Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.mft
File: QT_6EGrj_ua-h7rAaoe6V-0cEUA.mft (raw, json)
Hash identifier: RdKb/J6U3U43umdvAvNSfuj546uIXIUiLCy9K19a+qM=
Subject key identifier: EB:5F:E8:1A:AD:BF:A0:E6:8D:1B:2F:D1:EE:AF:59:BA:5E:6A:F0:65
Authority key identifier: 41:3F:FA:10:6A:E3:FE:E6:BE:87:BA:C0:6A:87:BA:57:ED:1C:11:40
Certificate issuer: /CN=413ffa106ae3fee6be87bac06a87ba57ed1c1140
Certificate serial: 019A7293B52378BB9A44A855A1DE5146A5F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QT_6EGrj_ua-h7rAaoe6V-0cEUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 11:01:14 +0000
Manifest this update: Tue 11 Nov 2025 11:01:14 +0000
Manifest next update: Wed 12 Nov 2025 11:01:14 +0000
Files and hashes: 1: 0qda3zP6aWS1QmMsfKtgTS_B8vw.roa (hash: NDD2ZMdGd4Vw1apZklWLmjHBzI7LGvrNZrE04O9xutU=)
2: QT_6EGrj_ua-h7rAaoe6V-0cEUA.crl (hash: BNkhgL/WheP22iNw8L+RXpgNHj2bKGz+Tc2pSQaI7rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QT_6EGrj_ua-h7rAaoe6V-0cEUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:b5:23:78:bb:9a:44:a8:55:a1:de:51:46:a5:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=413ffa106ae3fee6be87bac06a87ba57ed1c1140
Validity
Not Before: Nov 11 11:01:14 2025 GMT
Not After : Nov 12 11:01:14 2025 GMT
Subject: CN=eb5fe81aadbfa0e68d1b2fd1eeaf59ba5e6af065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8b:25:9f:33:90:57:cd:41:e0:20:e1:64:16:
d8:f6:a4:b1:bc:24:e1:0c:0c:34:2e:7e:b4:5c:91:
8d:37:94:cf:bd:cc:10:b0:12:85:91:21:22:1f:96:
77:41:45:c6:02:78:73:17:06:db:21:2a:cc:09:46:
0e:8c:ba:4b:3e:c4:aa:38:30:67:1a:e3:f3:1f:ec:
8a:c4:ee:a4:ec:74:3a:f2:4b:a9:7d:56:7d:8d:ae:
1b:c6:2f:f9:3f:4f:b2:bd:27:98:01:5e:a3:14:59:
97:c0:30:a1:25:12:7d:ef:b2:eb:9c:f5:a5:b7:52:
6b:6c:d2:f0:a0:5f:a3:35:f5:58:6a:be:38:70:63:
3b:a5:a1:51:51:91:aa:c8:6c:72:85:e3:83:ed:f7:
ca:a2:ad:72:e8:9e:a6:b6:68:9b:55:11:e1:31:f2:
d4:92:0a:0a:e5:90:5a:8a:d3:81:18:b3:1f:a1:5b:
0f:9f:8b:6d:f3:d7:e3:fc:43:9a:cd:8d:61:b4:1d:
40:96:a6:88:8e:4b:34:30:19:a4:16:32:bf:99:c1:
ba:45:06:b4:7d:47:78:b8:2b:e5:c3:a1:e8:74:0c:
10:54:28:88:1d:74:5a:75:8f:90:6c:fa:8f:6b:8e:
f8:66:cf:8f:ce:81:6e:87:c7:04:d8:99:c0:a7:7c:
14:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:5F:E8:1A:AD:BF:A0:E6:8D:1B:2F:D1:EE:AF:59:BA:5E:6A:F0:65
X509v3 Authority Key Identifier:
keyid:41:3F:FA:10:6A:E3:FE:E6:BE:87:BA:C0:6A:87:BA:57:ED:1C:11:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QT_6EGrj_ua-h7rAaoe6V-0cEUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:0d:fb:72:ae:c8:ab:32:06:14:81:fb:fa:78:e4:ec:de:ea:
e7:f4:6e:b1:62:69:28:43:45:57:62:44:9c:19:d2:df:49:0d:
03:d8:84:48:12:70:25:31:20:de:4f:fd:9f:8d:c6:20:89:ba:
1f:90:d4:e4:8f:68:15:01:52:6c:74:1b:cb:ed:90:b7:4e:07:
76:03:20:10:52:ce:da:e0:1e:55:bb:6b:81:80:c4:d8:9a:a5:
27:93:f7:77:de:a1:c5:17:2c:13:bc:69:49:fe:ac:8f:a3:32:
1b:a5:a5:d7:6f:1f:0f:94:1a:4c:4c:4d:73:fd:47:f0:59:c4:
99:6c:fb:94:e1:76:88:80:ed:fb:7e:91:45:7a:92:27:04:6e:
d3:1d:4b:e0:22:e2:6b:62:31:22:86:8a:3f:5a:e2:53:39:cf:
31:72:19:da:ba:1e:73:0f:02:8d:c2:f7:8a:85:72:88:01:8d:
05:40:ef:a3:06:f0:7a:d5:ff:fd:ad:13:4a:ec:a7:0d:9d:7d:
84:2a:81:aa:74:19:f9:a4:c0:ec:bf:94:1e:97:aa:90:06:6a:
bd:ac:de:bd:d6:54:c8:c2:89:a8:db:7e:56:dd:90:bb:d9:4e:
f2:e4:60:3a:66:7c:6a:16:a9:0e:fb:fa:11:1f:51:d8:27:e2:
1e:bd:19:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:48:59 2025 by rpki-client