Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.mft
File: QOxdgqjrXZjOduYdr-UXZh_E5nU.mft (raw, json)
Hash identifier: Dx54oYtNh6ZR1rRYrKyjwYAy4fD3ziLqO1RLi8NXWhY=
Subject key identifier: 34:04:B1:FF:5B:BC:23:EB:8C:A4:DF:CD:7C:D9:65:06:83:6D:4D:82
Authority key identifier: 40:EC:5D:82:A8:EB:5D:98:CE:76:E6:1D:AF:E5:17:66:1F:C4:E6:75
Certificate issuer: /CN=40ec5d82a8eb5d98ce76e61dafe517661fc4e675
Certificate serial: 01988655CBA5EBB1B62B6E0DE3C35216AC0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QOxdgqjrXZjOduYdr-UXZh_E5nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.mft
Manifest number: 161F
Signing time: Thu 07 Aug 2025 21:00:26 +0000
Manifest this update: Thu 07 Aug 2025 21:00:26 +0000
Manifest next update: Fri 08 Aug 2025 21:00:26 +0000
Files and hashes: 1: QOxdgqjrXZjOduYdr-UXZh_E5nU.crl (hash: VISmKrw7SA2Xtbdm8E12fMRrmwef6PK7fMl3Lih8HWI=)
2: y8Eeia8hdhX_DpCgeBhu63E2X4A.roa (hash: wzZxfTRF1LtzRT1r6hfEh3O3egTZFWx9R6sOBFN3GRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QOxdgqjrXZjOduYdr-UXZh_E5nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:86:55:cb:a5:eb:b1:b6:2b:6e:0d:e3:c3:52:16:ac:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40ec5d82a8eb5d98ce76e61dafe517661fc4e675
Validity
Not Before: Aug 7 21:00:26 2025 GMT
Not After : Aug 8 21:00:26 2025 GMT
Subject: CN=3404b1ff5bbc23eb8ca4dfcd7cd96506836d4d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a9:60:b8:7b:36:43:2f:02:71:ae:0a:d0:92:
51:b0:24:9f:03:0e:1e:e4:8a:c3:7e:52:26:8a:af:
5d:86:43:c7:05:70:a1:28:43:d0:15:3e:0b:ab:59:
02:ba:e2:65:7d:41:08:52:88:68:22:84:f0:ba:f6:
74:ca:16:4e:0d:7f:20:5c:fe:b8:50:b9:7f:59:f7:
de:37:93:77:b3:75:63:cb:a1:9b:de:57:fd:5b:70:
a4:2c:5d:c0:02:cf:47:f4:e5:56:0f:8e:5a:00:be:
2a:ba:32:f1:82:f1:78:94:4a:98:75:f6:f9:b9:84:
42:57:f4:62:e1:6d:86:bc:09:cb:65:f6:ee:bd:f7:
31:71:65:44:e4:5d:8c:75:cc:24:37:14:66:af:ee:
04:3e:ea:df:bc:d2:64:f5:71:cc:f2:b6:64:f6:ad:
ab:a6:3e:1e:ff:71:84:12:57:33:ed:e8:42:5e:6f:
a1:83:bd:0c:9e:da:a1:3e:f8:bd:87:cd:87:dc:9c:
dc:48:18:95:0a:fc:8f:26:6a:5c:96:f3:ec:ed:3b:
07:d8:51:08:5d:6d:97:fc:31:90:20:a5:d6:1c:b6:
5d:a6:da:0a:16:b0:6c:c6:cc:08:f9:07:d2:9f:00:
9e:77:be:1d:b6:77:bd:35:e7:ad:35:48:d2:36:3a:
5a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:04:B1:FF:5B:BC:23:EB:8C:A4:DF:CD:7C:D9:65:06:83:6D:4D:82
X509v3 Authority Key Identifier:
keyid:40:EC:5D:82:A8:EB:5D:98:CE:76:E6:1D:AF:E5:17:66:1F:C4:E6:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QOxdgqjrXZjOduYdr-UXZh_E5nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:6e:c2:5c:aa:af:ca:b9:03:7c:a6:5f:f8:8c:3f:ae:a0:35:
37:c2:77:78:5c:12:71:b1:2f:bb:ea:3d:c5:77:30:85:d7:04:
cc:e7:af:96:f4:2b:cf:3d:fa:1d:8e:62:0d:13:b8:19:1b:76:
6c:9e:c0:95:fb:63:05:9e:93:89:a3:38:3d:5e:5e:95:7b:38:
58:0f:99:e1:3c:c7:b4:de:20:bf:95:5b:64:26:de:2c:cb:17:
39:6e:f8:c8:46:58:1c:76:d5:fc:53:af:2e:a2:2a:8c:3e:f8:
2d:a1:8b:e6:e7:64:9c:24:5c:c9:4d:03:6c:c6:43:93:be:80:
0b:2d:20:50:47:23:d9:7d:62:6a:34:11:98:08:1a:24:0f:3d:
a7:5c:f3:10:ee:e7:d7:cf:36:67:bd:23:f1:c0:53:6f:44:e1:
7f:7b:7c:e2:83:f5:4d:57:7f:bf:30:46:4f:ac:d3:23:40:bf:
4b:be:ec:90:15:47:c7:f0:28:67:08:aa:f1:99:55:af:37:8d:
77:15:19:d7:af:38:ba:d1:4a:dc:dd:7b:b5:c1:5c:35:4e:5e:
fb:eb:fb:79:08:5b:31:f1:72:c6:e9:d0:85:15:0e:84:45:79:
31:5e:73:c7:50:79:db:59:fd:1a:2c:72:54:bc:9c:48:ca:35:
d6:01:92:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiGVcul67G2K24N48NSFqwPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwZWM1ZDgyYThlYjVkOThjZTc2ZTYxZGFmZTUxNzY2MWZj
NGU2NzUwHhcNMjUwODA3MjEwMDI2WhcNMjUwODA4MjEwMDI2WjAzMTEwLwYDVQQD
EygzNDA0YjFmZjViYmMyM2ViOGNhNGRmY2Q3Y2Q5NjUwNjgzNmQ0ZDgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6lguHs2Qy8Cca4K0JJRsCSfAw4e
5IrDflImiq9dhkPHBXChKEPQFT4Lq1kCuuJlfUEIUohoIoTwuvZ0yhZODX8gXP64
ULl/WffeN5N3s3Vjy6Gb3lf9W3CkLF3AAs9H9OVWD45aAL4qujLxgvF4lEqYdfb5
uYRCV/Ri4W2GvAnLZfbuvfcxcWVE5F2MdcwkNxRmr+4EPurfvNJk9XHM8rZk9q2r
pj4e/3GEElcz7ehCXm+hg70MntqhPvi9h82H3JzcSBiVCvyPJmpclvPs7TsH2FEI
XW2X/DGQIKXWHLZdptoKFrBsxswI+QfSnwCed74dtne9NeetNUjSNjpaOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDQEsf9bvCPrjKTfzXzZZQaDbU2CMB8GA1UdIwQY
MBaAFEDsXYKo612YznbmHa/lF2YfxOZ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU94ZGdxanJYWmpPZHVZZHItVVhaaF9FNW5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi82N2U3NTUtM2M1NC00NWRiLTg5YjUt
ZGYzMTc0NWNjMjI5LzEvUU94ZGdxanJYWmpPZHVZZHItVVhaaF9FNW5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi82N2U3NTUtM2M1NC00NWRiLTg5YjUtZGYzMTc0NWNjMjI5
LzEvUU94ZGdxanJYWmpPZHVZZHItVVhaaF9FNW5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApm7CXKqv
yrkDfKZf+Iw/rqA1N8J3eFwScbEvu+o9xXcwhdcEzOevlvQrzz36HY5iDRO4GRt2
bJ7AlftjBZ6TiaM4PV5elXs4WA+Z4TzHtN4gv5VbZCbeLMsXOW74yEZYHHbV/FOv
LqIqjD74LaGL5udknCRcyU0DbMZDk76ACy0gUEcj2X1iajQRmAgaJA89p1zzEO7n
1882Z70j8cBTb0Thf3t84oP1TVd/vzBGT6zTI0C/S77skBVHx/AoZwiq8ZlVrzeN
dxUZ1684utFK3N17tcFcNU5e++v7eQhbMfFyxunQhRUOhEV5MV5zx1B521n9Gixy
VLycSMo11gGSxQ==
-----END CERTIFICATE-----
Generated at Fri Aug 8 00:04:18 2025 by rpki-client