Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft
File: QeQtgw7KmKUz9DctoWnJx5LDk7I.mft (raw, json)
Hash identifier: h07iwmVb9URVrfPHzll4Oh4ScG7PJkwMBfdAhQFDbj8=
Subject key identifier: B4:F4:96:54:8B:BB:26:A1:AF:84:F1:FA:C1:24:7F:8A:D2:F7:33:BF
Authority key identifier: 41:E4:2D:83:0E:CA:98:A5:33:F4:37:2D:A1:69:C9:C7:92:C3:93:B2
Certificate issuer: /CN=41e42d830eca98a533f4372da169c9c792c393b2
Certificate serial: 019A545174AF6299DAA16643E55642811E49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QeQtgw7KmKUz9DctoWnJx5LDk7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 14:00:15 +0000
Manifest this update: Wed 05 Nov 2025 14:00:15 +0000
Manifest next update: Thu 06 Nov 2025 14:00:15 +0000
Files and hashes: 1: NcqRg7UrtJE68j0DY1PSHwYSu_4.roa (hash: O3F0k70QFpKk+LVxYcWwtpQ0YuG4zUsaxS4NlfXzPQ0=)
2: QeQtgw7KmKUz9DctoWnJx5LDk7I.crl (hash: BvWjXC5kCxx9ZIXMMhKhlkMjZX0+/mg9LmDEXRZvnt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/QeQtgw7KmKUz9DctoWnJx5LDk7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:51:74:af:62:99:da:a1:66:43:e5:56:42:81:1e:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41e42d830eca98a533f4372da169c9c792c393b2
Validity
Not Before: Nov 5 14:00:15 2025 GMT
Not After : Nov 6 14:00:15 2025 GMT
Subject: CN=b4f496548bbb26a1af84f1fac1247f8ad2f733bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7e:9e:03:d0:ef:65:d0:6e:64:74:d3:91:8c:
88:1f:2d:94:7f:ae:e3:10:f4:c2:89:78:fb:73:6a:
f8:7c:c3:0c:ed:f2:27:3a:01:89:cf:fd:f2:6d:7c:
fb:bc:9b:4b:bd:1d:1d:e4:4a:b8:bf:72:28:e4:1d:
1c:fe:13:d8:7a:14:2a:ef:eb:bf:0f:22:f6:ab:8d:
06:c1:9c:78:e9:32:17:f3:a1:b2:3b:f0:db:55:1c:
27:e7:5d:1e:1d:bb:33:23:84:9d:85:c8:a0:73:80:
8b:3d:28:ab:ac:39:41:6e:0f:d6:e2:1e:88:22:fa:
5b:ab:27:fc:32:54:40:c2:b8:1a:04:41:10:6d:8f:
f8:4d:f5:49:a2:17:e9:ca:8a:b2:0d:52:17:1c:78:
48:6d:c9:be:38:14:1c:48:47:2e:20:bb:7f:a5:5c:
10:b5:3a:b3:ef:06:23:78:f8:d8:f6:51:7f:3c:6d:
d3:61:5c:0a:b9:1c:07:da:64:fe:0b:59:01:da:63:
ae:08:24:05:26:a6:82:80:d3:92:13:50:14:3c:2c:
ba:c0:f9:b3:d5:00:26:1d:b9:3c:a4:54:2c:9d:3a:
2b:15:42:ef:86:62:8e:b7:a6:d1:2a:ea:62:9f:07:
60:03:b4:de:b8:a8:08:59:09:e5:e1:94:bb:68:ad:
d2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F4:96:54:8B:BB:26:A1:AF:84:F1:FA:C1:24:7F:8A:D2:F7:33:BF
X509v3 Authority Key Identifier:
keyid:41:E4:2D:83:0E:CA:98:A5:33:F4:37:2D:A1:69:C9:C7:92:C3:93:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeQtgw7KmKUz9DctoWnJx5LDk7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:0d:b7:4a:29:ba:09:f5:e9:02:eb:c3:5d:78:0d:e6:c2:98:
12:f4:f6:0f:c9:7a:99:22:8a:24:53:ec:83:2b:97:c0:4a:fa:
15:8b:37:37:21:54:23:24:18:16:df:f9:e0:17:74:61:2e:36:
c9:28:82:96:52:ca:c3:5e:d2:77:d8:50:08:dc:32:47:2e:1d:
94:cf:6f:9c:e9:44:f7:30:68:f6:0c:2c:83:d3:9f:2e:f3:a4:
64:45:16:23:5e:b6:38:33:86:65:44:e3:b8:42:1e:24:d4:24:
78:d9:1a:b8:27:d5:91:42:9e:4b:c9:df:27:d1:cf:cf:1f:68:
a8:41:ba:29:1e:2a:8b:53:c0:76:e3:58:39:5a:89:05:cc:81:
e8:4c:28:94:4b:5d:da:65:34:f8:09:a4:22:9f:a2:eb:3a:a5:
fa:54:77:b1:cf:bb:1b:34:aa:e7:6d:a8:15:ae:12:29:d2:ac:
1d:85:e3:58:6c:c5:19:7d:d6:5b:4e:08:c3:c6:a4:d0:9d:f1:
af:5b:b3:fd:d9:0f:51:f5:ed:ce:f9:7a:58:97:4c:0a:ff:e9:
c5:9b:a4:34:14:f3:72:7d:62:2c:c4:c2:80:11:2a:e8:e3:58:
b1:f5:21:be:ea:bb:19:ba:d5:3f:ae:85:db:bf:ff:96:bc:dd:
37:8e:ed:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpUUXSvYpnaoWZD5VZCgR5JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxZTQyZDgzMGVjYTk4YTUzM2Y0MzcyZGExNjljOWM3OTJj
MzkzYjIwHhcNMjUxMTA1MTQwMDE1WhcNMjUxMTA2MTQwMDE1WjAzMTEwLwYDVQQD
EyhiNGY0OTY1NDhiYmIyNmExYWY4NGYxZmFjMTI0N2Y4YWQyZjczM2JmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvn6eA9DvZdBuZHTTkYyIHy2Uf67j
EPTCiXj7c2r4fMMM7fInOgGJz/3ybXz7vJtLvR0d5Eq4v3Io5B0c/hPYehQq7+u/
DyL2q40GwZx46TIX86GyO/DbVRwn510eHbszI4Sdhcigc4CLPSirrDlBbg/W4h6I
Ivpbqyf8MlRAwrgaBEEQbY/4TfVJohfpyoqyDVIXHHhIbcm+OBQcSEcuILt/pVwQ
tTqz7wYjePjY9lF/PG3TYVwKuRwH2mT+C1kB2mOuCCQFJqaCgNOSE1AUPCy6wPmz
1QAmHbk8pFQsnTorFULvhmKOt6bRKupinwdgA7TeuKgIWQnl4ZS7aK3SOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLT0llSLuyahr4Tx+sEkf4rS9zO/MB8GA1UdIwQY
MBaAFEHkLYMOypilM/Q3LaFpyceSw5OyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWVRdGd3N0ttS1V6OURjdG9Xbkp4NUxEazdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC80OTU2ZGYtOTFkYy00NDkwLTgzMzMt
MWFkNjFlZGUwYTRhLzEvUWVRdGd3N0ttS1V6OURjdG9Xbkp4NUxEazdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC80OTU2ZGYtOTFkYy00NDkwLTgzMzMtMWFkNjFlZGUwYTRh
LzEvUWVRdGd3N0ttS1V6OURjdG9Xbkp4NUxEazdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALA23Sim6
CfXpAuvDXXgN5sKYEvT2D8l6mSKKJFPsgyuXwEr6FYs3NyFUIyQYFt/54Bd0YS42
ySiCllLKw17Sd9hQCNwyRy4dlM9vnOlE9zBo9gwsg9OfLvOkZEUWI162ODOGZUTj
uEIeJNQkeNkauCfVkUKeS8nfJ9HPzx9oqEG6KR4qi1PAduNYOVqJBcyB6EwolEtd
2mU0+AmkIp+i6zql+lR3sc+7GzSq522oFa4SKdKsHYXjWGzFGX3WW04Iw8ak0J3x
r1uz/dkPUfXtzvl6WJdMCv/pxZukNBTzcn1iLMTCgBEq6ONYsfUhvuq7GbrVP66F
27//lrzdN47trw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 16:58:58 2025 by rpki-client