Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.mft
File: qLMQBN8TWqGouUMDPbFGkbEaY90.mft (raw, json)
Hash identifier: W4mkBJ4IaXjKAUi4Z6PfTfM1SphkfGFKB84IBalhi8A=
Subject key identifier: 23:BC:E8:45:E1:CB:15:CA:4F:5A:7A:44:72:20:65:3A:5C:C5:4C:3B
Authority key identifier: A8:B3:10:04:DF:13:5A:A1:A8:B9:43:03:3D:B1:46:91:B1:1A:63:DD
Certificate issuer: /CN=a8b31004df135aa1a8b943033db14691b11a63dd
Certificate serial: 0199FDD8B44E23B1208AC0E47236C2C64AC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLMQBN8TWqGouUMDPbFGkbEaY90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.mft
Manifest number: 16E9
Signing time: Sun 19 Oct 2025 19:01:01 +0000
Manifest this update: Sun 19 Oct 2025 19:01:01 +0000
Manifest next update: Mon 20 Oct 2025 19:01:01 +0000
Files and hashes: 1: 3OEik7tNKF16V3tqg6gfm44Pn9o.roa (hash: VkjODs+PPMDcywvy+ukOLTzmW2p5x8hOEfY1SjXF8hY=)
2: _DuyKPQbR1DkiE_RbE3bwhY5Urg.roa (hash: komYy8q7+/6pbFO69hkA1CXIqh7HDmdwPrOiVtmRueI=)
3: lbsbTqD_9mE7vY8Zyug_YVR-sD8.roa (hash: TyKDojoTZ/eLBbbwUhWYN2H/st4TZlYsWMMpDrArAgs=)
4: qLMQBN8TWqGouUMDPbFGkbEaY90.crl (hash: qpsbpuJ0Qef+rlHkcLIcieyxQ+MC0JrxwF8H4QdZWqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.mft
rsync://rpki.ripe.net/repository/DEFAULT/qLMQBN8TWqGouUMDPbFGkbEaY90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:b4:4e:23:b1:20:8a:c0:e4:72:36:c2:c6:4a:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8b31004df135aa1a8b943033db14691b11a63dd
Validity
Not Before: Oct 19 19:01:01 2025 GMT
Not After : Oct 20 19:01:01 2025 GMT
Subject: CN=23bce845e1cb15ca4f5a7a447220653a5cc54c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:21:b7:e2:06:b5:3f:4c:af:1d:df:d9:90:55:
05:3c:8e:c1:47:9e:6c:8f:ed:de:c7:4f:d5:71:9a:
06:5e:73:8f:f9:ea:49:01:a6:09:79:30:b0:83:c7:
5f:c3:b1:7a:c7:b5:31:a6:d0:aa:cc:7a:a9:40:59:
5e:8f:ad:3c:73:05:0e:23:04:ed:ff:94:71:d6:8a:
ca:40:e8:ef:38:9c:37:a0:af:c0:c9:71:c4:8c:fe:
d9:b7:eb:78:d8:06:bf:06:ae:d8:ab:11:72:d7:c5:
3b:f9:c5:a1:16:70:44:f7:83:46:59:ae:e5:99:ba:
7b:34:15:ce:c0:8c:11:60:db:b2:71:16:6d:bb:c5:
53:63:7b:a6:c7:a5:c6:9a:90:56:60:86:ec:45:e8:
2b:85:0a:c0:44:0b:c3:a7:f3:9e:b5:83:55:31:23:
42:9b:a8:de:16:f6:4c:38:12:d5:fe:aa:a0:ea:47:
b1:9b:ba:83:8b:9b:04:ff:f9:5d:3a:3d:2b:5d:7e:
ba:81:72:ce:21:d1:ee:7b:70:99:cd:d2:03:b0:95:
2e:f9:07:1f:99:cc:c0:22:69:84:0a:f2:3f:d0:d6:
a7:7d:71:86:b5:4b:1d:0d:3e:66:a2:b2:48:b8:c0:
c3:4c:98:34:29:b3:73:62:cb:26:d3:28:b2:5a:ad:
56:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:BC:E8:45:E1:CB:15:CA:4F:5A:7A:44:72:20:65:3A:5C:C5:4C:3B
X509v3 Authority Key Identifier:
keyid:A8:B3:10:04:DF:13:5A:A1:A8:B9:43:03:3D:B1:46:91:B1:1A:63:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLMQBN8TWqGouUMDPbFGkbEaY90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:9d:36:7b:96:0d:22:34:63:02:b8:19:9f:6f:ed:bf:72:a8:
f8:75:95:8f:91:92:33:4e:4f:dc:31:59:d1:25:7f:51:71:47:
b4:36:e9:e1:fa:dc:6d:ca:f5:e8:b7:58:2a:7c:a7:33:32:80:
61:17:82:27:8d:6e:d8:29:32:58:17:ee:d6:ff:06:d8:62:aa:
19:01:25:f2:b5:2b:d9:44:7f:ac:4c:e9:40:9c:67:a8:d1:af:
7c:5d:33:85:56:ea:80:48:06:f9:8c:8e:5c:22:3a:4d:4c:85:
91:cf:62:62:0f:6b:17:ee:9a:60:c6:59:8e:c2:41:d7:d1:74:
8b:4c:10:1c:49:3a:fe:62:27:df:cb:6a:82:10:4c:ae:e4:87:
15:9d:c7:d2:ab:82:ab:58:2b:eb:37:fb:fa:0d:ac:48:10:39:
c8:f1:57:1f:53:9f:93:94:f7:14:5b:47:67:03:0a:d8:92:c9:
d0:f6:5f:1a:39:5b:ed:ca:92:f0:ca:84:88:68:45:8a:30:62:
37:80:0c:25:99:c1:ff:89:8c:eb:a9:0e:ab:42:ff:0c:1e:91:
db:5c:d0:b3:26:44:1a:af:a3:b6:f9:3c:14:00:40:f6:a1:66:
34:16:90:c4:a8:fb:f8:fb:b3:35:a0:a7:d9:64:97:2a:56:98:
81:ab:ba:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92LROI7EgisDkcjbCxkrCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4YjMxMDA0ZGYxMzVhYTFhOGI5NDMwMzNkYjE0NjkxYjEx
YTYzZGQwHhcNMjUxMDE5MTkwMTAxWhcNMjUxMDIwMTkwMTAxWjAzMTEwLwYDVQQD
EygyM2JjZTg0NWUxY2IxNWNhNGY1YTdhNDQ3MjIwNjUzYTVjYzU0YzNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziG34ga1P0yvHd/ZkFUFPI7BR55s
j+3ex0/VcZoGXnOP+epJAaYJeTCwg8dfw7F6x7UxptCqzHqpQFlej608cwUOIwTt
/5Rx1orKQOjvOJw3oK/AyXHEjP7Zt+t42Aa/Bq7YqxFy18U7+cWhFnBE94NGWa7l
mbp7NBXOwIwRYNuycRZtu8VTY3umx6XGmpBWYIbsRegrhQrARAvDp/OetYNVMSNC
m6jeFvZMOBLV/qqg6kexm7qDi5sE//ldOj0rXX66gXLOIdHue3CZzdIDsJUu+Qcf
mczAImmECvI/0NanfXGGtUsdDT5morJIuMDDTJg0KbNzYssm0yiyWq1WVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCO86EXhyxXKT1p6RHIgZTpcxUw7MB8GA1UdIwQY
MBaAFKizEATfE1qhqLlDAz2xRpGxGmPdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUxNUUJOOFRXcUdvdVVNRFBiRkdrYkVhWTkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS81ZTIzYWUtNjMzOC00OGRkLWEzMDQt
YzJhNDNiMDgwZDZmLzEvcUxNUUJOOFRXcUdvdVVNRFBiRkdrYkVhWTkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS81ZTIzYWUtNjMzOC00OGRkLWEzMDQtYzJhNDNiMDgwZDZm
LzEvcUxNUUJOOFRXcUdvdVVNRFBiRkdrYkVhWTkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsJ02e5YN
IjRjArgZn2/tv3Ko+HWVj5GSM05P3DFZ0SV/UXFHtDbp4frcbcr16LdYKnynMzKA
YReCJ41u2CkyWBfu1v8G2GKqGQEl8rUr2UR/rEzpQJxnqNGvfF0zhVbqgEgG+YyO
XCI6TUyFkc9iYg9rF+6aYMZZjsJB19F0i0wQHEk6/mIn38tqghBMruSHFZ3H0quC
q1gr6zf7+g2sSBA5yPFXH1Ofk5T3FFtHZwMK2JLJ0PZfGjlb7cqS8MqEiGhFijBi
N4AMJZnB/4mM66kOq0L/DB6R21zQsyZEGq+jtvk8FABA9qFmNBaQxKj7+PuzNaCn
2WSXKlaYgau6iw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:30:22 2025 by rpki-client