Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.mft
File: QMV_fAvv5jtgBOlE32hMnVHkaPM.mft (raw, json)
Hash identifier: hMJScRRf6GnJ8B1csfkaXsGqSIXCtCrU+tS++XxvNTI=
Subject key identifier: 2B:9D:CA:5D:30:82:37:C7:1A:33:94:68:54:D4:8E:45:1B:AC:78:76
Authority key identifier: 40:C5:7F:7C:0B:EF:E6:3B:60:04:E9:44:DF:68:4C:9D:51:E4:68:F3
Certificate issuer: /CN=40c57f7c0befe63b6004e944df684c9d51e468f3
Certificate serial: 0199FBEB3BCC7B8EF7419B9682A1BAC26091
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QMV_fAvv5jtgBOlE32hMnVHkaPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.mft
Manifest number: 0A84
Signing time: Sun 19 Oct 2025 10:02:01 +0000
Manifest this update: Sun 19 Oct 2025 10:02:01 +0000
Manifest next update: Mon 20 Oct 2025 10:02:01 +0000
Files and hashes: 1: QMV_fAvv5jtgBOlE32hMnVHkaPM.crl (hash: DRS9huKjYi3qyqld8jVjxQ8DGteXr3DIpKRqX3wWaww=)
2: VtNDBe4WLUvuXuHOTlAK7Ldf5W4.roa (hash: 2/Ux5k6jwyAwcxnEpPd/SFbt5+kWg1F4N3TK8J41W34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QMV_fAvv5jtgBOlE32hMnVHkaPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:3b:cc:7b:8e:f7:41:9b:96:82:a1:ba:c2:60:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40c57f7c0befe63b6004e944df684c9d51e468f3
Validity
Not Before: Oct 19 10:02:01 2025 GMT
Not After : Oct 20 10:02:01 2025 GMT
Subject: CN=2b9dca5d308237c71a33946854d48e451bac7876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a8:fa:56:96:b1:9b:33:2a:ec:e8:67:43:06:
d3:f2:51:15:fc:56:e5:9e:77:9c:6e:ba:f5:b1:f6:
62:9b:29:4d:ec:96:48:05:5b:ca:3a:bd:cc:0a:6f:
2d:19:9c:86:c0:76:ca:68:51:19:dc:97:33:8a:23:
55:5c:d4:09:57:5d:b2:ce:f0:37:77:6b:52:25:2f:
ab:74:1d:f4:52:c7:64:43:94:b9:31:ef:dd:27:5a:
9b:c8:a2:39:62:3e:45:85:d2:97:1d:0a:b0:e7:7d:
e9:73:b8:3c:39:71:62:4d:71:56:6d:34:1a:91:61:
16:27:51:31:2f:4c:0d:b1:68:b5:1b:bb:52:b8:90:
0b:6a:1c:a9:89:59:54:50:51:9d:c1:a9:ba:9e:ce:
d6:90:4e:7f:c9:ce:e5:18:b8:bc:8f:d3:83:fe:7f:
b6:2b:0f:60:01:d9:00:30:a8:e2:9b:54:1e:c6:e2:
bd:05:5a:7e:f6:e2:c0:24:15:05:26:a4:ac:1b:14:
ea:46:47:a6:b1:63:ce:71:c6:28:c9:97:6e:04:87:
ab:e4:2f:5f:c8:da:bc:c1:57:3e:d3:60:bb:5a:10:
39:f1:d4:fe:b6:ba:23:fa:41:c6:36:f3:c1:e0:cd:
06:46:54:cd:93:df:27:5d:8e:30:47:04:d2:b5:cb:
be:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:9D:CA:5D:30:82:37:C7:1A:33:94:68:54:D4:8E:45:1B:AC:78:76
X509v3 Authority Key Identifier:
keyid:40:C5:7F:7C:0B:EF:E6:3B:60:04:E9:44:DF:68:4C:9D:51:E4:68:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QMV_fAvv5jtgBOlE32hMnVHkaPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:8a:47:c6:3b:7c:33:60:d7:ce:90:2b:dd:3f:c6:5d:43:20:
e0:fc:2d:1d:88:19:95:e7:48:0a:e9:32:f6:6a:2c:c8:56:29:
52:e2:af:5e:aa:48:5f:c3:93:e0:48:20:c3:6e:09:dc:3c:8c:
56:5f:41:4f:52:63:e6:7c:e4:f6:09:ef:22:70:09:57:93:25:
c4:cb:f0:5c:f1:87:5d:aa:50:1a:51:ec:6a:ea:b0:c7:63:ea:
53:33:cd:27:93:28:3d:ed:b4:38:ab:eb:48:ca:e9:fe:5d:cb:
24:db:51:a3:5a:05:f3:95:d1:24:37:dd:89:ff:45:2a:a3:bb:
57:c0:7c:3f:d9:56:25:3e:b7:10:db:8a:c2:e1:83:44:7f:33:
89:8b:44:fd:5a:9c:05:f6:b4:b9:51:d2:4c:2a:ab:5e:9c:ca:
98:30:8f:49:06:ba:8a:7d:e0:74:3c:48:fc:b2:c5:0e:03:b2:
75:2b:9c:1f:9f:b5:a1:19:d9:34:46:3a:d3:60:3e:4a:0e:8e:
56:74:fd:b6:08:33:4d:3e:7e:43:90:d0:e1:ed:ae:55:9b:3e:
7b:08:d3:ce:c1:98:c4:c6:1a:a1:a0:de:13:df:02:48:8a:91:
aa:11:e0:63:d6:2f:b5:bf:d1:05:34:6e:ca:46:07:47:71:7f:
f6:e3:8a:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76zvMe473QZuWgqG6wmCRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwYzU3ZjdjMGJlZmU2M2I2MDA0ZTk0NGRmNjg0YzlkNTFl
NDY4ZjMwHhcNMjUxMDE5MTAwMjAxWhcNMjUxMDIwMTAwMjAxWjAzMTEwLwYDVQQD
EygyYjlkY2E1ZDMwODIzN2M3MWEzMzk0Njg1NGQ0OGU0NTFiYWM3ODc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqj6VpaxmzMq7OhnQwbT8lEV/Fbl
nnecbrr1sfZimylN7JZIBVvKOr3MCm8tGZyGwHbKaFEZ3JcziiNVXNQJV12yzvA3
d2tSJS+rdB30UsdkQ5S5Me/dJ1qbyKI5Yj5FhdKXHQqw533pc7g8OXFiTXFWbTQa
kWEWJ1ExL0wNsWi1G7tSuJALahypiVlUUFGdwam6ns7WkE5/yc7lGLi8j9OD/n+2
Kw9gAdkAMKjim1QexuK9BVp+9uLAJBUFJqSsGxTqRkemsWPOccYoyZduBIer5C9f
yNq8wVc+02C7WhA58dT+troj+kHGNvPB4M0GRlTNk98nXY4wRwTStcu+5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCudyl0wgjfHGjOUaFTUjkUbrHh2MB8GA1UdIwQY
MBaAFEDFf3wL7+Y7YATpRN9oTJ1R5GjzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU1WX2ZBdnY1anRnQk9sRTMyaE1uVkhrYVBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9mZTJlMDEtZDg1NC00ZmJjLWJhMTkt
MmIwMTJmZThlYTUyLzEvUU1WX2ZBdnY1anRnQk9sRTMyaE1uVkhrYVBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy9mZTJlMDEtZDg1NC00ZmJjLWJhMTktMmIwMTJmZThlYTUy
LzEvUU1WX2ZBdnY1anRnQk9sRTMyaE1uVkhrYVBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWopHxjt8
M2DXzpAr3T/GXUMg4PwtHYgZledICuky9mosyFYpUuKvXqpIX8OT4Eggw24J3DyM
Vl9BT1Jj5nzk9gnvInAJV5MlxMvwXPGHXapQGlHsauqwx2PqUzPNJ5MoPe20OKvr
SMrp/l3LJNtRo1oF85XRJDfdif9FKqO7V8B8P9lWJT63ENuKwuGDRH8ziYtE/Vqc
Bfa0uVHSTCqrXpzKmDCPSQa6in3gdDxI/LLFDgOydSucH5+1oRnZNEY602A+Sg6O
VnT9tggzTT5+Q5DQ4e2uVZs+ewjTzsGYxMYaoaDeE98CSIqRqhHgY9Yvtb/RBTRu
ykYHR3F/9uOKDQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:28 2025 by rpki-client