Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft
File: QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft (raw, json)
Hash identifier: TNpGKh2sHFS6B5BR85jaRSehkfhYC9YRiN7Deahtp30=
Subject key identifier: 0A:84:10:9E:A9:B7:DE:61:9F:E4:49:70:01:0D:65:7E:20:04:17:6E
Authority key identifier: 40:E3:95:3C:5C:B4:52:F1:59:F8:E1:50:5F:C7:02:E8:83:65:7E:72
Certificate issuer: /CN=40e3953c5cb452f159f8e1505fc702e883657e72
Certificate serial: 01974A435F9291CDC5E0EBC9262E5F59F5A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft
Manifest number: 1584
Signing time: Sat 07 Jun 2025 12:00:18 +0000
Manifest this update: Sat 07 Jun 2025 12:00:18 +0000
Manifest next update: Sun 08 Jun 2025 12:00:18 +0000
Files and hashes: 1: 0UiMAD3K1Vd_o1ukey_EamOgfsg.roa (hash: /lgJM2bqi/sUpmdCb7crrQqVayvXqEJ8evDSByU3DJU=)
2: QOOVPFy0UvFZ-OFQX8cC6INlfnI.crl (hash: vV6dhE9UO21y962995PG/VOg2+fobOZYwv8qQEvfuZU=)
3: aVnXSxl3A9imF58Ni6PA9o97Lt0.roa (hash: 1b03aGZyiDI4vZq8xAQwMk9wWsMeLl0pjrQrWqhenxw=)
4: misEsljA75nAA5oIsh_k4GVCg4w.roa (hash: p4BzWp3j9j27Wjuz+V0a+txHqIiOhQ+ybn3eqzzf6rU=)
5: ujK7196Gk_c3ddVaz2vNjb1yuKM.roa (hash: oPbTKsm4Ke6sVA27ztN+8OGkGTX5DqK9hqJSWTYFs3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:5f:92:91:cd:c5:e0:eb:c9:26:2e:5f:59:f5:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40e3953c5cb452f159f8e1505fc702e883657e72
Validity
Not Before: Jun 7 12:00:18 2025 GMT
Not After : Jun 8 12:00:18 2025 GMT
Subject: CN=0a84109ea9b7de619fe44970010d657e2004176e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7b:69:66:49:58:9e:0b:e7:1b:75:f4:48:f4:
df:cd:32:1d:c3:61:4c:fa:ab:8e:40:e0:73:99:4c:
9d:af:d5:c7:67:67:40:d7:9c:80:50:6e:75:4e:ed:
a2:cd:60:6b:ac:83:93:8a:b1:11:b0:f0:ba:c0:c1:
7c:98:e4:2a:99:e2:26:42:c1:c4:a2:07:ee:20:d3:
1a:1d:15:73:fa:e8:6c:32:3b:ef:63:76:1f:67:6d:
ce:1c:7d:5f:9d:0d:3b:8d:f1:9b:e2:6a:56:ce:5d:
03:e8:55:ba:e1:13:5c:35:53:48:73:89:85:b6:62:
be:cf:6c:92:98:1f:aa:9f:2b:76:ec:02:2e:1b:e9:
a5:ae:d8:75:70:43:21:33:fc:10:11:e7:20:1b:b3:
a5:f0:de:8f:28:35:8e:1e:a9:40:69:38:e4:31:dc:
b9:89:3b:b0:d6:4c:60:de:d1:61:a6:85:72:c2:bf:
93:f7:3a:4b:0f:d2:14:87:b1:82:ee:0e:cc:fe:c0:
cf:51:0e:0d:d6:d9:32:3c:3b:27:11:5a:c5:84:8e:
71:ee:a3:da:88:68:4d:11:be:1b:46:76:af:06:e8:
92:0b:15:ea:a3:3e:13:79:3c:bb:94:bf:b3:97:30:
67:c8:b6:30:4f:67:b5:70:00:e1:8e:3c:5e:d0:97:
28:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:84:10:9E:A9:B7:DE:61:9F:E4:49:70:01:0D:65:7E:20:04:17:6E
X509v3 Authority Key Identifier:
keyid:40:E3:95:3C:5C:B4:52:F1:59:F8:E1:50:5F:C7:02:E8:83:65:7E:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:74:4d:6b:a7:76:6e:9c:b7:c5:f2:b8:85:b2:9f:b6:95:98:
67:d8:80:f9:fe:ed:96:bf:c0:5e:1c:54:e2:77:83:f2:d4:25:
58:4e:52:c3:f5:b9:19:c5:d8:14:fd:ce:0f:0e:8c:81:30:18:
9b:b1:c4:9d:9b:ed:88:bc:5c:b9:22:df:df:07:fe:98:a8:46:
a8:4e:be:39:d1:9f:da:dd:64:81:e7:55:22:e7:dc:ae:3f:53:
54:a6:e7:d8:39:0f:08:38:76:5c:19:5f:0d:64:65:ad:7c:6e:
28:93:e0:ea:a6:0a:bb:41:37:f8:b4:cb:33:af:62:53:a1:d7:
6a:b6:ba:82:95:d2:1f:bd:19:64:91:e4:ae:0d:a9:6c:32:f8:
33:03:6c:ba:63:ca:c6:5c:07:60:75:21:f0:98:08:88:c4:3e:
93:58:75:36:c5:d4:9d:0c:3c:a8:f7:c3:21:56:6d:a2:bc:b7:
7b:fa:78:69:9f:7c:55:d3:d8:8b:32:a2:f9:9b:56:fd:c2:b5:
f7:13:bf:b1:67:26:66:58:7c:7d:14:26:df:d5:8e:3a:20:a5:
3f:7b:ea:8c:9e:44:95:9d:6a:6a:6c:34:5b:b5:23:95:da:c3:
01:67:84:13:0d:87:f6:81:94:8f:f7:40:01:bc:58:2d:93:9d:
ca:30:eb:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKQ1+Skc3F4OvJJi5fWfWhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwZTM5NTNjNWNiNDUyZjE1OWY4ZTE1MDVmYzcwMmU4ODM2
NTdlNzIwHhcNMjUwNjA3MTIwMDE4WhcNMjUwNjA4MTIwMDE4WjAzMTEwLwYDVQQD
EygwYTg0MTA5ZWE5YjdkZTYxOWZlNDQ5NzAwMTBkNjU3ZTIwMDQxNzZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33tpZklYngvnG3X0SPTfzTIdw2FM
+quOQOBzmUydr9XHZ2dA15yAUG51Tu2izWBrrIOTirERsPC6wMF8mOQqmeImQsHE
ogfuINMaHRVz+uhsMjvvY3YfZ23OHH1fnQ07jfGb4mpWzl0D6FW64RNcNVNIc4mF
tmK+z2ySmB+qnyt27AIuG+mlrth1cEMhM/wQEecgG7Ol8N6PKDWOHqlAaTjkMdy5
iTuw1kxg3tFhpoVywr+T9zpLD9IUh7GC7g7M/sDPUQ4N1tkyPDsnEVrFhI5x7qPa
iGhNEb4bRnavBuiSCxXqoz4TeTy7lL+zlzBnyLYwT2e1cADhjjxe0JcojwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAqEEJ6pt95hn+RJcAENZX4gBBduMB8GA1UdIwQY
MBaAFEDjlTxctFLxWfjhUF/HAuiDZX5yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU9PVlBGeTBVdkZaLU9GUVg4Y0M2SU5sZm5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi83ZDg1MDUtMzg5OS00YTllLThjZjEt
ZmE1YWYzOGRlYjVlLzEvUU9PVlBGeTBVdkZaLU9GUVg4Y0M2SU5sZm5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi83ZDg1MDUtMzg5OS00YTllLThjZjEtZmE1YWYzOGRlYjVl
LzEvUU9PVlBGeTBVdkZaLU9GUVg4Y0M2SU5sZm5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArnRNa6d2
bpy3xfK4hbKftpWYZ9iA+f7tlr/AXhxU4neD8tQlWE5Sw/W5GcXYFP3ODw6MgTAY
m7HEnZvtiLxcuSLf3wf+mKhGqE6+OdGf2t1kgedVIufcrj9TVKbn2DkPCDh2XBlf
DWRlrXxuKJPg6qYKu0E3+LTLM69iU6HXara6gpXSH70ZZJHkrg2pbDL4MwNsumPK
xlwHYHUh8JgIiMQ+k1h1NsXUnQw8qPfDIVZtory3e/p4aZ98VdPYizKi+ZtW/cK1
9xO/sWcmZlh8fRQm39WOOiClP3vqjJ5ElZ1qamw0W7UjldrDAWeEEw2H9oGUj/dA
AbxYLZOdyjDrAA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:58:42 2025 by rpki-client