Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.mft
File: QO5hC9zSO60rEZK9RcqKl204Vdo.mft (raw, json)
Hash identifier: 1Sim2XqcqJcfUkdjMDZutJKx7j0RJnzS/RNAMbFBmfg=
Subject key identifier: 73:22:97:15:08:E0:5C:1E:C7:26:76:34:93:64:AD:FE:27:E3:26:A3
Authority key identifier: 40:EE:61:0B:DC:D2:3B:AD:2B:11:92:BD:45:CA:8A:97:6D:38:55:DA
Certificate issuer: /CN=40ee610bdcd23bad2b1192bd45ca8a976d3855da
Certificate serial: 019849650F98334C9AE886083D9A12A1B420
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QO5hC9zSO60rEZK9RcqKl204Vdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.mft
Manifest number: 149B
Signing time: Sun 27 Jul 2025 01:00:16 +0000
Manifest this update: Sun 27 Jul 2025 01:00:16 +0000
Manifest next update: Mon 28 Jul 2025 01:00:16 +0000
Files and hashes: 1: QO5hC9zSO60rEZK9RcqKl204Vdo.crl (hash: CBVK4xzPQep1d1J8x5GHEic2pg4XICcPTc0ldF1PEt0=)
2: WXzwl6dDgLLRTGjEWsJa-Mt4DFY.roa (hash: AsvwbpP9IRPmxXb+scTtlP8HJBrFwXPs3woICGrCIxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QO5hC9zSO60rEZK9RcqKl204Vdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:0f:98:33:4c:9a:e8:86:08:3d:9a:12:a1:b4:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40ee610bdcd23bad2b1192bd45ca8a976d3855da
Validity
Not Before: Jul 27 01:00:16 2025 GMT
Not After : Jul 28 01:00:16 2025 GMT
Subject: CN=7322971508e05c1ec72676349364adfe27e326a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:db:9b:80:72:48:d7:ad:62:7a:20:7a:0d:fc:
57:3e:b8:fe:6a:b2:9a:79:16:b1:1a:7e:cd:16:61:
22:37:5c:18:cb:ae:4b:4e:ba:94:c0:36:a2:e2:cb:
71:5e:de:39:07:f5:e6:2d:f1:69:d2:3c:07:4d:6a:
3d:d5:43:88:0e:bd:3e:a1:b8:58:da:56:53:06:8f:
9f:16:ac:8a:9a:30:a3:43:4d:1e:49:07:d6:9c:a2:
a3:5f:46:56:a1:42:d1:01:c3:47:61:da:e8:a8:3a:
59:51:c9:9e:f1:32:8f:f8:5e:8c:2a:d1:ed:23:8e:
50:d1:44:c6:a1:02:f7:b3:57:36:04:3c:7e:10:4b:
88:a4:c0:05:91:b4:a3:cf:f2:56:c8:fc:8a:da:ea:
f4:6e:12:5c:5d:e3:8d:80:bc:78:c7:50:5e:ce:b6:
19:87:b6:51:48:66:2a:a6:14:b5:3f:d5:f1:ce:86:
64:34:ae:ee:ff:05:55:89:4c:cd:2c:de:54:64:13:
b2:4d:33:5a:78:cc:72:fe:58:af:98:61:4f:3a:07:
be:74:a0:be:a9:46:1b:34:2e:68:85:fc:e1:c5:47:
d9:b8:fb:78:6f:f4:ae:75:ee:d8:09:18:f3:64:8d:
19:f7:03:79:4d:01:a4:6f:4c:50:ef:93:d1:da:18:
a7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:22:97:15:08:E0:5C:1E:C7:26:76:34:93:64:AD:FE:27:E3:26:A3
X509v3 Authority Key Identifier:
keyid:40:EE:61:0B:DC:D2:3B:AD:2B:11:92:BD:45:CA:8A:97:6D:38:55:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QO5hC9zSO60rEZK9RcqKl204Vdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:08:f6:eb:d2:cd:0b:5f:c2:ba:6e:72:65:cd:8a:1c:59:da:
76:cb:95:58:89:cf:a9:c0:9b:5d:ee:15:31:10:f5:fe:95:fc:
5b:10:28:25:be:f8:33:a2:a5:d9:27:3e:ad:65:63:22:95:82:
3c:9d:9f:00:ce:00:e0:1b:1e:9d:4c:2f:de:8e:df:04:bc:a5:
b6:99:95:88:75:53:3f:c7:f9:7f:7e:b0:5d:69:e6:0b:a9:62:
3f:47:a9:ab:73:dc:0f:d0:b2:81:13:f5:d7:9d:70:25:68:56:
fe:38:40:2c:13:03:21:1b:06:a3:de:cd:ea:d2:00:fc:54:87:
b3:95:4e:b7:4c:3b:3f:bb:52:2b:bd:2a:4b:b0:f8:53:49:98:
63:5b:db:b0:1e:5b:fc:49:52:af:9d:fb:03:8b:d3:76:74:9b:
05:9c:47:f6:ae:7c:a3:42:d6:d0:4e:88:c7:34:3d:ba:09:22:
61:ce:8d:d4:eb:86:e1:e2:ee:0c:e5:96:71:67:b8:63:d4:4d:
91:f8:87:f3:da:64:18:3d:ee:2a:9b:b8:ff:47:97:67:28:81:
6c:19:50:f4:31:4a:ec:17:0e:79:4a:3a:cc:ee:df:ca:c6:f4:
4c:0d:67:cc:90:0b:63:ae:09:c3:5f:21:a6:07:6c:53:70:30:
23:df:e9:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:27:38 2025 by rpki-client