Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft
File: QO9YSZMMyd10IR-zfiQRgkmh_EA.mft (raw, json)
Hash identifier: Xd2fOLsxUWIaDu7RYYjMEcWzXvmXQCFFsXWPd6gs+4w=
Subject key identifier: 40:87:66:70:C1:9A:87:B1:2B:C9:0A:EC:63:25:27:A8:A4:FF:21:38
Authority key identifier: 40:EF:58:49:93:0C:C9:DD:74:21:1F:B3:7E:24:11:82:49:A1:FC:40
Certificate issuer: /CN=40ef5849930cc9dd74211fb37e24118249a1fc40
Certificate serial: 01974C696EFA0A4BFC56CA6AC066CA929651
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QO9YSZMMyd10IR-zfiQRgkmh_EA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft
Manifest number: 1588
Signing time: Sat 07 Jun 2025 22:01:07 +0000
Manifest this update: Sat 07 Jun 2025 22:01:07 +0000
Manifest next update: Sun 08 Jun 2025 22:01:07 +0000
Files and hashes: 1: QO9YSZMMyd10IR-zfiQRgkmh_EA.crl (hash: 0fzaGc7QVjGdEacYgNPMYUVNzP4UwPFPTHMqTuqXmkk=)
2: UO07512-xyl7tPlxWkeH0XFHtjw.roa (hash: FGw3ypGv9x4G+fHO0s0Uxmz/ZFgsQL9y06qgJnZxgwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QO9YSZMMyd10IR-zfiQRgkmh_EA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 22:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:6e:fa:0a:4b:fc:56:ca:6a:c0:66:ca:92:96:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40ef5849930cc9dd74211fb37e24118249a1fc40
Validity
Not Before: Jun 7 22:01:07 2025 GMT
Not After : Jun 8 22:01:07 2025 GMT
Subject: CN=40876670c19a87b12bc90aec632527a8a4ff2138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f5:0f:1b:91:fa:f0:2d:70:15:1a:57:c2:8e:
f7:48:63:0a:b1:22:fc:bc:10:ec:4b:d5:f7:6e:39:
e3:47:51:67:85:3c:33:1c:6a:b0:ee:b0:fe:5c:ae:
f7:42:2b:66:b3:cb:00:7b:07:7a:9c:53:ea:64:49:
46:d3:0a:88:6f:99:f7:fc:9b:fb:86:3f:66:67:36:
f5:d8:3b:db:a9:f1:6d:28:62:c0:8d:f6:f9:72:46:
ce:25:4a:0e:60:f4:be:06:f1:e1:fa:f8:4f:62:14:
2d:8d:13:ec:01:31:a0:c6:b9:91:55:88:72:7e:80:
58:79:c4:06:e2:ca:73:bb:18:87:eb:de:f8:e0:16:
b5:7f:64:00:71:56:95:af:07:95:3e:ca:0b:5a:70:
4e:58:66:1c:a6:53:2c:95:f1:11:ae:3f:fb:11:9c:
56:c1:cf:9c:e1:78:4b:f4:3f:0e:08:7e:5c:af:6b:
53:84:f0:ec:6f:8c:d2:82:b4:6f:69:db:52:51:14:
ff:1c:84:07:7d:fd:a7:b3:34:73:33:17:aa:11:fa:
39:b1:ee:dc:c6:9f:1a:4e:9f:15:3e:cd:af:93:37:
3e:19:76:3e:ef:83:81:c7:0a:6e:7e:32:c5:a8:d1:
f9:48:f9:c6:95:24:0e:35:33:75:61:bd:18:52:ce:
27:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:87:66:70:C1:9A:87:B1:2B:C9:0A:EC:63:25:27:A8:A4:FF:21:38
X509v3 Authority Key Identifier:
keyid:40:EF:58:49:93:0C:C9:DD:74:21:1F:B3:7E:24:11:82:49:A1:FC:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QO9YSZMMyd10IR-zfiQRgkmh_EA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:75:6f:b7:76:58:5d:5e:f4:1f:f9:98:bb:f1:b6:9f:e7:26:
23:0d:d0:65:cf:c9:ec:e1:bb:92:51:73:16:e9:0d:b4:07:25:
3d:10:75:b8:ed:db:af:96:4d:19:36:56:05:96:04:1d:3a:e9:
c7:e7:ad:59:0f:17:3b:72:15:0e:7a:c5:bf:4a:3c:31:7f:cf:
ba:ef:18:59:71:ff:a8:0a:04:d0:72:01:64:c5:6c:f3:0b:f1:
f7:11:58:bd:59:5b:02:6b:4d:f0:ee:79:c7:0b:f0:a2:2c:ca:
cf:01:08:73:20:cb:af:84:d0:cc:b4:4e:a6:19:46:72:8c:d3:
ae:61:ac:8d:9c:bb:1c:3e:d9:cc:ca:49:d1:ec:a5:4f:b1:cf:
57:28:a4:70:fb:85:3a:40:d9:be:ae:27:86:f5:80:07:45:d6:
4d:ec:67:38:fb:68:bd:cf:71:9e:ca:84:e8:5a:23:be:31:bb:
54:78:2d:96:41:98:71:80:15:4a:71:cb:2f:63:3d:51:30:2f:
14:aa:a5:d4:cf:fd:19:59:fd:75:1f:e6:5f:f2:ee:3b:0f:1c:
c5:69:7a:02:e1:2d:af:3d:5d:a6:4d:1b:17:8f:cf:6b:87:a7:
19:8a:19:68:91:72:b1:b1:b9:cb:c8:9f:90:fa:21:34:44:33:
f4:4b:e2:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:15:50 2025 by rpki-client