Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.mft
File: QMV_fAvv5jtgBOlE32hMnVHkaPM.mft (raw, json)
Hash identifier: +hCQf7ZwYaquWAA5Fktt/p7XafgIAsf+zdQbp2dxzE8=
Subject key identifier: 92:07:AA:CF:E3:F1:92:BA:90:F3:CA:04:A6:7A:24:FD:1A:85:BC:EA
Authority key identifier: 40:C5:7F:7C:0B:EF:E6:3B:60:04:E9:44:DF:68:4C:9D:51:E4:68:F3
Certificate issuer: /CN=40c57f7c0befe63b6004e944df684c9d51e468f3
Certificate serial: 019A71B8D3D9E04F6B4FB46704B52AA52E74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QMV_fAvv5jtgBOlE32hMnVHkaPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.mft
Manifest number: 0AC1
Signing time: Tue 11 Nov 2025 07:02:09 +0000
Manifest this update: Tue 11 Nov 2025 07:02:09 +0000
Manifest next update: Wed 12 Nov 2025 07:02:09 +0000
Files and hashes: 1: QMV_fAvv5jtgBOlE32hMnVHkaPM.crl (hash: S1ebWsSYoJHgL42P+OMgLZmJwymUGGd8C/+Q0dNsbQw=)
2: VtNDBe4WLUvuXuHOTlAK7Ldf5W4.roa (hash: 2/Ux5k6jwyAwcxnEpPd/SFbt5+kWg1F4N3TK8J41W34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QMV_fAvv5jtgBOlE32hMnVHkaPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:d3:d9:e0:4f:6b:4f:b4:67:04:b5:2a:a5:2e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40c57f7c0befe63b6004e944df684c9d51e468f3
Validity
Not Before: Nov 11 07:02:09 2025 GMT
Not After : Nov 12 07:02:09 2025 GMT
Subject: CN=9207aacfe3f192ba90f3ca04a67a24fd1a85bcea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c4:f7:e9:b7:4b:aa:25:25:6a:ba:80:ae:0f:
f5:10:7b:69:3d:7f:92:57:c9:92:fe:ce:a4:ce:0b:
56:c9:35:6a:7f:77:ac:24:72:79:ba:3b:97:8d:af:
42:0d:0a:05:52:f9:73:dd:43:15:73:0b:c4:2f:76:
f9:80:2c:e4:31:fc:7a:b0:86:d8:4d:e1:b0:d0:db:
fa:14:c6:ac:1f:68:ce:65:f2:25:0a:2d:e5:0d:d1:
53:04:38:f4:8f:00:9b:14:e9:c0:b5:29:e7:f0:aa:
d1:c7:2a:97:33:eb:8e:a0:b0:6f:15:a5:80:ce:be:
b7:ce:fb:66:94:50:d1:48:87:4b:3c:8c:15:33:72:
68:61:4f:10:33:16:81:1d:d7:ca:77:22:3c:10:b2:
ce:67:97:c3:dd:8b:3a:72:42:bb:19:d9:47:01:d9:
87:c6:00:6e:56:52:23:9f:5e:c4:34:48:d7:d5:83:
48:57:43:75:e3:9b:d6:e6:ca:37:9e:b8:43:ca:bd:
81:fb:cc:d3:1e:77:78:f0:4f:ef:c0:df:4d:1d:b7:
2c:de:70:df:d0:7f:7d:d0:d5:b9:e9:7b:41:c8:f2:
f7:23:6b:22:b8:70:dd:05:35:d7:50:d6:fd:cd:70:
c9:5b:d1:1d:d4:d4:37:fe:00:16:4a:3d:17:61:37:
e5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:07:AA:CF:E3:F1:92:BA:90:F3:CA:04:A6:7A:24:FD:1A:85:BC:EA
X509v3 Authority Key Identifier:
keyid:40:C5:7F:7C:0B:EF:E6:3B:60:04:E9:44:DF:68:4C:9D:51:E4:68:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QMV_fAvv5jtgBOlE32hMnVHkaPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:b6:46:33:12:bf:bf:a9:3b:3b:fb:3c:11:51:e0:bf:24:1d:
99:4c:48:9c:bb:fc:a7:a6:75:f0:78:c1:6f:4c:9c:57:01:a3:
3d:6e:9b:ab:ea:b6:23:ed:65:d7:e0:90:52:00:46:6a:ce:a7:
ab:be:0b:94:e6:cb:e8:44:23:e9:59:a2:5b:00:fe:02:b6:dc:
84:cf:82:4c:43:8d:fa:29:8a:95:45:ed:d3:5f:5c:1c:24:41:
91:ce:8e:10:94:ae:74:7a:67:3a:e8:8a:94:f2:25:06:d7:15:
44:84:9d:05:26:dc:17:cf:b9:fe:c9:1b:4d:d9:4b:d2:4b:64:
61:bf:9d:a0:47:d2:5e:e6:86:d6:3c:95:76:ad:33:4f:91:6b:
f0:04:42:7a:82:c5:a0:53:04:8d:37:5d:b8:fc:18:df:c9:9e:
3c:c2:d4:ce:ac:10:bf:a2:32:54:0c:43:8a:0a:b9:e7:db:3a:
97:de:d9:7f:9b:b2:07:75:af:a6:8c:3d:bb:22:99:26:ae:bd:
3e:b5:22:ac:40:0b:eb:63:45:37:b7:91:df:a3:8b:3b:4a:c6:
3a:12:74:a0:08:42:a1:e4:d1:67:7d:af:7e:46:b2:a9:50:30:
cc:df:2c:ea:26:18:c4:f1:18:50:9d:83:be:77:b2:0f:b0:1b:
b0:21:eb:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:08 2025 by rpki-client