Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.mft
File: QNiN23rtct6j_41pztZTGlJ5Sqc.mft (raw, json)
Hash identifier: oKIRMTZRrsjdXSAkSlP4YjWuAx5R6EgEuJIgC40aXNU=
Subject key identifier: D7:E5:E0:01:88:6A:6B:AB:C2:5B:93:C6:5D:3D:4B:5B:6D:42:42:E4
Authority key identifier: 40:D8:8D:DB:7A:ED:72:DE:A3:FF:8D:69:CE:D6:53:1A:52:79:4A:A7
Certificate issuer: /CN=40d88ddb7aed72dea3ff8d69ced6531a52794aa7
Certificate serial: 0199FD345A386A46CA6F1C3D5053A292CC53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNiN23rtct6j_41pztZTGlJ5Sqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.mft
Manifest number: 1299
Signing time: Sun 19 Oct 2025 16:01:30 +0000
Manifest this update: Sun 19 Oct 2025 16:01:30 +0000
Manifest next update: Mon 20 Oct 2025 16:01:30 +0000
Files and hashes: 1: NNmIvWC2aG45EdXCFQyfOgMs8UM.roa (hash: dgfGD7cFEmQYML/LCfaIOvrAjQWUEzucY+z8ExOp2jM=)
2: QNiN23rtct6j_41pztZTGlJ5Sqc.crl (hash: aRvTqUn5P+3bZjGaOk+P69hlolpdrQyFWh2+cAF5Wdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QNiN23rtct6j_41pztZTGlJ5Sqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:5a:38:6a:46:ca:6f:1c:3d:50:53:a2:92:cc:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d88ddb7aed72dea3ff8d69ced6531a52794aa7
Validity
Not Before: Oct 19 16:01:30 2025 GMT
Not After : Oct 20 16:01:30 2025 GMT
Subject: CN=d7e5e001886a6babc25b93c65d3d4b5b6d4242e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f7:83:26:f2:d7:21:aa:60:db:f4:95:fc:06:
e4:2b:09:6c:f1:5d:d8:cd:cd:a9:1c:da:b6:23:36:
ab:a6:bd:20:7d:41:d5:0a:be:31:3a:19:b9:bc:5e:
30:a5:5f:1b:4a:65:30:0d:37:49:3b:de:1a:8a:d5:
a6:7e:6b:d5:e3:f9:1a:eb:11:22:24:08:13:79:a5:
74:1d:5c:0d:cb:31:7d:4c:37:86:24:6e:5b:11:b9:
1b:bb:50:d3:17:97:dd:5e:d8:77:4c:27:c2:99:98:
9c:1d:5c:45:8c:4c:e6:e9:98:c5:03:6f:f4:02:95:
eb:f3:62:f1:bf:a4:2c:52:2e:af:6d:d7:d1:a2:c0:
f1:47:14:f5:e3:fd:2d:fc:72:9c:50:8e:c4:3e:d9:
a8:65:83:f7:7b:a3:3d:43:62:d2:e3:ac:51:36:8a:
12:f0:17:85:cd:03:7d:36:9c:bc:ce:02:ee:d2:79:
30:33:22:0c:ae:96:07:2b:59:f2:7e:b9:e9:94:65:
94:ca:52:cf:49:e6:e1:83:2a:51:8c:e7:a2:e3:ee:
51:02:64:f8:1c:67:a9:4f:b2:ec:6e:84:08:da:d1:
b6:e9:5c:7d:ac:b2:b6:5b:e6:e6:e0:bb:c3:c7:db:
ca:1b:0c:b4:e6:9d:84:c2:e7:89:7f:d6:7b:a6:9d:
d5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E5:E0:01:88:6A:6B:AB:C2:5B:93:C6:5D:3D:4B:5B:6D:42:42:E4
X509v3 Authority Key Identifier:
keyid:40:D8:8D:DB:7A:ED:72:DE:A3:FF:8D:69:CE:D6:53:1A:52:79:4A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNiN23rtct6j_41pztZTGlJ5Sqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:79:3c:26:3f:93:c3:4b:77:60:4d:13:5e:f0:3d:94:96:b9:
ec:ed:aa:ee:bb:6d:ed:65:fe:ae:24:15:bd:a0:c8:1b:d2:99:
0e:97:22:53:32:10:84:2f:e5:08:56:5d:59:6b:f6:75:61:16:
43:a1:a6:43:71:f9:12:8c:6c:b7:c8:63:18:8c:6f:7b:14:a5:
c4:ca:dd:74:3d:f5:92:2f:35:ba:4b:62:3a:29:d2:77:34:8e:
9d:53:5b:c3:35:99:b8:3a:42:88:c8:e1:f3:aa:a1:38:ba:c7:
d8:31:0e:0f:2e:b8:ee:cc:31:b1:58:36:bd:69:c1:70:fd:8f:
34:14:49:9b:7e:2e:ea:6c:5b:36:a9:f6:f8:69:1c:5e:cc:0b:
c1:ff:af:0f:b5:f1:c2:15:0c:dd:c1:17:49:d9:9d:19:31:b2:
3f:01:84:f8:d9:dc:5b:48:1f:8d:ab:60:03:0f:16:14:42:f4:
c5:ba:f4:34:cb:9c:0e:e6:ad:75:54:46:aa:fd:f8:ee:e5:85:
0f:0f:84:2b:a4:f0:2a:28:12:17:12:4d:2d:0b:8d:f2:74:f8:
54:d7:9c:b5:db:35:51:14:25:16:61:ea:08:77:11:25:e9:e1:
35:f6:42:d8:ea:8b:32:36:86:1e:2c:d4:42:b3:c2:6f:d0:8d:
3c:38:62:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NFo4akbKbxw9UFOiksxTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwZDg4ZGRiN2FlZDcyZGVhM2ZmOGQ2OWNlZDY1MzFhNTI3
OTRhYTcwHhcNMjUxMDE5MTYwMTMwWhcNMjUxMDIwMTYwMTMwWjAzMTEwLwYDVQQD
EyhkN2U1ZTAwMTg4NmE2YmFiYzI1YjkzYzY1ZDNkNGI1YjZkNDI0MmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/eDJvLXIapg2/SV/AbkKwls8V3Y
zc2pHNq2Izarpr0gfUHVCr4xOhm5vF4wpV8bSmUwDTdJO94aitWmfmvV4/ka6xEi
JAgTeaV0HVwNyzF9TDeGJG5bEbkbu1DTF5fdXth3TCfCmZicHVxFjEzm6ZjFA2/0
ApXr82Lxv6QsUi6vbdfRosDxRxT14/0t/HKcUI7EPtmoZYP3e6M9Q2LS46xRNooS
8BeFzQN9Npy8zgLu0nkwMyIMrpYHK1nyfrnplGWUylLPSebhgypRjOei4+5RAmT4
HGepT7LsboQI2tG26Vx9rLK2W+bm4LvDx9vKGwy05p2EwueJf9Z7pp3VKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNfl4AGIamurwluTxl09S1ttQkLkMB8GA1UdIwQY
MBaAFEDYjdt67XLeo/+Nac7WUxpSeUqnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU5pTjIzcnRjdDZqXzQxcHp0WlRHbEo1U3FjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9mZTQ1ZGUtYjQ2My00NDNkLWI3ZGUt
MzdhMjRlMDgxZjY4LzEvUU5pTjIzcnRjdDZqXzQxcHp0WlRHbEo1U3FjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9mZTQ1ZGUtYjQ2My00NDNkLWI3ZGUtMzdhMjRlMDgxZjY4
LzEvUU5pTjIzcnRjdDZqXzQxcHp0WlRHbEo1U3FjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtnk8Jj+T
w0t3YE0TXvA9lJa57O2q7rtt7WX+riQVvaDIG9KZDpciUzIQhC/lCFZdWWv2dWEW
Q6GmQ3H5Eoxst8hjGIxvexSlxMrddD31ki81uktiOinSdzSOnVNbwzWZuDpCiMjh
86qhOLrH2DEODy647swxsVg2vWnBcP2PNBRJm34u6mxbNqn2+GkcXswLwf+vD7Xx
whUM3cEXSdmdGTGyPwGE+NncW0gfjatgAw8WFEL0xbr0NMucDuatdVRGqv347uWF
Dw+EK6TwKigSFxJNLQuN8nT4VNectds1URQlFmHqCHcRJenhNfZC2OqLMjaGHizU
QrPCb9CNPDhijg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:34 2025 by rpki-client