Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/65d7b9-ccf9-4b73-b669-3533a512fcf7/1/QO6XZYZL0R1KNJQm43LhGpQ0jeI.mft
File: QO6XZYZL0R1KNJQm43LhGpQ0jeI.mft (raw, json)
Hash identifier: uI71C3+2/lsc6ZXXqmS/Y7E1loZ4NZ4yKdaLnnqLB5Q=
Subject key identifier: 99:88:EF:23:B1:BD:2C:3B:03:16:29:48:50:4E:DE:B4:F1:F2:3C:4E
Authority key identifier: 40:EE:97:65:86:4B:D1:1D:4A:34:94:26:E3:72:E1:1A:94:34:8D:E2
Certificate issuer: /CN=40ee9765864bd11d4a349426e372e11a94348de2
Certificate serial: 0198477749722072D7E03E89B48C5024A87F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QO6XZYZL0R1KNJQm43LhGpQ0jeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/65d7b9-ccf9-4b73-b669-3533a512fcf7/1/QO6XZYZL0R1KNJQm43LhGpQ0jeI.mft
Manifest number: 070F
Signing time: Sat 26 Jul 2025 16:00:56 +0000
Manifest this update: Sat 26 Jul 2025 16:00:56 +0000
Manifest next update: Sun 27 Jul 2025 16:00:56 +0000
Files and hashes: 1: QO6XZYZL0R1KNJQm43LhGpQ0jeI.crl (hash: GS374Tk8DeUtEg5L+gxWnVSCfAqhCIx0VbR4JgvNvbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/65d7b9-ccf9-4b73-b669-3533a512fcf7/1/QO6XZYZL0R1KNJQm43LhGpQ0jeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/65d7b9-ccf9-4b73-b669-3533a512fcf7/1/QO6XZYZL0R1KNJQm43LhGpQ0jeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QO6XZYZL0R1KNJQm43LhGpQ0jeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:49:72:20:72:d7:e0:3e:89:b4:8c:50:24:a8:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40ee9765864bd11d4a349426e372e11a94348de2
Validity
Not Before: Jul 26 16:00:56 2025 GMT
Not After : Jul 27 16:00:56 2025 GMT
Subject: CN=9988ef23b1bd2c3b03162948504edeb4f1f23c4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9b:bd:54:83:07:00:cc:fe:10:a3:07:d6:ee:
4b:dc:34:7e:61:1a:f6:a9:ec:ac:d5:73:41:9b:bb:
77:b7:42:2a:2f:99:b0:91:4c:e7:a4:dd:d1:c4:ab:
66:d8:31:9d:c3:e4:71:a9:0f:0f:30:43:0a:89:1a:
b4:ab:2e:f5:a4:e8:4f:d9:9a:c9:f0:da:7d:42:76:
bc:88:c4:81:62:8c:57:72:9d:f9:35:8e:cb:95:cc:
6e:31:50:28:ad:ab:66:40:24:c6:1c:b7:56:06:2d:
47:12:cc:c8:96:3a:2b:ad:be:f6:31:ed:33:a8:f0:
d0:13:c1:b1:68:35:60:37:bf:9f:a3:cd:6a:2a:24:
a4:40:03:16:b5:8e:aa:7a:07:4b:d8:36:b3:b6:06:
00:ca:2e:70:db:4a:83:98:8a:0d:a0:fa:bc:57:46:
38:08:fa:2e:d2:6f:b2:4b:94:46:fb:7c:e5:38:52:
40:c8:9f:3f:8f:a0:0d:59:e3:b5:98:f3:a4:e4:4e:
9d:9c:dd:5d:e0:53:9d:23:54:92:80:10:00:70:d2:
6d:c3:09:89:76:ae:9c:01:df:ad:e7:76:45:c0:79:
63:1b:21:b8:79:dd:e2:bb:26:69:7b:ef:98:38:fd:
1b:bf:5b:54:84:56:1b:d9:47:b2:78:b7:a3:1a:46:
be:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:88:EF:23:B1:BD:2C:3B:03:16:29:48:50:4E:DE:B4:F1:F2:3C:4E
X509v3 Authority Key Identifier:
keyid:40:EE:97:65:86:4B:D1:1D:4A:34:94:26:E3:72:E1:1A:94:34:8D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QO6XZYZL0R1KNJQm43LhGpQ0jeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/65d7b9-ccf9-4b73-b669-3533a512fcf7/1/QO6XZYZL0R1KNJQm43LhGpQ0jeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/65d7b9-ccf9-4b73-b669-3533a512fcf7/1/QO6XZYZL0R1KNJQm43LhGpQ0jeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:83:24:8e:31:fa:09:1d:1f:f7:08:09:12:0c:1f:e1:44:42:
b2:f6:8b:16:1c:49:d7:77:46:0b:9e:13:81:0a:43:d2:f2:cf:
15:ad:0e:45:f9:b6:bd:52:08:37:6c:24:65:17:6d:ee:f6:ba:
79:97:e7:af:9d:7b:fc:c8:28:f5:d6:37:af:a9:9f:44:1b:cd:
8c:79:bf:5b:a1:db:fa:7e:83:6d:3a:70:58:45:d0:a5:f1:40:
55:9d:0d:c5:07:1b:4b:3f:a9:0b:30:7a:07:a8:52:63:b1:c8:
70:24:2b:23:94:b2:aa:3f:d0:f7:b3:c2:ea:e5:0a:c7:e0:00:
71:80:07:f2:2c:01:fe:d6:7a:31:46:19:8c:19:3d:9f:40:fe:
0a:5f:e4:a4:e8:45:fe:58:5a:d4:22:07:04:d3:b3:c3:3a:4b:
5d:1c:b9:f8:0b:3c:44:14:fb:c9:71:48:4a:fa:83:9a:e8:6f:
9d:54:0b:64:0b:ec:31:81:50:a3:85:7f:6a:c4:f4:7c:86:03:
7d:01:68:15:ca:c2:95:e8:49:8f:72:c4:09:38:63:90:d6:ca:
95:1e:90:e0:cd:c7:8b:4a:77:d1:73:dc:5f:95:55:72:49:fc:
79:4d:05:bc:dd:73:e9:9c:47:5c:1f:7d:e5:48:eb:a6:b9:70:
64:44:72:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:11:56 2025 by rpki-client