Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft
File: QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft (raw, json)
Hash identifier: 8PDDg1b4NSvly+hDKt1jD2UkFtQYW012Eo/tGlJ09+s=
Subject key identifier: 40:1D:6F:35:1C:AA:75:8A:2C:0B:F2:1E:9B:78:8A:3D:CB:11:08:BC
Authority key identifier: 42:7A:26:70:50:8B:94:51:23:BE:EC:BF:13:14:5F:FB:D7:BF:CD:E4
Certificate issuer: /CN=427a2670508b945123beecbf13145ffbd7bfcde4
Certificate serial: 0198D4A7B8049EF0CF3C210BB020C7DC4D36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft
Manifest number: 0836
Signing time: Sat 23 Aug 2025 02:00:18 +0000
Manifest this update: Sat 23 Aug 2025 02:00:18 +0000
Manifest next update: Sun 24 Aug 2025 02:00:18 +0000
Files and hashes: 1: QnomcFCLlFEjvuy_ExRf-9e_zeQ.crl (hash: rxsSU9m8Ue8i1nL3X7MF5NIm0R8UcskfvQtbaOBbWgE=)
2: bC15MrNbvaHvc_M6-zAakBbyrww.roa (hash: w8+yaL/cYfTmT9iePHgIvZ5N3rV9yU+eea+yLs6LsB4=)
3: ey2THT3vxYZt7oPHCFWCPLFWheU.roa (hash: 24QSz9cCbqNcvUaGh3j8TGkQz+MS9kGdeKEW+Heclys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:b8:04:9e:f0:cf:3c:21:0b:b0:20:c7:dc:4d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=427a2670508b945123beecbf13145ffbd7bfcde4
Validity
Not Before: Aug 23 02:00:18 2025 GMT
Not After : Aug 24 02:00:18 2025 GMT
Subject: CN=401d6f351caa758a2c0bf21e9b788a3dcb1108bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d6:b4:a9:d8:62:53:98:d7:fc:a1:4b:57:3d:
ae:33:75:e0:1f:82:45:2b:77:71:ac:c1:c4:e8:32:
48:3e:9f:11:53:49:a3:7f:42:f1:14:c1:29:15:bd:
25:a4:3b:3b:79:e4:ee:8e:f2:6d:c1:ca:f1:8d:7d:
f3:63:e1:1d:02:90:eb:05:d3:71:6c:b8:db:97:45:
f1:8b:9b:0f:70:81:88:bc:06:0e:17:e4:62:2c:96:
06:f7:25:a2:11:4e:71:d2:83:d3:cf:ac:e4:8d:06:
52:5c:d6:91:d9:af:49:dc:58:72:12:03:c7:86:2a:
f5:79:82:46:cf:da:bb:e0:e7:ba:80:59:f6:fa:2e:
5c:78:1c:3f:94:bb:36:09:28:28:4e:3f:52:df:ce:
5b:51:b7:a1:b8:cf:bd:b2:c7:f7:3f:7e:c6:bc:ad:
a4:47:8c:ab:25:11:02:2e:c3:6d:1c:67:c0:bc:f0:
0d:4b:44:0c:a2:21:0c:b5:50:c5:96:b4:7f:43:7c:
ef:fc:08:ba:09:9a:54:c7:10:1a:97:7f:eb:d6:ac:
c8:29:c8:82:a2:54:09:20:b4:54:4a:15:a1:73:4a:
af:83:11:af:29:64:c2:be:58:8a:38:6e:82:f9:11:
a9:1a:41:ec:6f:6f:d3:aa:15:9f:7d:fd:c3:c9:07:
26:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:1D:6F:35:1C:AA:75:8A:2C:0B:F2:1E:9B:78:8A:3D:CB:11:08:BC
X509v3 Authority Key Identifier:
keyid:42:7A:26:70:50:8B:94:51:23:BE:EC:BF:13:14:5F:FB:D7:BF:CD:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:fe:22:60:19:de:84:87:76:bd:b9:82:c8:6e:cc:ca:45:72:
67:0c:3e:c1:fe:fd:f7:b2:f3:a1:6d:bc:95:01:48:53:cf:23:
76:6c:52:c3:2e:f1:6c:09:7a:06:15:b3:b3:25:0a:ff:58:d8:
f1:9a:f5:c2:eb:d9:7a:e7:b2:60:f2:52:06:83:b0:6e:dd:02:
99:3b:7a:da:3d:ea:b5:8c:67:b1:0b:7c:c2:8e:e0:03:dc:3c:
d3:17:7d:3f:2b:88:06:70:0b:9e:ca:e0:2f:a4:74:a8:a3:ed:
9f:fc:af:1f:9d:2b:7a:a5:41:9a:c2:a3:5b:5f:e0:4f:a3:4f:
f7:bc:49:f0:76:ba:5d:e4:9a:10:b5:07:ce:5b:46:1a:97:a2:
83:7c:d6:45:24:47:48:f3:bd:99:b9:cb:24:64:47:8e:16:87:
03:dc:5a:05:a4:38:1b:c3:79:ad:05:91:f3:0b:eb:5e:05:a6:
8c:a6:36:03:13:ca:81:fe:08:88:79:46:b9:68:ae:8d:92:45:
5b:ce:37:c5:00:d5:c8:f9:a2:d6:92:d0:b6:2b:2f:67:62:23:
98:67:a4:8d:f1:a3:b9:46:94:09:e0:c3:6a:6d:91:6d:4c:39:
c6:4f:be:1d:92:85:b7:96:57:15:7d:d8:c6:88:d7:04:b4:e8:
da:a1:ec:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:10:56 2025 by rpki-client