Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/b62439-7e47-42e1-8fdc-18e91296022d/1/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.mft
File: QOpeOfhjVzbkjfU4IqXKzBC0Oh8.mft (raw, json)
Hash identifier: KyWdALhvgWlCauw2d8RYXh1VaH6JMno924MFtmEetk0=
Subject key identifier: 55:34:EE:0E:83:3D:E8:2A:D3:46:FF:DB:42:F9:F5:09:DC:93:64:04
Authority key identifier: 40:EA:5E:39:F8:63:57:36:E4:8D:F5:38:22:A5:CA:CC:10:B4:3A:1F
Certificate issuer: /CN=40ea5e39f8635736e48df53822a5cacc10b43a1f
Certificate serial: 019848F7A0094434117A5B9F21A17742C43F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/b62439-7e47-42e1-8fdc-18e91296022d/1/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.mft
Manifest number: 1602
Signing time: Sat 26 Jul 2025 23:00:44 +0000
Manifest this update: Sat 26 Jul 2025 23:00:44 +0000
Manifest next update: Sun 27 Jul 2025 23:00:44 +0000
Files and hashes: 1: QOpeOfhjVzbkjfU4IqXKzBC0Oh8.crl (hash: xG2qDkifFaCcIsi8+UNMy913mB+Jur4fjNN7odmZwKc=)
2: ybs61exhN0sYw1YgpfqdbmCmhqk.roa (hash: PW/e8DJb4WqsNiI0ODBUiDNLr0vhf0OlyJoAR5NWnhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/b62439-7e47-42e1-8fdc-18e91296022d/1/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/b62439-7e47-42e1-8fdc-18e91296022d/1/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:a0:09:44:34:11:7a:5b:9f:21:a1:77:42:c4:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40ea5e39f8635736e48df53822a5cacc10b43a1f
Validity
Not Before: Jul 26 23:00:44 2025 GMT
Not After : Jul 27 23:00:44 2025 GMT
Subject: CN=5534ee0e833de82ad346ffdb42f9f509dc936404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:e8:60:bc:cb:6e:e0:7d:ee:90:41:3d:a6:54:
bf:cf:3e:9a:1f:be:67:08:cb:94:24:35:41:a0:05:
d6:9c:b7:fe:20:eb:71:0a:8c:47:57:a7:6f:df:2c:
d4:0d:91:6f:7d:9e:81:94:93:70:63:c2:72:84:ac:
56:e2:6a:64:0b:8d:c8:e1:db:5d:f9:37:70:e7:3c:
8f:30:92:40:eb:cd:d0:10:14:72:06:4d:1a:e8:41:
37:20:b7:44:25:8f:b0:7e:29:d5:31:e2:ad:13:aa:
55:9a:d3:6e:7e:bb:92:3a:f3:81:71:8f:0c:1d:d6:
26:f1:06:1a:a8:c0:67:0a:a2:5a:4d:3b:ab:65:77:
c5:29:f9:19:49:47:91:93:53:23:fe:be:42:1a:e0:
c9:11:8a:83:9c:3c:94:1b:25:3b:5a:b1:e9:db:41:
31:41:b3:fe:de:94:6c:f8:ef:d5:c6:61:93:9c:c7:
b0:70:20:a2:87:8d:c6:7c:26:27:3c:6b:7b:20:5c:
5e:ef:18:cd:23:d1:27:2b:41:92:11:35:a9:2b:45:
9d:e4:19:65:66:2f:59:fa:da:a9:ba:8d:5b:78:01:
7f:09:b0:38:55:a9:82:a5:d2:e1:5b:a7:99:34:22:
83:e1:f5:11:06:31:4a:c3:58:fe:36:6d:f6:72:12:
47:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:34:EE:0E:83:3D:E8:2A:D3:46:FF:DB:42:F9:F5:09:DC:93:64:04
X509v3 Authority Key Identifier:
keyid:40:EA:5E:39:F8:63:57:36:E4:8D:F5:38:22:A5:CA:CC:10:B4:3A:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/b62439-7e47-42e1-8fdc-18e91296022d/1/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/b62439-7e47-42e1-8fdc-18e91296022d/1/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:c2:26:18:78:1d:6b:d1:17:7d:ec:de:1e:96:2c:f6:76:66:
1a:3d:d0:51:b0:4a:26:2e:b1:92:33:9c:a2:5e:a6:3b:d6:46:
71:ae:b4:d8:5c:c7:5e:e4:9f:2b:84:ea:5d:74:1b:ac:6a:87:
97:c0:e9:4b:96:58:f1:b7:a4:00:e2:07:49:4c:b4:e7:c7:3b:
f0:7e:0c:dc:9c:56:64:c5:03:a2:e0:26:74:a1:9e:fd:36:38:
34:9a:08:7f:6f:54:0d:2c:71:9b:9c:ad:d2:ff:3e:53:cb:87:
d1:35:e1:94:01:8a:49:c0:70:c3:70:e7:5f:5f:ab:95:49:2c:
4c:a6:1c:a2:c1:89:29:0f:9f:e2:99:bf:65:83:57:a0:f3:e0:
b7:d7:84:9d:ae:e5:66:da:fe:8d:99:2c:f2:f0:67:29:1f:c8:
e9:76:d2:77:8a:59:a9:e0:b0:4a:98:71:82:4b:ba:d1:83:75:
62:5f:47:e3:62:c5:a4:72:f7:58:af:52:96:31:b9:2b:06:6b:
4a:87:cf:86:5e:cb:76:75:90:8a:2a:9c:86:3f:3d:00:09:8f:
88:9b:e1:b3:37:e9:f2:03:d9:9f:4b:e3:34:ab:ce:47:3a:9c:
b6:f1:5e:ae:22:b6:51:13:b2:0e:49:b5:4d:f9:53:dc:1e:bb:
45:f8:09:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:23:47 2025 by rpki-client