Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft
File: QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft (raw, json)
Hash identifier: dMfCmOyfYNgTwwCtCO9NjLu0uz9c7t8e6NT9pKNCoeo=
Subject key identifier: D6:61:3E:54:27:29:5C:17:8D:FD:95:ED:F9:E7:BD:09:29:3C:AF:B9
Authority key identifier: 40:51:8E:CB:D6:46:4D:78:AD:45:15:51:64:8F:92:06:F7:FB:5F:42
Certificate issuer: /CN=40518ecbd6464d78ad451551648f9206f7fb5f42
Certificate serial: 0197499F255A2B283C664C5CC60581469BDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QFGOy9ZGTXitRRVRZI-SBvf7X0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft
Manifest number: 0295
Signing time: Sat 07 Jun 2025 09:00:55 +0000
Manifest this update: Sat 07 Jun 2025 09:00:55 +0000
Manifest next update: Sun 08 Jun 2025 09:00:55 +0000
Files and hashes: 1: 7fqM8GCj-eNanfhBlPQ1PMMaPkQ.roa (hash: cyPdhHEtqG0jKqnla9COVxpAyirC8qiWW4mGGbTTw34=)
2: QFGOy9ZGTXitRRVRZI-SBvf7X0I.crl (hash: MnpVD2kr6/oDYdP7l4AAZ5uNdVPpUYtcoumWKLgWs7E=)
3: WRsKHbHpQ9jZIvciUb2Wz6AHSW4.roa (hash: 8Nnxx5No66UiBNPIjWPMS0jddJkyISjgfdGXoNS0d/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/QFGOy9ZGTXitRRVRZI-SBvf7X0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:25:5a:2b:28:3c:66:4c:5c:c6:05:81:46:9b:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40518ecbd6464d78ad451551648f9206f7fb5f42
Validity
Not Before: Jun 7 09:00:55 2025 GMT
Not After : Jun 8 09:00:55 2025 GMT
Subject: CN=d6613e5427295c178dfd95edf9e7bd09293cafb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:76:19:ae:93:50:0d:f2:bd:c2:f9:fb:af:f5:
b3:52:33:bb:31:17:19:1a:68:95:ca:eb:b5:a0:6d:
26:29:16:8b:e3:ca:d0:3d:a3:8d:85:cb:a3:42:fd:
71:ca:4f:ba:3c:ac:82:58:77:97:e8:3f:2d:cf:69:
db:56:51:c6:83:08:be:8a:cd:e0:1c:46:ea:9e:aa:
4f:fa:d8:85:4d:ed:08:90:7d:2e:5a:5f:7f:8a:72:
b6:97:37:04:22:25:72:af:23:5b:ec:b3:71:6e:06:
19:3d:7d:11:af:62:2b:10:5f:6a:0e:d3:0d:07:77:
7e:4e:4c:e0:ac:3d:65:0b:18:de:06:fd:f7:be:f1:
a5:e7:f7:b9:1e:cf:4d:f3:88:43:18:4b:7f:2f:12:
9b:9a:f6:9b:0b:40:e2:e4:0e:cc:90:cd:8a:14:34:
cb:45:a7:9a:2a:b5:b9:a1:23:11:08:38:c3:b4:21:
41:a2:1a:98:e1:56:06:fb:4d:78:dc:b0:76:8a:b3:
b8:80:7f:df:70:ea:3c:11:ef:e8:8b:a1:5f:86:98:
f0:ab:7a:e6:91:2c:e0:57:eb:76:6f:0b:ad:ee:b9:
26:2d:f1:a3:47:2f:d1:2a:8c:00:a3:7d:8e:e4:d7:
a7:7c:f6:0a:2a:81:54:ce:a1:a8:9b:fe:54:dc:ca:
90:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:61:3E:54:27:29:5C:17:8D:FD:95:ED:F9:E7:BD:09:29:3C:AF:B9
X509v3 Authority Key Identifier:
keyid:40:51:8E:CB:D6:46:4D:78:AD:45:15:51:64:8F:92:06:F7:FB:5F:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QFGOy9ZGTXitRRVRZI-SBvf7X0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:28:a5:ab:7a:ee:fd:7d:9e:bf:76:0b:9e:e8:89:b0:fc:3c:
05:fd:3d:3b:9d:54:ef:83:05:e9:38:6e:4f:12:51:7e:5b:89:
0a:90:4b:9e:a8:28:2c:fb:21:60:f0:12:f9:c7:2d:e1:75:9c:
13:88:62:72:ac:9f:ad:62:54:63:26:3d:c6:cd:e8:d7:f5:7f:
9d:26:ae:95:66:f3:71:74:08:ad:a8:99:1e:c6:80:56:f0:09:
7f:86:f4:be:ee:b7:d4:93:89:ca:17:55:c9:ac:e2:be:09:9b:
de:2f:90:70:de:ff:c5:93:3f:d3:9e:32:26:9b:dc:aa:29:b3:
bd:0c:2f:d8:76:17:f0:71:63:34:42:b9:48:36:d9:67:22:40:
75:67:6f:2c:46:ab:53:b2:b4:2e:c8:59:f9:77:06:47:72:17:
17:8f:b4:0a:8c:d4:52:f8:be:87:f0:e9:dd:e5:b6:19:71:4b:
c3:dd:a4:4d:c8:6f:0d:88:df:30:9c:30:88:27:ca:50:5e:8d:
f1:72:fa:c2:cf:d1:73:5e:a8:18:74:db:c6:e1:a2:77:e2:10:
8b:be:6f:75:10:33:7e:79:36:5f:f4:39:30:29:47:5a:c9:06:
fc:38:62:3d:b1:e8:28:92:9a:49:eb:2f:52:3c:54:28:f1:b5:
2d:8f:ce:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:33:08 2025 by rpki-client