Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/ce21b3-c4de-456d-b538-97975d34fc6c/1/QUjLrRdIIFtPQzS7pjjGTCsh_A4.mft
File: QUjLrRdIIFtPQzS7pjjGTCsh_A4.mft (raw, json)
Hash identifier: rmMJTlPDfkcCoeDVdEAa8U2fWUXrA6tKvQfNsy9UbGs=
Subject key identifier: 30:59:8B:89:2E:1D:EC:0D:81:37:C1:A7:8E:B5:A9:D7:75:F8:A4:CC
Authority key identifier: 41:48:CB:AD:17:48:20:5B:4F:43:34:BB:A6:38:C6:4C:2B:21:FC:0E
Certificate issuer: /CN=4148cbad1748205b4f4334bba638c64c2b21fc0e
Certificate serial: 0199FFFEB40A57559D5EA8EC47E1D97E8703
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QUjLrRdIIFtPQzS7pjjGTCsh_A4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/ce21b3-c4de-456d-b538-97975d34fc6c/1/QUjLrRdIIFtPQzS7pjjGTCsh_A4.mft
Manifest number: 1112
Signing time: Mon 20 Oct 2025 05:01:46 +0000
Manifest this update: Mon 20 Oct 2025 05:01:46 +0000
Manifest next update: Tue 21 Oct 2025 05:01:46 +0000
Files and hashes: 1: 4ylLEVDeXKrfF8Se5wkM9llLd1w.roa (hash: 4hQQfVDyFUxXBSnxIrSQDsLfslrlkzzZ+2tzn4mkErM=)
2: QUjLrRdIIFtPQzS7pjjGTCsh_A4.crl (hash: 7K2vEXp6/ITZly7wKh1leF2dg9R5X9HsrPuYg+dRPvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/ce21b3-c4de-456d-b538-97975d34fc6c/1/QUjLrRdIIFtPQzS7pjjGTCsh_A4.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/ce21b3-c4de-456d-b538-97975d34fc6c/1/QUjLrRdIIFtPQzS7pjjGTCsh_A4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QUjLrRdIIFtPQzS7pjjGTCsh_A4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:b4:0a:57:55:9d:5e:a8:ec:47:e1:d9:7e:87:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4148cbad1748205b4f4334bba638c64c2b21fc0e
Validity
Not Before: Oct 20 05:01:46 2025 GMT
Not After : Oct 21 05:01:46 2025 GMT
Subject: CN=30598b892e1dec0d8137c1a78eb5a9d775f8a4cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:85:f3:c6:4e:f1:54:47:f6:ec:28:5b:1c:ed:
60:f7:d7:88:4b:4c:e9:50:ec:cd:fb:b3:8c:fa:f0:
8f:ea:bc:04:03:9b:b1:4d:95:fe:c9:48:47:69:9d:
b9:ef:a7:82:d2:f5:69:88:ca:dd:26:47:fb:9b:e6:
43:09:d3:cb:a8:6b:24:81:fb:f8:bc:58:e5:c4:42:
dc:a7:a5:cc:6e:ff:88:3a:0a:79:8f:b0:20:6e:43:
35:ef:02:2a:3b:2c:38:6d:b8:91:a2:6c:79:59:0e:
21:40:64:8d:6a:65:f3:d7:72:8d:f0:04:58:6c:31:
a9:cb:1f:bd:57:fe:da:9b:62:cf:09:28:4e:6f:39:
b2:76:39:f4:02:76:d2:3c:e8:f3:7a:0e:21:32:a7:
09:de:99:10:e4:97:ea:51:74:35:47:68:00:75:af:
5b:fa:47:6c:af:1c:a9:9b:1b:28:c5:60:4e:92:af:
eb:21:50:99:26:35:96:36:3b:34:2f:d1:7f:b6:a0:
ec:72:b6:28:56:bd:5e:66:bc:5a:c3:59:98:9f:ee:
33:1e:8a:95:4b:ba:b6:bf:d8:9f:e6:b2:53:0a:6b:
84:05:2c:54:50:ef:21:dd:57:3e:68:3c:e7:7b:30:
c8:5f:8d:fe:9d:55:83:0c:f2:cb:50:e6:f5:34:98:
fd:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:59:8B:89:2E:1D:EC:0D:81:37:C1:A7:8E:B5:A9:D7:75:F8:A4:CC
X509v3 Authority Key Identifier:
keyid:41:48:CB:AD:17:48:20:5B:4F:43:34:BB:A6:38:C6:4C:2B:21:FC:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QUjLrRdIIFtPQzS7pjjGTCsh_A4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ce21b3-c4de-456d-b538-97975d34fc6c/1/QUjLrRdIIFtPQzS7pjjGTCsh_A4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ce21b3-c4de-456d-b538-97975d34fc6c/1/QUjLrRdIIFtPQzS7pjjGTCsh_A4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:d8:18:b4:e2:9d:cd:19:bc:5b:e3:98:b2:ee:3f:3b:49:85:
b7:27:ec:12:e6:39:f0:f8:84:45:9e:b4:ab:64:fd:1d:b8:2a:
3d:e1:b3:6e:8b:ef:8e:38:c2:e4:6f:7c:87:1d:d0:1e:7a:99:
cb:87:43:04:32:e2:00:a8:aa:59:9c:0f:72:b2:25:72:98:6e:
70:3d:2f:57:f3:b5:02:0a:40:b3:16:21:47:7f:d8:31:6d:b8:
85:a8:30:03:6a:c7:9d:b1:5c:0f:c2:6c:87:f4:d2:57:21:fe:
45:e6:5c:08:9a:ef:d5:d4:9b:4d:98:23:f4:e5:ca:17:dd:da:
0a:ee:c0:c0:42:28:1d:a9:d3:8c:80:33:05:f5:ec:1f:59:28:
72:bb:51:cf:00:2d:b8:69:5d:7f:24:d1:ba:41:fd:58:53:92:
33:03:1c:04:97:96:9d:ce:d4:c1:5e:5d:dd:ae:07:76:eb:af:
8b:55:14:ed:7d:94:7e:2b:eb:a1:65:21:db:f8:2b:62:99:3a:
82:eb:93:e6:46:88:55:d2:f9:dc:0e:94:be:9b:c5:c7:e1:87:
e7:d6:db:6d:1c:2c:7a:0c:01:08:b5:8b:ba:98:da:d4:26:4f:
b4:bd:f9:be:bc:8f:63:8f:de:ca:6e:83:8a:fc:61:de:22:e5:
8e:cd:c8:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:36:20 2025 by rpki-client