Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
File: QONYGt3WuZ3YdEueKIb7sCrpGOM.mft (raw, json)
Hash identifier: 0zJpoCHvg038IIXn4ut55LltjjQPfnE9b3dM7kW3b0M=
Subject key identifier: 61:1B:E7:57:8A:D2:A4:BC:56:FB:90:DA:F5:4E:FC:AD:83:28:63:07
Authority key identifier: 40:E3:58:1A:DD:D6:B9:9D:D8:74:4B:9E:28:86:FB:B0:2A:E9:18:E3
Certificate issuer: /CN=40e3581addd6b99dd8744b9e2886fbb02ae918e3
Certificate serial: 019753B4D0AE2C7C98C67CAADCD2B9869F79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
Manifest number: 1583
Signing time: Mon 09 Jun 2025 08:00:48 +0000
Manifest this update: Mon 09 Jun 2025 08:00:48 +0000
Manifest next update: Tue 10 Jun 2025 08:00:48 +0000
Files and hashes: 1: 7sL1UBW9oIL-S5vfH1jOO3eYhUk.roa (hash: WnpcdVTaXzH616PZ8mN25gQu/poO33PVXu+tGiulqjA=)
2: QONYGt3WuZ3YdEueKIb7sCrpGOM.crl (hash: vhjvzdMeclkmDhEg+4GhfXLgs16amo12pb7djo8DsXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:b4:d0:ae:2c:7c:98:c6:7c:aa:dc:d2:b9:86:9f:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40e3581addd6b99dd8744b9e2886fbb02ae918e3
Validity
Not Before: Jun 9 08:00:48 2025 GMT
Not After : Jun 10 08:00:48 2025 GMT
Subject: CN=611be7578ad2a4bc56fb90daf54efcad83286307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:53:42:2a:38:b5:68:28:17:b0:2e:f8:45:9a:
09:c4:6f:4f:c1:9e:5f:40:c4:bf:3f:00:a0:03:ff:
7a:71:63:64:c8:e4:11:16:23:1b:fd:aa:ab:5b:fe:
6b:54:06:3d:18:42:07:f8:94:82:db:25:76:b0:c6:
81:a8:0b:0c:fd:dd:ca:3e:4f:bb:90:61:91:d0:3d:
52:7e:69:28:a3:fc:eb:3c:35:a4:37:89:15:9e:1f:
a1:13:63:23:94:0d:dc:b8:a8:76:89:b6:9c:66:5f:
6b:f2:bf:94:9e:d9:43:18:8e:a5:0e:33:d6:f5:96:
8e:31:68:17:dd:f6:da:f0:12:8e:a2:9b:91:10:70:
ed:94:8f:06:ab:3d:ee:1c:ac:c6:5e:2e:2c:0a:f5:
da:45:2f:d7:a4:6c:b5:a1:f6:4a:1d:f1:58:cc:d4:
35:19:e7:d9:54:13:6d:a6:f1:1b:15:e8:c5:d3:88:
10:72:00:51:f3:bc:c0:9a:c5:d0:ed:06:8c:85:e1:
a0:67:e5:5d:07:72:08:90:fc:54:0b:a9:b1:c2:9f:
72:0e:f3:d1:9a:86:19:f8:eb:9d:76:5a:5a:83:b7:
a3:b1:86:6a:6e:03:5b:ed:05:3e:1b:c8:85:68:b8:
04:21:93:5f:24:a3:7a:ba:21:b5:ec:ab:fa:1d:d8:
db:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:1B:E7:57:8A:D2:A4:BC:56:FB:90:DA:F5:4E:FC:AD:83:28:63:07
X509v3 Authority Key Identifier:
keyid:40:E3:58:1A:DD:D6:B9:9D:D8:74:4B:9E:28:86:FB:B0:2A:E9:18:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:d4:7c:c8:39:1c:a4:a3:19:63:b2:db:e8:b4:e0:e7:ae:2e:
d2:71:51:08:5f:c7:27:f6:fa:7c:7f:25:29:5e:ca:c2:91:f5:
0a:0f:66:72:d0:5f:ee:12:e3:3c:2b:f3:b6:e2:cc:db:40:1c:
0b:dc:01:0c:5d:60:db:be:25:31:05:32:d7:ed:66:46:89:c0:
36:96:ea:7e:b1:2f:77:12:0d:9b:a3:ef:f8:af:df:c5:f3:88:
55:51:00:19:90:71:26:3a:97:83:7f:48:1e:71:b2:32:bf:50:
ad:a6:54:f8:e8:e7:12:16:aa:c1:60:a7:f2:b2:ec:95:93:b9:
65:e9:f3:a4:52:83:bc:5f:ab:6f:60:87:1b:90:b0:91:dc:c9:
5a:94:33:f6:0d:3a:4c:10:c7:72:70:46:d5:ec:b6:3f:d5:2d:
cd:0a:fb:a7:0f:07:00:9a:36:af:8b:7f:e5:e8:69:07:8e:a2:
0e:93:b3:2d:72:9a:0e:32:16:1a:df:19:80:99:54:6d:db:93:
e8:fe:01:4e:fe:6d:40:e3:58:07:87:b4:fe:6b:6c:c5:8b:a0:
f8:c1:e9:6a:e9:79:0e:0c:19:04:ae:5d:44:81:a3:da:01:0a:
5d:e4:02:dc:c3:f1:93:a5:be:d5:51:ce:fb:32:b1:98:91:06:
ae:4f:40:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 16:39:10 2025 by rpki-client