Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft
File: QNTjO-cdM587wMxtrmXoeS_01dw.mft (raw, json)
Hash identifier: gDRzNSfhhzj51/fZldLMZ5+XxQ/1OeOoeq+DHl/t8tQ=
Subject key identifier: A7:D9:17:59:D7:AB:01:3D:D1:9E:8B:C4:3F:FA:EC:40:3E:83:C6:60
Authority key identifier: 40:D4:E3:3B:E7:1D:33:9F:3B:C0:CC:6D:AE:65:E8:79:2F:F4:D5:DC
Certificate issuer: /CN=40d4e33be71d339f3bc0cc6dae65e8792ff4d5dc
Certificate serial: 0197B70E9DC791E607675284B0A4B09D1F23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 15:01:17 +0000
Manifest this update: Sat 28 Jun 2025 15:01:17 +0000
Manifest next update: Sun 29 Jun 2025 15:01:17 +0000
Files and hashes: 1: QNTjO-cdM587wMxtrmXoeS_01dw.crl (hash: 1khYj1Q9LYpOeeH0aJQo2dNlo6vwCxx0R68DzUCGdpw=)
2: a3rqfPfqZxHF_NahNNUvEq5fk5g.roa (hash: I+M1Q116pruNGKV2ARftKr/KQ/3izABmgVobB9drMwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:9d:c7:91:e6:07:67:52:84:b0:a4:b0:9d:1f:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d4e33be71d339f3bc0cc6dae65e8792ff4d5dc
Validity
Not Before: Jun 28 15:01:17 2025 GMT
Not After : Jun 29 15:01:17 2025 GMT
Subject: CN=a7d91759d7ab013dd19e8bc43ffaec403e83c660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cf:16:32:45:b4:46:b8:8a:67:8f:cd:13:92:
bb:73:9f:48:73:e0:72:ca:90:65:86:90:0a:1b:e5:
e4:10:8a:2f:a9:b8:36:e9:7c:11:b2:2b:ce:7c:67:
21:e0:4b:b6:3d:40:24:81:09:1c:43:fd:7b:35:b8:
87:4f:7c:05:af:83:03:69:ad:33:c0:c7:72:d7:ae:
6f:07:a4:bf:ff:6e:b1:46:20:50:37:6f:c6:d3:d0:
cf:d5:b2:a7:e0:9e:98:ac:75:9a:11:07:cd:c3:ff:
d7:74:71:4f:30:35:93:21:18:fc:7f:16:08:36:47:
92:a3:62:d8:2d:35:67:e1:aa:50:91:b0:76:ba:67:
42:a4:4f:45:ff:b5:2b:52:70:2f:7f:74:ff:24:9a:
2d:15:2c:74:9d:b3:44:6f:49:6e:d3:b3:56:55:24:
46:e1:30:6c:b5:46:e1:c6:cb:95:57:99:2a:89:b6:
a0:6f:9a:36:26:15:98:eb:e5:f8:38:85:67:84:f5:
a2:0e:a4:42:92:db:b6:e3:fb:4c:04:c0:5a:65:08:
27:34:3d:cb:8f:02:a9:88:8e:33:93:1d:b1:20:0e:
08:f9:12:ae:37:2d:0c:4b:1c:71:7e:25:cd:96:41:
70:0d:d8:f6:0e:d7:36:ff:4a:29:4d:7e:64:b6:9d:
e5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D9:17:59:D7:AB:01:3D:D1:9E:8B:C4:3F:FA:EC:40:3E:83:C6:60
X509v3 Authority Key Identifier:
keyid:40:D4:E3:3B:E7:1D:33:9F:3B:C0:CC:6D:AE:65:E8:79:2F:F4:D5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:5d:22:db:23:e0:f2:d9:f4:44:19:c5:94:91:6f:e7:00:34:
64:65:5f:46:db:ca:17:c7:92:d9:9b:fd:6d:64:7c:53:83:4c:
8f:e5:01:fb:3b:a6:e8:92:c7:07:c7:97:61:bf:c0:dd:2d:cc:
7b:8a:d8:6a:bd:aa:d1:7c:5b:50:c4:5a:3a:8c:82:b8:33:d6:
73:35:f9:e5:83:e1:10:66:c1:65:88:9f:01:f5:fb:dd:2d:d5:
54:73:1e:6a:b7:19:de:ce:8c:6b:2d:49:43:ae:99:7a:99:7c:
e0:7a:20:25:fa:f1:f9:0e:e8:81:ba:42:98:a1:96:5a:b7:55:
53:77:c2:56:58:9f:9c:c9:91:b9:09:46:2e:7f:ea:78:37:b3:
3c:ef:dc:d5:60:72:bc:6d:9c:b6:65:46:33:4d:bf:ea:f3:d8:
ea:df:b7:e7:f0:5a:bd:94:02:a8:9c:56:80:7d:ee:3c:8a:c7:
34:6c:53:92:42:5b:49:1c:0c:f9:ce:2d:c0:13:46:34:29:01:
02:9e:0b:83:eb:18:7d:fb:f6:b4:37:fc:2a:b5:89:f9:1f:82:
af:14:e1:28:ce:07:83:b5:7f:7b:da:fb:d5:3f:f4:80:30:8a:
35:59:ca:e9:f5:bb:78:97:6b:44:06:12:9f:1d:98:d2:f7:07:
7a:93:b8:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:03:18 2025 by rpki-client