Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.mft
File: QPddMndhuQwImWOPQw62FMh8MQY.mft (raw, json)
Hash identifier: ffORQ5GJ545rOrNFuHs/vA/XgNBu771YY3Zl8ztSrkI=
Subject key identifier: 08:87:A0:9D:8E:94:EB:0D:88:8A:B0:2D:F9:3D:FE:BE:34:54:5F:C7
Authority key identifier: 40:F7:5D:32:77:61:B9:0C:08:99:63:8F:43:0E:B6:14:C8:7C:31:06
Certificate issuer: /CN=40f75d327761b90c0899638f430eb614c87c3106
Certificate serial: 0197B77C52666198602D43916D3FC7A36047
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPddMndhuQwImWOPQw62FMh8MQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.mft
Manifest number: 10DE
Signing time: Sat 28 Jun 2025 17:01:07 +0000
Manifest this update: Sat 28 Jun 2025 17:01:07 +0000
Manifest next update: Sun 29 Jun 2025 17:01:07 +0000
Files and hashes: 1: EjhHxmUhTpI_yi1jYptWWVsle0k.roa (hash: Eisn/B+33eIZDNWVZUSS6g6De7shzryfH75XScwtDR4=)
2: LMr4qJtoQiNuzRtdrPseYJWhmNQ.roa (hash: HjlHZSPbMqdny8RRGC9Ay5m+qCJBqQwRwFr/X+SmBKc=)
3: QPddMndhuQwImWOPQw62FMh8MQY.crl (hash: lILTUt6D0tnqaMfins8xLsCqWKRQUjOQJo6vCE4mTlw=)
4: c5QEXFgvsV_AiBAbEhTe2AqCERQ.roa (hash: zLlrVyu51dTFBBqx0nndVHW+/Nx+vLVjEHJZY4Wab0U=)
5: y-yADsSuAYCkz0gxVgZddom2080.roa (hash: zES6u5cNrLeUaCV/Nld2QqUVKIff3UmbYVses7LYQwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QPddMndhuQwImWOPQw62FMh8MQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:52:66:61:98:60:2d:43:91:6d:3f:c7:a3:60:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f75d327761b90c0899638f430eb614c87c3106
Validity
Not Before: Jun 28 17:01:07 2025 GMT
Not After : Jun 29 17:01:07 2025 GMT
Subject: CN=0887a09d8e94eb0d888ab02df93dfebe34545fc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:65:16:6f:6b:22:b2:e3:9d:c0:09:a1:80:28:
97:06:97:93:7c:8b:4a:e6:d0:5b:94:c1:55:c8:af:
af:18:35:37:e9:29:3b:bd:2f:96:4f:01:20:f7:93:
ef:1a:3f:15:90:b4:47:b5:f2:61:6a:fb:83:ab:61:
6b:0a:e4:91:08:a4:ec:ca:3f:66:cb:1d:f4:ec:ef:
63:88:80:45:b9:7a:ac:19:f8:77:4b:8d:2d:da:91:
c6:47:30:7f:34:fb:ec:05:d3:12:d7:2a:6c:41:dd:
dd:ce:98:c6:f2:8d:8d:da:1a:dc:97:3c:91:53:a7:
0e:ba:87:fd:fa:49:95:9f:1a:c0:c1:04:f9:51:64:
a6:c3:1d:31:f0:e8:bc:e3:b7:82:49:0b:7a:47:77:
95:bf:45:f4:4f:b4:fa:61:16:83:28:42:63:00:44:
06:3e:5b:6a:51:9a:b7:aa:5b:64:73:4c:9e:b6:f1:
6f:9e:cc:cc:63:8a:bc:5c:d3:54:2f:48:a8:f6:e8:
b5:1c:99:bc:a1:16:02:54:82:f7:0b:54:db:6b:98:
5e:64:f4:d1:71:95:93:57:29:a4:24:3b:de:bd:82:
ed:2c:b3:bf:9a:f4:e7:06:31:97:9f:b1:24:db:67:
87:24:37:44:8b:39:2b:55:4c:6c:53:97:82:f8:1b:
04:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:87:A0:9D:8E:94:EB:0D:88:8A:B0:2D:F9:3D:FE:BE:34:54:5F:C7
X509v3 Authority Key Identifier:
keyid:40:F7:5D:32:77:61:B9:0C:08:99:63:8F:43:0E:B6:14:C8:7C:31:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPddMndhuQwImWOPQw62FMh8MQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:86:21:f2:f0:21:57:92:5d:f7:c8:27:7e:e1:69:90:fe:cb:
a8:f8:ae:37:5a:14:f8:4b:d6:f0:87:33:35:92:af:23:4a:d4:
53:b5:e6:d6:72:46:5d:be:76:c4:16:e4:65:16:83:85:bc:c9:
81:6d:02:de:11:c7:e7:aa:d9:c0:1b:10:9b:98:c0:e1:e2:18:
31:d1:07:87:e0:21:04:55:ba:c4:ad:63:1e:22:4b:c1:0d:21:
c1:bf:46:a5:fd:f6:ad:02:94:04:80:3a:ab:03:b8:0a:8a:75:
fa:52:cb:1d:e9:83:ab:88:16:c2:ad:36:83:f8:b5:7a:54:b4:
85:47:d8:f0:95:d8:c8:25:06:fb:1e:a0:e4:1f:a9:de:2d:fd:
5e:be:0f:62:a8:c3:66:89:a0:12:c2:5f:c7:d3:05:c8:8d:c1:
bd:05:83:51:91:93:c8:45:54:82:4d:78:c6:1d:f8:64:10:72:
92:01:f6:33:97:63:fa:6f:01:4c:da:2c:cc:31:b8:0c:2a:1d:
94:71:2d:b2:d9:f7:63:2b:1f:d1:79:33:fd:14:3c:bc:00:d1:
a8:6e:76:0d:a5:42:d1:84:67:e4:68:8f:3f:b4:f6:24:d4:7c:
25:8c:c3:e1:3a:e8:93:d1:f2:5b:18:05:b6:5d:ff:d0:a2:87:
51:b5:e9:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:02:50 2025 by rpki-client