Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.mft
File: QO5hC9zSO60rEZK9RcqKl204Vdo.mft (raw, json)
Hash identifier: XryADkcjx5eDtZtBteZi0A/NBMknm56BfgBdqDJfTcs=
Subject key identifier: 09:71:3B:39:61:BD:C5:28:35:CE:C1:F7:4B:4A:AD:E1:98:86:C7:78
Authority key identifier: 40:EE:61:0B:DC:D2:3B:AD:2B:11:92:BD:45:CA:8A:97:6D:38:55:DA
Certificate issuer: /CN=40ee610bdcd23bad2b1192bd45ca8a976d3855da
Certificate serial: 01988EEB41C892F6F1EA1ACB2C3A84E07C8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QO5hC9zSO60rEZK9RcqKl204Vdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.mft
Manifest number: 14BF
Signing time: Sat 09 Aug 2025 13:00:39 +0000
Manifest this update: Sat 09 Aug 2025 13:00:39 +0000
Manifest next update: Sun 10 Aug 2025 13:00:39 +0000
Files and hashes: 1: QO5hC9zSO60rEZK9RcqKl204Vdo.crl (hash: V5CgE0/S7X0WgAGZK7D0IeaTzDFVVBWIILJbt4pOhwY=)
2: WXzwl6dDgLLRTGjEWsJa-Mt4DFY.roa (hash: AsvwbpP9IRPmxXb+scTtlP8HJBrFwXPs3woICGrCIxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QO5hC9zSO60rEZK9RcqKl204Vdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:eb:41:c8:92:f6:f1:ea:1a:cb:2c:3a:84:e0:7c:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40ee610bdcd23bad2b1192bd45ca8a976d3855da
Validity
Not Before: Aug 9 13:00:39 2025 GMT
Not After : Aug 10 13:00:39 2025 GMT
Subject: CN=09713b3961bdc52835cec1f74b4aade19886c778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8f:ad:b9:e9:a6:d6:e4:1a:b4:05:54:d9:17:
27:6e:56:aa:be:ee:2c:f1:be:e3:1c:c6:3e:0f:43:
12:25:4d:85:83:58:72:55:52:86:8a:f9:eb:4b:42:
04:04:0a:ad:18:3d:c0:90:a5:ff:d0:62:5e:08:6c:
38:87:46:03:92:76:71:a2:b8:3a:5d:e5:3d:63:cd:
97:4c:49:1a:c3:18:2b:40:eb:b7:af:76:9f:8a:8b:
c4:ca:44:40:3d:41:51:1a:17:9f:dc:62:22:00:c1:
16:eb:c3:35:8a:e3:f0:b9:f8:09:a2:51:64:d8:9e:
ad:9a:b4:c5:5f:5d:4c:db:03:fa:3a:5b:f9:f9:41:
24:ae:26:7b:50:13:9b:d6:ce:b1:5b:08:a8:bf:27:
19:d8:d9:89:3c:82:fd:98:ee:6b:f5:08:97:d1:01:
86:72:e9:9d:c9:64:fd:45:1b:e3:9d:a4:f2:ea:49:
af:a4:66:70:08:71:62:79:4f:2d:47:21:71:c2:b0:
c2:f2:7e:4a:a4:00:d4:12:46:5e:05:6e:58:96:76:
9c:c8:5f:25:2d:18:01:3a:9a:ad:6a:1c:84:39:72:
32:b5:74:94:8e:4c:54:1b:37:7c:29:cf:a2:0a:b7:
74:c9:dd:7f:b4:90:1d:a7:9c:be:be:f9:1a:ba:ee:
19:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:71:3B:39:61:BD:C5:28:35:CE:C1:F7:4B:4A:AD:E1:98:86:C7:78
X509v3 Authority Key Identifier:
keyid:40:EE:61:0B:DC:D2:3B:AD:2B:11:92:BD:45:CA:8A:97:6D:38:55:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QO5hC9zSO60rEZK9RcqKl204Vdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:cd:98:c1:4c:ec:df:a1:ec:89:f2:44:c3:e1:6a:9c:dd:82:
14:68:41:34:d1:e7:83:29:52:04:11:13:ab:85:32:b1:42:0a:
5f:8e:7c:a0:5f:c0:ba:ed:2c:7e:08:89:77:ae:a3:0e:ba:f4:
bc:90:44:06:6a:94:ec:c2:15:fa:13:a2:de:70:df:ef:45:fe:
c8:d5:6c:d9:df:e4:4c:85:df:ed:ba:34:2a:1a:80:32:b8:19:
d0:64:47:7f:01:ec:7d:00:a5:a8:f2:bf:20:e4:57:0d:e1:ab:
f7:8a:93:b5:69:b3:7c:29:6b:08:04:65:07:ff:91:68:11:e8:
fd:c1:68:fe:fd:e8:cc:6c:45:ac:d6:85:cb:35:7e:58:d3:2b:
21:72:5e:67:82:0d:39:7a:8a:36:8f:ac:b2:97:1e:73:63:81:
d7:07:7d:52:8b:62:35:50:21:de:25:d7:a2:39:40:db:12:13:
54:03:dc:db:66:34:cf:a4:6a:a0:0d:ec:40:bc:4d:16:91:73:
87:a6:bb:18:0f:4b:23:3b:6d:d1:fe:ac:e1:e4:51:b1:52:19:
55:f6:fa:d7:af:4f:c0:38:47:97:9e:3c:bb:da:eb:04:18:ae:
85:b1:4a:d4:ba:e6:1e:7b:12:29:cf:12:96:e0:dd:b8:49:ea:
77:3e:85:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:31:36 2025 by rpki-client