Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/06f515-5f77-48aa-8905-f5a86cbd44ce/1/QVUIeoGEi_ezf_i-WXUdeUQNgRY.mft
File: QVUIeoGEi_ezf_i-WXUdeUQNgRY.mft (raw, json)
Hash identifier: HkDjk5nuZJ7BtLlU/w4Pr2V0rf+sTbRFDIKuy8BUa0Y=
Subject key identifier: 9C:A4:DF:9D:BA:49:6F:B8:53:49:79:B4:3B:98:B3:6D:B4:9A:A6:82
Authority key identifier: 41:55:08:7A:81:84:8B:F7:B3:7F:F8:BE:59:75:1D:79:44:0D:81:16
Certificate issuer: /CN=4155087a81848bf7b37ff8be59751d79440d8116
Certificate serial: 019A71135860EA6E16606421185D153B6F15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVUIeoGEi_ezf_i-WXUdeUQNgRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/06f515-5f77-48aa-8905-f5a86cbd44ce/1/QVUIeoGEi_ezf_i-WXUdeUQNgRY.mft
Manifest number: 067A
Signing time: Tue 11 Nov 2025 04:01:24 +0000
Manifest this update: Tue 11 Nov 2025 04:01:24 +0000
Manifest next update: Wed 12 Nov 2025 04:01:24 +0000
Files and hashes: 1: KZYzQ7jFzWYYwYRhQ-ZJNAP7g7s.roa (hash: bwXn17r3CjUQeiw9goACwMSayH6c9Rjo8urDQ0LO3DQ=)
2: QVUIeoGEi_ezf_i-WXUdeUQNgRY.crl (hash: 22mzTUrzzfpnCJkUhRYwd6pp7FlNYoBYvWIf0VPxByI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/06f515-5f77-48aa-8905-f5a86cbd44ce/1/QVUIeoGEi_ezf_i-WXUdeUQNgRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/06f515-5f77-48aa-8905-f5a86cbd44ce/1/QVUIeoGEi_ezf_i-WXUdeUQNgRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVUIeoGEi_ezf_i-WXUdeUQNgRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:58:60:ea:6e:16:60:64:21:18:5d:15:3b:6f:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4155087a81848bf7b37ff8be59751d79440d8116
Validity
Not Before: Nov 11 04:01:24 2025 GMT
Not After : Nov 12 04:01:24 2025 GMT
Subject: CN=9ca4df9dba496fb8534979b43b98b36db49aa682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:52:79:bb:bb:1a:0c:41:a0:ba:ba:d5:ec:72:
30:d4:d9:b0:07:59:49:fd:e5:70:44:29:2a:75:8b:
fe:3d:6d:4e:c2:21:42:a5:05:c8:69:25:b3:18:2b:
aa:0d:ef:00:b0:16:4c:00:35:3e:09:e1:58:a5:3a:
7c:f3:ba:e5:51:86:06:e4:24:d7:35:1c:75:56:09:
36:66:f7:14:de:0a:4d:1c:3d:e8:b4:1c:4d:3c:a5:
03:33:4b:9e:d2:6d:0b:93:c7:64:46:df:28:77:c0:
6f:b7:21:ea:40:a9:f2:d8:18:3d:03:f9:48:88:9b:
1a:9c:08:52:65:9d:4b:05:db:f8:0d:f5:44:08:40:
26:c8:a2:26:f1:a9:0d:02:42:c6:61:7d:e7:a1:42:
49:dc:f0:0a:e1:3d:8a:9b:7e:32:ed:e3:ef:16:ee:
ed:53:c9:bc:69:3d:ba:c9:33:10:dc:db:5b:55:0a:
aa:0b:fe:2f:85:6e:21:a2:fa:d0:7c:e2:ac:9e:ba:
93:24:06:b1:14:08:d2:1f:77:a3:89:da:05:8d:08:
63:51:e1:ca:65:67:86:a6:82:71:43:a7:a1:c1:13:
fd:9a:4a:c9:15:a0:33:b9:e0:d3:25:01:32:bd:9f:
8c:ee:8e:7a:de:bb:f3:12:1a:32:77:75:a0:fa:b7:
e1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:A4:DF:9D:BA:49:6F:B8:53:49:79:B4:3B:98:B3:6D:B4:9A:A6:82
X509v3 Authority Key Identifier:
keyid:41:55:08:7A:81:84:8B:F7:B3:7F:F8:BE:59:75:1D:79:44:0D:81:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVUIeoGEi_ezf_i-WXUdeUQNgRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/06f515-5f77-48aa-8905-f5a86cbd44ce/1/QVUIeoGEi_ezf_i-WXUdeUQNgRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/06f515-5f77-48aa-8905-f5a86cbd44ce/1/QVUIeoGEi_ezf_i-WXUdeUQNgRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:78:bc:54:c6:21:40:1a:02:d6:8f:f5:9c:84:c7:2e:37:5c:
82:6f:f9:9a:32:0f:2b:da:1d:e8:14:eb:d9:1d:84:39:81:c3:
67:78:a2:0d:bb:0a:69:8a:43:43:83:43:b8:28:d9:6b:6d:ec:
e5:d6:66:e1:03:f0:ca:7e:b6:cf:ab:b0:55:ed:a9:48:64:21:
e9:ee:b8:14:0a:fc:fc:96:48:e8:79:10:72:a6:74:9a:ae:10:
4a:dc:74:c4:8d:fd:e6:61:0c:79:8e:c7:3c:a7:c7:46:7e:be:
72:bd:04:ff:7e:3b:bc:f5:fd:ae:c7:13:f8:d4:2c:01:83:04:
51:56:f1:ca:a4:d0:cd:ae:7b:d1:23:46:bd:f0:96:cc:e3:7e:
d1:08:19:0e:2c:13:e4:80:30:e4:e3:87:d5:b9:de:11:9c:ac:
e5:a0:2e:0d:2f:51:3b:85:b6:a7:92:ab:25:e1:6e:3d:a1:70:
ed:40:e0:bf:6e:68:4c:90:f2:db:91:e7:21:02:35:cd:20:e1:
af:97:1a:70:2d:76:ae:32:23:0c:02:df:92:60:6f:b0:be:b9:
29:41:b2:af:c0:1b:ea:5d:f8:99:e6:51:f1:66:c6:be:e3:64:
cd:ad:a0:4f:f2:d1:e8:3d:2d:22:fe:9b:a6:12:d3:20:fb:43:
59:84:55:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxE1hg6m4WYGQhGF0VO28VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxNTUwODdhODE4NDhiZjdiMzdmZjhiZTU5NzUxZDc5NDQw
ZDgxMTYwHhcNMjUxMTExMDQwMTI0WhcNMjUxMTEyMDQwMTI0WjAzMTEwLwYDVQQD
Eyg5Y2E0ZGY5ZGJhNDk2ZmI4NTM0OTc5YjQzYjk4YjM2ZGI0OWFhNjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplJ5u7saDEGgurrV7HIw1NmwB1lJ
/eVwRCkqdYv+PW1OwiFCpQXIaSWzGCuqDe8AsBZMADU+CeFYpTp887rlUYYG5CTX
NRx1Vgk2ZvcU3gpNHD3otBxNPKUDM0ue0m0Lk8dkRt8od8BvtyHqQKny2Bg9A/lI
iJsanAhSZZ1LBdv4DfVECEAmyKIm8akNAkLGYX3noUJJ3PAK4T2Km34y7ePvFu7t
U8m8aT26yTMQ3NtbVQqqC/4vhW4hovrQfOKsnrqTJAaxFAjSH3ejidoFjQhjUeHK
ZWeGpoJxQ6ehwRP9mkrJFaAzueDTJQEyvZ+M7o563rvzEhoyd3Wg+rfhAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJyk3526SW+4U0l5tDuYs220mqaCMB8GA1UdIwQY
MBaAFEFVCHqBhIv3s3/4vll1HXlEDYEWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVZVSWVvR0VpX2V6Zl9pLVdYVWRlVVFOZ1JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8wNmY1MTUtNWY3Ny00OGFhLTg5MDUt
ZjVhODZjYmQ0NGNlLzEvUVZVSWVvR0VpX2V6Zl9pLVdYVWRlVVFOZ1JZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8wNmY1MTUtNWY3Ny00OGFhLTg5MDUtZjVhODZjYmQ0NGNl
LzEvUVZVSWVvR0VpX2V6Zl9pLVdYVWRlVVFOZ1JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe3i8VMYh
QBoC1o/1nITHLjdcgm/5mjIPK9od6BTr2R2EOYHDZ3iiDbsKaYpDQ4NDuCjZa23s
5dZm4QPwyn62z6uwVe2pSGQh6e64FAr8/JZI6HkQcqZ0mq4QStx0xI395mEMeY7H
PKfHRn6+cr0E/347vPX9rscT+NQsAYMEUVbxyqTQza570SNGvfCWzON+0QgZDiwT
5IAw5OOH1bneEZys5aAuDS9RO4W2p5KrJeFuPaFw7UDgv25oTJDy25HnIQI1zSDh
r5cacC12rjIjDALfkmBvsL65KUGyr8Ab6l34meZR8WbGvuNkza2gT/LR6D0tIv6b
phLTIPtDWYRVZA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:09 2025 by rpki-client