Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft
File: QO9YSZMMyd10IR-zfiQRgkmh_EA.mft (raw, json)
Hash identifier: I3UFe34i9YHjFHkOMX879d+slHAOk0apqzKcdV3ayKQ=
Subject key identifier: 9D:1E:C4:DB:3A:1F:36:C2:34:DE:80:B5:00:0A:DC:76:5F:19:A8:73
Authority key identifier: 40:EF:58:49:93:0C:C9:DD:74:21:1F:B3:7E:24:11:82:49:A1:FC:40
Certificate issuer: /CN=40ef5849930cc9dd74211fb37e24118249a1fc40
Certificate serial: 0197730913A630F021B68173B84F93512A28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QO9YSZMMyd10IR-zfiQRgkmh_EA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft
Manifest number: 159C
Signing time: Sun 15 Jun 2025 10:01:04 +0000
Manifest this update: Sun 15 Jun 2025 10:01:04 +0000
Manifest next update: Mon 16 Jun 2025 10:01:04 +0000
Files and hashes: 1: QO9YSZMMyd10IR-zfiQRgkmh_EA.crl (hash: tviVqsctxKWDnv6mp79Tsh8OSbFmUAtJVmHBFIDu5eA=)
2: UO07512-xyl7tPlxWkeH0XFHtjw.roa (hash: FGw3ypGv9x4G+fHO0s0Uxmz/ZFgsQL9y06qgJnZxgwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QO9YSZMMyd10IR-zfiQRgkmh_EA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 10:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:09:13:a6:30:f0:21:b6:81:73:b8:4f:93:51:2a:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40ef5849930cc9dd74211fb37e24118249a1fc40
Validity
Not Before: Jun 15 10:01:04 2025 GMT
Not After : Jun 16 10:01:04 2025 GMT
Subject: CN=9d1ec4db3a1f36c234de80b5000adc765f19a873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:09:ca:4a:db:3e:eb:4c:4d:a8:21:94:cf:bc:
72:a3:11:2d:e8:e9:69:cd:b6:00:aa:be:7a:08:6d:
b0:09:8b:95:4b:95:4a:e7:a3:fa:ef:05:87:06:8a:
79:01:5a:aa:d8:82:58:47:f6:da:d3:ca:f9:04:1d:
41:03:e1:79:66:cc:0c:c0:11:e6:5d:2e:89:25:33:
7d:4f:de:b3:43:10:58:ce:e2:03:80:1e:5b:e8:c7:
53:4e:6a:6b:96:80:c6:74:b0:6b:4c:19:40:6b:a7:
7e:6a:41:d3:33:51:92:b9:de:42:cd:94:77:ed:90:
fe:da:0a:28:33:f8:c3:65:61:e5:44:f9:29:11:9c:
17:9e:a9:3a:ae:48:28:2f:58:25:62:8a:ea:55:ad:
b3:d8:bc:4c:8b:2b:96:ee:07:5a:75:bf:c2:fd:ff:
bb:9e:b7:6d:2d:6c:0b:2b:75:c4:ff:a0:0b:97:11:
bd:41:67:45:90:87:30:40:1e:e3:7d:d7:6f:55:d9:
bf:75:7e:fc:7c:eb:73:b8:44:ac:16:22:c3:f9:53:
1a:6c:f8:65:bd:6c:34:90:a7:e7:ad:83:1a:f5:22:
37:96:cb:eb:f1:ad:75:2e:29:0c:a9:54:df:cf:43:
66:3f:98:2f:a3:e3:07:4a:bc:cd:32:13:7b:cf:90:
6a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:1E:C4:DB:3A:1F:36:C2:34:DE:80:B5:00:0A:DC:76:5F:19:A8:73
X509v3 Authority Key Identifier:
keyid:40:EF:58:49:93:0C:C9:DD:74:21:1F:B3:7E:24:11:82:49:A1:FC:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QO9YSZMMyd10IR-zfiQRgkmh_EA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:48:49:c0:c7:e0:11:85:f9:29:8b:a7:b9:95:d6:96:39:f1:
ba:13:46:58:1f:d8:a6:5b:ed:38:a4:5b:d0:16:92:64:3c:60:
79:7a:5f:2e:2d:1e:c2:38:26:45:d7:44:99:54:4a:af:8e:83:
59:46:13:72:7a:a9:8e:ed:27:5b:5c:c0:a3:aa:5c:f3:b7:8e:
73:4a:31:d7:a2:29:aa:cb:ef:90:eb:59:9c:2e:46:86:c4:aa:
ef:31:89:df:da:9c:b3:fb:cb:d3:ea:5f:d2:cd:da:7c:7d:e1:
7b:35:db:de:0d:f6:a8:09:81:b7:c6:f5:00:2d:9d:d1:fc:9c:
61:ee:e9:82:3c:cd:43:98:07:63:c9:0b:69:c5:e3:96:5e:62:
0a:5f:51:51:21:f8:2c:09:90:3b:c9:fe:ca:63:e4:b2:30:94:
66:de:d5:68:3f:6a:db:f0:cd:dd:85:19:c9:85:6f:c5:09:c7:
b5:97:35:8e:47:78:d3:ed:86:66:f1:83:c0:cd:a8:bc:26:d2:
d7:a8:72:1f:85:77:3e:6a:13:50:84:55:b4:f0:76:e5:5c:3e:
1c:b7:46:66:50:f3:1d:51:06:ed:5e:41:99:0d:c4:eb:dd:d3:
4f:70:44:b3:1c:48:3a:91:77:d5:b1:ab:6c:90:14:1f:ec:1b:
25:8d:76:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:36:17 2025 by rpki-client