Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.mft
File: QPddMndhuQwImWOPQw62FMh8MQY.mft (raw, json)
Hash identifier: APDfcMRGgRKTvB03HvkYRiLExfjs+6gkBZxcqzSBE/A=
Subject key identifier: EC:25:A0:AF:5B:62:C3:9A:50:CD:16:2C:F9:95:DB:DF:56:7D:4F:AA
Authority key identifier: 40:F7:5D:32:77:61:B9:0C:08:99:63:8F:43:0E:B6:14:C8:7C:31:06
Certificate issuer: /CN=40f75d327761b90c0899638f430eb614c87c3106
Certificate serial: 0198D54DEA288B35B56E5511A2746044E2E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPddMndhuQwImWOPQw62FMh8MQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.mft
Manifest number: 1172
Signing time: Sat 23 Aug 2025 05:01:49 +0000
Manifest this update: Sat 23 Aug 2025 05:01:49 +0000
Manifest next update: Sun 24 Aug 2025 05:01:49 +0000
Files and hashes: 1: EjhHxmUhTpI_yi1jYptWWVsle0k.roa (hash: Eisn/B+33eIZDNWVZUSS6g6De7shzryfH75XScwtDR4=)
2: LMr4qJtoQiNuzRtdrPseYJWhmNQ.roa (hash: HjlHZSPbMqdny8RRGC9Ay5m+qCJBqQwRwFr/X+SmBKc=)
3: QPddMndhuQwImWOPQw62FMh8MQY.crl (hash: +gfBQERxbPxn0EFRbKOMvTXprZ+xZ2OMnDCULRyG1I4=)
4: c5QEXFgvsV_AiBAbEhTe2AqCERQ.roa (hash: zLlrVyu51dTFBBqx0nndVHW+/Nx+vLVjEHJZY4Wab0U=)
5: y-yADsSuAYCkz0gxVgZddom2080.roa (hash: zES6u5cNrLeUaCV/Nld2QqUVKIff3UmbYVses7LYQwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QPddMndhuQwImWOPQw62FMh8MQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:ea:28:8b:35:b5:6e:55:11:a2:74:60:44:e2:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f75d327761b90c0899638f430eb614c87c3106
Validity
Not Before: Aug 23 05:01:49 2025 GMT
Not After : Aug 24 05:01:49 2025 GMT
Subject: CN=ec25a0af5b62c39a50cd162cf995dbdf567d4faa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1b:09:3d:93:66:65:08:40:37:d4:81:a8:c0:
49:59:25:61:81:1e:81:31:86:a6:6e:1d:f1:77:eb:
a7:b5:75:2a:95:24:92:8b:5d:c9:b0:35:1f:f3:8d:
9b:91:d5:71:cc:04:0a:a1:5d:bc:60:e7:76:99:1a:
19:6f:aa:7c:01:2e:6e:55:6d:f9:34:ce:b6:20:63:
46:69:07:7f:ec:52:08:ec:f8:2d:c7:00:75:c5:38:
7d:d0:01:18:9d:fa:26:68:e6:20:7b:02:93:2d:bd:
b0:41:0e:4e:92:6b:da:ab:37:81:d6:16:f6:94:10:
d6:34:f3:50:23:28:d2:2f:6f:43:da:81:7e:61:e4:
ef:a6:7d:f6:32:e0:dc:91:3e:a5:09:e7:6d:df:c4:
64:48:d6:8f:a6:7a:b4:89:5f:4a:af:2d:b4:fa:90:
1a:af:61:cc:53:f8:42:6f:c6:30:9f:43:58:1d:b3:
62:cc:41:74:58:c2:93:fe:18:ef:a9:fe:f6:d0:12:
57:17:b1:9f:f0:a9:04:07:10:28:a2:bf:8f:09:8f:
ce:1d:b8:eb:0c:5c:68:5f:4d:b5:ad:66:c8:03:08:
25:c5:d4:85:05:6a:e1:b4:d5:ec:80:c5:cc:dc:1f:
96:ff:a9:6a:3f:6d:bb:97:07:51:23:81:31:85:ac:
c9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:25:A0:AF:5B:62:C3:9A:50:CD:16:2C:F9:95:DB:DF:56:7D:4F:AA
X509v3 Authority Key Identifier:
keyid:40:F7:5D:32:77:61:B9:0C:08:99:63:8F:43:0E:B6:14:C8:7C:31:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPddMndhuQwImWOPQw62FMh8MQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:b7:ea:43:7c:4b:e2:ac:41:48:cb:37:1c:b2:da:2a:ef:41:
24:e4:ff:ff:21:a7:6c:f3:42:a3:b5:2c:68:c3:10:5d:33:b2:
a3:a6:03:15:7d:72:b4:6c:7f:13:67:96:04:bf:ac:47:93:64:
0a:1f:e2:e2:1f:cf:13:cc:cd:ec:2d:57:ec:7e:2a:ba:6d:cf:
3c:af:99:e6:f0:1e:05:6d:a8:66:f4:be:c3:5f:9a:6f:e6:2e:
30:75:34:13:57:da:af:4c:eb:f9:6e:e9:fd:9b:d9:09:1d:19:
e4:2f:dc:e4:91:ff:e7:dd:21:4f:ff:b8:a2:06:d5:42:f9:ea:
d4:2e:d5:d8:d4:22:66:77:8c:15:0b:31:bf:97:1b:05:eb:7a:
98:30:70:44:61:90:ab:fa:69:ca:24:b9:13:72:da:83:32:e6:
9a:d0:32:c7:60:55:ff:e1:3b:06:f3:8c:7d:b5:55:80:c7:97:
d1:07:0c:03:bc:04:e1:67:50:be:8c:7b:0e:9d:39:e3:de:98:
f7:76:17:86:a7:ef:73:de:b5:51:79:cb:88:43:0e:3e:00:8e:
c8:5a:8c:93:b0:0b:75:ce:22:a5:5d:c9:b3:72:26:15:5b:37:
cc:db:19:0f:29:80:69:2c:b4:cf:f5:55:4f:d6:7a:a0:52:76:
0a:42:e2:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTeooizW1blURonRgROLnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwZjc1ZDMyNzc2MWI5MGMwODk5NjM4ZjQzMGViNjE0Yzg3
YzMxMDYwHhcNMjUwODIzMDUwMTQ5WhcNMjUwODI0MDUwMTQ5WjAzMTEwLwYDVQQD
EyhlYzI1YTBhZjViNjJjMzlhNTBjZDE2MmNmOTk1ZGJkZjU2N2Q0ZmFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RsJPZNmZQhAN9SBqMBJWSVhgR6B
MYambh3xd+untXUqlSSSi13JsDUf842bkdVxzAQKoV28YOd2mRoZb6p8AS5uVW35
NM62IGNGaQd/7FII7PgtxwB1xTh90AEYnfomaOYgewKTLb2wQQ5OkmvaqzeB1hb2
lBDWNPNQIyjSL29D2oF+YeTvpn32MuDckT6lCedt38RkSNaPpnq0iV9Kry20+pAa
r2HMU/hCb8Ywn0NYHbNizEF0WMKT/hjvqf720BJXF7Gf8KkEBxAoor+PCY/OHbjr
DFxoX021rWbIAwglxdSFBWrhtNXsgMXM3B+W/6lqP227lwdRI4ExhazJ3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOwloK9bYsOaUM0WLPmV299WfU+qMB8GA1UdIwQY
MBaAFED3XTJ3YbkMCJljj0MOthTIfDEGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVBkZE1uZGh1UXdJbVdPUFF3NjJGTWg4TVFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS82ZTVmNGMtMmVhZS00OGEwLTg1NTAt
MjlhYzQ1ZTJlY2ZmLzEvUVBkZE1uZGh1UXdJbVdPUFF3NjJGTWg4TVFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS82ZTVmNGMtMmVhZS00OGEwLTg1NTAtMjlhYzQ1ZTJlY2Zm
LzEvUVBkZE1uZGh1UXdJbVdPUFF3NjJGTWg4TVFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFrfqQ3xL
4qxBSMs3HLLaKu9BJOT//yGnbPNCo7UsaMMQXTOyo6YDFX1ytGx/E2eWBL+sR5Nk
Ch/i4h/PE8zN7C1X7H4qum3PPK+Z5vAeBW2oZvS+w1+ab+YuMHU0E1far0zr+W7p
/ZvZCR0Z5C/c5JH/590hT/+4ogbVQvnq1C7V2NQiZneMFQsxv5cbBet6mDBwRGGQ
q/ppyiS5E3LagzLmmtAyx2BV/+E7BvOMfbVVgMeX0QcMA7wE4WdQvox7Dp05496Y
93YXhqfvc961UXnLiEMOPgCOyFqMk7ALdc4ipV3Js3ImFVs3zNsZDymAaSy0z/VV
T9Z6oFJ2CkLiXg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:25:58 2025 by rpki-client