Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.mft
File: QOxdgqjrXZjOduYdr-UXZh_E5nU.mft (raw, json)
Hash identifier: Mlch0hDBR+he9xwgTDbI2UF19TNAGVELK9NmlWdhWrc=
Subject key identifier: AC:41:2A:D7:02:E9:AA:D2:F8:1A:30:44:71:E2:7B:21:85:15:F9:68
Authority key identifier: 40:EC:5D:82:A8:EB:5D:98:CE:76:E6:1D:AF:E5:17:66:1F:C4:E6:75
Certificate issuer: /CN=40ec5d82a8eb5d98ce76e61dafe517661fc4e675
Certificate serial: 0198D5833E03C1EC5A0E5286EE9F6978F5C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QOxdgqjrXZjOduYdr-UXZh_E5nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 06:00:04 +0000
Manifest this update: Sat 23 Aug 2025 06:00:04 +0000
Manifest next update: Sun 24 Aug 2025 06:00:04 +0000
Files and hashes: 1: QOxdgqjrXZjOduYdr-UXZh_E5nU.crl (hash: u3GsccoQsLj/oT2WCiWEXXC0THzi6TfNPqRCsOC9ZI4=)
2: y8Eeia8hdhX_DpCgeBhu63E2X4A.roa (hash: wzZxfTRF1LtzRT1r6hfEh3O3egTZFWx9R6sOBFN3GRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QOxdgqjrXZjOduYdr-UXZh_E5nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:3e:03:c1:ec:5a:0e:52:86:ee:9f:69:78:f5:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40ec5d82a8eb5d98ce76e61dafe517661fc4e675
Validity
Not Before: Aug 23 06:00:04 2025 GMT
Not After : Aug 24 06:00:04 2025 GMT
Subject: CN=ac412ad702e9aad2f81a304471e27b218515f968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7a:4a:a2:5b:ad:27:18:d5:4f:9e:29:bc:f2:
14:1e:c1:cc:8b:b8:ac:e1:5c:01:68:90:1a:98:d5:
ad:17:71:03:e9:d7:13:48:ea:cf:d8:e0:9a:6b:40:
d0:54:a3:24:c4:58:ad:47:d2:4d:7f:10:91:3b:50:
cf:e1:c6:ee:c1:00:64:1d:36:2a:aa:fc:70:4b:07:
1a:38:a2:7e:62:94:37:1e:18:6c:32:5d:48:56:45:
ca:0d:f3:e7:e7:f1:da:b0:73:64:dd:fc:a4:71:34:
7d:87:ec:c8:61:3b:4b:7f:72:d9:bd:1e:00:8e:ab:
ed:85:21:39:e5:30:00:ae:5b:43:01:81:07:83:a0:
cd:1c:b8:e2:e9:55:d4:bf:73:07:f1:31:c0:0f:a8:
e0:54:9a:e0:30:11:49:ff:53:7d:c4:97:ec:0c:90:
ad:68:ee:be:95:b0:65:03:67:6d:38:e7:f7:d2:46:
7b:27:5c:8c:d1:c5:af:43:10:8b:3f:32:4d:78:6f:
4f:c5:22:ee:82:ce:1e:48:d7:fb:7a:30:94:06:ff:
7f:70:bd:de:6b:5d:0e:d1:cf:f0:ed:b0:f3:b8:c2:
42:4d:67:9b:26:f8:b2:e2:3b:45:4c:ed:e5:54:a4:
0a:ae:cb:d4:d5:9a:a5:e2:c8:8c:82:75:de:ff:4a:
51:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:41:2A:D7:02:E9:AA:D2:F8:1A:30:44:71:E2:7B:21:85:15:F9:68
X509v3 Authority Key Identifier:
keyid:40:EC:5D:82:A8:EB:5D:98:CE:76:E6:1D:AF:E5:17:66:1F:C4:E6:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QOxdgqjrXZjOduYdr-UXZh_E5nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:74:2d:bd:fc:08:c5:5a:23:7b:5d:4e:ea:b4:b3:d0:ea:db:
01:19:03:5b:04:f2:49:18:c6:4d:39:77:4f:a9:35:e3:d2:fd:
21:35:ed:7b:4a:5d:43:93:3d:71:c4:61:cc:ed:64:77:21:ee:
e5:13:d7:5b:5f:d6:12:22:1c:0e:12:59:8f:26:09:a9:94:7d:
39:0f:64:97:10:ab:6c:93:f5:ff:e4:e8:40:f2:1c:4a:57:d6:
00:48:e1:17:67:46:b3:1f:be:0a:b4:28:8d:30:5d:ce:a6:92:
71:a9:7d:e6:59:f5:54:29:e6:a9:cc:e7:6f:08:60:16:e5:61:
b8:d7:f7:f3:82:e7:3b:0e:5f:e9:47:f4:16:e2:fd:0c:08:ab:
05:cc:1c:f7:42:81:c3:1c:00:16:68:98:44:f0:9f:44:bf:8f:
03:e1:7c:9c:ed:49:00:e7:1e:64:20:ba:4c:32:71:1a:b9:de:
2a:df:87:9e:85:ef:92:8d:af:e6:7c:24:e8:2d:5f:c2:98:2e:
a9:8f:40:ff:4b:56:1e:ff:6f:d6:83:b3:67:7e:fa:ec:f3:ea:
97:54:14:27:b2:22:33:7a:56:de:00:a0:e9:ee:9e:f4:04:b9:
fa:22:25:3c:57:71:b4:76:d2:70:55:23:70:81:92:9d:17:32:
8b:91:ff:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:38 2025 by rpki-client