmIy
MWZjMGUwHhcNMjUwODIzMTEwMjU1WhcNMjUwODI0MTEwMjU1WjAzMTEwLwYDVQQD
Eyg0MGNkMDI2NDZkY2ZjYWMwYmEzYjFmMzYwNWI5ZDQ3MjA0ZDkxNTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00cfn+JJ+BQj1g82+hlDWZevwkJZ
KHBwQ3Q/5cHBJCUM4l0hJS0bjsHnUEspDfYRwK2S9xG6OHkg08ceU2TpDD4KPeoW
qhg17o76ndwyPjAdbnhhR6aG0yhD7xPyLrGMyGwy39BvvqJlnXoTaOcOpgqcm0e0
hI9TfZImt4EHEaRNaV3cGTUKt7sCcUnFcni4NPhsMxThUNLe3z1AZyUmpmuq0k7G
MVLyblIOlEKGk+0zUFt7aIG0aoaSEwVnhS/UD+LJLDVXXn6e9DC1yuCi9mWJpGLu
QDDkBd4v7ChByqXaiAz06R5UpGlsczUCr+lUOWtrU1rppWd9rfw0hWCh1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEDNAmRtz8rAujsfNgW51HIE2RVYMB8GA1UdIwQY
MBaAFEFIy60XSCBbT0M0u6Y4xkwrIfwOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVVqTHJSZElJRnRQUXpTN3BqakdUQ3NoX0E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9jZTIxYjMtYzRkZS00NTZkLWI1Mzgt
OTc5NzVkMzRmYzZjLzEvUVVqTHJSZElJRnRQUXpTN3BqakdUQ3NoX0E0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9jZTIxYjMtYzRkZS00NTZkLWI1MzgtOTc5NzVkMzRmYzZj
LzEvUVVqTHJSZElJRnRQUXpTN3BqakdUQ3NoX0E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALKKA06MB
ybjQiBPyK/Rn+uXvWrRzknBdTlUvzre/4i5SPTyqMBIbJ7EiixDbXj7cnvHcPS9O
eIkyZNIBvbll4ILNtyRsKAbdPIbq/o0Pm+Ii0GhHvwFzWOY8FqEcmY42m5tqFiX5
1Jd9bNfYUatMbUVjBBO1TVIVz4ArlhRwpE9bAXEPAP++DzqVjMJpHTBmCH6nnO+p
bp9r81f6dugaZpKe1DI69Om8sWAWmwbNvl3DoNLGDFbns7vnEJGx1wDIyLdZkhS+
qgZTXHbRoSmA5gkCVBWOHV2zqo8tESv21++bsBFJGIv5Cqe8CZAUZbENhPZLR/Zo
dh8BbOFoSgB7Mw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:29:23 2025 by rpki-client