Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft
File: QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft (raw, json)
Hash identifier: x2fe87bjBkFola7Lm9VWQzYgcoy++P+2N3ehIC6sKRU=
Subject key identifier: 24:CC:70:44:3A:B1:F2:DF:1C:7B:76:BE:D4:AB:1F:D1:D9:F8:E3:40
Authority key identifier: 40:51:8E:CB:D6:46:4D:78:AD:45:15:51:64:8F:92:06:F7:FB:5F:42
Certificate issuer: /CN=40518ecbd6464d78ad451551648f9206f7fb5f42
Certificate serial: 0197722CCF6D3252DD018857C1E792CA40F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QFGOy9ZGTXitRRVRZI-SBvf7X0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft
Manifest number: 02AA
Signing time: Sun 15 Jun 2025 06:00:28 +0000
Manifest this update: Sun 15 Jun 2025 06:00:28 +0000
Manifest next update: Mon 16 Jun 2025 06:00:28 +0000
Files and hashes: 1: 7fqM8GCj-eNanfhBlPQ1PMMaPkQ.roa (hash: cyPdhHEtqG0jKqnla9COVxpAyirC8qiWW4mGGbTTw34=)
2: QFGOy9ZGTXitRRVRZI-SBvf7X0I.crl (hash: WY1+Q/9Sy/f3dg/y4rSIdcLi330kbWS+3EJF8Athfrc=)
3: WRsKHbHpQ9jZIvciUb2Wz6AHSW4.roa (hash: 8Nnxx5No66UiBNPIjWPMS0jddJkyISjgfdGXoNS0d/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/QFGOy9ZGTXitRRVRZI-SBvf7X0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:2c:cf:6d:32:52:dd:01:88:57:c1:e7:92:ca:40:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40518ecbd6464d78ad451551648f9206f7fb5f42
Validity
Not Before: Jun 15 06:00:28 2025 GMT
Not After : Jun 16 06:00:28 2025 GMT
Subject: CN=24cc70443ab1f2df1c7b76bed4ab1fd1d9f8e340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7a:b1:bf:5c:6e:ae:68:3b:2e:3e:e8:0b:cd:
5b:39:93:31:2f:42:b7:b2:42:0c:74:78:47:b7:8c:
d1:ce:d8:00:24:5f:e4:7d:d6:aa:08:c0:c6:f1:64:
3c:de:d1:d9:fb:cd:15:42:48:70:20:de:a2:c1:3a:
d6:5a:4d:09:a6:0c:e7:d7:c2:88:65:a6:bf:a7:b2:
0d:42:47:3b:ed:7d:f8:96:9f:06:9a:50:de:75:82:
01:2b:a2:c0:b9:e9:ac:0e:91:97:68:a7:9d:17:65:
40:79:85:af:32:a6:7a:6b:38:b1:f8:6c:c8:83:20:
f1:62:1b:16:38:95:87:c5:dc:82:48:5f:0c:f4:a0:
6e:46:f6:de:bc:8b:df:6d:52:69:21:64:79:08:22:
ce:ab:9a:59:0d:68:f9:16:35:4c:88:af:65:e7:b9:
63:c6:16:9d:1a:a5:84:e2:41:42:87:81:8e:6d:e1:
39:b3:26:20:95:bb:9a:03:77:bb:4b:ca:84:95:c5:
f6:67:20:af:99:4f:ca:76:01:a1:9e:18:34:f1:e8:
f7:5e:8f:6e:98:a0:d0:07:9a:cc:17:29:41:4d:30:
90:1c:18:f0:4c:c4:4e:42:8d:62:ef:b2:eb:94:51:
69:4f:f8:28:84:99:39:21:de:5e:4a:cc:96:61:53:
be:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:CC:70:44:3A:B1:F2:DF:1C:7B:76:BE:D4:AB:1F:D1:D9:F8:E3:40
X509v3 Authority Key Identifier:
keyid:40:51:8E:CB:D6:46:4D:78:AD:45:15:51:64:8F:92:06:F7:FB:5F:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QFGOy9ZGTXitRRVRZI-SBvf7X0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:a1:95:e5:be:ce:1d:07:74:32:d0:43:04:f7:db:4c:55:a6:
fd:f9:b0:a3:4f:ce:a3:f6:2e:cf:49:08:d8:b9:ea:73:cd:8c:
56:20:78:3c:68:b9:50:d5:4b:71:3d:55:92:f6:73:29:30:b8:
d0:61:ac:b8:23:ac:72:6e:9a:50:2c:c2:09:bb:9b:33:e6:79:
a9:2d:08:69:4d:2c:d0:35:b7:8b:25:13:15:30:ad:ed:ea:aa:
e9:8c:d0:b8:5f:1b:35:ea:1c:15:10:3b:fa:0c:b5:ae:e8:66:
c6:3b:39:78:63:f7:ea:9f:b8:37:b0:24:ca:d9:00:97:7f:19:
64:91:da:03:f0:8c:af:86:30:4c:a6:24:e5:e6:7e:3a:fb:f8:
5b:c3:f0:97:8f:44:88:1c:db:8a:2c:ef:63:50:37:61:8f:0d:
c1:8c:25:74:50:06:77:71:0c:c5:b7:2b:3c:60:3f:6c:fa:3c:
55:6a:37:22:70:37:2f:b4:74:b3:33:a6:fd:d4:b1:77:c2:10:
2b:20:32:4e:c6:03:48:79:34:a9:d3:46:4b:af:98:99:7b:e7:
6c:04:a1:0c:15:aa:23:d8:d3:52:48:f8:65:f9:0f:24:9c:07:
08:01:d9:2a:05:21:16:73:ca:d9:95:b3:2f:8e:7b:97:f0:2f:
3f:e6:dc:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:17:47 2025 by rpki-client