
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.mft
File: QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.mft (raw, json)
Hash identifier: KjevoVQKKfzazn8WXvMG8OBJJK41xW8iwFYenLmbf8k=
Subject key identifier: 24:28:0E:49:B8:F1:5B:46:38:BE:73:73:98:98:09:5F:13:CF:5D:03
Authority key identifier: 40:C3:D3:7B:E4:35:A9:C3:3F:1C:63:E5:0D:0D:64:64:ED:16:10:04
Certificate issuer: /CN=40c3d37be435a9c33f1c63e50d0d6464ed161004
Certificate serial: 0198D69829BB541765176EB0801BA5B6D105
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.mft
Manifest number: 15A5
Signing time: Sat 23 Aug 2025 11:02:33 +0000
Manifest this update: Sat 23 Aug 2025 11:02:33 +0000
Manifest next update: Sun 24 Aug 2025 11:02:33 +0000
Files and hashes: 1: I3asWb0Ke_YTZ9x8-oMXPECbM9c.roa (hash: DFO6kXzPePgIeZm2V5GpwnQuioD5uOOrmUgP/RCLs14=)
2: QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.crl (hash: dVLNoh770kWqSgrRYT+JwQryU3AQyIXdVWrmtDkAAP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:29:bb:54:17:65:17:6e:b0:80:1b:a5:b6:d1:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40c3d37be435a9c33f1c63e50d0d6464ed161004
Validity
Not Before: Aug 23 11:02:33 2025 GMT
Not After : Aug 24 11:02:33 2025 GMT
Subject: CN=24280e49b8f15b4638be73739898095f13cf5d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:48:6e:8b:cd:6f:0b:08:ee:be:5f:2e:85:b7:
08:a6:2b:30:b0:c5:f6:cd:7d:24:14:46:eb:b9:70:
0e:f1:31:53:8f:b5:45:3d:b9:6a:f3:e0:45:3e:30:
a7:d1:8f:15:77:bd:99:e2:5a:97:45:76:bf:1e:fa:
44:7c:30:6b:d6:0e:83:63:a9:30:88:ab:01:c7:19:
15:9a:16:d5:ab:ec:b6:6b:2f:76:3d:f8:88:fd:5d:
20:62:8d:e7:44:65:ce:27:e6:1c:a1:08:34:b6:2f:
52:03:d2:d5:b6:47:30:7c:14:cc:fb:bc:5d:73:a5:
a3:a9:6e:78:17:82:5f:3b:b1:ed:1f:86:af:86:74:
66:dc:25:be:8e:c3:da:0c:cf:8c:4b:05:86:38:a8:
60:af:5c:4c:95:74:fe:ae:29:72:7f:ef:8d:9f:c4:
e9:20:7a:ce:c8:04:31:ab:11:41:8f:06:86:53:d0:
58:a1:0c:ab:e8:00:5d:8a:3d:70:79:95:10:06:61:
09:1a:4b:4c:79:64:d9:d4:ca:90:8a:a4:30:71:9f:
ba:56:bb:da:4f:90:b5:19:a2:16:d4:4a:43:93:b3:
c0:09:c6:24:e3:b9:4f:59:57:6e:14:df:81:32:3e:
5b:b0:b0:38:8c:99:71:82:18:b6:74:e8:4b:d7:80:
5d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:28:0E:49:B8:F1:5B:46:38:BE:73:73:98:98:09:5F:13:CF:5D:03
X509v3 Authority Key Identifier:
keyid:40:C3:D3:7B:E4:35:A9:C3:3F:1C:63:E5:0D:0D:64:64:ED:16:10:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:e3:9c:9a:eb:3a:ab:d2:f9:6e:ed:18:de:60:26:25:a9:08:
c6:2f:eb:c7:f4:4d:74:21:ef:76:9f:94:2a:f0:5d:84:09:b0:
3c:76:dc:16:21:dd:86:a7:19:e2:55:92:67:61:76:c6:09:ee:
2a:1f:a6:12:8c:cf:8b:e3:ea:3f:d5:ec:27:a4:11:c9:67:97:
62:bf:54:6f:43:c4:17:2f:bf:51:e9:1b:ef:dd:ea:01:06:8f:
af:c6:97:ca:4f:c9:db:bc:4f:b8:39:91:69:47:c5:f9:19:fa:
26:63:92:99:a6:77:ec:45:14:1d:9d:06:78:92:fa:5b:e3:3e:
8c:22:5d:a6:72:ef:e5:1d:4f:67:ef:19:de:71:19:44:23:74:
43:89:8a:83:2e:d9:58:f7:be:79:41:17:a7:08:8a:2a:2d:f4:
77:5c:da:a0:61:04:00:ec:3e:d2:72:19:57:de:b2:02:1a:ce:
ec:c1:fa:09:02:2e:61:cd:89:65:8f:a8:04:ff:63:c6:d3:32:
ba:5e:d1:07:5b:55:52:e6:76:62:e0:8c:f0:a7:86:67:4d:1f:
c3:ca:2e:78:d7:b9:22:1d:18:1a:c1:2f:bf:8a:1b:21:cd:cc:
f4:f2:4f:5f:e4:88:67:c7:17:00:78:98:22:fc:f5:29:87:f9:
21:d0:3a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:59:23 2025 by rpki-client