Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.mft
File: qLMQBN8TWqGouUMDPbFGkbEaY90.mft (raw, json)
Hash identifier: vevLeZfZdO+JgCwuYuqif8soK9UDYBve44je239hlTg=
Subject key identifier: 38:BD:D9:0F:FE:78:99:E1:B4:B9:1D:0F:EA:94:E0:52:89:7B:A9:DF
Authority key identifier: A8:B3:10:04:DF:13:5A:A1:A8:B9:43:03:3D:B1:46:91:B1:1A:63:DD
Certificate issuer: /CN=a8b31004df135aa1a8b943033db14691b11a63dd
Certificate serial: 019A50E2BCBED7287658EE62830F6FE61103
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLMQBN8TWqGouUMDPbFGkbEaY90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.mft
Manifest number: 1714
Signing time: Tue 04 Nov 2025 22:00:27 +0000
Manifest this update: Tue 04 Nov 2025 22:00:27 +0000
Manifest next update: Wed 05 Nov 2025 22:00:27 +0000
Files and hashes: 1: 3OEik7tNKF16V3tqg6gfm44Pn9o.roa (hash: VkjODs+PPMDcywvy+ukOLTzmW2p5x8hOEfY1SjXF8hY=)
2: _DuyKPQbR1DkiE_RbE3bwhY5Urg.roa (hash: komYy8q7+/6pbFO69hkA1CXIqh7HDmdwPrOiVtmRueI=)
3: lbsbTqD_9mE7vY8Zyug_YVR-sD8.roa (hash: TyKDojoTZ/eLBbbwUhWYN2H/st4TZlYsWMMpDrArAgs=)
4: qLMQBN8TWqGouUMDPbFGkbEaY90.crl (hash: mPTHoXR5tEkW48mfnPkFEvKmxkdpFZIwJ63N7btJY/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.mft
rsync://rpki.ripe.net/repository/DEFAULT/qLMQBN8TWqGouUMDPbFGkbEaY90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:bc:be:d7:28:76:58:ee:62:83:0f:6f:e6:11:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8b31004df135aa1a8b943033db14691b11a63dd
Validity
Not Before: Nov 4 22:00:27 2025 GMT
Not After : Nov 5 22:00:27 2025 GMT
Subject: CN=38bdd90ffe7899e1b4b91d0fea94e052897ba9df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4a:17:70:9e:23:35:36:09:13:fb:1a:07:dc:
ba:f7:a5:e7:7f:94:97:f7:8c:28:2b:fb:28:94:05:
fe:0b:ae:7e:02:86:0a:3a:f6:eb:cb:a3:b9:97:7c:
89:ec:bb:2c:21:24:af:f3:94:5d:3c:5e:29:c0:5c:
05:29:d1:81:92:90:f8:c8:4d:5d:5f:ef:c9:2b:6c:
23:3d:0b:1b:88:72:61:fe:cb:03:88:1e:34:b2:97:
c5:83:a3:10:da:f7:8d:a2:32:f6:80:e1:d7:d8:be:
65:71:4d:64:c2:20:17:66:2d:fd:b9:3c:dc:24:9b:
be:24:40:0e:39:e2:23:62:f7:e0:db:73:4a:09:17:
32:d2:6a:a4:cd:0c:1b:3d:75:bf:51:e8:c7:17:71:
c2:ca:5d:b8:0d:4b:52:1b:54:27:f4:2d:1e:91:e6:
d5:48:53:0f:c0:98:53:89:bc:89:02:76:b1:17:f7:
02:14:e3:7c:bd:0c:0a:f6:2e:24:3c:1b:0d:27:60:
4f:9b:3c:33:e6:e0:be:53:bd:32:ce:90:4c:b4:50:
b0:73:9e:34:f7:8c:1e:54:f4:f8:56:b4:3c:49:dc:
e7:b6:2a:8b:b8:a7:17:16:6d:82:1d:16:cd:ce:36:
1d:fe:c0:ae:bf:1c:2b:12:cd:9c:d2:c5:73:6f:2b:
4e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:BD:D9:0F:FE:78:99:E1:B4:B9:1D:0F:EA:94:E0:52:89:7B:A9:DF
X509v3 Authority Key Identifier:
keyid:A8:B3:10:04:DF:13:5A:A1:A8:B9:43:03:3D:B1:46:91:B1:1A:63:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLMQBN8TWqGouUMDPbFGkbEaY90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:9e:53:47:a2:d6:80:09:8d:23:57:71:cf:fd:3f:4b:fc:18:
40:bc:7a:f6:db:b2:a6:17:6a:c4:73:ff:ae:49:13:4a:d8:96:
d9:68:fa:a0:e0:a2:4a:5f:f1:55:97:83:be:0e:8a:71:d9:c3:
c8:0f:2c:95:81:2b:6b:da:98:c6:fd:a1:a7:c6:0d:6b:5a:e8:
4d:37:87:6d:d9:f0:73:2e:d1:c4:d7:73:16:4d:77:24:de:27:
43:79:13:f4:54:98:dd:2f:33:3c:f1:65:09:c7:d5:7e:ae:86:
0c:34:bc:ca:c0:a4:3b:2c:b0:2c:17:17:84:32:30:21:c5:0c:
c8:e1:61:20:bf:13:82:01:f9:6e:72:33:62:78:9a:dc:aa:55:
bf:ca:6e:19:af:86:5e:a7:bc:70:eb:10:a5:26:b2:d6:26:0a:
9e:49:6f:a4:32:e4:1f:05:10:08:90:dc:f4:1b:bd:45:c0:66:
ed:e1:35:48:d9:6b:02:5e:19:6a:24:db:3c:31:72:d9:9d:06:
4f:5c:02:0c:0e:1c:e5:ad:95:a1:53:84:6b:30:7d:bd:ff:ec:
1b:6f:f8:45:4e:85:74:3f:90:ce:ed:0d:c0:c3:c9:58:88:2c:
77:d5:bf:4b:7a:bd:a7:b4:d8:ee:03:ad:58:43:36:13:8f:07:
f2:ba:67:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ4ry+1yh2WO5igw9v5hEDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4YjMxMDA0ZGYxMzVhYTFhOGI5NDMwMzNkYjE0NjkxYjEx
YTYzZGQwHhcNMjUxMTA0MjIwMDI3WhcNMjUxMTA1MjIwMDI3WjAzMTEwLwYDVQQD
EygzOGJkZDkwZmZlNzg5OWUxYjRiOTFkMGZlYTk0ZTA1Mjg5N2JhOWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0oXcJ4jNTYJE/saB9y696Xnf5SX
94woK/solAX+C65+AoYKOvbry6O5l3yJ7LssISSv85RdPF4pwFwFKdGBkpD4yE1d
X+/JK2wjPQsbiHJh/ssDiB40spfFg6MQ2veNojL2gOHX2L5lcU1kwiAXZi39uTzc
JJu+JEAOOeIjYvfg23NKCRcy0mqkzQwbPXW/UejHF3HCyl24DUtSG1Qn9C0ekebV
SFMPwJhTibyJAnaxF/cCFON8vQwK9i4kPBsNJ2BPmzwz5uC+U70yzpBMtFCwc540
94weVPT4VrQ8SdzntiqLuKcXFm2CHRbNzjYd/sCuvxwrEs2c0sVzbytOzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDi92Q/+eJnhtLkdD+qU4FKJe6nfMB8GA1UdIwQY
MBaAFKizEATfE1qhqLlDAz2xRpGxGmPdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUxNUUJOOFRXcUdvdVVNRFBiRkdrYkVhWTkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS81ZTIzYWUtNjMzOC00OGRkLWEzMDQt
YzJhNDNiMDgwZDZmLzEvcUxNUUJOOFRXcUdvdVVNRFBiRkdrYkVhWTkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS81ZTIzYWUtNjMzOC00OGRkLWEzMDQtYzJhNDNiMDgwZDZm
LzEvcUxNUUJOOFRXcUdvdVVNRFBiRkdrYkVhWTkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXp5TR6LW
gAmNI1dxz/0/S/wYQLx69tuyphdqxHP/rkkTStiW2Wj6oOCiSl/xVZeDvg6KcdnD
yA8slYEra9qYxv2hp8YNa1roTTeHbdnwcy7RxNdzFk13JN4nQ3kT9FSY3S8zPPFl
CcfVfq6GDDS8ysCkOyywLBcXhDIwIcUMyOFhIL8TggH5bnIzYnia3KpVv8puGa+G
Xqe8cOsQpSay1iYKnklvpDLkHwUQCJDc9Bu9RcBm7eE1SNlrAl4ZaiTbPDFy2Z0G
T1wCDA4c5a2VoVOEazB9vf/sG2/4RU6FdD+Qzu0NwMPJWIgsd9W/S3q9p7TY7gOt
WEM2E48H8rpnMQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:48:48 2025 by rpki-client