Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft
File: QNVbeINqk_tvnsn6enntm4vqK6E.mft (raw, json)
Hash identifier: E/Oo/pjB4C1XPYRXJrylETKTtbJkgm5t1nyW88n7lR8=
Subject key identifier: F9:09:EE:77:76:B5:40:EB:CF:67:3A:D8:9B:FA:1A:C0:7A:37:AE:9E
Authority key identifier: 40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1
Certificate issuer: /CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1
Certificate serial: 019A183D2617CA72E6422DE51378AD8B4DA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft
Manifest number: 16FA
Signing time: Fri 24 Oct 2025 22:00:51 +0000
Manifest this update: Fri 24 Oct 2025 22:00:51 +0000
Manifest next update: Sat 25 Oct 2025 22:00:51 +0000
Files and hashes: 1: FM1ZToDPfltq70sgYZxUZRvW9lw.roa (hash: gobn7d36Th+HhvhLfnOuWn7jGYlz7+noOsxaYpWSY6w=)
2: QNVbeINqk_tvnsn6enntm4vqK6E.crl (hash: 8Tf94lbs4T3oxNJhSpnvEiXWUkeBQYD21vjYjwBdaBk=)
3: QOyV471MiAdrv1gx1_mQKqZThmQ.roa (hash: AoS7cULghj9S2ceuce/DAbxzcNkBLN2/6i/FkUDAidw=)
4: Ufx_uGX33YMRJk96-Ns3OVYoYkY.roa (hash: R6OFTPlC+5+pTqseUyT+JKWuhsqJ8TflqBO+jG6Oft8=)
5: aouWF1EL5PqaDekCOWFKRFFElco.roa (hash: meYwuUzRknXw4amv6l3WdhCHcJ6/5boQjSOQLig1VyA=)
6: t0LizRcpCedVGV7G-fII8jBvx0A.roa (hash: ZN5BTBda6bGmBj8NTopRMZUMlk+FQ8YAMSGu4VazGr8=)
7: tRjkLyLC--HaV6NcWuFGLxVHLUQ.roa (hash: W6/eiMbwnnO5tx0lNIccNziZp4esvsx84586cppqO84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 17:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:18:3d:26:17:ca:72:e6:42:2d:e5:13:78:ad:8b:4d:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1
Validity
Not Before: Oct 24 22:00:51 2025 GMT
Not After : Oct 25 22:00:51 2025 GMT
Subject: CN=f909ee7776b540ebcf673ad89bfa1ac07a37ae9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:36:8e:28:9c:56:8d:81:52:6e:49:07:ad:23:
0e:51:10:62:79:6a:d9:51:7c:6e:6b:db:75:f6:cf:
df:f1:4c:6a:21:ee:de:29:98:84:b9:fb:20:67:4b:
37:cf:b9:ba:bd:bf:8c:1f:ba:1f:69:a0:1b:13:01:
8e:66:94:e2:d7:05:75:d1:b8:75:d3:73:45:8d:6b:
96:e9:6d:6b:52:f3:28:4c:ff:54:ab:68:1f:45:0d:
65:5a:c9:61:4f:5b:83:49:01:20:49:93:0d:42:43:
51:26:d4:6e:81:e2:9a:4e:a3:26:df:a8:50:d2:73:
22:49:8a:1c:52:5f:69:66:9e:76:d1:92:32:ed:52:
fc:26:42:55:78:f0:c1:93:fe:83:67:79:33:00:c6:
a1:68:c1:d1:e2:39:91:a4:46:45:59:47:3b:65:5d:
b8:3a:ed:5d:89:cd:05:7c:05:11:07:ee:90:5b:b5:
97:d9:9b:be:e3:74:ce:a2:a2:e5:b8:b0:33:ce:81:
b3:f0:15:fe:88:1d:b2:20:84:4c:ea:ce:2f:92:cc:
ea:71:9b:14:96:8c:db:4a:9f:1d:4f:1b:3e:e6:b1:
a8:6e:a3:eb:c2:27:fd:ef:bf:b7:6d:b1:f2:80:3d:
cf:e6:ee:1e:24:18:22:91:e6:cf:02:86:26:df:da:
44:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:09:EE:77:76:B5:40:EB:CF:67:3A:D8:9B:FA:1A:C0:7A:37:AE:9E
X509v3 Authority Key Identifier:
keyid:40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:cc:5f:79:d9:ce:c9:ca:52:6f:ab:a4:c4:1b:8a:28:b2:02:
98:61:11:9d:d7:77:71:31:69:45:09:08:3d:ad:b0:3a:ab:e6:
a4:b9:9d:81:20:f7:a9:1b:c7:12:70:e0:2c:5d:d5:10:42:77:
af:41:1b:0d:4e:af:83:39:d0:a0:7c:dc:e5:7b:a0:f6:5b:ae:
07:50:4f:b6:a0:9b:fc:8f:ee:bb:00:0a:91:ba:05:40:45:aa:
06:8a:c5:cf:b3:91:2d:e0:65:dc:da:53:13:a2:41:d4:a9:a9:
08:0d:f1:16:74:a1:d6:46:0b:db:17:10:7e:62:e3:5a:b9:2c:
59:70:cc:34:ea:06:80:1b:e0:c7:a9:00:2b:1d:38:89:2b:29:
83:c7:39:fc:32:0c:38:80:29:d2:67:c3:7a:de:88:bf:e2:8f:
c3:5a:26:8e:1f:ae:3c:83:e6:f0:f4:21:7c:85:32:44:69:30:
e7:9a:71:56:87:c5:a7:60:13:ef:57:2e:ad:c8:36:33:da:ca:
9b:05:3b:47:97:24:99:4a:25:9e:6a:01:09:34:23:b3:77:a9:
72:6a:ec:ef:a1:9f:e2:b3:e5:54:b9:ba:f7:72:4d:f5:d2:78:
d7:d8:69:a8:16:57:da:ac:65:db:bc:53:8d:cc:1e:47:07:43:
f8:b2:ac:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 02:47:06 2025 by rpki-client