Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.mft
File: QGYnM7yHPRPh-fZujf91yCDV0vc.mft (raw, json)
Hash identifier: 4AEynBXmL9roIJoFnmD6A7hH4E/ZlYwr7LtbkRqqv9k=
Subject key identifier: 07:61:0A:AC:00:13:61:E4:19:35:FF:2A:E8:05:E0:02:F3:DC:4F:D5
Authority key identifier: 40:66:27:33:BC:87:3D:13:E1:F9:F6:6E:8D:FF:75:C8:20:D5:D2:F7
Certificate issuer: /CN=40662733bc873d13e1f9f66e8dff75c820d5d2f7
Certificate serial: 0197B77CB208A991FE94B4EB18629453401B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGYnM7yHPRPh-fZujf91yCDV0vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.mft
Manifest number: 0DB8
Signing time: Sat 28 Jun 2025 17:01:31 +0000
Manifest this update: Sat 28 Jun 2025 17:01:31 +0000
Manifest next update: Sun 29 Jun 2025 17:01:31 +0000
Files and hashes: 1: NiWsr1aAeWW2oN08xcS5Irqnn3Q.roa (hash: 2xUbIvKWWmEdUess43urc5rTq8I0ZstZadOhJMax4HI=)
2: QGYnM7yHPRPh-fZujf91yCDV0vc.crl (hash: 184zOO8Um0RRnCPjQZZwOy7h4Px5TKaCCY6Vidti2kA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QGYnM7yHPRPh-fZujf91yCDV0vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:b2:08:a9:91:fe:94:b4:eb:18:62:94:53:40:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40662733bc873d13e1f9f66e8dff75c820d5d2f7
Validity
Not Before: Jun 28 17:01:31 2025 GMT
Not After : Jun 29 17:01:31 2025 GMT
Subject: CN=07610aac001361e41935ff2ae805e002f3dc4fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:10:9b:32:f8:23:24:8c:09:4e:8d:85:ba:9d:
cf:04:95:e5:c2:c1:f7:30:d3:25:87:39:42:60:6c:
0f:a7:38:d9:8b:49:d8:ba:91:82:3f:64:84:d7:b8:
e4:20:79:4f:dd:12:a0:63:d2:0a:19:62:e5:02:6e:
90:c7:49:5b:00:ec:f9:da:82:ef:db:03:74:ed:cf:
48:ca:9c:c2:7f:c8:28:27:e0:90:b1:c6:a8:c2:67:
5f:d1:68:88:1e:d4:31:e3:94:ac:78:fd:cb:d2:0d:
c4:49:66:78:75:a1:2c:48:55:b8:ca:9c:48:bd:3a:
bf:e7:fe:d2:e4:46:a0:98:0d:ed:48:a2:bf:b8:97:
76:45:18:00:5d:05:39:98:14:24:ac:56:8f:c9:97:
fe:e5:5b:b5:fb:8e:30:1d:18:f9:91:94:86:6f:bb:
e2:f9:d8:cb:7b:3e:de:18:a0:cc:a3:ce:76:03:32:
3d:2d:70:f6:59:45:60:f4:b0:a4:ce:ed:0c:a0:3a:
96:be:a7:11:c0:b9:93:0f:17:cd:97:36:c0:5f:bd:
3b:3a:e2:45:0e:a1:45:73:58:aa:8c:b9:69:65:c5:
de:b8:51:73:54:09:61:c0:48:0d:34:81:fb:34:26:
55:6b:2d:94:df:70:a8:56:90:71:65:29:c0:82:20:
b0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:61:0A:AC:00:13:61:E4:19:35:FF:2A:E8:05:E0:02:F3:DC:4F:D5
X509v3 Authority Key Identifier:
keyid:40:66:27:33:BC:87:3D:13:E1:F9:F6:6E:8D:FF:75:C8:20:D5:D2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGYnM7yHPRPh-fZujf91yCDV0vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:0e:0b:1d:d9:b3:2e:61:a6:4e:3d:0d:e1:41:92:a2:49:a3:
3d:9b:e0:7b:6c:3b:cd:29:7e:ff:2a:89:08:1c:dd:08:9e:92:
e7:60:aa:1b:d3:79:48:db:f9:07:ac:82:1c:e3:0d:46:1f:47:
b4:6d:f0:c1:f3:d8:5a:59:b6:30:e9:ff:e3:6f:61:bf:b4:7c:
65:d2:ba:f4:c7:36:13:2c:cb:9c:81:f7:70:a6:4b:f2:b2:c9:
94:bb:c6:23:b0:5c:41:09:b7:aa:0d:d1:9a:f5:b5:80:b1:5d:
ca:c8:00:0f:4e:f2:a3:69:17:e7:3e:83:ac:d3:94:42:a5:dc:
d4:8a:44:01:11:d0:2d:d7:d5:6e:a2:42:21:c1:c9:ed:f9:20:
6f:89:af:05:5a:7c:0c:24:e5:97:2f:c4:ce:75:79:d8:30:b3:
7c:36:05:86:25:3f:e1:d4:61:58:43:b3:cd:2d:b2:d4:74:4f:
2d:21:fe:fe:c9:f9:de:cc:76:95:91:ff:4d:8c:6a:11:18:ea:
19:48:70:20:a4:47:eb:8f:c0:d7:09:fb:b8:2b:d8:aa:f0:a7:
18:65:79:f0:ba:6c:a6:97:95:80:07:7c:a4:10:15:1a:61:72:
34:87:54:ee:35:88:54:0d:6a:ac:58:07:af:37:33:58:72:9b:
16:cd:13:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:21:49 2025 by rpki-client