Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
File: QONYGt3WuZ3YdEueKIb7sCrpGOM.mft (raw, json)
Hash identifier: I8bfHzaCRoBawd16/9w/QNxs+/vyYwhAE+WrIziK9Hw=
Subject key identifier: 8F:18:6B:11:47:65:31:DB:F7:A1:21:B5:BD:BB:36:97:BD:41:3A:D0
Authority key identifier: 40:E3:58:1A:DD:D6:B9:9D:D8:74:4B:9E:28:86:FB:B0:2A:E9:18:E3
Certificate issuer: /CN=40e3581addd6b99dd8744b9e2886fbb02ae918e3
Certificate serial: 0197598023BD400424BCEADD30EB7F6F5C4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
Manifest number: 1586
Signing time: Tue 10 Jun 2025 11:00:59 +0000
Manifest this update: Tue 10 Jun 2025 11:00:59 +0000
Manifest next update: Wed 11 Jun 2025 11:00:59 +0000
Files and hashes: 1: 7sL1UBW9oIL-S5vfH1jOO3eYhUk.roa (hash: WnpcdVTaXzH616PZ8mN25gQu/poO33PVXu+tGiulqjA=)
2: QONYGt3WuZ3YdEueKIb7sCrpGOM.crl (hash: Y2ix1X4APvGvlq1uaS0oir0j8t1Ws7ALK4XV/EctxXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:80:23:bd:40:04:24:bc:ea:dd:30:eb:7f:6f:5c:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40e3581addd6b99dd8744b9e2886fbb02ae918e3
Validity
Not Before: Jun 10 11:00:59 2025 GMT
Not After : Jun 11 11:00:59 2025 GMT
Subject: CN=8f186b11476531dbf7a121b5bdbb3697bd413ad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:31:04:43:fb:6b:4d:4f:4f:24:f8:61:84:f1:
95:ed:b7:d4:fd:66:53:41:9b:63:2e:bf:47:94:f1:
54:f3:c3:1d:d2:ef:06:f6:0b:5a:b5:8a:d4:0c:96:
33:46:53:02:eb:0f:53:cb:cf:1b:a2:34:af:c1:dc:
f0:e1:12:5c:4c:20:72:a7:dc:a5:44:fa:f5:1b:f9:
78:da:5e:f2:8f:8d:d2:d5:d7:84:88:7f:19:3e:62:
43:75:df:25:4e:50:b1:c1:bf:b4:fc:4d:f6:ce:12:
e7:c4:05:de:9f:13:87:2a:d2:e6:1b:5a:c0:4c:3b:
e7:3d:cb:36:47:e2:41:fb:7e:50:08:c5:93:f9:b6:
ff:25:8c:af:2e:7b:67:93:07:0b:f1:cb:67:8f:5c:
37:84:ca:49:0b:ab:58:40:6a:83:60:9c:2c:53:ae:
41:0d:2d:32:b8:ae:c9:22:20:27:a1:5f:73:5e:31:
86:08:7c:8c:cc:60:e7:0a:44:60:1c:4d:97:20:70:
38:69:3d:51:e5:66:d6:fd:e7:cc:5d:6f:10:dc:84:
9f:49:0c:18:7a:35:cc:32:42:0e:ad:4b:f9:52:69:
05:1d:f0:71:06:d5:55:b8:b0:30:67:2f:b5:96:22:
f7:6e:8b:fb:e3:77:83:be:c8:ea:de:1e:8f:24:88:
ca:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:18:6B:11:47:65:31:DB:F7:A1:21:B5:BD:BB:36:97:BD:41:3A:D0
X509v3 Authority Key Identifier:
keyid:40:E3:58:1A:DD:D6:B9:9D:D8:74:4B:9E:28:86:FB:B0:2A:E9:18:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:97:d1:ee:a3:1b:31:b4:8d:da:f2:ee:6b:ad:6d:1f:fe:99:
a6:5a:e2:09:f9:88:0b:d0:88:ee:a8:67:bd:c3:7a:71:90:fc:
61:50:9c:66:e2:e1:27:36:5e:15:f7:63:8f:4e:82:3d:0f:13:
c2:e1:1f:68:4d:9b:e4:e4:0f:dd:13:85:2a:6b:7e:e5:e5:0a:
25:a1:ec:c6:bb:be:c1:ca:55:aa:51:d9:4d:33:9e:e1:a4:6e:
bb:9e:c9:bc:93:b2:99:34:f1:1e:72:6d:af:35:b9:f4:c7:e6:
0c:28:1e:48:17:2b:88:09:52:9c:19:8f:ad:67:d8:43:2c:bd:
5d:c0:d5:98:c9:49:48:6f:5e:f0:9e:c1:2c:a3:01:e6:e0:b1:
e1:c6:75:64:98:4d:34:fa:b6:e3:07:14:23:85:83:77:9f:f0:
a5:28:6b:76:61:69:ef:b4:c5:6b:f4:17:62:f7:38:cf:96:4f:
b1:a0:2e:a0:13:2c:65:73:d3:a7:bd:44:f3:13:80:68:61:6c:
5c:b3:8c:df:24:c3:43:df:39:30:54:c5:24:12:dd:b8:47:56:
40:08:70:aa:05:4c:b5:73:48:ec:27:80:45:5a:17:89:89:9e:
b4:16:51:e3:04:47:e4:85:88:67:38:b3:73:c1:39:11:8a:10:
6e:1f:9e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 18:41:37 2025 by rpki-client