Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.mft
File: QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.mft (raw, json)
Hash identifier: LfWW2i9Lln+5kOjzbOmLPwycnYHPtxCMByJVm7J/w6A=
Subject key identifier: 84:EB:34:CD:37:A2:A1:47:52:BA:E2:ED:6B:B5:28:C5:F1:2E:A5:78
Authority key identifier: 40:C3:D3:7B:E4:35:A9:C3:3F:1C:63:E5:0D:0D:64:64:ED:16:10:04
Certificate issuer: /CN=40c3d37be435a9c33f1c63e50d0d6464ed161004
Certificate serial: 0197715167A0FF46234BCC3EB86C82248A5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.mft
Manifest number: 14EC
Signing time: Sun 15 Jun 2025 02:00:49 +0000
Manifest this update: Sun 15 Jun 2025 02:00:49 +0000
Manifest next update: Mon 16 Jun 2025 02:00:49 +0000
Files and hashes: 1: I3asWb0Ke_YTZ9x8-oMXPECbM9c.roa (hash: DFO6kXzPePgIeZm2V5GpwnQuioD5uOOrmUgP/RCLs14=)
2: QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.crl (hash: 0u0D0tf7xyFN/EDIA6Tuk1xAiY/MQ3Km+0d+VC6Od5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 02:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:51:67:a0:ff:46:23:4b:cc:3e:b8:6c:82:24:8a:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40c3d37be435a9c33f1c63e50d0d6464ed161004
Validity
Not Before: Jun 15 02:00:49 2025 GMT
Not After : Jun 16 02:00:49 2025 GMT
Subject: CN=84eb34cd37a2a14752bae2ed6bb528c5f12ea578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4b:19:09:9d:0b:e5:44:b8:d0:ec:45:2a:43:
8a:81:07:ad:72:b0:53:f1:81:ae:88:07:97:00:bd:
01:0a:9e:65:e6:58:c9:b1:19:5e:24:4a:df:22:59:
6a:d3:91:68:a3:4b:1a:f0:e1:d7:77:d5:b6:30:c1:
21:66:c4:cf:a1:9c:65:ea:73:f5:39:d2:45:31:e0:
79:fd:87:d5:f0:73:73:f5:21:b0:eb:7e:e1:34:45:
e0:1f:72:e5:a1:54:0d:20:fa:69:65:89:c6:71:f4:
b1:40:7b:eb:a1:27:ca:22:69:03:5f:c2:f8:29:1f:
23:36:08:46:93:f2:82:e6:92:2b:e0:7b:7c:2f:ce:
08:fd:ac:13:8c:b8:5c:2d:54:6e:ac:b8:4a:4d:f2:
a3:a2:cc:11:9a:31:18:36:fb:cf:50:ce:3e:69:f2:
74:a4:ce:e5:28:2c:2a:0c:10:ea:a6:4b:78:c2:5b:
ca:83:93:71:cc:9d:a1:95:41:9e:f5:b6:e0:59:75:
7c:af:c9:a2:82:ae:53:ae:00:4f:a5:0f:05:61:4a:
39:d9:b3:1e:11:bc:33:17:05:f6:9f:59:60:34:13:
2b:6b:a5:25:7f:1e:fd:d8:63:8e:57:e4:01:3a:00:
e3:72:3a:b2:27:47:f6:df:49:16:dc:60:53:2d:7c:
77:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:EB:34:CD:37:A2:A1:47:52:BA:E2:ED:6B:B5:28:C5:F1:2E:A5:78
X509v3 Authority Key Identifier:
keyid:40:C3:D3:7B:E4:35:A9:C3:3F:1C:63:E5:0D:0D:64:64:ED:16:10:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:5a:82:0b:2e:13:2a:c9:32:3f:13:ae:69:60:9a:7d:df:ca:
d3:44:30:00:57:ea:47:93:e2:ac:1b:0c:1f:45:39:48:74:98:
15:39:40:fa:fd:6f:54:2f:81:5e:d5:81:21:0d:18:05:ba:3d:
80:37:74:3a:cd:2f:2c:49:f4:2f:59:19:d1:e5:19:7b:93:7b:
2c:a5:2b:00:40:59:85:7c:36:0a:00:b6:93:8b:03:6d:dd:93:
10:85:86:48:c1:0a:4e:4a:49:9f:07:88:4a:91:66:c1:d5:b5:
d7:92:43:53:9c:e3:ca:e6:0b:9b:09:0c:a8:aa:a6:31:92:9c:
bf:a5:aa:98:ba:7b:7d:69:55:13:f3:71:e8:21:92:0a:17:0c:
d6:d6:be:ab:c6:67:03:20:0f:53:db:3c:b3:9d:22:cc:8c:e6:
15:57:b0:bd:29:a0:9c:13:c7:5a:14:1e:14:c4:0a:91:1c:4e:
43:28:16:e5:72:45:e5:6f:a6:ea:85:a4:78:78:e1:bb:88:db:
ec:39:9d:3f:a5:33:74:b1:f5:26:f8:d9:74:f8:42:44:62:d1:
ef:d7:99:59:96:12:d5:c8:81:16:ad:56:37:09:b4:8e:09:ad:
ea:01:b4:45:86:90:c3:13:3a:cb:e8:e2:c1:b9:54:a9:d4:9b:
13:6c:0d:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdxUWeg/0YjS8w+uGyCJIpdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwYzNkMzdiZTQzNWE5YzMzZjFjNjNlNTBkMGQ2NDY0ZWQx
NjEwMDQwHhcNMjUwNjE1MDIwMDQ5WhcNMjUwNjE2MDIwMDQ5WjAzMTEwLwYDVQQD
Eyg4NGViMzRjZDM3YTJhMTQ3NTJiYWUyZWQ2YmI1MjhjNWYxMmVhNTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0sZCZ0L5US40OxFKkOKgQetcrBT
8YGuiAeXAL0BCp5l5ljJsRleJErfIllq05Foo0sa8OHXd9W2MMEhZsTPoZxl6nP1
OdJFMeB5/YfV8HNz9SGw637hNEXgH3LloVQNIPppZYnGcfSxQHvroSfKImkDX8L4
KR8jNghGk/KC5pIr4Ht8L84I/awTjLhcLVRurLhKTfKjoswRmjEYNvvPUM4+afJ0
pM7lKCwqDBDqpkt4wlvKg5NxzJ2hlUGe9bbgWXV8r8migq5TrgBPpQ8FYUo52bMe
EbwzFwX2n1lgNBMra6Ulfx792GOOV+QBOgDjcjqyJ0f230kW3GBTLXx3vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFITrNM03oqFHUrri7Wu1KMXxLqV4MB8GA1UdIwQY
MBaAFEDD03vkNanDPxxj5Q0NZGTtFhAEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU1QVGUtUTFxY01fSEdQbERRMWtaTzBXRUFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi83ZTNjN2YtMjE4NC00MDNkLTgwY2Yt
NmU0YjNjOTJhODI3LzEvUU1QVGUtUTFxY01fSEdQbERRMWtaTzBXRUFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi83ZTNjN2YtMjE4NC00MDNkLTgwY2YtNmU0YjNjOTJhODI3
LzEvUU1QVGUtUTFxY01fSEdQbERRMWtaTzBXRUFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvlqCCy4T
KskyPxOuaWCafd/K00QwAFfqR5PirBsMH0U5SHSYFTlA+v1vVC+BXtWBIQ0YBbo9
gDd0Os0vLEn0L1kZ0eUZe5N7LKUrAEBZhXw2CgC2k4sDbd2TEIWGSMEKTkpJnweI
SpFmwdW115JDU5zjyuYLmwkMqKqmMZKcv6WqmLp7fWlVE/Nx6CGSChcM1ta+q8Zn
AyAPU9s8s50izIzmFVewvSmgnBPHWhQeFMQKkRxOQygW5XJF5W+m6oWkeHjhu4jb
7DmdP6UzdLH1JvjZdPhCRGLR79eZWZYS1ciBFq1WNwm0jgmt6gG0RYaQwxM6y+ji
wblUqdSbE2wNhQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 12:37:40 2025 by rpki-client