Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.mft
File: QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.mft (raw, json)
Hash identifier: NUFkxxxbLrc9YwU8Lo/EOtZ8PSgqCvX8sX8oRLLBV+I=
Subject key identifier: 4C:AF:E8:26:B9:A5:E4:CF:53:28:F4:D6:61:23:8E:E6:E7:9F:4B:64
Authority key identifier: 40:C3:D3:7B:E4:35:A9:C3:3F:1C:63:E5:0D:0D:64:64:ED:16:10:04
Certificate issuer: /CN=40c3d37be435a9c33f1c63e50d0d6464ed161004
Certificate serial: 019A22C056113858593E2BEF9D8777E77E6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.mft
Manifest number: 1651
Signing time: Sun 26 Oct 2025 23:00:21 +0000
Manifest this update: Sun 26 Oct 2025 23:00:21 +0000
Manifest next update: Mon 27 Oct 2025 23:00:21 +0000
Files and hashes: 1: I3asWb0Ke_YTZ9x8-oMXPECbM9c.roa (hash: DFO6kXzPePgIeZm2V5GpwnQuioD5uOOrmUgP/RCLs14=)
2: QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.crl (hash: E/h9NSNJKquTpqW4hDE8U2vBpye76hS/2uSFWTnp8Ss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:c0:56:11:38:58:59:3e:2b:ef:9d:87:77:e7:7e:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40c3d37be435a9c33f1c63e50d0d6464ed161004
Validity
Not Before: Oct 26 23:00:21 2025 GMT
Not After : Oct 27 23:00:21 2025 GMT
Subject: CN=4cafe826b9a5e4cf5328f4d661238ee6e79f4b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d7:9b:ce:4d:d8:8b:ca:5c:8f:59:0e:55:7a:
f0:c0:93:56:60:66:16:6f:30:ba:bd:e2:38:28:75:
d2:67:f5:75:7d:2e:69:5b:95:ad:37:66:5b:92:62:
50:bb:f2:e7:eb:6a:02:1e:b8:28:05:33:ed:39:16:
09:e5:ea:32:2b:ce:8a:d3:6f:12:42:fc:64:84:8f:
ef:6a:1d:16:69:b4:3d:a0:ee:b1:10:b0:5a:bf:f2:
d4:6d:8f:3a:36:b8:10:93:13:98:e9:02:d2:5b:81:
d1:ff:97:da:43:2b:02:8f:33:8c:80:05:7d:3f:a0:
34:17:d9:62:63:48:80:23:46:03:ce:71:72:f7:15:
f6:bf:b5:d9:f8:88:c4:67:af:70:7c:73:0c:ea:63:
3e:ba:26:11:c3:30:f9:f2:6a:4b:1e:8a:be:70:ee:
18:83:21:49:d6:ef:9c:9c:1e:49:0d:fb:cd:c0:d5:
71:05:29:70:b7:f3:7a:56:dd:14:cd:59:b4:8f:67:
2b:fb:70:e9:28:2e:3a:ba:84:8f:a4:b2:f6:f5:dc:
22:b6:9d:ea:d9:80:dd:79:0c:a7:1f:fe:7f:01:84:
7b:1e:04:37:b7:e3:fd:50:8c:b2:7c:41:73:83:d6:
5d:35:2b:58:f5:81:84:25:98:21:f0:a1:09:56:a0:
8d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:AF:E8:26:B9:A5:E4:CF:53:28:F4:D6:61:23:8E:E6:E7:9F:4B:64
X509v3 Authority Key Identifier:
keyid:40:C3:D3:7B:E4:35:A9:C3:3F:1C:63:E5:0D:0D:64:64:ED:16:10:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:3a:8b:ac:5f:c4:95:27:c6:fd:38:45:eb:f7:05:52:48:15:
d8:53:2d:39:ef:de:9e:85:cd:41:02:9b:b6:e0:5a:8f:64:04:
0f:b6:f2:70:f5:8e:a8:1e:4b:b9:70:12:4f:2b:47:52:58:b1:
7c:17:ba:d6:85:27:79:e9:45:2f:e7:a1:8b:1f:92:74:30:bd:
ba:71:c5:9d:76:1b:66:a8:e8:0b:8d:fd:59:b0:c1:09:d4:24:
15:50:ca:34:92:a0:a0:d2:d9:e4:95:22:49:30:0c:9d:44:4f:
d4:52:48:a9:6b:c8:bf:f1:de:a3:8e:16:62:27:89:02:85:32:
17:f9:78:5d:86:40:24:b0:43:04:06:a1:01:2f:16:86:9b:09:
5e:61:e0:63:ed:ad:ea:b3:32:9a:7e:95:4d:d8:4c:30:69:79:
ff:e6:53:a9:26:d8:af:ac:df:5d:32:4a:95:37:ca:21:8a:cb:
c7:ba:f3:d1:95:7c:2f:f6:da:e7:ed:87:c4:e2:29:57:76:f0:
81:b6:ea:fd:a0:3b:a6:14:39:6c:12:64:27:b4:4a:bc:68:47:
8c:06:d7:fe:a9:6c:2e:83:ec:6a:e7:f5:54:bc:89:ed:96:67:
05:dc:ba:29:86:80:26:e4:50:bc:7f:5d:9c:11:be:1a:71:4d:
c2:81:df:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:48:21 2025 by rpki-client