Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.mft
File: QOxdgqjrXZjOduYdr-UXZh_E5nU.mft (raw, json)
Hash identifier: YZizw5Rt6RDY6xdbZ1+Emup29mEjZB2xZD/FXeJvM5w=
Subject key identifier: 59:36:6F:D9:95:3A:9D:89:D3:0F:1A:DB:46:78:65:D2:70:B9:E0:B1
Authority key identifier: 40:EC:5D:82:A8:EB:5D:98:CE:76:E6:1D:AF:E5:17:66:1F:C4:E6:75
Certificate issuer: /CN=40ec5d82a8eb5d98ce76e61dafe517661fc4e675
Certificate serial: 01984889A399524ABDE70F9C24FA7F603970
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QOxdgqjrXZjOduYdr-UXZh_E5nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.mft
Manifest number: 15FF
Signing time: Sat 26 Jul 2025 21:00:36 +0000
Manifest this update: Sat 26 Jul 2025 21:00:36 +0000
Manifest next update: Sun 27 Jul 2025 21:00:36 +0000
Files and hashes: 1: QOxdgqjrXZjOduYdr-UXZh_E5nU.crl (hash: 7bI6urTNew+RK46/5XPnucoN6GYs1cEysETAZyKt87Y=)
2: y8Eeia8hdhX_DpCgeBhu63E2X4A.roa (hash: wzZxfTRF1LtzRT1r6hfEh3O3egTZFWx9R6sOBFN3GRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QOxdgqjrXZjOduYdr-UXZh_E5nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:a3:99:52:4a:bd:e7:0f:9c:24:fa:7f:60:39:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40ec5d82a8eb5d98ce76e61dafe517661fc4e675
Validity
Not Before: Jul 26 21:00:36 2025 GMT
Not After : Jul 27 21:00:36 2025 GMT
Subject: CN=59366fd9953a9d89d30f1adb467865d270b9e0b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:69:64:ce:bf:07:85:92:9a:d2:64:04:87:65:
77:ee:b9:1d:f3:9f:ef:a8:5e:75:7d:08:87:16:b0:
88:35:1a:b8:b2:b1:45:7c:88:8a:33:9d:67:c0:fb:
b9:b4:0a:fa:73:9e:d9:ec:7b:52:e2:0c:5b:0c:94:
5f:28:15:12:26:9d:c6:8c:f2:73:58:a5:4a:47:0f:
ec:21:4d:07:69:90:a4:9b:1e:40:c1:69:49:43:a4:
06:47:17:2d:93:3b:7f:5a:7a:4e:b2:2e:0d:5c:ac:
42:ca:c1:e9:f5:d1:3f:03:30:03:e8:ec:e3:8e:6f:
fd:43:b0:c7:50:07:33:54:1d:a5:81:35:99:a3:cc:
59:7b:57:7b:ce:b2:7e:a6:3a:ce:b8:a0:ea:3e:83:
d0:35:f9:53:82:b9:e6:30:9e:09:be:0f:33:d5:29:
f5:b9:1d:92:c8:a8:d9:62:8e:71:12:00:ca:93:ef:
ad:38:42:f8:f4:0b:45:ef:66:7a:8c:87:24:b9:b5:
b9:34:fa:1a:d9:b4:b3:39:af:53:47:dc:17:bb:d8:
27:80:b0:ad:fe:41:54:bd:36:df:de:86:d0:df:e8:
0a:1f:45:a2:86:83:c8:8c:70:3e:03:74:a2:d9:8c:
5d:28:56:bf:77:a3:32:e4:4e:68:ff:61:9b:c9:90:
c3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:36:6F:D9:95:3A:9D:89:D3:0F:1A:DB:46:78:65:D2:70:B9:E0:B1
X509v3 Authority Key Identifier:
keyid:40:EC:5D:82:A8:EB:5D:98:CE:76:E6:1D:AF:E5:17:66:1F:C4:E6:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QOxdgqjrXZjOduYdr-UXZh_E5nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:79:44:b1:69:6b:ae:65:c1:cd:b9:74:1b:91:09:91:55:2b:
86:dc:5f:8d:2f:98:91:35:3f:5f:11:17:91:67:18:fb:50:c7:
a3:b4:b0:a4:d9:81:11:11:96:9c:a7:4d:ad:c2:35:df:2c:cf:
e3:27:82:c4:f8:18:40:cd:61:22:43:51:98:f7:8f:a5:ff:b9:
8b:98:e3:70:f8:34:5a:2c:b6:6c:96:44:fa:59:82:44:1c:50:
ad:09:55:bf:12:d7:c6:00:10:b7:d3:b1:b1:29:ec:6d:41:37:
f8:c7:b5:60:f2:be:3b:82:0b:b9:42:c8:e1:41:14:d7:98:82:
52:ab:6f:2a:f1:25:d5:e6:ff:da:24:b2:0d:a8:7f:56:4e:4a:
5d:ef:e4:fe:2a:fe:c2:5f:6a:dd:77:14:c7:7d:a4:6e:73:49:
b1:e2:2b:b4:46:7c:e3:e9:59:2e:cf:43:35:30:8e:df:dd:1f:
ae:af:5e:46:6e:36:8a:b0:2f:a8:dd:ba:5c:d4:35:63:40:26:
bf:f9:ca:05:04:05:f0:40:77:d3:d6:81:5a:76:40:72:42:11:
2a:2d:c2:0f:4e:e8:46:36:11:6e:0b:21:d6:f8:d9:c0:33:77:
1d:14:e8:f0:63:be:54:5f:53:76:20:4b:f1:35:6e:ea:be:5c:
d4:e7:68:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:35:52 2025 by rpki-client