Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft
File: QNVbeINqk_tvnsn6enntm4vqK6E.mft (raw, json)
Hash identifier: WG1R0FjQD0BAHRUHhdjYWQs/8TuWH19uh18aSVxVhrM=
Subject key identifier: D8:E7:E4:F4:C8:DD:2A:14:C3:B8:DA:21:A3:5B:DA:67:9B:E2:F9:81
Authority key identifier: 40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1
Certificate issuer: /CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1
Certificate serial: 0199FD3419950A66F8D0C925DBE616862A4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft
Manifest number: 16EC
Signing time: Sun 19 Oct 2025 16:01:14 +0000
Manifest this update: Sun 19 Oct 2025 16:01:14 +0000
Manifest next update: Mon 20 Oct 2025 16:01:14 +0000
Files and hashes: 1: FM1ZToDPfltq70sgYZxUZRvW9lw.roa (hash: gobn7d36Th+HhvhLfnOuWn7jGYlz7+noOsxaYpWSY6w=)
2: QNVbeINqk_tvnsn6enntm4vqK6E.crl (hash: OJNj0OxOvhfbBnaMF00H/Fbr1DcJRpDbiRPihE4vgbw=)
3: QOyV471MiAdrv1gx1_mQKqZThmQ.roa (hash: AoS7cULghj9S2ceuce/DAbxzcNkBLN2/6i/FkUDAidw=)
4: Ufx_uGX33YMRJk96-Ns3OVYoYkY.roa (hash: R6OFTPlC+5+pTqseUyT+JKWuhsqJ8TflqBO+jG6Oft8=)
5: aouWF1EL5PqaDekCOWFKRFFElco.roa (hash: meYwuUzRknXw4amv6l3WdhCHcJ6/5boQjSOQLig1VyA=)
6: t0LizRcpCedVGV7G-fII8jBvx0A.roa (hash: ZN5BTBda6bGmBj8NTopRMZUMlk+FQ8YAMSGu4VazGr8=)
7: tRjkLyLC--HaV6NcWuFGLxVHLUQ.roa (hash: W6/eiMbwnnO5tx0lNIccNziZp4esvsx84586cppqO84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:19:95:0a:66:f8:d0:c9:25:db:e6:16:86:2a:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1
Validity
Not Before: Oct 19 16:01:14 2025 GMT
Not After : Oct 20 16:01:14 2025 GMT
Subject: CN=d8e7e4f4c8dd2a14c3b8da21a35bda679be2f981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a2:fc:55:6d:3c:62:e6:38:4e:54:34:b2:b7:
5f:1f:71:6f:3f:21:36:3a:eb:ef:6f:4f:29:0b:66:
0a:3e:94:d5:d3:25:29:c7:1d:7e:26:ba:85:67:9a:
5f:50:1f:6c:46:02:3d:2c:a8:08:98:c6:2b:6a:e5:
32:23:58:6f:78:5d:d9:e5:68:46:7b:98:c6:e6:bb:
45:ad:a4:6a:46:33:1a:cd:19:7e:03:c5:49:4c:43:
25:67:88:6a:73:64:5b:a7:4c:74:00:b1:50:29:60:
7e:bb:7f:de:4a:32:76:f0:03:24:51:76:dd:88:43:
3d:bc:50:ec:a0:48:a9:64:d6:47:7a:73:b5:bd:40:
46:df:87:da:ec:f2:a1:d6:40:52:b8:7d:3d:50:21:
8a:6a:a3:ac:19:0f:26:27:6e:1f:67:4e:c3:b6:9a:
a4:aa:2c:0a:7d:bc:e4:84:ce:fa:40:6f:e3:26:60:
68:ab:06:80:2c:4f:af:4f:69:d3:65:e4:f9:aa:49:
a8:09:c4:15:73:35:e7:95:68:30:1b:e9:c6:cb:dc:
6b:59:b4:39:e3:68:c4:a1:be:0d:1a:5a:27:cb:c8:
73:14:53:0a:78:94:8a:bb:71:78:e2:a9:b5:3c:f7:
11:de:20:85:2c:f9:bd:cf:8d:b6:ca:0a:84:fc:bc:
3b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E7:E4:F4:C8:DD:2A:14:C3:B8:DA:21:A3:5B:DA:67:9B:E2:F9:81
X509v3 Authority Key Identifier:
keyid:40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:46:b7:40:2b:2c:a6:e2:3a:fa:35:f0:87:bc:0d:36:ae:35:
50:d1:93:4c:a5:49:ba:26:d7:f2:cd:22:c6:93:1e:ff:ec:10:
e6:ae:0e:ae:79:46:4d:52:68:9c:5f:fb:f6:ac:cf:7f:c9:76:
b9:8e:2b:e1:ca:34:06:4c:3a:9f:bf:84:cb:44:96:82:0e:69:
8e:b0:41:aa:2c:c6:7a:34:c9:6d:ed:94:e5:76:9d:67:cf:7b:
03:ad:d3:e5:28:85:d2:0b:63:9a:67:7c:2b:21:5a:86:a4:2b:
ff:82:ba:f9:84:4f:26:a7:bf:96:a2:b7:be:e1:99:d5:1a:c6:
81:d0:0e:ff:73:fc:9b:c3:25:25:2f:45:4a:72:5e:2c:b9:f1:
98:95:86:fa:db:ae:0b:7d:49:7c:03:0d:ff:3e:a2:cf:d7:ed:
95:5c:18:8f:54:b6:12:0b:1a:4e:a9:2e:9e:35:60:11:72:0d:
4b:5e:f1:8e:8b:ee:cd:f8:b3:43:f0:80:6c:1b:80:a5:e0:83:
5d:24:35:59:9c:d4:7d:52:cc:9e:62:49:9c:77:18:f8:67:b2:
1a:22:c0:f8:56:3b:f7:e8:89:47:52:5a:de:e4:62:1f:e9:e9:
b4:b7:f7:3d:4d:24:ec:8b:cf:38:40:da:ea:05:d6:b2:94:e0:
01:87:11:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:35 2025 by rpki-client