Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.mft
File: QT_6EGrj_ua-h7rAaoe6V-0cEUA.mft (raw, json)
Hash identifier: gjXTDaCgMMTlFYGLmbBAH5TxBi+rgvLiLC7YBVzj3KI=
Subject key identifier: 28:AC:5E:19:2B:0A:B3:FF:6A:2D:47:D7:1F:DD:6B:6E:8F:59:5C:D5
Authority key identifier: 41:3F:FA:10:6A:E3:FE:E6:BE:87:BA:C0:6A:87:BA:57:ED:1C:11:40
Certificate issuer: /CN=413ffa106ae3fee6be87bac06a87ba57ed1c1140
Certificate serial: 0199FCC68A62D39466F363491B7AC1D057BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QT_6EGrj_ua-h7rAaoe6V-0cEUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 14:01:33 +0000
Manifest this update: Sun 19 Oct 2025 14:01:33 +0000
Manifest next update: Mon 20 Oct 2025 14:01:33 +0000
Files and hashes: 1: 0qda3zP6aWS1QmMsfKtgTS_B8vw.roa (hash: NDD2ZMdGd4Vw1apZklWLmjHBzI7LGvrNZrE04O9xutU=)
2: QT_6EGrj_ua-h7rAaoe6V-0cEUA.crl (hash: h9qteAlnKqMu1CyRvfkKZETocuTCH2QVZuTr46oPUsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QT_6EGrj_ua-h7rAaoe6V-0cEUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:8a:62:d3:94:66:f3:63:49:1b:7a:c1:d0:57:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=413ffa106ae3fee6be87bac06a87ba57ed1c1140
Validity
Not Before: Oct 19 14:01:33 2025 GMT
Not After : Oct 20 14:01:33 2025 GMT
Subject: CN=28ac5e192b0ab3ff6a2d47d71fdd6b6e8f595cd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4a:7a:8c:26:b7:6f:10:8c:da:0e:78:b5:30:
78:c1:dc:07:6f:84:b6:36:21:d0:02:2e:75:58:64:
13:19:23:70:4a:2a:5f:56:bd:75:d5:11:68:8c:73:
a1:1c:96:af:98:76:ad:a4:f2:0b:a4:af:a3:1c:a4:
b2:12:b1:14:53:f8:64:30:2d:f5:8f:99:b7:a8:26:
2e:e8:3c:15:ad:72:74:59:c9:3d:55:31:47:2b:3c:
42:68:20:f3:be:59:c8:7e:5a:3b:cb:60:ac:cc:8e:
3b:e7:7a:7e:55:e5:03:81:6d:f2:18:d0:5a:80:91:
62:3c:f2:5f:b7:98:76:57:46:e4:3e:c4:fe:74:58:
dc:77:ac:ba:3f:06:01:a7:74:30:72:3e:2f:b7:e0:
04:41:06:f0:f8:bc:84:e8:03:5b:53:40:95:9b:c9:
5a:b2:36:3e:07:04:96:c0:60:63:8e:eb:f6:5c:8a:
7d:cd:6d:e5:04:c6:26:8f:19:16:5f:84:be:af:35:
7a:4f:92:3d:3e:c7:34:05:1f:8e:a3:8b:81:21:08:
32:ee:c9:a9:5f:02:03:d2:6e:12:83:77:49:4f:63:
58:91:c6:a6:9d:a4:f6:db:bb:95:ef:93:08:44:cd:
50:cd:43:16:ee:1c:9e:a8:16:d2:05:0a:0d:fd:52:
26:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:AC:5E:19:2B:0A:B3:FF:6A:2D:47:D7:1F:DD:6B:6E:8F:59:5C:D5
X509v3 Authority Key Identifier:
keyid:41:3F:FA:10:6A:E3:FE:E6:BE:87:BA:C0:6A:87:BA:57:ED:1C:11:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QT_6EGrj_ua-h7rAaoe6V-0cEUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:2d:01:59:29:d7:02:81:31:36:2c:5f:e7:7f:b6:de:87:68:
59:eb:1d:3a:43:3d:31:5b:85:03:2f:35:79:27:aa:8e:52:e1:
d4:f2:00:fc:36:18:89:8f:ab:6b:89:4e:35:5f:c3:4a:cd:5e:
17:50:16:2d:60:30:eb:1e:cc:f2:c1:46:b9:8c:60:9e:fc:82:
8e:69:81:63:2c:12:46:12:64:d2:5c:89:6c:30:f2:e9:62:e2:
21:bb:26:59:27:90:64:cc:aa:e1:c5:75:89:02:94:6d:4d:c0:
fc:08:e0:67:01:ee:6a:39:42:1c:b7:92:a3:38:17:55:3d:0b:
0e:d4:ed:7f:7e:fe:61:21:30:5e:36:5a:27:71:a3:d4:77:1c:
7e:83:7c:8e:2a:34:c4:e9:98:4b:1c:d1:5f:af:24:dd:8e:2d:
dc:01:4d:d0:a7:b2:8a:8f:50:fe:be:05:89:5b:c0:b1:33:42:
8a:a6:e4:44:52:ad:78:47:05:2c:2f:c2:70:51:8a:3d:d7:ac:
d3:05:d3:94:f0:02:b6:ff:d2:4a:bc:7d:a0:51:02:e5:81:d0:
bd:7c:7e:c9:ad:99:33:c7:09:99:ad:62:2f:9d:ae:d2:06:24:
0d:f6:0c:27:6e:44:38:4e:87:d7:c3:b7:48:18:e9:c7:30:af:
05:91:70:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xopi05Rm82NJG3rB0Fe7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxM2ZmYTEwNmFlM2ZlZTZiZTg3YmFjMDZhODdiYTU3ZWQx
YzExNDAwHhcNMjUxMDE5MTQwMTMzWhcNMjUxMDIwMTQwMTMzWjAzMTEwLwYDVQQD
EygyOGFjNWUxOTJiMGFiM2ZmNmEyZDQ3ZDcxZmRkNmI2ZThmNTk1Y2Q1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0p6jCa3bxCM2g54tTB4wdwHb4S2
NiHQAi51WGQTGSNwSipfVr111RFojHOhHJavmHatpPILpK+jHKSyErEUU/hkMC31
j5m3qCYu6DwVrXJ0Wck9VTFHKzxCaCDzvlnIflo7y2CszI4753p+VeUDgW3yGNBa
gJFiPPJft5h2V0bkPsT+dFjcd6y6PwYBp3Qwcj4vt+AEQQbw+LyE6ANbU0CVm8la
sjY+BwSWwGBjjuv2XIp9zW3lBMYmjxkWX4S+rzV6T5I9Psc0BR+Oo4uBIQgy7smp
XwID0m4Sg3dJT2NYkcamnaT227uV75MIRM1QzUMW7hyeqBbSBQoN/VImQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCisXhkrCrP/ai1H1x/da26PWVzVMB8GA1UdIwQY
MBaAFEE/+hBq4/7mvoe6wGqHulftHBFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVRfNkVHcmpfdWEtaDdyQWFvZTZWLTBjRVVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9jNzk2MzUtYmVjNC00ZmI1LTg5MmMt
ZmEyNmVjMzlmYWJhLzEvUVRfNkVHcmpfdWEtaDdyQWFvZTZWLTBjRVVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9jNzk2MzUtYmVjNC00ZmI1LTg5MmMtZmEyNmVjMzlmYWJh
LzEvUVRfNkVHcmpfdWEtaDdyQWFvZTZWLTBjRVVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuS0BWSnX
AoExNixf53+23odoWesdOkM9MVuFAy81eSeqjlLh1PIA/DYYiY+ra4lONV/DSs1e
F1AWLWAw6x7M8sFGuYxgnvyCjmmBYywSRhJk0lyJbDDy6WLiIbsmWSeQZMyq4cV1
iQKUbU3A/AjgZwHuajlCHLeSozgXVT0LDtTtf37+YSEwXjZaJ3Gj1HccfoN8jio0
xOmYSxzRX68k3Y4t3AFN0Keyio9Q/r4FiVvAsTNCiqbkRFKteEcFLC/CcFGKPdes
0wXTlPACtv/SSrx9oFEC5YHQvXx+ya2ZM8cJma1iL52u0gYkDfYMJ25EOE6H18O3
SBjpxzCvBZFwDQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:01:32 2025 by rpki-client