Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft
File: QO9YSZMMyd10IR-zfiQRgkmh_EA.mft (raw, json)
Hash identifier: 5Bl/hG1qU3hukRQqi9c5vs1mAL0rcl70fQx1/JvR4HI=
Subject key identifier: 79:D2:90:09:BB:47:39:B6:0B:F2:B8:25:F3:CF:F7:A2:8C:79:FD:5D
Authority key identifier: 40:EF:58:49:93:0C:C9:DD:74:21:1F:B3:7E:24:11:82:49:A1:FC:40
Certificate issuer: /CN=40ef5849930cc9dd74211fb37e24118249a1fc40
Certificate serial: 0197B6A18D2F4E937474AEFB18579E8B1613
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QO9YSZMMyd10IR-zfiQRgkmh_EA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft
Manifest number: 15BF
Signing time: Sat 28 Jun 2025 13:02:10 +0000
Manifest this update: Sat 28 Jun 2025 13:02:10 +0000
Manifest next update: Sun 29 Jun 2025 13:02:10 +0000
Files and hashes: 1: QO9YSZMMyd10IR-zfiQRgkmh_EA.crl (hash: kGqePe++LoSGo6hLjM++mSvlhbDtNRL18cVGdWbxvCc=)
2: UO07512-xyl7tPlxWkeH0XFHtjw.roa (hash: FGw3ypGv9x4G+fHO0s0Uxmz/ZFgsQL9y06qgJnZxgwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QO9YSZMMyd10IR-zfiQRgkmh_EA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:8d:2f:4e:93:74:74:ae:fb:18:57:9e:8b:16:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40ef5849930cc9dd74211fb37e24118249a1fc40
Validity
Not Before: Jun 28 13:02:10 2025 GMT
Not After : Jun 29 13:02:10 2025 GMT
Subject: CN=79d29009bb4739b60bf2b825f3cff7a28c79fd5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:84:ad:d2:87:39:55:10:68:27:72:da:fe:09:
e4:91:bb:a6:1d:5b:ae:06:d6:1c:db:95:44:e6:84:
ad:38:76:d2:1b:24:e7:d6:ac:dd:f3:14:5c:0e:ca:
90:99:9c:27:f4:a9:ad:f9:a4:8b:ad:65:ce:72:b4:
34:b9:65:5a:24:76:9e:e3:15:50:1e:15:0b:8e:f5:
95:79:5d:bd:a0:59:f2:3e:d7:d8:df:94:ce:6b:7f:
5d:43:d9:26:ee:73:29:bb:38:01:52:c5:08:07:fb:
ad:e8:41:27:0b:bf:6d:06:cc:bb:de:34:ae:d9:83:
70:6a:78:25:8f:8b:53:1d:fa:49:83:0f:9e:dc:fd:
00:1e:c5:06:49:5f:f3:41:7a:46:c9:3c:50:4c:ee:
32:2a:5a:40:9d:cf:63:96:b0:81:c8:43:6c:76:93:
0a:0c:1d:6c:75:2a:c6:50:77:80:56:68:fc:18:29:
c3:b9:76:f6:13:72:48:a2:7f:28:d8:14:7e:ed:60:
c0:e7:0a:82:41:79:25:9b:ce:f0:07:87:a4:18:d7:
c9:8d:f1:23:87:94:24:b9:df:04:30:34:7a:47:5d:
1b:17:66:18:6c:b1:f9:c0:86:41:48:0f:90:6e:66:
61:ca:54:e0:b5:4e:05:33:e4:5c:d7:eb:f8:90:3e:
06:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D2:90:09:BB:47:39:B6:0B:F2:B8:25:F3:CF:F7:A2:8C:79:FD:5D
X509v3 Authority Key Identifier:
keyid:40:EF:58:49:93:0C:C9:DD:74:21:1F:B3:7E:24:11:82:49:A1:FC:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QO9YSZMMyd10IR-zfiQRgkmh_EA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:2f:1c:d1:36:c7:62:fa:ec:20:a1:78:96:d2:8f:d4:62:ac:
b1:3e:e3:13:e0:bb:6d:b5:6c:da:2f:ce:d2:fa:f6:16:e4:af:
9d:30:98:40:7d:90:7a:f5:9f:3a:cf:4f:dd:c9:ef:b7:54:b9:
0c:32:39:7e:03:c4:6d:92:e7:e2:b2:c6:df:0b:35:2a:15:e6:
42:fa:24:71:5d:59:67:c9:5c:30:2f:ce:53:b0:b4:a9:57:80:
d0:b5:af:2a:b0:fe:b7:95:2b:60:6e:f1:90:32:22:83:f0:de:
5d:e8:8d:22:4e:96:d0:d6:12:6e:cf:44:a3:18:d4:49:2e:8a:
e5:be:16:21:b8:0c:30:85:48:3c:6b:12:66:6e:89:46:f8:2a:
26:f1:75:e3:b9:02:7e:f5:09:ad:9d:a3:93:7d:12:cc:fa:72:
36:a3:cd:0f:6c:41:cf:bb:b8:8a:86:91:63:32:65:67:b1:63:
35:b7:e6:8e:16:4b:6c:f1:32:b1:8f:32:33:78:6e:4d:af:19:
48:22:96:ce:75:95:aa:9a:f8:01:ea:6e:f4:98:ce:19:76:f6:
34:02:9f:88:5d:8d:bd:fa:53:97:c6:11:83:04:c9:09:f8:16:
f6:9d:7f:58:2e:d3:d9:7f:f6:f3:c9:92:5e:88:d9:4e:e1:23:
0f:e3:cc:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oY0vTpN0dK77GFeeixYTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwZWY1ODQ5OTMwY2M5ZGQ3NDIxMWZiMzdlMjQxMTgyNDlh
MWZjNDAwHhcNMjUwNjI4MTMwMjEwWhcNMjUwNjI5MTMwMjEwWjAzMTEwLwYDVQQD
Eyg3OWQyOTAwOWJiNDczOWI2MGJmMmI4MjVmM2NmZjdhMjhjNzlmZDVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YSt0oc5VRBoJ3La/gnkkbumHVuu
BtYc25VE5oStOHbSGyTn1qzd8xRcDsqQmZwn9Kmt+aSLrWXOcrQ0uWVaJHae4xVQ
HhULjvWVeV29oFnyPtfY35TOa39dQ9km7nMpuzgBUsUIB/ut6EEnC79tBsy73jSu
2YNwanglj4tTHfpJgw+e3P0AHsUGSV/zQXpGyTxQTO4yKlpAnc9jlrCByENsdpMK
DB1sdSrGUHeAVmj8GCnDuXb2E3JIon8o2BR+7WDA5wqCQXklm87wB4ekGNfJjfEj
h5Qkud8EMDR6R10bF2YYbLH5wIZBSA+QbmZhylTgtU4FM+Rc1+v4kD4GSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHnSkAm7Rzm2C/K4JfPP96KMef1dMB8GA1UdIwQY
MBaAFEDvWEmTDMnddCEfs34kEYJJofxAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU85WVNaTU15ZDEwSVItemZpUVJna21oX0VBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9lZWEyMWEtYzlkMy00YzZkLTlhNTIt
OWIyYzZiMDhhODRhLzEvUU85WVNaTU15ZDEwSVItemZpUVJna21oX0VBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9lZWEyMWEtYzlkMy00YzZkLTlhNTItOWIyYzZiMDhhODRh
LzEvUU85WVNaTU15ZDEwSVItemZpUVJna21oX0VBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhi8c0TbH
YvrsIKF4ltKP1GKssT7jE+C7bbVs2i/O0vr2FuSvnTCYQH2QevWfOs9P3cnvt1S5
DDI5fgPEbZLn4rLG3ws1KhXmQvokcV1ZZ8lcMC/OU7C0qVeA0LWvKrD+t5UrYG7x
kDIig/DeXeiNIk6W0NYSbs9EoxjUSS6K5b4WIbgMMIVIPGsSZm6JRvgqJvF147kC
fvUJrZ2jk30SzPpyNqPND2xBz7u4ioaRYzJlZ7FjNbfmjhZLbPEysY8yM3huTa8Z
SCKWznWVqpr4Aepu9JjOGXb2NAKfiF2NvfpTl8YRgwTJCfgW9p1/WC7T2X/288mS
XojZTuEjD+PMyw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:48:09 2025 by rpki-client