Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.mft
File: QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.mft (raw, json)
Hash identifier: 4wvUtmQLuJVWlZS71Yg/7tchKQVn6bP2kyXfNxcvWrs=
Subject key identifier: 00:EA:B4:23:79:D1:6A:62:A2:13:5C:D4:95:3A:F0:71:14:DE:E8:44
Authority key identifier: 40:C3:D3:7B:E4:35:A9:C3:3F:1C:63:E5:0D:0D:64:64:ED:16:10:04
Certificate issuer: /CN=40c3d37be435a9c33f1c63e50d0d6464ed161004
Certificate serial: 0199FC2154E089CC0BCE98E33C27A12164ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.mft
Manifest number: 163D
Signing time: Sun 19 Oct 2025 11:01:06 +0000
Manifest this update: Sun 19 Oct 2025 11:01:06 +0000
Manifest next update: Mon 20 Oct 2025 11:01:06 +0000
Files and hashes: 1: I3asWb0Ke_YTZ9x8-oMXPECbM9c.roa (hash: DFO6kXzPePgIeZm2V5GpwnQuioD5uOOrmUgP/RCLs14=)
2: QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.crl (hash: cT971HfbQB2Ks+ZCIvfXSkpynf5+tCrMBLL47lOZMSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:54:e0:89:cc:0b:ce:98:e3:3c:27:a1:21:64:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40c3d37be435a9c33f1c63e50d0d6464ed161004
Validity
Not Before: Oct 19 11:01:06 2025 GMT
Not After : Oct 20 11:01:06 2025 GMT
Subject: CN=00eab42379d16a62a2135cd4953af07114dee844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:96:b2:2d:9b:84:c6:f3:38:73:0c:17:3e:99:
a4:e1:47:3c:6a:f4:34:48:d7:f2:38:bd:47:31:76:
b5:53:8e:a8:92:de:f6:14:8c:0d:dc:1a:a0:c7:27:
b5:20:bd:24:c8:8e:b2:22:b0:11:5b:e9:2e:1e:6b:
06:b4:46:1e:2d:23:20:69:e6:67:c1:62:08:88:1d:
7e:16:a4:29:62:3f:f0:d6:51:f3:be:33:e3:c9:b5:
62:4a:2f:ac:31:bb:67:b5:af:d5:86:5b:51:e1:de:
c1:57:4e:08:ae:22:da:92:56:4f:fa:9f:40:0a:51:
0c:2d:c2:7f:bf:40:6f:5a:d4:9f:7d:ac:56:e8:64:
19:2e:34:d8:4d:d9:75:6e:c0:2d:c8:48:ed:cb:84:
92:ec:bd:b1:c3:44:99:61:7f:a2:86:93:cd:dc:fe:
8c:6b:89:6e:9b:e0:be:f8:4b:0f:ce:89:c5:25:e6:
3b:d0:32:65:5e:88:07:c8:17:5b:76:2f:39:85:c1:
0d:23:56:c9:ff:af:97:45:72:21:bd:5c:1c:bd:e4:
f5:da:9d:95:a5:be:02:04:34:c5:19:17:68:1b:79:
f6:10:73:0d:89:d7:ae:66:47:ae:8b:03:d2:82:57:
ff:a1:44:73:e9:44:5c:55:04:a2:43:66:95:98:88:
23:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:EA:B4:23:79:D1:6A:62:A2:13:5C:D4:95:3A:F0:71:14:DE:E8:44
X509v3 Authority Key Identifier:
keyid:40:C3:D3:7B:E4:35:A9:C3:3F:1C:63:E5:0D:0D:64:64:ED:16:10:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:78:5b:19:c4:fd:61:10:2b:74:ca:b7:9f:7b:ed:28:07:ab:
76:fa:c4:3f:2d:c5:4b:71:d4:a2:ce:f8:d9:be:42:de:c8:ad:
21:16:f5:b2:d9:86:cf:4a:a3:77:22:02:fd:3e:f5:90:74:20:
dd:e7:ed:f6:bf:60:1c:2b:8a:e2:2c:9f:2a:62:67:2d:94:2f:
5a:c6:3c:5d:81:82:b0:f0:29:d9:fd:30:fa:15:a7:68:1b:08:
e3:dd:c4:8c:97:ad:f6:b6:cb:a9:58:c1:5f:77:bc:c0:c9:5d:
0b:6c:a4:0d:79:1b:ff:9a:47:a6:4a:43:db:0a:ed:dd:dd:27:
0a:42:d6:1f:b4:ff:fa:77:d4:55:4b:3e:04:18:4f:16:20:3f:
85:49:d8:19:cb:5e:0b:bd:8c:e6:e6:4a:f1:cb:42:f4:40:39:
a7:19:7a:3e:7b:9d:4a:a9:db:28:29:4e:09:f2:76:ea:69:fd:
0b:0f:06:bf:20:04:71:3a:5b:e2:1a:87:6c:b5:20:08:5f:d6:
d0:dc:b0:03:f2:b5:cb:df:85:b0:dd:c4:46:04:62:81:b1:dc:
c6:cd:58:b7:1d:3d:70:67:a3:ea:1c:19:a8:ea:4e:fc:1a:06:
ae:31:12:91:ea:ae:f1:ef:1a:53:fa:7a:d1:60:b8:50:b9:94:
98:c9:85:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:37:51 2025 by rpki-client