Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
File: QONYGt3WuZ3YdEueKIb7sCrpGOM.mft (raw, json)
Hash identifier: Pdam7AKiwVgDxzLGDmSZJBHP7nUUZUTk/O5bqC8KDdc=
Subject key identifier: 17:56:36:9C:5D:FF:D3:EC:65:F5:5B:CD:27:3A:F0:67:56:E4:AB:A8
Authority key identifier: 40:E3:58:1A:DD:D6:B9:9D:D8:74:4B:9E:28:86:FB:B0:2A:E9:18:E3
Certificate issuer: /CN=40e3581addd6b99dd8744b9e2886fbb02ae918e3
Certificate serial: 0197B820D762689D132CD4B00B26E39173D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 20:00:49 +0000
Manifest this update: Sat 28 Jun 2025 20:00:49 +0000
Manifest next update: Sun 29 Jun 2025 20:00:49 +0000
Files and hashes: 1: 7sL1UBW9oIL-S5vfH1jOO3eYhUk.roa (hash: WnpcdVTaXzH616PZ8mN25gQu/poO33PVXu+tGiulqjA=)
2: QONYGt3WuZ3YdEueKIb7sCrpGOM.crl (hash: vphP4mltNTa7O+RrsJ+ltyswScBfqE7v4OSjmehE51U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:d7:62:68:9d:13:2c:d4:b0:0b:26:e3:91:73:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40e3581addd6b99dd8744b9e2886fbb02ae918e3
Validity
Not Before: Jun 28 20:00:49 2025 GMT
Not After : Jun 29 20:00:49 2025 GMT
Subject: CN=1756369c5dffd3ec65f55bcd273af06756e4aba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:0b:26:98:8b:5a:82:3b:6a:cb:7f:46:36:62:
5d:e0:85:b8:32:72:1e:cf:6a:03:e4:83:1f:35:93:
8e:ba:e4:ad:25:54:41:e1:3f:06:be:f4:12:5f:af:
87:b3:b5:0c:6e:64:d6:0b:3f:f5:ce:29:a9:08:5e:
2a:ac:08:b9:c6:84:e8:ea:11:05:4e:0a:14:53:a4:
f0:3f:72:40:ac:dd:4b:81:a5:07:22:84:00:42:c5:
9f:08:e6:ba:8b:fb:ea:e8:23:c7:e0:ca:f7:49:54:
68:dc:6d:6c:3c:d7:a8:ee:af:a7:9f:56:96:56:4c:
ba:f3:84:30:86:2c:f2:50:27:85:d5:ee:cf:48:9a:
68:fd:57:aa:a5:eb:1e:39:bd:4d:f3:58:b8:ef:f8:
3e:04:ea:51:dc:d1:b2:98:be:01:46:b5:c3:c7:a7:
bd:5a:ba:e4:83:a6:a9:d9:84:0a:88:51:38:42:d3:
e0:06:6f:be:8b:57:85:7a:0e:57:bb:11:7e:18:63:
56:fe:f9:13:1c:aa:bb:3e:f0:06:82:76:8b:8e:ec:
f2:d1:36:91:e1:48:60:42:8c:0d:a6:fb:d2:22:d8:
b5:40:5c:b4:77:55:ca:58:54:59:6a:6d:3e:0b:88:
39:51:19:02:76:2a:ba:4e:a6:d8:b8:00:3a:77:3e:
07:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:56:36:9C:5D:FF:D3:EC:65:F5:5B:CD:27:3A:F0:67:56:E4:AB:A8
X509v3 Authority Key Identifier:
keyid:40:E3:58:1A:DD:D6:B9:9D:D8:74:4B:9E:28:86:FB:B0:2A:E9:18:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:c7:2d:d2:38:1d:ae:9e:b6:92:db:27:ef:68:a1:c7:0c:45:
e1:0a:3f:78:ab:3a:29:15:23:47:9a:af:b4:1c:0a:88:07:df:
a9:d7:22:25:f9:e5:a8:3a:55:55:d5:21:7a:b5:80:72:54:65:
ba:a5:57:ca:97:0a:87:1a:29:34:48:78:84:bc:29:82:33:cd:
76:bb:bd:ee:37:61:d4:4c:a7:47:5d:d0:82:d7:40:2f:6d:7a:
85:0c:02:1a:d2:89:51:5b:4c:ba:03:37:6b:ec:7c:26:70:23:
b1:d2:91:77:05:19:8c:05:10:18:0f:5d:fd:be:6a:99:47:77:
7a:de:6a:89:e1:ee:d4:6b:f5:38:ed:dc:2f:07:cc:47:72:1f:
a9:73:d8:67:c3:63:f5:ba:7b:e0:a7:66:e7:81:20:ab:01:c9:
b6:80:79:d3:d4:d4:8b:e8:b0:49:0c:56:5a:50:08:a5:f0:ea:
b0:87:f9:c3:64:8a:23:f9:f1:15:b4:19:54:c0:3e:37:65:ff:
ab:1b:57:1c:0f:c0:eb:60:e9:ca:2e:c7:8d:b2:7e:b7:c1:2e:
16:61:98:1b:a8:d0:1f:38:a5:be:2a:b0:d2:31:1d:6b:05:e4:
2e:63:75:43:f6:fb:68:62:59:dd:7c:de:7f:c4:2c:e8:cc:90:
36:12:f1:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:33:03 2025 by rpki-client