Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft
File: QO9YSZMMyd10IR-zfiQRgkmh_EA.mft (raw, json)
Hash identifier: j8Luv/31kRRhsKUHNgI6LYJdetJ9+ljplEN8FvTYAHY=
Subject key identifier: BA:FE:9D:67:68:F0:BA:F7:03:C8:CB:8E:B7:16:80:A9:5B:9E:06:29
Authority key identifier: 40:EF:58:49:93:0C:C9:DD:74:21:1F:B3:7E:24:11:82:49:A1:FC:40
Certificate issuer: /CN=40ef5849930cc9dd74211fb37e24118249a1fc40
Certificate serial: 019841AC94A94975719A8EAFE619C4BE2604
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QO9YSZMMyd10IR-zfiQRgkmh_EA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft
Manifest number: 1607
Signing time: Fri 25 Jul 2025 13:01:25 +0000
Manifest this update: Fri 25 Jul 2025 13:01:25 +0000
Manifest next update: Sat 26 Jul 2025 13:01:25 +0000
Files and hashes: 1: QO9YSZMMyd10IR-zfiQRgkmh_EA.crl (hash: kjjAbs/QwiX9me7upPVAik/HdBlg11LzKBnKM7kJQiA=)
2: UO07512-xyl7tPlxWkeH0XFHtjw.roa (hash: FGw3ypGv9x4G+fHO0s0Uxmz/ZFgsQL9y06qgJnZxgwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QO9YSZMMyd10IR-zfiQRgkmh_EA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 13:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:41:ac:94:a9:49:75:71:9a:8e:af:e6:19:c4:be:26:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40ef5849930cc9dd74211fb37e24118249a1fc40
Validity
Not Before: Jul 25 13:01:25 2025 GMT
Not After : Jul 26 13:01:25 2025 GMT
Subject: CN=bafe9d6768f0baf703c8cb8eb71680a95b9e0629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2f:76:e9:3b:70:26:89:08:2e:1b:4b:91:da:
c5:6a:f2:2f:96:e0:b0:c4:9c:42:d2:6a:07:44:85:
c4:ae:37:18:f2:7f:b1:40:15:ea:d2:46:43:ce:af:
39:6f:1b:29:85:86:12:e9:18:ad:a2:ea:85:e8:25:
56:a3:63:3d:f2:71:2a:8e:80:5e:6d:04:49:f4:bb:
5b:26:3e:1a:e4:71:f1:6f:dc:1f:86:4e:6c:87:61:
9f:11:37:64:d5:c9:ec:fe:b3:78:67:03:8a:a0:ef:
63:5b:50:a2:f2:66:6b:71:c9:36:a3:22:cb:31:60:
18:5b:ca:f2:03:bc:e6:9a:c5:f4:2b:9d:84:d5:26:
6e:47:14:a2:d7:51:75:99:2f:56:06:73:3d:c1:0f:
4e:79:15:4e:96:c0:c6:e1:a0:df:53:2c:3a:b6:60:
a4:99:22:9d:1d:32:0b:a3:e3:42:b3:be:97:0d:80:
8b:e1:f6:0d:62:6a:5e:e7:0f:84:de:66:bf:5f:a1:
a7:cb:74:9f:6d:f1:18:04:84:2a:f7:2a:47:17:a7:
9f:1d:a7:5c:13:21:2a:02:86:b3:c8:77:5d:98:49:
73:74:9e:2e:bf:0b:8f:32:cd:31:95:b2:7c:ea:48:
ee:3c:e0:b2:4d:1b:4b:b2:40:e1:81:ea:b4:ff:de:
38:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:FE:9D:67:68:F0:BA:F7:03:C8:CB:8E:B7:16:80:A9:5B:9E:06:29
X509v3 Authority Key Identifier:
keyid:40:EF:58:49:93:0C:C9:DD:74:21:1F:B3:7E:24:11:82:49:A1:FC:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QO9YSZMMyd10IR-zfiQRgkmh_EA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:f8:f1:2f:d1:eb:3d:63:88:e6:cd:f1:13:c3:5d:a1:f3:f2:
d8:8e:29:92:b6:85:2e:6f:ad:03:6b:28:ea:bd:c5:2a:97:e4:
66:42:52:b7:35:bd:a1:b7:9c:7e:9d:83:df:ae:e4:2f:f8:37:
69:3b:3c:ff:84:5c:d8:af:78:03:0e:d7:06:07:be:f2:9a:00:
49:b8:6b:9b:d9:26:96:9a:44:fb:e0:cd:bd:7e:fd:5a:53:e9:
1c:c3:62:34:46:4b:8c:01:49:9d:96:f4:b3:d3:2b:b2:33:38:
e9:77:45:60:e4:ea:9c:89:c3:4e:bd:9d:4f:33:01:eb:00:ea:
11:7e:f7:b8:fc:e7:76:4b:d7:4f:c5:44:56:95:5a:08:7a:d8:
22:71:04:6e:e4:de:4c:6c:b7:3b:58:fa:64:96:e0:f8:eb:fe:
c3:74:a6:7f:0f:de:7e:5e:a6:02:92:a2:fe:cf:12:6c:83:65:
91:ec:2b:25:30:33:dc:e5:a8:63:31:d5:12:36:fe:c6:00:61:
6e:28:d8:41:15:39:0c:fb:24:66:06:7c:90:e4:9f:dc:67:41:
b2:90:50:1c:91:43:34:f3:5a:e5:ac:19:f1:aa:b1:a3:51:c9:
57:96:30:8d:64:fd:ad:73:38:9d:d2:7e:7e:45:0a:d2:16:b2:
5c:9a:7c:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhBrJSpSXVxmo6v5hnEviYEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwZWY1ODQ5OTMwY2M5ZGQ3NDIxMWZiMzdlMjQxMTgyNDlh
MWZjNDAwHhcNMjUwNzI1MTMwMTI1WhcNMjUwNzI2MTMwMTI1WjAzMTEwLwYDVQQD
EyhiYWZlOWQ2NzY4ZjBiYWY3MDNjOGNiOGViNzE2ODBhOTViOWUwNjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqC926TtwJokILhtLkdrFavIvluCw
xJxC0moHRIXErjcY8n+xQBXq0kZDzq85bxsphYYS6RitouqF6CVWo2M98nEqjoBe
bQRJ9LtbJj4a5HHxb9wfhk5sh2GfETdk1cns/rN4ZwOKoO9jW1Ci8mZrcck2oyLL
MWAYW8ryA7zmmsX0K52E1SZuRxSi11F1mS9WBnM9wQ9OeRVOlsDG4aDfUyw6tmCk
mSKdHTILo+NCs76XDYCL4fYNYmpe5w+E3ma/X6Gny3SfbfEYBIQq9ypHF6efHadc
EyEqAoazyHddmElzdJ4uvwuPMs0xlbJ86kjuPOCyTRtLskDhgeq0/944bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLr+nWdo8Lr3A8jLjrcWgKlbngYpMB8GA1UdIwQY
MBaAFEDvWEmTDMnddCEfs34kEYJJofxAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU85WVNaTU15ZDEwSVItemZpUVJna21oX0VBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9lZWEyMWEtYzlkMy00YzZkLTlhNTIt
OWIyYzZiMDhhODRhLzEvUU85WVNaTU15ZDEwSVItemZpUVJna21oX0VBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9lZWEyMWEtYzlkMy00YzZkLTlhNTItOWIyYzZiMDhhODRh
LzEvUU85WVNaTU15ZDEwSVItemZpUVJna21oX0VBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATPjxL9Hr
PWOI5s3xE8NdofPy2I4pkraFLm+tA2so6r3FKpfkZkJStzW9obecfp2D367kL/g3
aTs8/4Rc2K94Aw7XBge+8poASbhrm9kmlppE++DNvX79WlPpHMNiNEZLjAFJnZb0
s9MrsjM46XdFYOTqnInDTr2dTzMB6wDqEX73uPzndkvXT8VEVpVaCHrYInEEbuTe
TGy3O1j6ZJbg+Ov+w3Smfw/efl6mApKi/s8SbINlkewrJTAz3OWoYzHVEjb+xgBh
bijYQRU5DPskZgZ8kOSf3GdBspBQHJFDNPNa5awZ8aqxo1HJV5YwjWT9rXM4ndJ+
fkUK0hayXJp84g==
-----END CERTIFICATE-----
Generated at Fri Jul 25 21:39:27 2025 by rpki-client