Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft
File: QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft (raw, json)
Hash identifier: L4NWpyTWVBEcoEOSz1v/Gn/RjmmiKjxQwIn/4B8MYxg=
Subject key identifier: 97:B4:8B:E1:FA:03:F7:37:C0:EE:1F:F8:D5:EE:2D:37:97:83:9D:82
Authority key identifier: 40:FA:C6:A3:2F:E4:BA:A7:D8:9B:91:EC:51:65:A3:D9:66:88:E1:44
Certificate issuer: /CN=40fac6a32fe4baa7d89b91ec5165a3d96688e144
Certificate serial: 019A71B822AA9E40A5347541E5B6C4990154
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft
Manifest number: 0F64
Signing time: Tue 11 Nov 2025 07:01:24 +0000
Manifest this update: Tue 11 Nov 2025 07:01:24 +0000
Manifest next update: Wed 12 Nov 2025 07:01:24 +0000
Files and hashes: 1: 4hn1wVatZQI4O44VQ9afg3_3YCE.roa (hash: Wip87SKY/zyuxOVUXFbAARGlH7AAphh/zZD7B0INIf4=)
2: QPrGoy_kuqfYm5HsUWWj2WaI4UQ.crl (hash: qaVrsaae9/ANofBAYvesyQfYAIR9L1z6VJktLIVC2o4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:22:aa:9e:40:a5:34:75:41:e5:b6:c4:99:01:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40fac6a32fe4baa7d89b91ec5165a3d96688e144
Validity
Not Before: Nov 11 07:01:24 2025 GMT
Not After : Nov 12 07:01:24 2025 GMT
Subject: CN=97b48be1fa03f737c0ee1ff8d5ee2d3797839d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a6:d1:92:ad:fb:b9:7c:2c:25:e6:48:4a:1b:
f7:cb:43:a5:62:31:ca:a2:85:00:2b:ac:c9:fe:8f:
a7:e2:68:f6:71:81:85:80:54:1d:4d:cc:66:ca:de:
36:8e:dc:30:e0:a9:e3:30:ea:e3:6f:93:f2:4d:01:
1d:83:1a:fe:8f:68:62:df:a5:7c:77:ab:70:9a:1a:
10:f8:33:f4:19:aa:b1:98:b0:a1:f7:06:5d:c0:ae:
4b:3c:55:6d:22:35:26:4c:a5:24:44:7a:b7:83:1a:
99:da:b6:c3:f5:6b:ea:31:d9:92:e9:e7:96:52:1f:
61:af:7f:9b:d2:71:29:83:21:e4:66:e3:74:94:af:
51:ee:e5:df:93:1e:b9:d1:a8:bd:d5:75:dc:56:95:
2d:4e:6b:f1:c8:45:16:fa:c0:3d:89:4f:8b:66:6e:
74:54:1b:59:bf:8e:01:6f:13:ca:18:d0:0f:8d:e2:
5c:99:62:a2:8f:20:40:60:82:8e:3c:f5:e5:45:5f:
1b:ef:e7:6b:c2:73:ff:12:df:94:bc:61:90:ff:d0:
f1:b4:11:f2:af:11:80:27:8e:ff:83:61:b7:09:00:
c6:87:27:d0:c1:44:fa:c6:97:7b:29:0a:f5:13:22:
9b:a8:83:24:be:f8:b0:17:7b:71:a1:e2:b8:cc:29:
10:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B4:8B:E1:FA:03:F7:37:C0:EE:1F:F8:D5:EE:2D:37:97:83:9D:82
X509v3 Authority Key Identifier:
keyid:40:FA:C6:A3:2F:E4:BA:A7:D8:9B:91:EC:51:65:A3:D9:66:88:E1:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:95:0f:3a:a1:d0:33:6e:bf:d5:e2:8d:ac:ca:3b:69:06:14:
80:6b:8c:01:1f:65:12:92:87:f4:30:78:87:18:67:37:41:ad:
c6:d4:56:d7:4c:06:aa:ba:a1:d4:ca:27:a3:ba:94:e4:8b:9b:
3d:06:ee:bd:a4:2e:b6:0b:03:9b:fe:60:a8:4d:56:31:6e:71:
79:40:40:fb:7b:57:5b:a7:04:b7:2c:3c:ea:88:81:1f:47:17:
9f:b2:f5:49:32:0d:17:08:a9:b7:02:7f:ca:92:6c:e8:9c:bc:
4a:bc:d0:6c:6c:92:f6:db:71:29:7e:f5:1e:6d:88:6b:41:be:
28:31:2a:ef:bc:47:12:40:a7:7e:1f:f4:c1:19:5d:d1:a2:b2:
19:72:bd:ca:d0:53:1d:e0:ef:de:e3:af:7c:b1:fa:7e:ab:ce:
04:36:89:86:0a:8d:39:a0:10:72:98:50:e7:82:81:41:89:c0:
63:04:5d:43:c3:fb:03:45:2f:c3:8d:5e:94:61:c0:14:de:36:
90:90:89:04:d5:20:c7:5e:20:8a:39:51:07:c0:df:3c:b7:f4:
34:2c:a1:96:a4:8e:78:2b:2d:e8:95:0c:49:35:9b:84:3f:b2:
72:e2:57:47:31:c5:1c:58:d6:aa:ea:66:22:dd:99:61:4d:5c:
3a:76:27:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:42 2025 by rpki-client