Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
File: QONYGt3WuZ3YdEueKIb7sCrpGOM.mft (raw, json)
Hash identifier: VDGfwFkNOIuyr31lFZcejXS8iCYoBCvxNQO4sSb/PYo=
Subject key identifier: 97:74:A3:EB:D2:6F:5D:35:F9:55:F1:7A:09:2B:FF:46:89:A9:3B:0C
Authority key identifier: 40:E3:58:1A:DD:D6:B9:9D:D8:74:4B:9E:28:86:FB:B0:2A:E9:18:E3
Certificate issuer: /CN=40e3581addd6b99dd8744b9e2886fbb02ae918e3
Certificate serial: 01989637150C2D75474149DF3877A4682399
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
Manifest number: 162A
Signing time: Sun 10 Aug 2025 23:00:48 +0000
Manifest this update: Sun 10 Aug 2025 23:00:48 +0000
Manifest next update: Mon 11 Aug 2025 23:00:48 +0000
Files and hashes: 1: 7sL1UBW9oIL-S5vfH1jOO3eYhUk.roa (hash: WnpcdVTaXzH616PZ8mN25gQu/poO33PVXu+tGiulqjA=)
2: QONYGt3WuZ3YdEueKIb7sCrpGOM.crl (hash: fjw2ZaRDwGCj3ocrbCzD9fQxURXpU0dxv9NNmvEjHnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 23:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:37:15:0c:2d:75:47:41:49:df:38:77:a4:68:23:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40e3581addd6b99dd8744b9e2886fbb02ae918e3
Validity
Not Before: Aug 10 23:00:48 2025 GMT
Not After : Aug 11 23:00:48 2025 GMT
Subject: CN=9774a3ebd26f5d35f955f17a092bff4689a93b0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e5:ce:ab:3f:29:b8:c9:48:09:93:09:fd:5b:
d1:de:b1:62:ad:27:41:bd:1f:a7:83:b7:a5:0f:49:
11:59:58:91:a2:8b:ef:ac:95:04:f9:07:b4:4b:1c:
a8:40:c0:01:e2:9b:a9:df:96:ff:34:0c:14:32:66:
e3:6e:51:b5:0f:87:97:fd:6c:1a:c9:23:c4:4f:e7:
89:6c:1c:2e:6d:80:72:cc:41:f1:4f:b5:de:3d:05:
c1:da:84:53:0c:52:56:8d:2d:f7:4e:4f:3a:71:88:
ff:ef:8e:71:98:d7:35:a4:89:ad:80:40:29:10:f1:
ff:24:37:1e:79:4f:ce:a2:e1:97:f8:72:85:f3:db:
52:2b:5a:93:f2:16:43:44:4b:1f:a6:31:63:92:65:
50:b1:48:97:8c:c6:d6:2d:f5:4f:88:f8:13:59:c2:
2d:ad:e2:75:d5:d7:ea:1c:0b:10:98:02:d7:4c:a3:
2c:3b:99:19:1d:c9:00:e4:bf:65:f7:b2:10:e9:b6:
60:85:8c:bb:08:15:35:26:28:78:02:96:46:9d:4e:
11:c7:37:90:2c:2c:e1:63:6f:4b:e3:8c:15:e0:2f:
ac:3b:a1:5a:7a:b1:66:93:01:aa:90:fa:83:ba:cf:
7f:20:4f:2f:50:5a:9e:24:f8:2e:35:dc:4d:64:11:
57:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:74:A3:EB:D2:6F:5D:35:F9:55:F1:7A:09:2B:FF:46:89:A9:3B:0C
X509v3 Authority Key Identifier:
keyid:40:E3:58:1A:DD:D6:B9:9D:D8:74:4B:9E:28:86:FB:B0:2A:E9:18:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:b0:db:ad:df:d1:62:37:73:a1:84:a8:e3:8e:3a:c4:44:d9:
0d:6f:34:56:f4:43:de:07:b1:16:5c:aa:7a:5a:ed:f8:4c:05:
69:29:83:01:cd:84:f0:bf:55:78:b1:47:59:63:0e:53:3d:fa:
92:5f:ea:6f:38:9a:09:dd:d7:4e:cd:a5:5d:fa:97:86:5c:81:
37:96:64:07:3c:d5:8f:84:69:5a:0e:ba:db:40:01:5d:4c:b6:
ae:f9:8e:6f:e6:fa:48:13:0e:1d:44:65:e8:cf:8e:9e:d0:47:
4a:c6:9d:55:1f:11:b9:2a:96:81:04:1b:8c:ab:5a:f3:fe:4f:
db:16:43:09:7c:22:95:0a:cb:bc:80:a0:d1:f1:d8:39:a8:07:
30:20:10:87:48:3e:30:e6:10:c7:bf:cf:87:8b:d3:ad:44:65:
51:e2:73:30:49:f2:e7:f1:43:aa:4c:1a:b4:27:24:92:f7:28:
f4:21:8d:d1:8a:c5:d0:da:88:d8:c1:79:40:4a:55:d5:d3:5e:
1d:26:a7:33:c3:25:87:64:2d:96:d7:ad:ff:29:11:26:55:53:
fc:e5:05:ed:40:13:15:0f:5b:68:38:a9:e9:c5:1a:a0:d3:35:
16:64:60:c2:ee:47:d1:1c:e2:19:19:8a:bc:e2:b2:a0:7b:45:
85:91:72:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:09:03 2025 by rpki-client