Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft
File: QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft (raw, json)
Hash identifier: 9LnInxv7wWwzUX0JxRBueMNuNBzGng+ayKZTScQ8ML8=
Subject key identifier: 4E:81:11:59:2C:AE:6A:A0:C6:2A:29:9F:AE:14:A1:A7:9F:61:4A:09
Authority key identifier: 40:E3:95:3C:5C:B4:52:F1:59:F8:E1:50:5F:C7:02:E8:83:65:7E:72
Certificate issuer: /CN=40e3953c5cb452f159f8e1505fc702e883657e72
Certificate serial: 0199258D2BFB9BD6AA0D2D6FD54D83FDCA46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft
Manifest number: 167A
Signing time: Sun 07 Sep 2025 19:00:32 +0000
Manifest this update: Sun 07 Sep 2025 19:00:32 +0000
Manifest next update: Mon 08 Sep 2025 19:00:32 +0000
Files and hashes: 1: 0UiMAD3K1Vd_o1ukey_EamOgfsg.roa (hash: /lgJM2bqi/sUpmdCb7crrQqVayvXqEJ8evDSByU3DJU=)
2: QOOVPFy0UvFZ-OFQX8cC6INlfnI.crl (hash: 059gxQT1ZtOJEd9axKkLbyXNrE+9fy4g0QESv3pywbM=)
3: aVnXSxl3A9imF58Ni6PA9o97Lt0.roa (hash: 1b03aGZyiDI4vZq8xAQwMk9wWsMeLl0pjrQrWqhenxw=)
4: misEsljA75nAA5oIsh_k4GVCg4w.roa (hash: p4BzWp3j9j27Wjuz+V0a+txHqIiOhQ+ybn3eqzzf6rU=)
5: ujK7196Gk_c3ddVaz2vNjb1yuKM.roa (hash: oPbTKsm4Ke6sVA27ztN+8OGkGTX5DqK9hqJSWTYFs3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 17:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:25:8d:2b:fb:9b:d6:aa:0d:2d:6f:d5:4d:83:fd:ca:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40e3953c5cb452f159f8e1505fc702e883657e72
Validity
Not Before: Sep 7 19:00:32 2025 GMT
Not After : Sep 8 19:00:32 2025 GMT
Subject: CN=4e8111592cae6aa0c62a299fae14a1a79f614a09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:24:74:cd:bf:4a:50:08:d2:a4:51:ca:05:6e:
df:9e:9e:b4:25:63:c5:97:da:a1:e7:5a:2a:49:1e:
c6:f7:ff:d4:b5:f1:fc:3e:9a:7f:77:7d:cf:0d:dc:
13:a5:7e:df:d4:37:ae:9c:e3:03:c5:de:91:3e:e4:
e5:d2:0e:0f:0d:19:df:b9:ed:ce:74:07:0c:3d:83:
ec:c6:3b:64:07:c2:d7:7d:7d:ed:9b:0c:3b:bd:bf:
75:19:74:e1:96:c0:1f:eb:ad:92:ba:6f:8b:7a:39:
4b:7e:d8:a0:e0:c4:ef:e5:5f:1c:35:86:55:39:b5:
48:b2:2b:27:30:47:40:f9:f2:0b:40:cd:90:92:82:
04:fd:86:23:ab:06:b0:4b:a0:65:70:a1:f9:47:8b:
4f:a4:57:c2:12:46:cc:17:ae:b6:3a:18:9e:e1:9e:
a5:ff:17:05:4b:a7:d7:03:6f:9e:d4:34:bb:92:59:
bd:e0:f3:53:64:f4:e1:59:08:14:84:f1:d7:ed:53:
c3:8d:0a:cb:7c:fc:dc:90:fc:6d:8f:42:ab:02:dd:
16:83:2b:8c:21:db:3d:2c:b7:23:33:82:1d:93:37:
85:b3:c2:c4:a6:a7:42:54:85:09:da:a2:b5:bc:a1:
07:74:8e:2d:17:27:4c:19:e2:27:d9:de:e7:f2:7b:
e1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:81:11:59:2C:AE:6A:A0:C6:2A:29:9F:AE:14:A1:A7:9F:61:4A:09
X509v3 Authority Key Identifier:
keyid:40:E3:95:3C:5C:B4:52:F1:59:F8:E1:50:5F:C7:02:E8:83:65:7E:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:33:17:78:2a:b7:b6:8f:d9:cc:c4:4d:f5:4a:82:ff:3f:58:
dd:99:73:78:b4:aa:55:b7:9a:ae:25:e9:69:6f:22:e4:de:5f:
b0:f3:4b:58:e8:fb:f1:d8:e0:cf:04:df:08:19:37:9c:d0:af:
72:90:e5:83:25:29:43:8a:f4:14:c4:e8:d0:b0:28:b5:c3:05:
19:11:c0:92:e2:c1:8c:c3:59:ca:5f:db:6e:8b:d9:04:20:cb:
3b:7d:5f:d6:37:d0:30:4e:66:33:2f:aa:ee:1e:74:20:20:50:
1e:e9:70:ba:ff:ae:d9:bf:e9:d3:a6:fc:69:67:e3:02:5f:08:
e4:69:7c:9b:b4:c2:ac:d9:f1:e0:2f:d2:15:1d:2f:48:16:07:
e2:26:f7:0a:24:e6:08:70:bd:01:77:69:96:6d:ce:bf:18:bb:
0d:4d:96:e0:9b:f7:d8:60:12:61:80:6e:7a:a8:02:1f:fd:42:
d1:2f:0c:02:c5:ab:e2:8e:4d:28:b7:72:d1:cb:7f:9b:c9:d0:
1e:b5:5a:8e:f2:c7:58:f8:75:82:99:d8:e2:10:a4:d7:ad:41:
d4:2f:0b:fb:56:d7:6d:f0:ba:0a:4b:69:63:d3:96:68:f3:ff:
db:6d:8b:5f:dc:77:91:9b:66:01:56:50:81:b2:6a:66:a5:5c:
4c:5b:52:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 02:24:12 2025 by rpki-client