Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.mft
File: QOxdgqjrXZjOduYdr-UXZh_E5nU.mft (raw, json)
Hash identifier: V00a8VDDg7WZau5Lw4ytcBZoupRHi2Dan6YBTkDYmJY=
Subject key identifier: C6:4B:02:26:70:55:B1:D8:BE:59:A5:7E:05:41:20:B5:54:10:01:96
Authority key identifier: 40:EC:5D:82:A8:EB:5D:98:CE:76:E6:1D:AF:E5:17:66:1F:C4:E6:75
Certificate issuer: /CN=40ec5d82a8eb5d98ce76e61dafe517661fc4e675
Certificate serial: 01976C61D6861436A6CF89CF87B5159AA6EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QOxdgqjrXZjOduYdr-UXZh_E5nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.mft
Manifest number: 158D
Signing time: Sat 14 Jun 2025 03:00:40 +0000
Manifest this update: Sat 14 Jun 2025 03:00:40 +0000
Manifest next update: Sun 15 Jun 2025 03:00:40 +0000
Files and hashes: 1: QOxdgqjrXZjOduYdr-UXZh_E5nU.crl (hash: Q1BIDwgLAUXJm4opq06z5iPC5XuoV64nTXkzsbR7ZF4=)
2: y8Eeia8hdhX_DpCgeBhu63E2X4A.roa (hash: wzZxfTRF1LtzRT1r6hfEh3O3egTZFWx9R6sOBFN3GRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QOxdgqjrXZjOduYdr-UXZh_E5nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:61:d6:86:14:36:a6:cf:89:cf:87:b5:15:9a:a6:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40ec5d82a8eb5d98ce76e61dafe517661fc4e675
Validity
Not Before: Jun 14 03:00:40 2025 GMT
Not After : Jun 15 03:00:40 2025 GMT
Subject: CN=c64b02267055b1d8be59a57e054120b554100196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:33:c0:99:1c:b8:b2:ec:29:a8:0e:0c:3b:56:
66:b2:9b:19:0e:e4:01:0d:9d:6f:cf:b7:5a:70:df:
65:28:97:9e:72:cb:ff:b4:e0:94:7a:4e:46:ae:e2:
4b:c4:ca:d0:c8:f4:21:49:b4:0f:b0:44:19:ac:85:
0d:b2:67:f1:ee:98:8f:23:75:f8:38:ff:e9:f3:ae:
5d:9a:ca:82:5c:20:c9:ae:16:e6:94:84:c9:77:5b:
1b:1d:3f:b6:89:43:f5:ab:e0:cc:61:48:f2:20:a6:
94:8c:d5:58:73:7b:e6:79:e0:c9:88:aa:bc:47:9d:
44:04:06:fb:92:e8:20:67:21:91:9d:95:22:06:3f:
cc:6b:82:74:28:30:26:59:be:ba:f6:50:09:50:21:
a5:5a:68:b1:89:cf:40:f9:23:90:7a:0d:e6:60:ad:
f8:a7:4c:c2:76:7f:30:fa:35:48:5d:98:4c:01:f6:
64:c9:35:93:cf:ac:49:3d:96:f4:a7:d6:b9:69:8c:
9f:05:f2:9b:cd:d6:41:81:93:00:b0:6c:86:4d:ab:
bf:04:78:c9:78:24:9f:78:52:5c:28:4e:aa:b9:ce:
93:c7:a0:3e:b8:93:69:6e:b6:98:97:dd:fd:43:dd:
91:19:e3:74:43:32:d4:42:df:40:a5:74:5e:4e:23:
eb:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:4B:02:26:70:55:B1:D8:BE:59:A5:7E:05:41:20:B5:54:10:01:96
X509v3 Authority Key Identifier:
keyid:40:EC:5D:82:A8:EB:5D:98:CE:76:E6:1D:AF:E5:17:66:1F:C4:E6:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QOxdgqjrXZjOduYdr-UXZh_E5nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ba:e2:7c:63:df:32:49:3c:76:93:38:6c:dd:fa:60:b6:bf:
86:99:77:9d:34:33:71:df:35:8a:47:c1:19:44:22:e4:bb:78:
a0:a6:f8:40:56:c4:e9:f6:7d:50:f9:43:9d:3e:d2:67:dc:45:
45:2a:9f:de:ea:19:f2:e2:27:b0:ab:7a:3c:17:76:b3:13:a5:
74:ac:ec:3b:1b:0d:22:48:98:30:96:92:9e:6f:79:ea:80:36:
e7:23:61:d2:5d:81:a7:c3:3e:f1:87:bd:56:30:46:1d:d0:1d:
ab:cf:c7:6b:28:5b:06:74:00:50:e1:39:38:28:9d:dd:47:66:
8f:ab:de:a8:18:e6:c8:80:5e:96:c6:e5:07:ff:e3:df:f7:11:
c3:3c:d9:cb:de:1e:79:3e:fe:b3:dc:9f:e2:82:5c:22:43:af:
14:eb:58:3f:90:17:7c:20:89:99:dd:23:e1:4d:6e:cf:46:8a:
58:56:07:7a:25:a3:31:47:ef:30:bf:2a:ba:ac:c4:49:bf:a4:
90:52:7c:8d:2e:f6:28:3f:9f:9a:23:19:79:8f:21:80:93:32:
e1:2a:51:cc:9e:e6:76:3f:c9:46:7a:bc:04:d2:f1:8b:16:60:
b0:bf:9c:ea:28:c8:49:6a:a7:89:76:82:c4:b2:c5:19:d3:68:
2b:ce:24:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:18:40 2025 by rpki-client