Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.mft
File: QO5hC9zSO60rEZK9RcqKl204Vdo.mft (raw, json)
Hash identifier: YZpXCwC//xJ3LMQa6UJwkm4EV/Y4wZ7QAAL00pvgSm0=
Subject key identifier: BA:87:0F:40:D5:32:73:18:08:30:C5:A0:1F:D4:B2:F1:18:8C:4C:A9
Authority key identifier: 40:EE:61:0B:DC:D2:3B:AD:2B:11:92:BD:45:CA:8A:97:6D:38:55:DA
Certificate issuer: /CN=40ee610bdcd23bad2b1192bd45ca8a976d3855da
Certificate serial: 0198D4726F077E6CAB03AF4999365DCFC498
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QO5hC9zSO60rEZK9RcqKl204Vdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.mft
Manifest number: 14E3
Signing time: Sat 23 Aug 2025 01:02:05 +0000
Manifest this update: Sat 23 Aug 2025 01:02:05 +0000
Manifest next update: Sun 24 Aug 2025 01:02:05 +0000
Files and hashes: 1: QO5hC9zSO60rEZK9RcqKl204Vdo.crl (hash: WD6/c13tOYptgjqpbMO3XW3gGHFpCPbuWrcDtUSGAPY=)
2: WXzwl6dDgLLRTGjEWsJa-Mt4DFY.roa (hash: AsvwbpP9IRPmxXb+scTtlP8HJBrFwXPs3woICGrCIxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QO5hC9zSO60rEZK9RcqKl204Vdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:6f:07:7e:6c:ab:03:af:49:99:36:5d:cf:c4:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40ee610bdcd23bad2b1192bd45ca8a976d3855da
Validity
Not Before: Aug 23 01:02:05 2025 GMT
Not After : Aug 24 01:02:05 2025 GMT
Subject: CN=ba870f40d53273180830c5a01fd4b2f1188c4ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f5:05:50:32:69:d4:23:8b:ba:34:9c:1a:4e:
9c:32:16:3a:bb:68:58:20:9c:ea:ba:75:ab:24:df:
40:44:15:d2:d3:af:8d:a7:6b:cb:f8:48:1d:fd:88:
14:23:02:bb:5e:e7:5e:15:ee:07:ea:72:24:24:82:
68:db:5e:a6:4e:09:00:20:c8:d3:c4:74:4d:7f:8a:
12:cf:e9:32:1b:b5:12:6d:82:1f:e3:11:0c:9c:52:
50:4a:84:e0:1f:a0:c3:05:bc:e7:9a:24:06:50:ef:
0f:b4:02:79:be:24:79:fb:96:e6:be:09:de:b7:2e:
58:f7:00:11:70:72:3d:6e:ce:cd:2d:dc:08:18:d8:
bc:7a:36:78:8e:79:98:a4:b9:10:87:f6:73:12:82:
08:0c:94:09:ec:f4:af:7b:34:46:52:d4:84:0f:33:
54:b9:52:9b:18:e7:93:da:a5:8a:4e:38:58:77:0e:
48:49:10:50:33:71:2b:5d:4d:95:af:26:33:30:60:
81:35:c3:dc:69:85:93:e9:b4:fb:33:3e:a2:dd:4f:
d2:8a:7a:3b:ba:6c:31:00:3c:da:8a:4a:c2:87:0f:
cc:f1:3d:f5:73:5a:65:fd:fc:d3:70:b1:50:a3:b0:
39:b2:ac:cb:5b:ae:61:ba:e3:6a:1c:f3:c1:45:80:
5c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:87:0F:40:D5:32:73:18:08:30:C5:A0:1F:D4:B2:F1:18:8C:4C:A9
X509v3 Authority Key Identifier:
keyid:40:EE:61:0B:DC:D2:3B:AD:2B:11:92:BD:45:CA:8A:97:6D:38:55:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QO5hC9zSO60rEZK9RcqKl204Vdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:de:eb:a1:7c:ac:8f:c0:7d:d7:ab:65:4c:b9:64:4d:99:59:
85:90:94:1c:7d:0f:a6:32:7d:07:43:2d:aa:6a:62:cd:bd:3f:
20:75:cb:d5:f5:c3:c9:90:d7:d9:01:f9:05:05:3f:93:33:f6:
3e:60:16:6c:e2:f8:79:0d:00:07:23:42:ab:60:ec:f2:4c:0d:
46:b2:14:6f:be:8b:eb:24:87:b7:57:1b:f7:44:9e:0f:e4:05:
cb:bd:ac:8c:30:18:83:d5:3c:4e:95:8b:e0:86:05:fb:8a:ec:
06:be:36:f1:44:eb:5c:88:32:5e:2c:c0:2e:30:ef:5c:e0:fd:
3f:46:5a:89:97:d0:f7:8e:ae:09:fc:90:ca:13:1d:bb:be:03:
d3:79:d6:1a:ed:8d:65:5d:c0:dd:ef:16:7b:2f:b1:da:63:a6:
f7:c9:24:9f:33:33:6e:91:8d:37:32:f9:58:7a:6e:45:c4:e0:
e3:b1:01:0c:e4:70:94:7e:bc:92:33:a3:04:06:c7:15:f1:95:
5b:7a:11:38:81:ba:3e:49:c6:1f:e9:2b:ba:ba:49:94:1e:2c:
be:64:38:db:43:21:31:22:94:03:56:d6:4e:33:f8:0c:3f:87:
1e:f5:a4:e3:ea:39:49:c2:d2:39:d7:a4:7d:c9:5e:8d:09:b7:
ae:22:a5:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:08 2025 by rpki-client