Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft
File: QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft (raw, json)
Hash identifier: Ssj7djSGVdIvTPKiAO85RIwhdx8/+ug2mEgo3F06ID4=
Subject key identifier: 3C:8C:F4:19:BE:F7:A0:72:42:30:37:6B:0E:DE:BF:A2:34:CC:4E:42
Authority key identifier: 40:33:9D:30:44:99:D0:69:AE:CD:8B:D0:E8:FB:A0:2E:52:2F:57:6A
Certificate issuer: /CN=40339d304499d069aecd8bd0e8fba02e522f576a
Certificate serial: 0199FCFDA6E3321B76654657E048515F55F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QDOdMESZ0GmuzYvQ6PugLlIvV2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft
Manifest number: 1676
Signing time: Sun 19 Oct 2025 15:01:45 +0000
Manifest this update: Sun 19 Oct 2025 15:01:45 +0000
Manifest next update: Mon 20 Oct 2025 15:01:45 +0000
Files and hashes: 1: HM44YU_keUzYw0-k8-_A-z_iUEg.roa (hash: SXS4UlPdGWp6+QLYLhTDdcpIKj693zGOOUmfQDbJfCI=)
2: QDOdMESZ0GmuzYvQ6PugLlIvV2o.crl (hash: fvh3W6XvUj+IdvUDOxqYVfUShtsTr/KRKy/kvgEZ1tc=)
3: kh936l2vxgccX_jvVlzYGLxpdnk.roa (hash: 1aSc0Ne3PFeWf8CzHXerC/R90wO3YKjdcfKwJxtbP2I=)
4: yR56vcKwFBMaxDiG7yY2cvJ4n0Q.roa (hash: iQ1t4A53B7El/PSKuRvXWWegJvuT/fcPU9ZHNFZ4LFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/QDOdMESZ0GmuzYvQ6PugLlIvV2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:a6:e3:32:1b:76:65:46:57:e0:48:51:5f:55:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40339d304499d069aecd8bd0e8fba02e522f576a
Validity
Not Before: Oct 19 15:01:45 2025 GMT
Not After : Oct 20 15:01:45 2025 GMT
Subject: CN=3c8cf419bef7a0724230376b0edebfa234cc4e42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:85:3e:f6:cd:ae:7e:fa:da:9b:d7:a6:9b:cd:
f4:bc:6f:e6:33:1f:8b:17:60:b4:d2:e7:38:38:11:
69:b7:a8:c3:79:c3:08:1a:42:fa:ba:ba:10:62:34:
ee:4e:ba:9e:b0:b6:3a:93:b3:83:68:73:4f:92:ea:
eb:b9:01:fe:e3:bf:48:a0:0b:99:5f:b6:12:d7:24:
cf:0a:64:79:41:79:3b:e3:31:3f:78:90:40:74:55:
f4:b9:a4:8a:b4:c6:18:2c:2e:96:a3:5f:16:a4:49:
91:17:a8:5d:f5:36:66:c9:6d:fc:1a:a8:92:f1:27:
8b:78:3c:96:73:13:c2:63:4d:6d:6d:27:1d:8d:08:
e3:aa:9d:09:08:40:4d:6e:c1:66:d4:1b:56:64:99:
c8:70:57:3d:41:20:5e:05:d5:75:9b:3c:92:72:8f:
10:ec:c1:3d:a0:1d:7c:28:0a:45:94:bc:2a:6b:35:
19:96:ce:ca:14:a6:64:87:47:79:e3:e8:c9:eb:4f:
82:91:2d:7a:2f:ba:57:a0:2a:e8:22:a1:0b:3f:67:
a1:3b:aa:88:ba:3a:02:04:18:09:9c:a2:7a:71:ad:
9c:55:0c:fe:7c:34:db:cd:36:46:7e:f4:e3:b5:43:
6c:2b:32:00:85:ee:a1:72:b4:9d:9e:a9:62:38:d6:
73:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:8C:F4:19:BE:F7:A0:72:42:30:37:6B:0E:DE:BF:A2:34:CC:4E:42
X509v3 Authority Key Identifier:
keyid:40:33:9D:30:44:99:D0:69:AE:CD:8B:D0:E8:FB:A0:2E:52:2F:57:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QDOdMESZ0GmuzYvQ6PugLlIvV2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:d1:8e:c2:90:12:05:fc:01:33:d2:98:61:fb:06:72:ea:47:
1f:03:d9:0d:51:f6:a4:ac:7f:81:d1:3f:07:4b:38:54:43:09:
b8:18:2f:b8:54:6c:e9:06:27:f6:fb:03:84:3c:91:39:49:53:
88:57:ed:c9:ee:c3:75:a8:42:0b:df:13:d3:40:48:66:a7:29:
cd:fd:a9:5f:0c:b6:c8:f4:67:01:8b:61:dd:85:44:f3:17:a7:
59:dd:89:73:fb:86:b3:98:a4:f5:35:59:ae:d4:b6:55:91:02:
fa:94:7f:e7:cb:32:94:d3:e0:f7:ff:55:83:99:34:8b:e1:2d:
71:97:6c:40:26:33:d6:94:73:40:17:05:ce:5e:d6:e1:38:50:
0d:d6:a7:6d:4f:8d:80:59:54:2a:bb:35:87:e0:b8:7d:05:35:
7b:1c:1f:2b:14:66:7f:71:24:b7:ae:10:fa:61:57:04:f5:fc:
bd:49:3b:02:e1:d3:9c:75:74:ca:f6:7a:17:55:3f:ab:bd:7e:
ec:c2:de:40:6b:fe:38:3d:1d:c0:01:a4:09:0b:3c:a2:fe:44:
0e:57:67:3c:c1:49:ea:ec:22:57:ad:1b:4e:c2:c3:d6:d7:dc:
07:8d:e3:b4:80:7a:ba:dd:15:20:bb:e7:1b:94:4a:9e:6e:2e:
6c:3e:76:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/abjMht2ZUZX4EhRX1X2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwMzM5ZDMwNDQ5OWQwNjlhZWNkOGJkMGU4ZmJhMDJlNTIy
ZjU3NmEwHhcNMjUxMDE5MTUwMTQ1WhcNMjUxMDIwMTUwMTQ1WjAzMTEwLwYDVQQD
EygzYzhjZjQxOWJlZjdhMDcyNDIzMDM3NmIwZWRlYmZhMjM0Y2M0ZTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA54U+9s2ufvram9emm830vG/mMx+L
F2C00uc4OBFpt6jDecMIGkL6uroQYjTuTrqesLY6k7ODaHNPkurruQH+479IoAuZ
X7YS1yTPCmR5QXk74zE/eJBAdFX0uaSKtMYYLC6Wo18WpEmRF6hd9TZmyW38GqiS
8SeLeDyWcxPCY01tbScdjQjjqp0JCEBNbsFm1BtWZJnIcFc9QSBeBdV1mzySco8Q
7ME9oB18KApFlLwqazUZls7KFKZkh0d54+jJ60+CkS16L7pXoCroIqELP2ehO6qI
ujoCBBgJnKJ6ca2cVQz+fDTbzTZGfvTjtUNsKzIAhe6hcrSdnqliONZzewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDyM9Bm+96ByQjA3aw7ev6I0zE5CMB8GA1UdIwQY
MBaAFEAznTBEmdBprs2L0Oj7oC5SL1dqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUURPZE1FU1owR211ell2UTZQdWdMbEl2VjJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS81ZmU4OGEtMTZlMS00ODFmLTk4ZTgt
MDMxZTU4OTA1OTIzLzEvUURPZE1FU1owR211ell2UTZQdWdMbEl2VjJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS81ZmU4OGEtMTZlMS00ODFmLTk4ZTgtMDMxZTU4OTA1OTIz
LzEvUURPZE1FU1owR211ell2UTZQdWdMbEl2VjJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfdGOwpAS
BfwBM9KYYfsGcupHHwPZDVH2pKx/gdE/B0s4VEMJuBgvuFRs6QYn9vsDhDyROUlT
iFftye7DdahCC98T00BIZqcpzf2pXwy2yPRnAYth3YVE8xenWd2Jc/uGs5ik9TVZ
rtS2VZEC+pR/58sylNPg9/9Vg5k0i+EtcZdsQCYz1pRzQBcFzl7W4ThQDdanbU+N
gFlUKrs1h+C4fQU1exwfKxRmf3Ekt64Q+mFXBPX8vUk7AuHTnHV0yvZ6F1U/q71+
7MLeQGv+OD0dwAGkCQs8ov5EDldnPMFJ6uwiV60bTsLD1tfcB43jtIB6ut0VILvn
G5RKnm4ubD525A==
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:15:51 2025 by rpki-client