Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.mft
File: QMV_fAvv5jtgBOlE32hMnVHkaPM.mft (raw, json)
Hash identifier: 4R/Hq6npYa3hFKrjwmIXWFfLVDbfC1tDuW1sJdlWdHQ=
Subject key identifier: 66:4A:1A:DC:BC:E1:6D:8D:DF:F1:87:E6:5F:D4:0D:15:10:3B:E2:50
Authority key identifier: 40:C5:7F:7C:0B:EF:E6:3B:60:04:E9:44:DF:68:4C:9D:51:E4:68:F3
Certificate issuer: /CN=40c57f7c0befe63b6004e944df684c9d51e468f3
Certificate serial: 019A4EF446026AE82272531667A48FFEDD7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QMV_fAvv5jtgBOlE32hMnVHkaPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.mft
Manifest number: 0AAF
Signing time: Tue 04 Nov 2025 13:00:22 +0000
Manifest this update: Tue 04 Nov 2025 13:00:22 +0000
Manifest next update: Wed 05 Nov 2025 13:00:22 +0000
Files and hashes: 1: QMV_fAvv5jtgBOlE32hMnVHkaPM.crl (hash: +I73fz150/hKw5gy285KSh4dCq2ek1lZav1Lxr5D4+A=)
2: VtNDBe4WLUvuXuHOTlAK7Ldf5W4.roa (hash: 2/Ux5k6jwyAwcxnEpPd/SFbt5+kWg1F4N3TK8J41W34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QMV_fAvv5jtgBOlE32hMnVHkaPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:46:02:6a:e8:22:72:53:16:67:a4:8f:fe:dd:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40c57f7c0befe63b6004e944df684c9d51e468f3
Validity
Not Before: Nov 4 13:00:22 2025 GMT
Not After : Nov 5 13:00:22 2025 GMT
Subject: CN=664a1adcbce16d8ddff187e65fd40d15103be250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:38:90:b9:a4:ee:77:20:03:d4:49:ae:64:16:
69:8e:5d:38:45:85:7e:97:81:a6:82:d9:e2:b1:04:
66:54:ff:8d:40:55:ea:65:17:91:f2:1f:21:93:1d:
0c:b5:92:2f:d4:6d:3f:89:2d:31:43:3e:96:a9:33:
03:7a:59:df:a1:dc:d1:01:78:3e:b9:d3:3f:5f:6e:
20:d7:41:b5:19:30:e1:2d:fa:cc:7a:08:63:75:35:
d0:3e:6a:6a:20:3c:2e:a5:50:76:73:c9:13:d6:94:
12:d0:d0:ea:b3:f8:d8:cb:fa:57:5c:34:a9:29:c0:
cc:2a:cb:21:6f:2f:42:65:55:c1:af:1e:f6:11:36:
6a:e8:c4:7a:e6:0b:19:dc:ae:b9:0b:3e:9e:1a:b7:
7d:18:88:b5:c5:d5:91:fe:09:e1:da:00:98:0e:b5:
a6:dd:91:54:fe:fa:fa:27:d6:75:30:ed:6d:17:dd:
aa:0f:7c:8f:17:73:e3:75:6b:e7:58:27:34:28:df:
59:a1:a4:e6:b0:67:2a:5d:fa:85:e9:84:c6:39:b1:
31:14:ad:c1:8a:d9:cc:09:be:42:52:3f:51:ff:c5:
b4:86:68:a0:b6:b8:b8:d9:c1:f9:fc:22:b7:e8:45:
9a:ee:c6:dc:a4:62:ea:fc:33:82:0c:c4:4a:8d:0b:
9f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:4A:1A:DC:BC:E1:6D:8D:DF:F1:87:E6:5F:D4:0D:15:10:3B:E2:50
X509v3 Authority Key Identifier:
keyid:40:C5:7F:7C:0B:EF:E6:3B:60:04:E9:44:DF:68:4C:9D:51:E4:68:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QMV_fAvv5jtgBOlE32hMnVHkaPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:9b:32:30:1b:7a:8c:06:92:87:58:15:04:c1:81:e9:8c:9b:
0e:ff:62:0c:6d:e3:ad:6c:27:0e:10:39:9e:61:eb:86:f9:08:
69:ca:f4:48:00:64:bf:25:67:40:f8:cd:ef:5f:38:b5:1c:f6:
fd:79:8b:a0:f9:63:f4:92:a7:79:f8:f9:41:f1:19:20:65:4b:
3f:73:59:e9:1e:82:92:ba:d4:66:32:13:0a:1b:2d:f7:32:04:
b0:3d:42:95:c1:0a:36:d0:64:17:40:58:57:8f:34:54:23:ef:
4b:21:8d:ce:a4:0d:e2:f7:58:bb:19:e5:0e:ae:8f:fd:28:9c:
2d:46:e5:f5:17:9e:15:bb:f7:2c:50:d0:9d:08:d0:af:0e:1d:
64:00:19:c1:e6:d7:ba:ab:c7:e3:77:18:d0:8c:b5:a7:1f:8e:
70:85:c2:90:36:ff:20:af:be:b5:c4:5b:7e:85:1a:71:20:84:
c5:6e:71:68:93:d0:65:c4:85:ff:36:14:94:d7:76:24:7a:a0:
c4:48:eb:8e:c7:1e:f7:6f:d7:45:0b:e0:86:af:92:86:b0:31:
da:2f:f8:69:56:5d:da:5e:43:f2:82:00:25:8f:61:63:44:c8:
93:16:84:7d:0c:aa:4a:c0:4a:23:c6:ef:67:04:52:0e:86:99:
1d:86:9d:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9EYCaugiclMWZ6SP/t19MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwYzU3ZjdjMGJlZmU2M2I2MDA0ZTk0NGRmNjg0YzlkNTFl
NDY4ZjMwHhcNMjUxMTA0MTMwMDIyWhcNMjUxMTA1MTMwMDIyWjAzMTEwLwYDVQQD
Eyg2NjRhMWFkY2JjZTE2ZDhkZGZmMTg3ZTY1ZmQ0MGQxNTEwM2JlMjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDiQuaTudyAD1EmuZBZpjl04RYV+
l4GmgtnisQRmVP+NQFXqZReR8h8hkx0MtZIv1G0/iS0xQz6WqTMDelnfodzRAXg+
udM/X24g10G1GTDhLfrMeghjdTXQPmpqIDwupVB2c8kT1pQS0NDqs/jYy/pXXDSp
KcDMKsshby9CZVXBrx72ETZq6MR65gsZ3K65Cz6eGrd9GIi1xdWR/gnh2gCYDrWm
3ZFU/vr6J9Z1MO1tF92qD3yPF3PjdWvnWCc0KN9ZoaTmsGcqXfqF6YTGObExFK3B
itnMCb5CUj9R/8W0hmigtri42cH5/CK36EWa7sbcpGLq/DOCDMRKjQufuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGZKGty84W2N3/GH5l/UDRUQO+JQMB8GA1UdIwQY
MBaAFEDFf3wL7+Y7YATpRN9oTJ1R5GjzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU1WX2ZBdnY1anRnQk9sRTMyaE1uVkhrYVBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9mZTJlMDEtZDg1NC00ZmJjLWJhMTkt
MmIwMTJmZThlYTUyLzEvUU1WX2ZBdnY1anRnQk9sRTMyaE1uVkhrYVBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy9mZTJlMDEtZDg1NC00ZmJjLWJhMTktMmIwMTJmZThlYTUy
LzEvUU1WX2ZBdnY1anRnQk9sRTMyaE1uVkhrYVBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqZsyMBt6
jAaSh1gVBMGB6YybDv9iDG3jrWwnDhA5nmHrhvkIacr0SABkvyVnQPjN7184tRz2
/XmLoPlj9JKnefj5QfEZIGVLP3NZ6R6CkrrUZjITChst9zIEsD1ClcEKNtBkF0BY
V480VCPvSyGNzqQN4vdYuxnlDq6P/SicLUbl9ReeFbv3LFDQnQjQrw4dZAAZwebX
uqvH43cY0Iy1px+OcIXCkDb/IK++tcRbfoUacSCExW5xaJPQZcSF/zYUlNd2JHqg
xEjrjsce92/XRQvghq+ShrAx2i/4aVZd2l5D8oIAJY9hY0TIkxaEfQyqSsBKI8bv
ZwRSDoaZHYadDQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:22:18 2025 by rpki-client