Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.mft
File: QT_6EGrj_ua-h7rAaoe6V-0cEUA.mft (raw, json)
Hash identifier: 3SWlyalsjcT08mtQC5YYefooGV1AHQY3Ax6bi4H+goY=
Subject key identifier: 22:AD:77:78:A4:1D:D1:43:A6:C8:A4:4C:C1:41:92:3F:D5:59:9C:2C
Authority key identifier: 41:3F:FA:10:6A:E3:FE:E6:BE:87:BA:C0:6A:87:BA:57:ED:1C:11:40
Certificate issuer: /CN=413ffa106ae3fee6be87bac06a87ba57ed1c1140
Certificate serial: 019A4DE235F2400EF72A43B1C903CC54C8D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QT_6EGrj_ua-h7rAaoe6V-0cEUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 08:01:01 +0000
Manifest this update: Tue 04 Nov 2025 08:01:01 +0000
Manifest next update: Wed 05 Nov 2025 08:01:01 +0000
Files and hashes: 1: 0qda3zP6aWS1QmMsfKtgTS_B8vw.roa (hash: NDD2ZMdGd4Vw1apZklWLmjHBzI7LGvrNZrE04O9xutU=)
2: QT_6EGrj_ua-h7rAaoe6V-0cEUA.crl (hash: aAZLo2UGSHbtiQ6+EJZcNuYjzLRMfxJljCuVv6SZPq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QT_6EGrj_ua-h7rAaoe6V-0cEUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:35:f2:40:0e:f7:2a:43:b1:c9:03:cc:54:c8:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=413ffa106ae3fee6be87bac06a87ba57ed1c1140
Validity
Not Before: Nov 4 08:01:01 2025 GMT
Not After : Nov 5 08:01:01 2025 GMT
Subject: CN=22ad7778a41dd143a6c8a44cc141923fd5599c2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:48:5e:99:90:5d:1d:3f:f4:0a:74:2e:62:b8:
80:09:12:6f:66:76:95:61:f5:82:d3:c7:63:75:7d:
f0:42:ef:c5:c3:4f:96:c4:da:cc:06:55:46:34:56:
37:67:d3:d2:71:4b:12:2a:2c:94:0a:65:30:93:b7:
f6:4d:9e:e7:b1:e4:4d:36:c0:36:52:21:ff:de:21:
69:0f:49:60:e0:7c:51:b6:e0:0d:32:b4:c9:08:5e:
66:fa:a6:7a:b6:5d:04:c8:d5:16:1e:fc:73:78:c4:
6d:54:6f:84:9a:43:94:0b:e2:14:33:54:ea:21:61:
21:d2:3d:ad:f6:2f:ac:0c:49:0a:85:c5:b7:74:b8:
1a:1c:c0:2e:3e:fa:c7:99:97:19:41:62:92:34:23:
93:f8:7b:fd:5f:79:e5:c1:f0:61:4d:e8:8f:8f:f9:
b9:4d:25:6d:3c:9e:d9:80:86:6b:82:01:8e:73:7f:
a9:67:b0:49:6d:1e:ad:72:39:c1:01:89:06:e7:04:
e5:e9:12:97:2c:b5:29:7b:b5:aa:14:a6:27:cf:9e:
7a:0d:c0:96:a6:8d:59:8f:f8:c2:fe:e9:85:48:ff:
cd:95:0a:7c:22:a1:4a:fd:8e:24:c5:2c:47:d7:78:
42:6a:d9:cb:91:53:70:e2:04:2d:fe:5f:75:7d:49:
f6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:AD:77:78:A4:1D:D1:43:A6:C8:A4:4C:C1:41:92:3F:D5:59:9C:2C
X509v3 Authority Key Identifier:
keyid:41:3F:FA:10:6A:E3:FE:E6:BE:87:BA:C0:6A:87:BA:57:ED:1C:11:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QT_6EGrj_ua-h7rAaoe6V-0cEUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:13:46:cc:59:71:2d:21:94:85:d0:9a:ab:87:b0:4b:19:df:
a0:85:39:cc:51:4d:8a:24:b5:db:97:95:a1:ec:7f:9c:d4:0e:
ad:79:1e:21:64:3f:45:8b:d4:26:49:3d:0e:28:15:20:44:38:
13:53:90:2a:44:c1:42:ee:0f:57:e8:a7:91:59:5e:17:54:92:
e5:8a:a9:e9:39:5d:92:5f:f8:fa:eb:87:1b:11:31:bf:59:b6:
e7:a3:0a:ba:01:bf:e7:73:da:ca:6b:b9:e5:ae:77:ee:7e:1b:
ba:a9:37:74:d9:45:da:51:2b:01:01:3d:b3:5a:65:17:31:fc:
d6:b1:c5:97:94:1f:df:62:c1:02:b9:57:ed:20:42:c1:50:cd:
4d:91:75:83:ea:d5:0f:cf:28:20:44:7a:1d:18:23:5a:8f:19:
23:86:d3:a9:0c:79:12:58:9c:98:36:4d:fd:89:01:15:ed:b9:
ac:9e:20:e3:93:2f:10:f5:9a:45:d3:89:5a:1b:8e:a9:c2:78:
25:48:13:68:1e:6c:38:ff:e6:d6:ee:04:88:7d:fd:42:a2:06:
ec:d7:18:db:dc:af:87:48:46:34:36:61:b3:05:9c:b4:1a:7d:
c7:8b:6b:e8:3e:29:c1:6b:7c:87:a6:44:20:70:38:93:57:94:
5e:0d:22:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:35 2025 by rpki-client