Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
File: QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft (raw, json)
Hash identifier: dRCAsSokok0LwgDGH0h8DVCqsmkMps7er1nm/sh90J0=
Subject key identifier: D5:C5:D6:EA:C1:3F:EB:12:60:A0:12:08:4D:AA:91:51:19:E5:8C:61
Authority key identifier: 40:92:C4:7D:B8:A2:19:31:15:46:05:D5:76:C3:B7:34:1D:06:B4:B4
Certificate issuer: /CN=4092c47db8a21931154605d576c3b7341d06b4b4
Certificate serial: 0199FC587BE676E88F3B2C67A567BA89EA93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
Manifest number: 146B
Signing time: Sun 19 Oct 2025 12:01:21 +0000
Manifest this update: Sun 19 Oct 2025 12:01:21 +0000
Manifest next update: Mon 20 Oct 2025 12:01:21 +0000
Files and hashes: 1: QJLEfbiiGTEVRgXVdsO3NB0GtLQ.crl (hash: 0MGEXjY1gohddgcLKRGqmcJJEXchY3SpmIEBelmTq+s=)
2: knkqtZcmX5gSTiCaXxHQZfriQgw.roa (hash: E9ZLKfrMdp8ZIK1kQ0GbAJkgNgAmhxZR6M5lJ1uXi1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:7b:e6:76:e8:8f:3b:2c:67:a5:67:ba:89:ea:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4092c47db8a21931154605d576c3b7341d06b4b4
Validity
Not Before: Oct 19 12:01:21 2025 GMT
Not After : Oct 20 12:01:21 2025 GMT
Subject: CN=d5c5d6eac13feb1260a012084daa915119e58c61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6a:95:6f:2d:f2:ba:3b:c9:1e:50:f5:8b:24:
40:24:ab:e7:67:d1:3d:f7:c9:a8:f8:2c:e5:9e:54:
f7:4e:e0:a8:6d:2d:6b:f1:b9:b6:2c:2a:0c:45:21:
36:e1:be:61:70:64:a7:e4:b1:c1:53:88:e0:c3:de:
17:1e:cb:d2:40:70:18:da:31:c9:e7:93:65:7f:03:
a2:02:78:06:a4:45:13:38:b6:20:88:b0:5f:cc:8a:
d7:57:93:b8:8c:5a:e0:0f:bd:9e:f6:cd:66:42:b2:
84:b3:37:18:e1:26:65:6f:fc:81:bf:71:55:2c:dd:
4c:20:98:77:f1:1b:b4:43:7f:cb:8b:e1:53:03:ee:
b5:f5:2f:a2:95:94:40:ae:de:fb:c7:5f:11:38:fd:
4c:9e:0a:dd:4b:26:2f:9c:ee:37:af:43:5c:04:da:
df:0a:3d:6a:3d:48:61:8f:b1:7e:c3:e8:ea:5c:ce:
be:8f:4f:58:01:61:ba:ec:62:56:50:0a:1d:54:29:
94:23:cd:0d:8e:25:02:89:85:27:f5:72:1c:5e:b9:
31:75:e1:e2:e8:cd:76:02:a2:a1:b7:5c:94:d5:1f:
38:10:98:2b:b2:ff:3f:43:9e:14:26:93:b0:30:bc:
3d:ca:76:fa:f1:e2:ed:04:32:70:bf:61:f7:db:b2:
44:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C5:D6:EA:C1:3F:EB:12:60:A0:12:08:4D:AA:91:51:19:E5:8C:61
X509v3 Authority Key Identifier:
keyid:40:92:C4:7D:B8:A2:19:31:15:46:05:D5:76:C3:B7:34:1D:06:B4:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:6e:9a:ab:6a:40:5f:5c:ad:f4:a0:5d:c9:9d:45:43:18:b6:
83:83:14:dd:48:97:4b:ce:76:b8:6d:20:b4:b5:99:95:d9:f8:
86:f1:5d:72:bc:a5:ff:c3:d2:19:b0:58:a1:ae:f8:b6:b7:a2:
8e:2b:1f:75:c0:39:fc:39:07:db:48:67:1e:69:ed:58:87:00:
1c:2a:99:7b:be:e4:0d:a3:ce:03:a5:ef:1c:36:65:88:fb:37:
e4:f0:55:be:ff:46:3b:34:44:6a:10:f5:3e:37:2e:ef:58:7b:
b0:14:56:a6:44:5f:b6:15:c4:1f:79:64:1e:1c:02:a2:bd:48:
56:bb:fc:07:75:7b:4b:de:16:e7:98:be:da:52:6f:ad:70:c1:
0e:79:1d:ca:4d:8a:a8:0c:fd:b0:24:41:b7:41:24:a9:23:10:
ae:21:5a:17:3b:dc:68:cf:57:a5:5d:09:fb:75:bc:77:46:1a:
96:6a:5d:9a:4d:41:6e:08:73:7e:3b:be:7f:de:21:0f:19:0b:
f6:16:b9:48:e3:f1:dd:97:b9:ce:26:c3:2d:b6:db:9a:f2:ef:
00:24:60:9f:79:30:a1:fc:8f:e1:cc:d4:c4:2e:7d:c6:11:4c:
90:03:fc:9a:04:4b:06:39:01:bc:8e:d4:dd:56:c8:3f:c4:6b:
9b:a7:5d:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WHvmduiPOyxnpWe6ieqTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwOTJjNDdkYjhhMjE5MzExNTQ2MDVkNTc2YzNiNzM0MWQw
NmI0YjQwHhcNMjUxMDE5MTIwMTIxWhcNMjUxMDIwMTIwMTIxWjAzMTEwLwYDVQQD
EyhkNWM1ZDZlYWMxM2ZlYjEyNjBhMDEyMDg0ZGFhOTE1MTE5ZTU4YzYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWqVby3yujvJHlD1iyRAJKvnZ9E9
98mo+CzlnlT3TuCobS1r8bm2LCoMRSE24b5hcGSn5LHBU4jgw94XHsvSQHAY2jHJ
55NlfwOiAngGpEUTOLYgiLBfzIrXV5O4jFrgD72e9s1mQrKEszcY4SZlb/yBv3FV
LN1MIJh38Ru0Q3/Li+FTA+619S+ilZRArt77x18ROP1MngrdSyYvnO43r0NcBNrf
Cj1qPUhhj7F+w+jqXM6+j09YAWG67GJWUAodVCmUI80NjiUCiYUn9XIcXrkxdeHi
6M12AqKht1yU1R84EJgrsv8/Q54UJpOwMLw9ynb68eLtBDJwv2H327JECwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNXF1urBP+sSYKASCE2qkVEZ5YxhMB8GA1UdIwQY
MBaAFECSxH24ohkxFUYF1XbDtzQdBrS0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUpMRWZiaWlHVEVWUmdYVmRzTzNOQjBHdExRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9iMjI4ZDktN2ZmMy00YzQwLTk1YTYt
OGEzNmE2ZmFjZDUwLzEvUUpMRWZiaWlHVEVWUmdYVmRzTzNOQjBHdExRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9iMjI4ZDktN2ZmMy00YzQwLTk1YTYtOGEzNmE2ZmFjZDUw
LzEvUUpMRWZiaWlHVEVWUmdYVmRzTzNOQjBHdExRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfm6aq2pA
X1yt9KBdyZ1FQxi2g4MU3UiXS852uG0gtLWZldn4hvFdcryl/8PSGbBYoa74trei
jisfdcA5/DkH20hnHmntWIcAHCqZe77kDaPOA6XvHDZliPs35PBVvv9GOzREahD1
Pjcu71h7sBRWpkRfthXEH3lkHhwCor1IVrv8B3V7S94W55i+2lJvrXDBDnkdyk2K
qAz9sCRBt0EkqSMQriFaFzvcaM9XpV0J+3W8d0Yalmpdmk1Bbghzfju+f94hDxkL
9ha5SOPx3Ze5zibDLbbbmvLvACRgn3kwofyP4czUxC59xhFMkAP8mgRLBjkBvI7U
3VbIP8Rrm6ddDA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:52 2025 by rpki-client