Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft
File: QO9YSZMMyd10IR-zfiQRgkmh_EA.mft (raw, json)
Hash identifier: q5KrhWtx8Oj8WpvUksLxK22gI8MvePQrqimjIiH5oG0=
Subject key identifier: E0:F8:DA:DD:16:17:88:AA:19:C4:73:00:2C:6D:90:A8:D8:8E:90:D8
Authority key identifier: 40:EF:58:49:93:0C:C9:DD:74:21:1F:B3:7E:24:11:82:49:A1:FC:40
Certificate issuer: /CN=40ef5849930cc9dd74211fb37e24118249a1fc40
Certificate serial: 01993312648718D8F92F1E85D369B0D38A7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QO9YSZMMyd10IR-zfiQRgkmh_EA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft
Manifest number: 1684
Signing time: Wed 10 Sep 2025 10:01:07 +0000
Manifest this update: Wed 10 Sep 2025 10:01:07 +0000
Manifest next update: Thu 11 Sep 2025 10:01:07 +0000
Files and hashes: 1: QO9YSZMMyd10IR-zfiQRgkmh_EA.crl (hash: kVvWt68KcW8tU6YEY9qmYakVm7Wg62nVwQmOmLIL2Jk=)
2: UO07512-xyl7tPlxWkeH0XFHtjw.roa (hash: FGw3ypGv9x4G+fHO0s0Uxmz/ZFgsQL9y06qgJnZxgwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QO9YSZMMyd10IR-zfiQRgkmh_EA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 10:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:12:64:87:18:d8:f9:2f:1e:85:d3:69:b0:d3:8a:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40ef5849930cc9dd74211fb37e24118249a1fc40
Validity
Not Before: Sep 10 10:01:07 2025 GMT
Not After : Sep 11 10:01:07 2025 GMT
Subject: CN=e0f8dadd161788aa19c473002c6d90a8d88e90d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c6:ae:da:5c:11:74:88:8d:ae:86:b5:1d:59:
d0:17:74:2a:cc:f2:66:86:f2:ac:f8:29:d0:8f:ad:
8d:84:bf:f9:9e:4c:cc:9f:06:7b:09:a3:e7:a9:b9:
14:67:c6:6c:b0:51:1e:f0:dc:de:97:b3:a8:16:33:
ec:40:c3:2c:3d:82:72:15:31:8b:f0:01:74:58:9a:
4b:8d:ad:c0:96:2a:44:0d:b4:84:7e:fd:53:c3:d6:
f2:b9:e1:ea:34:9b:87:e1:44:e2:89:50:fb:56:89:
51:e4:bb:ac:93:ad:d9:f2:aa:16:b5:f8:9d:2c:23:
64:20:64:e1:b0:3a:b5:13:a2:48:43:d9:74:3a:6f:
62:28:f9:f8:68:bf:14:75:60:cc:27:0d:6b:e2:c3:
7e:31:c9:fb:fe:13:3c:ac:b8:22:56:5d:d5:a2:81:
5d:34:56:a0:f2:34:ea:43:7c:e4:53:5c:d3:1d:99:
33:1e:94:75:4b:14:f0:e7:0f:8b:b1:01:e8:b6:11:
9b:fb:99:e1:7f:89:b3:17:f5:bd:73:ca:04:6d:b4:
b5:18:19:07:df:96:cc:77:52:b8:66:a4:6f:da:68:
98:a4:5c:04:6b:a0:ba:21:6f:e7:55:03:72:12:0a:
0a:2e:a5:58:f7:34:ae:53:ea:ab:ce:17:4b:d7:e9:
1e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F8:DA:DD:16:17:88:AA:19:C4:73:00:2C:6D:90:A8:D8:8E:90:D8
X509v3 Authority Key Identifier:
keyid:40:EF:58:49:93:0C:C9:DD:74:21:1F:B3:7E:24:11:82:49:A1:FC:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QO9YSZMMyd10IR-zfiQRgkmh_EA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:2e:4a:f8:79:3f:23:ac:3e:5e:2b:79:87:6f:12:5b:e4:76:
53:6d:74:06:71:db:8d:6c:52:b8:c4:c8:a6:cc:2d:b1:76:88:
35:da:a8:5a:08:20:31:e6:37:0c:92:b1:33:b0:69:7a:cc:b0:
36:44:92:c5:d3:e6:5e:10:64:a4:c9:6c:e6:0e:a2:52:27:42:
66:ae:55:97:92:2f:db:02:a5:08:5b:28:70:57:f3:77:ca:14:
cb:89:f0:10:ac:a6:65:1e:b4:95:d6:4a:ea:fb:58:20:ee:a8:
7d:0a:1d:f3:97:03:72:bc:c1:f0:a3:62:c2:0c:08:9d:58:f6:
99:b6:aa:42:0c:b0:ef:36:84:ab:71:1e:8d:3f:b8:6d:1d:5c:
86:f3:f8:c2:1c:86:b9:f9:fe:8b:5e:73:43:64:26:79:4e:1d:
43:70:e8:c4:c9:85:6d:85:7c:d6:ca:de:9c:73:df:02:95:a3:
33:00:63:6a:c1:52:df:06:ef:72:56:ea:6d:25:fc:59:97:50:
b0:1d:a7:40:89:22:95:95:80:3a:57:bb:c9:cb:6e:a5:d8:e4:
ea:9f:c9:db:c7:72:22:54:ec:13:7e:1f:17:63:12:05:f6:db:
0f:54:a3:33:e6:d4:2b:c8:e8:f2:04:9f:a7:55:e0:3f:9e:3d:
39:44:42:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 14:33:44 2025 by rpki-client