Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft
File: QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft (raw, json)
Hash identifier: 4vODQxz2DJOhwGUBKSxHEcl620hY8m52Tfq+p1FJCJs=
Subject key identifier: 37:82:3E:8B:8D:0E:D2:C6:82:32:4E:DA:AE:EA:F5:C1:E2:AB:7A:D3
Authority key identifier: 40:FA:C6:A3:2F:E4:BA:A7:D8:9B:91:EC:51:65:A3:D9:66:88:E1:44
Certificate issuer: /CN=40fac6a32fe4baa7d89b91ec5165a3d96688e144
Certificate serial: 019A50E42D15089A6A37917E9A4A25CA8254
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft
Manifest number: 0F53
Signing time: Tue 04 Nov 2025 22:02:02 +0000
Manifest this update: Tue 04 Nov 2025 22:02:02 +0000
Manifest next update: Wed 05 Nov 2025 22:02:02 +0000
Files and hashes: 1: 4hn1wVatZQI4O44VQ9afg3_3YCE.roa (hash: Wip87SKY/zyuxOVUXFbAARGlH7AAphh/zZD7B0INIf4=)
2: QPrGoy_kuqfYm5HsUWWj2WaI4UQ.crl (hash: jO7Yy3f0ZDS6N28iAWIWagEEawTO+pREbgT0A2GGKxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e4:2d:15:08:9a:6a:37:91:7e:9a:4a:25:ca:82:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40fac6a32fe4baa7d89b91ec5165a3d96688e144
Validity
Not Before: Nov 4 22:02:02 2025 GMT
Not After : Nov 5 22:02:02 2025 GMT
Subject: CN=37823e8b8d0ed2c682324edaaeeaf5c1e2ab7ad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:88:ca:91:1f:96:e9:ac:cd:80:8e:39:ab:68:
39:c8:1f:25:f9:d1:1b:cf:93:27:19:af:79:ac:ee:
20:73:14:d5:b0:c0:26:ca:24:27:1d:e3:c3:ec:e4:
d8:af:0a:64:88:2a:40:ca:eb:b0:fb:3f:7d:76:08:
d4:53:7d:98:d7:c9:c4:2d:27:a8:41:a1:8b:b5:8e:
5f:71:f5:fc:22:cc:ac:e2:ad:ca:13:3b:f2:7f:52:
e5:f8:66:a7:19:85:be:73:60:7c:04:e2:24:33:f5:
32:cd:f9:09:ea:22:61:f3:f4:01:db:e4:96:b9:a6:
98:e1:94:0d:d1:15:e3:c3:aa:4d:95:42:a3:3c:86:
29:87:f1:fe:3b:7b:20:d4:ff:f5:47:2e:42:b0:cd:
57:1f:99:4e:02:8d:a0:dc:6a:e4:8f:6a:8f:61:0b:
1b:87:bc:b3:a6:a5:17:49:62:22:d8:de:e3:a6:ee:
7d:74:a6:86:db:cd:b3:1e:89:93:47:6b:8c:e0:5b:
74:e8:ce:7a:c6:fe:44:ff:12:45:25:77:ab:2f:f7:
b4:83:c8:1e:83:32:9d:ba:8f:c8:e1:e2:66:93:ab:
d5:79:79:cf:42:01:af:1c:60:16:5b:5d:f8:68:d4:
92:2f:40:b7:77:41:42:eb:b2:c3:3d:3a:90:e1:24:
1a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:82:3E:8B:8D:0E:D2:C6:82:32:4E:DA:AE:EA:F5:C1:E2:AB:7A:D3
X509v3 Authority Key Identifier:
keyid:40:FA:C6:A3:2F:E4:BA:A7:D8:9B:91:EC:51:65:A3:D9:66:88:E1:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:34:a1:bf:ae:41:2f:9b:00:fc:9d:b4:a0:12:09:55:de:df:
18:d5:22:34:4c:55:e8:cc:fa:c0:6f:94:15:f1:25:89:65:90:
ea:6b:6c:2f:0e:4b:7f:81:bc:de:16:37:58:a3:31:f3:0e:42:
05:8a:75:a1:ce:4d:81:c6:fa:73:60:1f:cd:74:e5:8f:e1:93:
3e:ee:92:5a:b4:f2:4c:94:50:84:d7:94:54:da:e2:64:06:b7:
d1:09:ab:bc:06:ad:1a:02:6c:97:fe:f7:34:83:45:26:b0:93:
e0:1b:7f:8b:b8:8c:ac:4e:37:a7:a5:a3:46:48:28:6c:e6:84:
ec:25:2d:a5:d3:aa:9b:aa:a5:10:50:a5:74:a0:e4:9a:ee:e4:
87:e3:c3:f5:dc:47:46:3f:94:df:85:5e:97:f2:02:4a:cb:02:
84:5a:51:22:1a:43:82:86:f4:4e:a1:75:a3:70:09:df:63:75:
45:86:c0:3f:09:f0:85:d5:00:a8:5a:0d:a8:d9:f6:96:03:16:
7d:b3:ce:4f:b2:3e:72:03:5a:9f:ff:e4:9f:cc:08:87:07:5a:
1d:1e:85:01:c3:be:89:6a:f3:00:c6:8c:90:97:46:a9:03:fc:
42:46:c1:77:ce:14:0e:64:20:36:d9:01:95:ac:7f:4e:55:e9:
6c:26:4f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:37:11 2025 by rpki-client