Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
File: qmffuIKufY5V0lhlF0L05s5DcBk.mft (raw, json)
Hash identifier: RA5oDYwi7o/GBb7NA+wPAA3bdUShrg0NZuvy1BFvdzQ=
Subject key identifier: 49:B9:A0:4A:42:B3:F6:54:2F:FA:5C:5A:E6:5E:56:F0:7D:5F:31:25
Authority key identifier: AA:67:DF:B8:82:AE:7D:8E:55:D2:58:65:17:42:F4:E6:CE:43:70:19
Certificate issuer: /CN=aa67dfb882ae7d8e55d258651742f4e6ce437019
Certificate serial: 019A70A52BAC7B810D2A3C48A97188238534
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 02:01:04 +0000
Manifest this update: Tue 11 Nov 2025 02:01:04 +0000
Manifest next update: Wed 12 Nov 2025 02:01:04 +0000
Files and hashes: 1: qmffuIKufY5V0lhlF0L05s5DcBk.crl (hash: S6sdCJ6nDCIgLHu/KNdrGLu2ay466ErW3+HZP12glbE=)
2: sEET-ptT1wSBoWPjjCsZ2dSnAsI.roa (hash: f9CQV7WSxI4NmikFhldnkXK2NLP+yhZAq8+zP2dx5cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:2b:ac:7b:81:0d:2a:3c:48:a9:71:88:23:85:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa67dfb882ae7d8e55d258651742f4e6ce437019
Validity
Not Before: Nov 11 02:01:04 2025 GMT
Not After : Nov 12 02:01:04 2025 GMT
Subject: CN=49b9a04a42b3f6542ffa5c5ae65e56f07d5f3125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:88:26:0c:46:f3:f5:d0:39:52:e3:51:88:03:
6c:0f:80:2a:15:df:4a:e5:9e:f3:d9:f4:5b:2e:63:
7c:bd:eb:72:56:4f:a7:4e:f9:37:21:a1:d4:e7:50:
7b:12:7a:7a:a0:0d:70:c5:a6:fb:10:d3:b6:3c:c0:
38:67:42:13:55:65:48:44:31:71:6c:5b:9d:94:d6:
b3:ae:4b:37:ac:a0:ec:05:eb:26:df:a7:9f:57:bc:
ae:31:88:e3:8a:56:ed:f0:d7:ac:fa:58:22:36:c9:
18:05:d3:e7:d1:cb:20:dd:70:ca:a8:50:03:26:02:
ed:b6:72:98:04:58:5e:e2:54:b7:d6:3e:37:7f:7c:
ea:3a:88:15:8e:ae:e9:c7:18:76:d0:22:04:69:00:
21:54:42:d8:c0:24:83:05:8a:96:24:6a:8e:c4:19:
9f:d6:f7:9c:8f:90:a8:dd:94:2c:3b:36:6b:22:d5:
0b:81:42:6f:47:95:13:61:a5:eb:b9:e1:33:e7:ab:
ef:41:53:15:ef:77:f3:df:95:db:35:37:23:86:48:
60:d4:9b:77:83:d6:d1:0c:bc:b1:b6:6c:72:e0:c3:
8c:1c:bf:65:af:92:52:ce:fb:c5:85:69:84:37:fc:
24:5c:9c:47:16:9b:67:d7:41:91:57:e9:38:6f:01:
f5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:B9:A0:4A:42:B3:F6:54:2F:FA:5C:5A:E6:5E:56:F0:7D:5F:31:25
X509v3 Authority Key Identifier:
keyid:AA:67:DF:B8:82:AE:7D:8E:55:D2:58:65:17:42:F4:E6:CE:43:70:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:1b:ff:54:5a:02:09:3c:19:44:ad:12:3e:40:fe:48:61:6f:
a2:b2:df:62:13:30:79:54:b7:fb:df:45:f6:c0:f4:de:a9:4a:
cf:96:07:d8:72:e8:a6:dc:3c:73:b8:5e:03:a1:59:fc:49:3c:
d5:1f:95:08:53:7f:16:8a:44:df:9c:1d:17:57:2b:2f:06:a5:
39:da:9c:24:aa:c5:ad:0b:cf:4b:85:14:7d:b6:8c:9c:24:83:
b2:64:3c:7f:a9:53:fd:1a:38:b2:0e:87:3d:63:f2:02:14:55:
96:e5:81:bb:8b:b7:34:3a:84:49:da:cb:52:f7:6c:8b:c1:e8:
f1:63:fa:f9:96:cb:0a:17:e6:4c:b5:7f:00:ce:12:ca:55:8d:
86:dc:9e:b1:65:65:ed:c0:13:65:9b:b2:05:e9:a8:91:68:a9:
66:1c:18:f1:8a:12:39:98:25:60:4e:24:7c:44:e5:3e:62:fe:
f7:61:1a:db:be:a3:ee:e8:24:ec:47:3f:a7:5f:4e:fb:9e:54:
e4:3c:72:62:8e:5c:fa:2a:00:5b:dd:32:62:a6:f2:db:5b:68:
c3:4f:ee:75:16:56:c4:4f:b1:5f:d4:b8:a6:70:89:38:7f:cb:
ae:0c:f6:4e:16:f3:5d:6d:87:f9:21:56:9e:48:a7:6b:26:88:
10:49:f8:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:23 2025 by rpki-client