Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
File: QONYGt3WuZ3YdEueKIb7sCrpGOM.mft (raw, json)
Hash identifier: Oyl7M//JSRLsSwcaMryLrB/KyGrqJp34+6DffHIIf/8=
Subject key identifier: 0E:B7:8D:BC:8C:99:AE:80:0F:6F:85:7F:C3:59:77:97:0D:8E:37:8F
Authority key identifier: 40:E3:58:1A:DD:D6:B9:9D:D8:74:4B:9E:28:86:FB:B0:2A:E9:18:E3
Certificate issuer: /CN=40e3581addd6b99dd8744b9e2886fbb02ae918e3
Certificate serial: 0198D5F13966A60C4E5C6FAF8DD90F0FA338
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 08:00:12 +0000
Manifest this update: Sat 23 Aug 2025 08:00:12 +0000
Manifest next update: Sun 24 Aug 2025 08:00:12 +0000
Files and hashes: 1: 7sL1UBW9oIL-S5vfH1jOO3eYhUk.roa (hash: WnpcdVTaXzH616PZ8mN25gQu/poO33PVXu+tGiulqjA=)
2: QONYGt3WuZ3YdEueKIb7sCrpGOM.crl (hash: BVfxci33RQc1rQ4iVA5m5su4D/l820WMMGzZvtPVQDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:39:66:a6:0c:4e:5c:6f:af:8d:d9:0f:0f:a3:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40e3581addd6b99dd8744b9e2886fbb02ae918e3
Validity
Not Before: Aug 23 08:00:12 2025 GMT
Not After : Aug 24 08:00:12 2025 GMT
Subject: CN=0eb78dbc8c99ae800f6f857fc35977970d8e378f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a6:0f:8a:b1:d0:d9:9f:1c:47:e5:67:6a:14:
e7:3b:d0:9a:e9:03:a1:88:03:41:e4:15:e6:5f:38:
85:6b:ad:fb:46:9a:78:eb:e0:b7:be:7f:03:7e:b9:
b2:e1:99:6c:c2:7c:69:d2:c7:0b:36:57:c7:00:9b:
f4:55:c9:f8:10:22:5d:0a:36:3e:a1:c4:69:66:cb:
16:ce:d7:ee:40:19:90:22:7e:4c:af:40:89:5b:49:
34:df:c0:45:c7:94:3d:30:b8:3c:ca:e3:d4:26:53:
f4:21:fb:30:f2:79:30:8a:3d:f0:ee:cd:c3:e7:bc:
b7:57:93:fe:53:f6:b3:4e:bf:a5:fd:4a:fe:44:10:
81:97:a8:b2:a7:08:c7:03:c6:e9:68:3f:06:98:eb:
33:d5:0a:04:9c:cd:37:fd:72:39:d0:c9:55:0c:4d:
df:58:3b:bf:a4:2d:e9:f5:be:67:96:e4:52:02:b2:
b4:f6:a8:fd:fc:8d:39:65:bf:0a:ff:2a:91:aa:d2:
96:98:80:b4:80:1d:26:9a:3e:2d:fd:9f:d4:d5:63:
9d:25:fa:19:90:80:58:99:3e:81:1a:f6:d8:4f:66:
a7:b6:5d:dd:9f:ac:69:6c:94:10:5d:68:df:2f:de:
f4:74:b3:2c:b7:0b:6e:24:4d:2c:de:03:61:90:66:
46:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B7:8D:BC:8C:99:AE:80:0F:6F:85:7F:C3:59:77:97:0D:8E:37:8F
X509v3 Authority Key Identifier:
keyid:40:E3:58:1A:DD:D6:B9:9D:D8:74:4B:9E:28:86:FB:B0:2A:E9:18:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:6c:e5:a3:c3:64:f5:5a:08:63:aa:8f:eb:e2:b4:66:83:de:
5b:6a:df:43:09:81:6e:84:26:1e:d9:6a:d5:16:29:55:16:4f:
92:09:0d:d9:4a:7f:8b:b9:43:2a:93:c6:7e:7b:4f:32:0f:4d:
a2:0e:bb:84:9c:d9:25:c0:31:50:c5:f4:dc:96:98:ed:f6:d8:
1c:de:ad:e7:fb:a6:08:59:dc:d5:20:9a:ff:c5:6d:51:29:7f:
c3:a6:2b:3b:8b:26:36:20:f1:69:47:78:63:18:7a:a8:ff:e5:
d4:66:6a:54:a7:a7:07:1e:22:97:b1:00:19:c8:28:e2:ae:56:
8e:2b:ef:44:e7:c5:bd:15:47:db:13:63:01:23:2f:93:7b:93:
20:a1:c5:25:5b:77:c7:dc:76:b4:2a:61:dc:63:16:72:3c:22:
4e:cb:b4:96:7a:90:68:07:09:d5:40:cb:9a:92:18:ab:4b:6c:
a1:6b:6d:ec:a3:06:7f:a3:4d:f1:bd:bd:9b:36:13:b6:1d:de:
f9:c1:f5:39:c2:66:31:bc:d1:4f:44:0c:2c:d7:62:1b:63:75:
f9:94:b4:c4:53:07:fc:1e:51:ed:7b:95:cd:dd:ce:2b:cf:79:
1a:c9:e8:7b:1e:52:de:19:0b:5f:45:3c:5e:89:f8:b3:ed:32:
91:ec:31:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:40:24 2025 by rpki-client