Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/QLt2qpbfjrfWd3s1clLhEVUjh4U.mft
File: QLt2qpbfjrfWd3s1clLhEVUjh4U.mft (raw, json)
Hash identifier: 9q9ckAZ1Jh7aBW1JEr6G6dYGNfTQqMsOc831Ky7JNLg=
Subject key identifier: CD:2C:BF:D7:D9:DA:9A:E2:8E:BA:61:89:82:2C:F6:99:F9:5B:A9:5E
Authority key identifier: 40:BB:76:AA:96:DF:8E:B7:D6:77:7B:35:72:52:E1:11:55:23:87:85
Certificate issuer: /CN=40bb76aa96df8eb7d6777b357252e11155238785
Certificate serial: 0199FDD98F9A974FD5B451E220CA55E37FDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QLt2qpbfjrfWd3s1clLhEVUjh4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/QLt2qpbfjrfWd3s1clLhEVUjh4U.mft
Manifest number: 143B
Signing time: Sun 19 Oct 2025 19:01:57 +0000
Manifest this update: Sun 19 Oct 2025 19:01:57 +0000
Manifest next update: Mon 20 Oct 2025 19:01:57 +0000
Files and hashes: 1: 78S4WmbXMNI8p1WLj4U6NB6Bpk8.roa (hash: bBamnPgie/uUwEiZyXlGtHo6lmaBP0c5URwdBpztxDc=)
2: QLt2qpbfjrfWd3s1clLhEVUjh4U.crl (hash: hUaIRsN9QKlXGNqtaqvbEjfbk65GF+7jcpz8mYwkjuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/QLt2qpbfjrfWd3s1clLhEVUjh4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/QLt2qpbfjrfWd3s1clLhEVUjh4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/QLt2qpbfjrfWd3s1clLhEVUjh4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:8f:9a:97:4f:d5:b4:51:e2:20:ca:55:e3:7f:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40bb76aa96df8eb7d6777b357252e11155238785
Validity
Not Before: Oct 19 19:01:57 2025 GMT
Not After : Oct 20 19:01:57 2025 GMT
Subject: CN=cd2cbfd7d9da9ae28eba6189822cf699f95ba95e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:54:be:b5:04:7a:b6:e3:87:ee:5b:56:78:95:
6a:69:ff:62:55:ea:28:8b:6a:9e:05:96:5d:ae:ae:
fc:a4:25:c1:0b:2f:a7:0b:7f:3d:bf:f6:fe:9a:31:
a1:5c:f6:08:ac:b2:cf:32:f6:67:06:b2:c1:21:e7:
d0:08:a8:69:a7:e5:45:89:ea:f4:61:93:77:f7:bb:
74:81:d6:c3:f7:d1:26:b5:c7:ab:cb:6d:4b:6d:20:
d1:9a:8f:12:03:c6:dd:87:06:c1:74:c3:8d:18:77:
71:7c:4c:cf:03:36:ec:ae:52:27:bc:66:af:8a:09:
27:59:53:aa:51:55:af:b8:7c:ea:5f:e6:70:d7:6b:
6b:d4:50:0f:d2:0c:16:c4:52:22:2d:69:31:49:cb:
00:87:f9:f1:70:82:b8:ba:49:4e:64:23:d2:45:87:
08:c7:be:d7:f0:21:52:e1:97:4d:8f:27:3c:52:5d:
28:46:d4:76:0f:19:89:b2:16:b6:c5:39:ca:6a:e7:
dc:61:10:c9:3c:3f:44:33:1d:15:13:86:f0:50:33:
b7:06:ea:7f:a8:23:b0:ec:60:40:5a:0f:f9:24:16:
4e:10:6f:ef:52:7c:fc:01:cd:58:3a:35:9a:74:68:
a2:e4:40:8a:5d:a8:52:a3:16:ce:1d:90:ea:8d:23:
8a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:2C:BF:D7:D9:DA:9A:E2:8E:BA:61:89:82:2C:F6:99:F9:5B:A9:5E
X509v3 Authority Key Identifier:
keyid:40:BB:76:AA:96:DF:8E:B7:D6:77:7B:35:72:52:E1:11:55:23:87:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLt2qpbfjrfWd3s1clLhEVUjh4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/QLt2qpbfjrfWd3s1clLhEVUjh4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/QLt2qpbfjrfWd3s1clLhEVUjh4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:e6:cf:5d:bd:c8:71:1d:3f:01:fa:34:00:54:af:09:ca:da:
7d:29:ad:8a:c7:26:d7:3f:cc:fa:24:cd:88:d5:64:ae:45:c6:
6d:2d:eb:9c:2e:41:17:32:27:ef:c9:11:04:0c:4f:60:27:3c:
ee:a9:8b:4b:d5:fd:67:fb:1f:85:7b:8b:a0:76:f2:7b:b5:e6:
d4:e7:78:aa:37:a3:6b:61:26:b5:7f:35:c8:03:3e:de:5a:47:
c8:eb:3a:37:25:eb:74:0a:57:a1:9e:bd:52:7f:6d:79:25:c0:
5a:d4:83:db:1b:21:20:a5:b0:09:e6:54:a9:4c:b7:2c:3c:a0:
37:eb:02:7c:1e:a5:9e:bb:fd:03:4b:da:6e:1a:18:1b:a8:39:
5c:a1:0a:46:15:26:ea:74:ab:f0:e9:e2:3e:69:32:17:25:94:
69:28:f3:f8:08:01:c1:c5:89:be:39:c4:97:a8:a1:38:c3:2e:
73:bb:aa:86:11:81:49:a9:d5:6d:aa:68:a6:42:35:b4:4e:ca:
16:ba:2d:30:42:3e:41:c7:2b:d7:62:5a:4a:eb:ab:af:d8:9c:
be:5a:58:01:15:d3:7a:7d:2e:b5:70:7a:9e:c8:bb:6c:30:c1:
cb:f8:36:aa:83:b9:42:83:f4:3d:20:f6:8d:07:a9:6b:15:a2:
4e:ad:38:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92Y+al0/VtFHiIMpV43/cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwYmI3NmFhOTZkZjhlYjdkNjc3N2IzNTcyNTJlMTExNTUy
Mzg3ODUwHhcNMjUxMDE5MTkwMTU3WhcNMjUxMDIwMTkwMTU3WjAzMTEwLwYDVQQD
EyhjZDJjYmZkN2Q5ZGE5YWUyOGViYTYxODk4MjJjZjY5OWY5NWJhOTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFS+tQR6tuOH7ltWeJVqaf9iVeoo
i2qeBZZdrq78pCXBCy+nC389v/b+mjGhXPYIrLLPMvZnBrLBIefQCKhpp+VFier0
YZN397t0gdbD99Emtcery21LbSDRmo8SA8bdhwbBdMONGHdxfEzPAzbsrlInvGav
igknWVOqUVWvuHzqX+Zw12tr1FAP0gwWxFIiLWkxScsAh/nxcIK4uklOZCPSRYcI
x77X8CFS4ZdNjyc8Ul0oRtR2DxmJsha2xTnKaufcYRDJPD9EMx0VE4bwUDO3Bup/
qCOw7GBAWg/5JBZOEG/vUnz8Ac1YOjWadGii5ECKXahSoxbOHZDqjSOKRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM0sv9fZ2prijrphiYIs9pn5W6leMB8GA1UdIwQY
MBaAFEC7dqqW34631nd7NXJS4RFVI4eFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUx0MnFwYmZqcmZXZDNzMWNsTGhFVlVqaDRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9lMzFkNjgtY2I2My00YmQxLTk5Yjkt
MzVlZTdhNzM5ZmQ5LzEvUUx0MnFwYmZqcmZXZDNzMWNsTGhFVlVqaDRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9lMzFkNjgtY2I2My00YmQxLTk5YjktMzVlZTdhNzM5ZmQ5
LzEvUUx0MnFwYmZqcmZXZDNzMWNsTGhFVlVqaDRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ+bPXb3I
cR0/Afo0AFSvCcrafSmtiscm1z/M+iTNiNVkrkXGbS3rnC5BFzIn78kRBAxPYCc8
7qmLS9X9Z/sfhXuLoHbye7Xm1Od4qjeja2EmtX81yAM+3lpHyOs6NyXrdApXoZ69
Un9teSXAWtSD2xshIKWwCeZUqUy3LDygN+sCfB6lnrv9A0vabhoYG6g5XKEKRhUm
6nSr8OniPmkyFyWUaSjz+AgBwcWJvjnEl6ihOMMuc7uqhhGBSanVbapopkI1tE7K
FrotMEI+Qccr12JaSuurr9icvlpYARXTen0utXB6nsi7bDDBy/g2qoO5QoP0PSD2
jQepaxWiTq04Gw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:27:23 2025 by rpki-client