
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft
File: QO9YSZMMyd10IR-zfiQRgkmh_EA.mft (raw, json)
Hash identifier: Sp3HjQhqjBW+asRLIggL81Lw1vvddSKBqITVgaNuNgg=
Subject key identifier: AF:9D:CB:20:A8:89:53:CD:93:E0:67:03:4B:5A:5A:8E:DC:BF:A0:2C
Authority key identifier: 40:EF:58:49:93:0C:C9:DD:74:21:1F:B3:7E:24:11:82:49:A1:FC:40
Certificate issuer: /CN=40ef5849930cc9dd74211fb37e24118249a1fc40
Certificate serial: 01988167EE81D126DF06A3B3A95A3580359A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QO9YSZMMyd10IR-zfiQRgkmh_EA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft
Manifest number: 1628
Signing time: Wed 06 Aug 2025 22:02:08 +0000
Manifest this update: Wed 06 Aug 2025 22:02:08 +0000
Manifest next update: Thu 07 Aug 2025 22:02:08 +0000
Files and hashes: 1: QO9YSZMMyd10IR-zfiQRgkmh_EA.crl (hash: tGxYzxHA+vsMBSxOLGlDwrncVaMXDP0CyB+vVesZTYU=)
2: UO07512-xyl7tPlxWkeH0XFHtjw.roa (hash: FGw3ypGv9x4G+fHO0s0Uxmz/ZFgsQL9y06qgJnZxgwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QO9YSZMMyd10IR-zfiQRgkmh_EA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 22:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:67:ee:81:d1:26:df:06:a3:b3:a9:5a:35:80:35:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40ef5849930cc9dd74211fb37e24118249a1fc40
Validity
Not Before: Aug 6 22:02:08 2025 GMT
Not After : Aug 7 22:02:08 2025 GMT
Subject: CN=af9dcb20a88953cd93e067034b5a5a8edcbfa02c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8b:df:88:70:12:fe:97:3c:ac:b1:b7:86:c0:
aa:ee:94:fe:02:f9:51:ba:ec:5d:03:13:92:5a:95:
a4:5b:41:47:72:a5:16:a7:3e:8e:97:c0:f4:ff:7b:
48:79:ee:b5:98:fb:a0:93:5a:72:75:fc:de:dc:75:
a8:fb:0b:a9:89:34:1b:68:43:ef:98:47:40:3a:be:
e8:90:5a:06:b0:bf:ed:58:c3:b3:06:a3:38:30:2b:
43:14:0a:bc:e3:5e:b8:05:86:65:12:73:e5:b6:1a:
dd:43:8a:81:60:1f:70:3a:a6:a9:de:b7:ea:04:0a:
1d:e2:e1:b2:9e:59:2c:88:60:2f:29:83:a9:eb:e1:
f3:05:7e:2f:be:3b:e2:80:86:0d:8f:03:09:09:5b:
77:65:e9:b5:da:16:c1:e1:4f:27:68:5a:38:59:29:
c0:8e:d5:11:11:f4:6b:33:79:22:71:93:cb:b1:98:
23:04:bb:6e:ec:3e:06:e2:aa:61:89:5b:60:7c:90:
29:e3:b9:5b:40:fc:21:ec:0f:02:d6:b9:03:16:63:
86:f6:35:8e:cc:74:08:c4:6b:32:2a:69:e7:e7:51:
5e:b6:43:61:ad:8d:fd:5b:c7:e5:86:5d:1c:43:2d:
a7:b7:b3:c9:ad:ba:cf:3f:0f:d7:ff:01:dd:23:6f:
e8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:9D:CB:20:A8:89:53:CD:93:E0:67:03:4B:5A:5A:8E:DC:BF:A0:2C
X509v3 Authority Key Identifier:
keyid:40:EF:58:49:93:0C:C9:DD:74:21:1F:B3:7E:24:11:82:49:A1:FC:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QO9YSZMMyd10IR-zfiQRgkmh_EA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:19:57:bf:00:21:d5:de:64:0c:dc:2d:0a:4e:b6:fc:79:23:
52:3b:80:84:0c:27:2f:87:4f:45:e2:70:4d:9d:a4:ad:02:6f:
72:14:19:dd:03:50:5b:05:86:ba:65:9c:b6:a5:05:ed:04:b7:
bc:3b:87:b0:c8:b6:0c:c4:4c:13:8f:f2:40:48:a4:3b:43:25:
0f:f4:03:45:e6:41:4e:64:91:7f:0e:6b:35:ba:38:f1:90:f8:
e5:00:64:6d:02:f5:20:19:dc:47:48:2b:5a:6f:b0:b4:92:3b:
7f:3e:9d:2b:22:b3:b1:27:56:3f:96:54:9e:e6:ca:d6:e3:cf:
75:02:da:d1:e2:1a:48:1c:ce:d9:25:f2:3a:7f:7f:f5:04:dc:
d1:8d:a8:69:3f:7a:08:79:7d:32:bb:29:9d:1d:5b:35:c7:ab:
6c:62:76:7e:6e:bf:63:2d:8d:f7:6b:39:1d:4d:04:aa:50:0c:
6f:60:13:f1:f1:65:d9:16:01:db:57:06:e5:da:2c:4f:d1:a9:
e6:bd:18:6f:71:c3:f6:78:9f:55:a7:aa:5c:fa:60:00:89:7b:
0c:18:e0:1f:3c:82:d0:3c:c8:0c:08:5f:92:22:e6:b1:46:78:
e2:0e:37:5f:c1:6d:5c:f4:3d:9c:72:5a:16:03:7d:0e:07:b2:
8b:c1:31:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:37:28 2025 by rpki-client