Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft
File: QO9YSZMMyd10IR-zfiQRgkmh_EA.mft (raw, json)
Hash identifier: ar2Yne9G5JquYDLFpVG/JfwITBRs06JtkxVdBsZ8QIc=
Subject key identifier: A6:D3:3A:15:49:70:4F:11:9E:5F:46:03:98:17:C6:B1:31:77:2E:52
Authority key identifier: 40:EF:58:49:93:0C:C9:DD:74:21:1F:B3:7E:24:11:82:49:A1:FC:40
Certificate issuer: /CN=40ef5849930cc9dd74211fb37e24118249a1fc40
Certificate serial: 0199FBEB9D3381018A0A0BF1E74FBBFD489C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QO9YSZMMyd10IR-zfiQRgkmh_EA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft
Manifest number: 16EC
Signing time: Sun 19 Oct 2025 10:02:26 +0000
Manifest this update: Sun 19 Oct 2025 10:02:26 +0000
Manifest next update: Mon 20 Oct 2025 10:02:26 +0000
Files and hashes: 1: QO9YSZMMyd10IR-zfiQRgkmh_EA.crl (hash: iaRA39NPXKeaZLWCNHFSRy279tE4LAPwKXoQ8S5MnRw=)
2: UO07512-xyl7tPlxWkeH0XFHtjw.roa (hash: FGw3ypGv9x4G+fHO0s0Uxmz/ZFgsQL9y06qgJnZxgwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QO9YSZMMyd10IR-zfiQRgkmh_EA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:9d:33:81:01:8a:0a:0b:f1:e7:4f:bb:fd:48:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40ef5849930cc9dd74211fb37e24118249a1fc40
Validity
Not Before: Oct 19 10:02:26 2025 GMT
Not After : Oct 20 10:02:26 2025 GMT
Subject: CN=a6d33a1549704f119e5f46039817c6b131772e52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:58:3f:db:fa:64:d1:58:a3:1e:e8:6d:d4:4d:
da:5f:ed:a1:3d:32:ba:bf:d9:da:b6:7c:9b:7f:72:
2c:d2:3f:21:02:57:cb:ee:5a:cb:7d:85:b9:4c:f6:
25:59:04:b9:f6:4e:49:a2:56:37:80:1c:32:4f:9f:
50:a1:ce:7d:2f:ae:49:07:37:b2:c6:ab:9c:ff:d0:
1a:f5:e7:fb:7e:63:65:c3:08:b6:16:e1:57:7e:5a:
e3:20:a4:7e:69:bd:76:5e:25:29:f1:af:41:52:b9:
7d:7c:87:7c:9e:3c:40:be:73:34:cc:5a:dd:79:44:
89:84:f9:df:8b:b9:ac:86:6a:48:05:e1:1e:16:e4:
4c:4b:ef:61:97:c0:08:01:fd:c3:c6:fa:02:5d:ea:
7e:6c:cf:a7:20:48:50:8c:63:3c:91:96:c6:3b:9c:
4d:82:97:c4:d6:40:17:e9:00:91:ee:a3:92:14:f9:
55:05:29:a7:f1:16:02:46:1f:af:7d:6e:22:ab:99:
ae:8d:68:73:75:0a:c7:dd:f1:83:e2:f1:30:09:8b:
55:2c:bf:1d:ef:6a:b3:fa:e7:1b:50:29:3c:a2:f2:
3a:9f:ac:5e:07:0d:34:3a:10:f6:00:fb:a7:19:63:
24:9e:a5:8c:03:6e:47:7c:db:06:25:88:f9:ca:0c:
6a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D3:3A:15:49:70:4F:11:9E:5F:46:03:98:17:C6:B1:31:77:2E:52
X509v3 Authority Key Identifier:
keyid:40:EF:58:49:93:0C:C9:DD:74:21:1F:B3:7E:24:11:82:49:A1:FC:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QO9YSZMMyd10IR-zfiQRgkmh_EA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:90:20:88:c4:cb:59:27:de:a2:e2:a4:e2:ea:4a:1d:58:73:
8a:95:70:c5:7d:5b:46:35:7c:44:43:4f:6e:cc:11:09:5a:88:
6e:e1:0e:17:1f:6c:17:3b:5d:65:a8:66:1b:f7:a7:32:ea:32:
f3:1c:c1:c0:89:b6:08:b3:e1:45:97:ae:ab:cf:b8:d8:3e:b8:
49:c6:96:9d:22:94:75:01:70:84:5b:b8:e0:78:30:5c:df:43:
35:dc:e2:6b:55:83:3c:1d:eb:df:d9:24:7c:c4:33:e1:9d:03:
17:bd:7f:94:9f:4d:fa:ff:3a:46:9e:75:26:8b:ef:a5:27:93:
04:24:2d:76:53:86:7b:be:f8:b0:26:17:d2:6f:5c:8d:c6:3d:
26:00:1f:ac:10:b1:fd:74:d4:42:51:b2:61:3c:66:12:28:ed:
fe:0c:bd:2e:d1:d8:d8:47:bc:7f:b8:5f:ea:31:7b:f7:34:5c:
73:ec:f4:fc:9a:88:ca:13:1c:2f:00:81:cd:4d:94:5c:07:29:
46:8f:6f:b5:1b:d4:55:4c:22:cb:25:35:71:81:78:f9:98:22:
cf:13:11:1c:a1:8a:77:c7:96:06:9f:3a:ec:57:aa:e1:46:fe:
83:2c:8b:5c:11:cd:2f:2e:c8:72:9f:8a:8e:c8:d9:c1:d9:32:
30:c7:b7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:47 2025 by rpki-client