Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/QQMpIGjqP7hbxYlTeeIO29C8ZQY.mft
File: QQMpIGjqP7hbxYlTeeIO29C8ZQY.mft (raw, json)
Hash identifier: kh+i7hXiNFS9vJhh/uCBLx5EHii68nBbrHOvLJqnN2M=
Subject key identifier: 38:B2:61:AA:67:50:B6:D4:7B:60:B6:5F:E4:1B:48:8A:95:63:65:1C
Authority key identifier: 41:03:29:20:68:EA:3F:B8:5B:C5:89:53:79:E2:0E:DB:D0:BC:65:06
Certificate issuer: /CN=4103292068ea3fb85bc5895379e20edbd0bc6506
Certificate serial: 0199FB7CED5CE521FBEB5254C2C42B56658F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQMpIGjqP7hbxYlTeeIO29C8ZQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/QQMpIGjqP7hbxYlTeeIO29C8ZQY.mft
Manifest number: 138E
Signing time: Sun 19 Oct 2025 08:01:32 +0000
Manifest this update: Sun 19 Oct 2025 08:01:32 +0000
Manifest next update: Mon 20 Oct 2025 08:01:32 +0000
Files and hashes: 1: QQMpIGjqP7hbxYlTeeIO29C8ZQY.crl (hash: pFNh6PRU2QfnrEDNNVl3hsWomAEzFB+iqYygycWTUUA=)
2: ukNphFAe4cX3Zc-R26t80LykhN4.roa (hash: xXUTisVftHwOaoab4KLxi4q4wlsyXqJydXF1SwvOD0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/QQMpIGjqP7hbxYlTeeIO29C8ZQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/QQMpIGjqP7hbxYlTeeIO29C8ZQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QQMpIGjqP7hbxYlTeeIO29C8ZQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:ed:5c:e5:21:fb:eb:52:54:c2:c4:2b:56:65:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4103292068ea3fb85bc5895379e20edbd0bc6506
Validity
Not Before: Oct 19 08:01:32 2025 GMT
Not After : Oct 20 08:01:32 2025 GMT
Subject: CN=38b261aa6750b6d47b60b65fe41b488a9563651c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ab:c6:93:41:b6:2c:43:04:74:ab:6d:8d:6d:
b4:58:77:c6:ce:49:28:ef:58:b8:a6:c4:b8:57:77:
8f:df:4d:e1:a0:12:6d:0a:5b:94:7d:65:11:3d:0b:
45:78:cd:76:fb:92:3e:5b:7e:97:9d:26:bf:23:4d:
3f:9d:43:01:e3:cf:95:33:07:03:8b:47:de:2c:cd:
f3:ea:c7:48:74:64:dc:54:d3:19:11:08:93:af:a6:
0a:da:56:05:45:3e:a0:34:fc:fd:c1:fe:56:94:fc:
e7:45:59:97:cc:a9:aa:3e:08:9d:07:33:13:95:a2:
bd:bc:8c:75:4f:52:ac:06:fc:27:64:8c:4e:5c:9b:
7a:31:ac:3a:5f:ae:f3:98:05:0d:8e:9b:a0:e9:e1:
67:45:bc:ab:64:f9:a2:8e:ce:32:2b:17:e6:de:4e:
1c:b7:a8:86:f8:2a:ea:7b:63:94:7d:39:66:dc:87:
d2:bd:f8:b9:51:ad:d2:14:20:59:4b:83:30:68:b9:
87:56:6e:83:38:75:5c:d6:a2:1e:f8:2c:ee:07:3a:
81:2c:46:8b:9c:59:cd:31:56:e0:8c:00:88:b3:55:
2a:de:52:d0:d1:95:84:35:37:b0:ca:52:17:00:de:
34:9e:34:e2:83:59:8c:7c:ac:a2:7d:9d:e2:03:64:
14:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B2:61:AA:67:50:B6:D4:7B:60:B6:5F:E4:1B:48:8A:95:63:65:1C
X509v3 Authority Key Identifier:
keyid:41:03:29:20:68:EA:3F:B8:5B:C5:89:53:79:E2:0E:DB:D0:BC:65:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQMpIGjqP7hbxYlTeeIO29C8ZQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/QQMpIGjqP7hbxYlTeeIO29C8ZQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/QQMpIGjqP7hbxYlTeeIO29C8ZQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:01:9a:af:6f:4f:07:75:27:87:fd:29:a3:52:9f:db:a3:38:
d0:84:7d:a9:6e:f5:7e:da:9c:eb:f0:60:8e:63:d0:ae:be:9f:
8c:85:1e:9b:59:53:87:a8:16:33:0f:c7:7c:95:48:9c:67:f0:
64:0a:b7:d5:77:b2:47:3e:07:bc:d7:a8:eb:06:33:c4:74:24:
a2:e1:0f:0f:fd:8b:6e:e3:af:90:e9:1f:5e:33:ea:7f:b2:16:
ae:0c:d3:e9:ba:81:06:9d:c6:82:9e:38:86:2c:bb:44:32:ff:
b4:d8:18:50:53:eb:aa:b4:32:af:c9:6f:b8:52:46:b7:fc:c6:
22:10:b0:4c:74:d5:5d:c8:7c:69:b5:12:97:84:90:45:8b:71:
e3:04:1a:6a:29:4c:b3:d6:9e:09:ab:03:83:af:0a:3e:65:e6:
24:97:f0:c9:a3:0f:74:42:d6:b3:28:4f:91:f7:c3:84:df:f0:
aa:54:94:03:63:0c:f1:fc:da:37:e5:11:5b:32:cd:33:2e:bd:
16:ff:3e:40:ed:43:72:38:c2:4f:3c:46:f3:c5:14:f0:d1:ff:
32:10:cd:89:42:1d:ec:e6:89:0d:fe:f0:8f:91:5e:d6:c2:70:
21:22:ef:c7:61:c3:15:6a:72:d2:af:27:2e:24:c5:22:98:6b:
d2:f7:e8:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fO1c5SH761JUwsQrVmWPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMDMyOTIwNjhlYTNmYjg1YmM1ODk1Mzc5ZTIwZWRiZDBi
YzY1MDYwHhcNMjUxMDE5MDgwMTMyWhcNMjUxMDIwMDgwMTMyWjAzMTEwLwYDVQQD
EygzOGIyNjFhYTY3NTBiNmQ0N2I2MGI2NWZlNDFiNDg4YTk1NjM2NTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqvGk0G2LEMEdKttjW20WHfGzkko
71i4psS4V3eP303hoBJtCluUfWURPQtFeM12+5I+W36XnSa/I00/nUMB48+VMwcD
i0feLM3z6sdIdGTcVNMZEQiTr6YK2lYFRT6gNPz9wf5WlPznRVmXzKmqPgidBzMT
laK9vIx1T1KsBvwnZIxOXJt6Maw6X67zmAUNjpug6eFnRbyrZPmijs4yKxfm3k4c
t6iG+Crqe2OUfTlm3IfSvfi5Ua3SFCBZS4MwaLmHVm6DOHVc1qIe+CzuBzqBLEaL
nFnNMVbgjACIs1Uq3lLQ0ZWENTewylIXAN40njTig1mMfKyifZ3iA2QUAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDiyYapnULbUe2C2X+QbSIqVY2UcMB8GA1UdIwQY
MBaAFEEDKSBo6j+4W8WJU3niDtvQvGUGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVFNcElHanFQN2hieFlsVGVlSU8yOUM4WlFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8yNGM1NjYtYzc0ZS00MjMyLWEzNDQt
NjA3MmJiOGIyYmMwLzEvUVFNcElHanFQN2hieFlsVGVlSU8yOUM4WlFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi8yNGM1NjYtYzc0ZS00MjMyLWEzNDQtNjA3MmJiOGIyYmMw
LzEvUVFNcElHanFQN2hieFlsVGVlSU8yOUM4WlFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgAGar29P
B3Unh/0po1Kf26M40IR9qW71ftqc6/BgjmPQrr6fjIUem1lTh6gWMw/HfJVInGfw
ZAq31XeyRz4HvNeo6wYzxHQkouEPD/2LbuOvkOkfXjPqf7IWrgzT6bqBBp3Ggp44
hiy7RDL/tNgYUFPrqrQyr8lvuFJGt/zGIhCwTHTVXch8abUSl4SQRYtx4wQaailM
s9aeCasDg68KPmXmJJfwyaMPdELWsyhPkffDhN/wqlSUA2MM8fzaN+URWzLNMy69
Fv8+QO1DcjjCTzxG88UU8NH/MhDNiUId7OaJDf7wj5Fe1sJwISLvx2HDFWpy0q8n
LiTFIphr0vfosQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:55:17 2025 by rpki-client