Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.mft
File: QO5hC9zSO60rEZK9RcqKl204Vdo.mft (raw, json)
Hash identifier: YWmFNsyAm4ky6FxFMiIdJIviACp/UOOuvOp7U00nTUk=
Subject key identifier: DD:94:28:0F:3B:CC:69:58:55:05:3B:09:32:92:5F:A9:FB:7D:37:1A
Authority key identifier: 40:EE:61:0B:DC:D2:3B:AD:2B:11:92:BD:45:CA:8A:97:6D:38:55:DA
Certificate issuer: /CN=40ee610bdcd23bad2b1192bd45ca8a976d3855da
Certificate serial: 0197B6A16A8941D4279109282E7EE0AED021
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QO5hC9zSO60rEZK9RcqKl204Vdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.mft
Manifest number: 144F
Signing time: Sat 28 Jun 2025 13:02:01 +0000
Manifest this update: Sat 28 Jun 2025 13:02:01 +0000
Manifest next update: Sun 29 Jun 2025 13:02:01 +0000
Files and hashes: 1: QO5hC9zSO60rEZK9RcqKl204Vdo.crl (hash: IXIb0LrKsxYcQYqtDEugBYy/7r/5Rw4UNzD676FRuYU=)
2: WXzwl6dDgLLRTGjEWsJa-Mt4DFY.roa (hash: AsvwbpP9IRPmxXb+scTtlP8HJBrFwXPs3woICGrCIxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QO5hC9zSO60rEZK9RcqKl204Vdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:6a:89:41:d4:27:91:09:28:2e:7e:e0:ae:d0:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40ee610bdcd23bad2b1192bd45ca8a976d3855da
Validity
Not Before: Jun 28 13:02:01 2025 GMT
Not After : Jun 29 13:02:01 2025 GMT
Subject: CN=dd94280f3bcc695855053b0932925fa9fb7d371a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9d:27:96:db:44:60:74:2b:26:4d:93:13:0f:
da:1e:a5:2b:5f:9c:78:83:f1:9b:bb:ef:23:0f:a6:
9a:f2:e7:79:c9:fc:53:d4:7b:77:8b:c5:98:5a:cb:
f9:29:a1:bc:28:31:08:35:64:3a:86:2d:6d:2d:4c:
92:ca:d8:66:94:a5:f6:e8:1a:f5:a6:b5:00:9b:59:
96:d5:77:14:01:85:fe:70:61:a8:5d:62:da:62:94:
39:6c:1c:e8:04:84:92:db:b9:67:26:1c:42:22:2b:
4d:87:30:ac:88:d9:3e:ab:ac:1a:a4:61:c7:31:31:
33:e6:f0:62:0f:18:ea:c0:00:86:e9:4c:a6:e2:de:
f4:f9:fd:57:48:90:14:df:5e:00:2c:ac:c3:a3:fc:
14:f2:55:58:e4:55:d9:4f:08:17:7e:7b:d2:fb:dd:
c4:d0:2a:37:52:1d:a3:ef:94:b8:05:63:a0:b0:bc:
e6:f0:0b:d1:e7:0d:31:ce:74:8a:85:8e:df:95:ae:
99:42:8c:fb:a6:c3:43:74:04:ee:cc:ab:67:7a:10:
88:fd:0d:1e:0b:00:2f:1f:ed:d9:a5:39:f9:c4:34:
54:d0:bb:41:d9:c0:68:21:f8:c9:b5:c7:13:d4:86:
78:0e:53:5f:3c:80:f5:a2:34:4a:64:f6:d1:b0:80:
c8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:94:28:0F:3B:CC:69:58:55:05:3B:09:32:92:5F:A9:FB:7D:37:1A
X509v3 Authority Key Identifier:
keyid:40:EE:61:0B:DC:D2:3B:AD:2B:11:92:BD:45:CA:8A:97:6D:38:55:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QO5hC9zSO60rEZK9RcqKl204Vdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:92:7c:29:33:2a:f8:51:47:e7:03:9f:92:0d:f9:b0:69:e1:
d1:eb:8b:e4:82:21:2e:7d:bb:9a:4c:72:fd:64:ad:53:a0:e0:
ce:12:17:17:d5:2d:b0:ae:d5:5a:82:ff:5a:09:6f:26:e9:09:
f7:34:b1:50:8c:30:5f:ca:80:26:64:12:e8:0b:79:63:9b:24:
2b:8d:ae:50:a7:60:8e:4a:fe:81:5b:0d:2e:39:89:5d:fc:03:
66:b3:93:f0:00:fc:a1:c1:86:1b:9d:3c:73:ec:43:9d:44:6a:
cc:cf:80:0a:f9:ed:0a:9e:0a:d2:f0:9c:c4:35:70:51:42:22:
f8:d5:bd:64:93:75:50:87:e5:de:93:c1:05:b2:42:fb:8e:08:
85:96:0d:ad:15:d7:3b:3e:a0:7d:37:f6:3d:36:f3:6a:96:d7:
01:2d:4c:38:dd:11:f8:83:b1:53:6d:55:d7:f4:6c:5f:7a:03:
25:a2:2b:f5:01:33:05:67:08:09:f3:41:ea:10:2b:e3:b5:a1:
12:d8:95:ba:f8:63:93:80:ea:28:79:1c:23:6a:ae:52:26:8a:
36:fc:db:23:71:c6:c1:8f:a8:6f:80:4a:4c:32:08:9b:81:de:
36:8c:8d:58:00:1d:76:85:af:c2:a9:62:8f:d8:81:03:e8:f5:
da:c1:51:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:30:18 2025 by rpki-client