Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft
File: QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft (raw, json)
Hash identifier: HvqJ+ZwJ1CruFGPqXIVpYpqEmTL57r+3UmtU4Uq3crY=
Subject key identifier: 75:3A:00:7F:F0:FF:94:A8:AB:DA:C8:2A:F5:18:8E:15:B1:67:26:C7
Authority key identifier: 40:33:9D:30:44:99:D0:69:AE:CD:8B:D0:E8:FB:A0:2E:52:2F:57:6A
Certificate issuer: /CN=40339d304499d069aecd8bd0e8fba02e522f576a
Certificate serial: 01984A77D7057EEAC08C5933548A3F67F0CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QDOdMESZ0GmuzYvQ6PugLlIvV2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft
Manifest number: 1595
Signing time: Sun 27 Jul 2025 06:00:24 +0000
Manifest this update: Sun 27 Jul 2025 06:00:24 +0000
Manifest next update: Mon 28 Jul 2025 06:00:24 +0000
Files and hashes: 1: HM44YU_keUzYw0-k8-_A-z_iUEg.roa (hash: SXS4UlPdGWp6+QLYLhTDdcpIKj693zGOOUmfQDbJfCI=)
2: QDOdMESZ0GmuzYvQ6PugLlIvV2o.crl (hash: ud0BDbcW8GrjTqe/jd+r6gbhAdbOqNaXe3PK+OvkNWA=)
3: kh936l2vxgccX_jvVlzYGLxpdnk.roa (hash: 1aSc0Ne3PFeWf8CzHXerC/R90wO3YKjdcfKwJxtbP2I=)
4: yR56vcKwFBMaxDiG7yY2cvJ4n0Q.roa (hash: iQ1t4A53B7El/PSKuRvXWWegJvuT/fcPU9ZHNFZ4LFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/QDOdMESZ0GmuzYvQ6PugLlIvV2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:d7:05:7e:ea:c0:8c:59:33:54:8a:3f:67:f0:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40339d304499d069aecd8bd0e8fba02e522f576a
Validity
Not Before: Jul 27 06:00:24 2025 GMT
Not After : Jul 28 06:00:24 2025 GMT
Subject: CN=753a007ff0ff94a8abdac82af5188e15b16726c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:79:57:6c:36:1c:78:ff:d4:8f:80:37:1b:a2:
a9:a4:3b:ec:cf:3b:eb:1e:bf:ad:14:12:54:a7:ba:
f9:57:28:39:c0:eb:97:5b:47:3f:d6:84:07:4e:f7:
2e:68:01:db:20:1e:a5:4e:16:78:59:d4:5d:0e:e7:
1f:b6:94:ad:cb:2f:57:d6:36:31:f7:d9:0c:e7:d1:
48:58:c5:23:28:71:38:7a:c2:1f:c6:f3:8c:d9:bd:
fb:f4:37:14:bb:31:2f:81:b7:09:23:20:21:69:25:
29:14:de:0f:cd:c5:01:11:25:f9:92:25:d4:b2:d6:
a3:59:83:c4:5a:93:d1:be:b9:62:e8:f6:6b:15:56:
05:75:91:f0:d7:99:f3:da:b9:10:73:27:fd:47:f1:
9d:12:43:8f:37:3f:1e:80:ea:c3:3a:b6:5b:8b:20:
4f:09:29:46:83:32:12:89:8d:09:8d:a4:65:62:37:
2c:66:7f:f0:0e:ef:b4:7c:ae:06:07:b8:b0:70:8a:
5c:8c:08:67:fb:33:2b:fc:88:23:5e:e5:36:d8:ef:
a5:93:86:3e:a0:56:a6:d1:17:44:92:c7:92:7e:08:
a6:c1:f0:18:90:cb:5b:ed:96:14:43:4b:82:c0:60:
de:52:b5:9b:f9:7f:6b:b8:4c:1f:b7:97:18:d1:ac:
f7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:3A:00:7F:F0:FF:94:A8:AB:DA:C8:2A:F5:18:8E:15:B1:67:26:C7
X509v3 Authority Key Identifier:
keyid:40:33:9D:30:44:99:D0:69:AE:CD:8B:D0:E8:FB:A0:2E:52:2F:57:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QDOdMESZ0GmuzYvQ6PugLlIvV2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:87:7b:ea:16:e7:5c:10:33:51:23:06:1c:ac:5f:08:9c:00:
79:96:6a:b1:ad:1c:a5:98:37:b4:f1:b4:ad:24:4b:b8:2a:de:
e5:16:66:03:bd:c3:9e:95:2f:e5:f9:fb:2e:b5:16:04:3a:3d:
d8:e4:12:7b:7c:d6:54:d4:98:02:b7:62:09:26:41:e8:68:99:
35:e7:53:d3:e9:17:c2:1a:0b:03:d2:6c:44:ba:87:65:2a:b9:
9e:ef:6d:b2:55:72:be:db:50:3f:2f:1b:73:ba:ce:26:5f:99:
40:7c:6d:85:07:ce:0f:03:7d:3c:57:05:f8:f2:62:d9:9f:f0:
81:db:0d:7a:5d:07:cd:b0:99:b1:39:15:40:4b:04:d7:41:a7:
42:71:59:01:e9:35:ef:62:b8:ec:e5:a0:ae:e9:9a:e7:3c:29:
41:a5:49:3e:70:5c:a6:5b:2f:c8:d3:73:00:13:cb:23:da:83:
30:9f:09:3b:5e:b5:4d:30:79:34:82:09:3f:2e:96:c7:19:11:
e5:fd:f5:5e:41:45:30:32:da:20:b2:b7:6d:e6:c2:0f:06:f3:
25:31:a7:0d:5d:59:2f:5a:0a:c9:c7:22:3e:49:f5:cf:c3:0e:
27:ac:de:ef:ea:ad:4a:ce:c5:b3:c3:60:a5:d0:40:eb:43:95:
58:56:33:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:32:48 2025 by rpki-client