Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft
File: QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft (raw, json)
Hash identifier: y4jT/QIeOnRC1whgTPYppooSwi3t3qBOiFtQqdu01xw=
Subject key identifier: 0A:0B:A6:4B:C9:F6:3C:E1:11:38:70:B8:89:BA:BB:A8:E1:DC:B2:2B
Authority key identifier: 40:FA:C6:A3:2F:E4:BA:A7:D8:9B:91:EC:51:65:A3:D9:66:88:E1:44
Certificate issuer: /CN=40fac6a32fe4baa7d89b91ec5165a3d96688e144
Certificate serial: 019A01B65FD57C7323456F75E2F37E64E597
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft
Manifest number: 0F2A
Signing time: Mon 20 Oct 2025 13:02:00 +0000
Manifest this update: Mon 20 Oct 2025 13:02:00 +0000
Manifest next update: Tue 21 Oct 2025 13:02:00 +0000
Files and hashes: 1: 4hn1wVatZQI4O44VQ9afg3_3YCE.roa (hash: Wip87SKY/zyuxOVUXFbAARGlH7AAphh/zZD7B0INIf4=)
2: QPrGoy_kuqfYm5HsUWWj2WaI4UQ.crl (hash: 8Upe+Uzi/B8Nvc3NarRn4r/JyoLtj7mTU+i4EB5t5p0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b6:5f:d5:7c:73:23:45:6f:75:e2:f3:7e:64:e5:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40fac6a32fe4baa7d89b91ec5165a3d96688e144
Validity
Not Before: Oct 20 13:02:00 2025 GMT
Not After : Oct 21 13:02:00 2025 GMT
Subject: CN=0a0ba64bc9f63ce1113870b889babba8e1dcb22b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5f:c3:1e:0e:23:0b:e2:0c:38:56:9e:50:16:
b3:9c:a5:83:ca:cb:02:df:4f:77:ea:5d:b1:1c:86:
e8:d0:0b:bc:1b:bd:4a:9d:41:d6:5c:7e:50:28:08:
ca:a4:bb:6b:ab:cc:43:c9:c7:cb:2a:00:2b:ce:28:
e0:09:76:8a:32:43:e5:27:6c:ff:0e:31:f4:f1:fc:
89:5d:62:c2:45:e8:1d:91:4d:c4:fb:be:6c:51:64:
1e:7d:51:34:83:23:0c:77:3b:6d:33:eb:4f:11:26:
e5:91:d0:8b:e8:ff:29:8c:1c:76:42:04:02:98:18:
89:74:c0:de:1c:6e:10:a3:16:a3:a8:93:d8:0f:02:
85:02:d2:be:2d:25:44:e2:a9:60:36:27:95:c1:a0:
3a:99:6b:58:c9:29:33:57:4d:9c:44:02:93:4b:4c:
64:14:f3:67:94:81:fa:1c:08:8c:4c:9b:6c:73:4a:
9a:37:66:84:d2:7a:b4:bd:8a:14:dd:22:60:94:8d:
42:c1:1e:98:40:0d:7f:2a:f1:59:c7:54:d3:5d:4a:
fd:c1:bc:75:a6:12:6f:d4:6a:9f:9b:60:2d:db:25:
f1:0b:47:ec:6d:c8:29:29:a1:59:55:14:fa:54:94:
8d:d9:e6:2a:15:b9:37:f7:bd:36:19:89:ce:3d:05:
29:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:0B:A6:4B:C9:F6:3C:E1:11:38:70:B8:89:BA:BB:A8:E1:DC:B2:2B
X509v3 Authority Key Identifier:
keyid:40:FA:C6:A3:2F:E4:BA:A7:D8:9B:91:EC:51:65:A3:D9:66:88:E1:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:42:3e:f0:d0:84:48:5d:32:f8:3f:e4:04:64:3d:21:a2:01:
d9:e1:d7:76:65:b5:85:fe:7a:ae:e3:63:64:77:56:1d:ac:2f:
cf:09:1b:33:5d:76:76:c9:e2:83:5f:d7:4a:6e:45:ee:9a:b5:
ac:41:82:06:0f:4e:16:64:e6:63:a1:c5:2a:db:af:f7:58:b3:
3a:dd:b9:21:de:70:63:8f:80:7e:da:e0:e4:7d:8c:07:fe:7e:
be:16:9e:eb:ae:f5:0a:ac:27:e2:fc:f6:31:df:0a:66:ac:fb:
73:c9:20:17:8c:dd:dc:b8:fa:ab:59:fc:56:37:2c:6d:cb:1b:
84:68:19:33:a4:90:fc:6e:08:28:ce:a5:c0:92:b2:9d:00:59:
8c:d3:7e:e7:7a:9b:24:90:a5:a2:81:f6:ac:30:62:c4:69:3d:
03:c5:a0:eb:e9:5f:6b:3d:0a:d6:65:5a:d7:7f:04:fc:c4:f2:
f9:4d:a0:92:e1:e6:f4:e7:b8:b1:12:ec:71:f5:a6:dc:45:73:
65:98:7d:34:cb:b1:ec:2f:7e:0e:10:37:34:16:eb:25:44:57:
38:22:cd:86:6d:8b:4b:3e:a5:cb:98:5a:be:42:ac:ce:23:7e:
a7:c5:65:06:20:53:e8:ca:c3:b0:fd:0b:2a:a2:9d:58:8d:2e:
a6:14:95:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoBtl/VfHMjRW914vN+ZOWXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwZmFjNmEzMmZlNGJhYTdkODliOTFlYzUxNjVhM2Q5NjY4
OGUxNDQwHhcNMjUxMDIwMTMwMjAwWhcNMjUxMDIxMTMwMjAwWjAzMTEwLwYDVQQD
EygwYTBiYTY0YmM5ZjYzY2UxMTEzODcwYjg4OWJhYmJhOGUxZGNiMjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1/DHg4jC+IMOFaeUBaznKWDyssC
30936l2xHIbo0Au8G71KnUHWXH5QKAjKpLtrq8xDycfLKgArzijgCXaKMkPlJ2z/
DjH08fyJXWLCRegdkU3E+75sUWQefVE0gyMMdzttM+tPESblkdCL6P8pjBx2QgQC
mBiJdMDeHG4QoxajqJPYDwKFAtK+LSVE4qlgNieVwaA6mWtYySkzV02cRAKTS0xk
FPNnlIH6HAiMTJtsc0qaN2aE0nq0vYoU3SJglI1CwR6YQA1/KvFZx1TTXUr9wbx1
phJv1Gqfm2At2yXxC0fsbcgpKaFZVRT6VJSN2eYqFbk39702GYnOPQUpYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAoLpkvJ9jzhEThwuIm6u6jh3LIrMB8GA1UdIwQY
MBaAFED6xqMv5Lqn2JuR7FFlo9lmiOFEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVByR295X2t1cWZZbTVIc1VXV2oyV2FJNFVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy82MjljYjItMmI0ZC00NzQ4LWJiMTEt
YzlmZTBiYTI4NjQ3LzEvUVByR295X2t1cWZZbTVIc1VXV2oyV2FJNFVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy82MjljYjItMmI0ZC00NzQ4LWJiMTEtYzlmZTBiYTI4NjQ3
LzEvUVByR295X2t1cWZZbTVIc1VXV2oyV2FJNFVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYEI+8NCE
SF0y+D/kBGQ9IaIB2eHXdmW1hf56ruNjZHdWHawvzwkbM112dsnig1/XSm5F7pq1
rEGCBg9OFmTmY6HFKtuv91izOt25Id5wY4+Aftrg5H2MB/5+vhae6671Cqwn4vz2
Md8KZqz7c8kgF4zd3Lj6q1n8VjcsbcsbhGgZM6SQ/G4IKM6lwJKynQBZjNN+53qb
JJClooH2rDBixGk9A8Wg6+lfaz0K1mVa138E/MTy+U2gkuHm9Oe4sRLscfWm3EVz
ZZh9NMux7C9+DhA3NBbrJURXOCLNhm2LSz6ly5havkKsziN+p8VlBiBT6MrDsP0L
KqKdWI0uphSVeQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:22:16 2025 by rpki-client