Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
File: QoWCG7eoRF779DPUwZiQp_qUn6g.mft (raw, json)
Hash identifier: o8ShXrFk+e8l/1ZbY48EJWSyzxapcA2K3aebDmNQ3vs=
Subject key identifier: E2:97:42:19:64:EC:89:A9:EA:E8:68:50:D0:5E:2F:E3:11:ED:EA:72
Authority key identifier: 42:85:82:1B:B7:A8:44:5E:FB:F4:33:D4:C1:98:90:A7:FA:94:9F:A8
Certificate issuer: /CN=4285821bb7a8445efbf433d4c19890a7fa949fa8
Certificate serial: 0197B88FF05561C955926DE549CD9BD7CEA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
Manifest number: 0F36
Signing time: Sat 28 Jun 2025 22:02:10 +0000
Manifest this update: Sat 28 Jun 2025 22:02:10 +0000
Manifest next update: Sun 29 Jun 2025 22:02:10 +0000
Files and hashes: 1: NpEQQ6T9aVptT2KcAU9qB9-deTo.roa (hash: V25DurbdNpjhByTtNYzzliIkfyOB4iKBrQpwxulmxQk=)
2: QoWCG7eoRF779DPUwZiQp_qUn6g.crl (hash: 11VLlp6kODjuLcZFDfJs1zXFCTYxhRIy8SFZyI23eWI=)
3: dXU4DETp8nIDnLG7KEh2JLzmLfs.roa (hash: 6MeBPQNbwHlZMr7MIfbBomU5a0ddmvu6v9rTAYtxlHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:f0:55:61:c9:55:92:6d:e5:49:cd:9b:d7:ce:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4285821bb7a8445efbf433d4c19890a7fa949fa8
Validity
Not Before: Jun 28 22:02:10 2025 GMT
Not After : Jun 29 22:02:10 2025 GMT
Subject: CN=e297421964ec89a9eae86850d05e2fe311edea72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:b1:43:16:8b:25:39:66:30:51:d4:4c:5f:d7:
62:c4:4e:7b:5e:06:05:08:b8:b9:8c:58:5d:3e:35:
9c:81:46:48:82:12:00:88:40:01:33:a9:94:35:e4:
98:4e:9b:a3:f3:05:ff:cd:1e:a3:d7:7b:65:7d:fe:
d4:ec:28:26:f5:e3:2e:cb:0c:ce:d3:38:bf:e8:88:
59:dd:6a:31:2c:8c:af:76:1b:58:50:59:39:78:9b:
87:2c:d9:0b:6c:4a:06:0a:31:6d:8e:03:41:9f:86:
b2:07:a3:c4:f9:59:ef:1e:dd:3c:ff:93:cc:10:1d:
f3:c8:6b:2c:2c:f1:1b:ac:a1:cb:b8:ee:af:7f:50:
5a:9b:81:a6:09:9d:13:8c:29:c8:b8:6b:39:c3:55:
c7:82:2a:9a:6e:1e:16:d0:f4:18:62:be:c0:79:85:
bb:d6:25:98:70:39:a9:f6:a1:96:6e:38:bb:fd:87:
b7:6c:52:28:3d:af:39:f3:5d:21:6c:3e:87:4b:9a:
9a:a0:7c:23:e2:a0:18:62:83:dd:61:e9:da:bd:f1:
68:bd:49:73:17:dd:b4:f5:b4:8f:f5:e9:72:4f:86:
54:48:45:a6:e9:25:39:09:60:f5:e2:06:64:65:ed:
e0:b7:9c:7b:29:d6:4f:65:80:da:f0:25:22:3b:b7:
a5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:97:42:19:64:EC:89:A9:EA:E8:68:50:D0:5E:2F:E3:11:ED:EA:72
X509v3 Authority Key Identifier:
keyid:42:85:82:1B:B7:A8:44:5E:FB:F4:33:D4:C1:98:90:A7:FA:94:9F:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:44:fb:50:f1:af:8c:86:39:7d:8d:4c:5e:c1:bd:24:ce:42:
03:51:c3:35:c4:be:5e:1d:1d:26:26:b0:0b:24:54:f0:3e:0c:
99:3e:90:1e:49:e0:8a:ad:d1:46:31:50:ac:f5:0f:7a:ea:db:
36:28:80:85:70:a5:d2:af:20:be:11:3d:02:c0:d5:c9:24:34:
99:b5:f9:68:c5:4f:26:92:ed:67:50:3e:1e:60:b7:82:16:db:
df:99:ed:17:86:cf:5b:3a:e4:e4:ec:72:aa:37:13:8b:2a:69:
21:7c:ce:1b:b5:d9:75:84:41:8d:a6:c3:42:fa:2d:55:bd:87:
d8:52:4f:8b:46:e8:1b:2f:23:f5:f6:c5:59:b6:b5:cc:bf:15:
44:08:9b:d9:49:08:b7:b6:fc:ba:cd:8d:88:42:c1:5c:45:c1:
d3:1d:75:98:10:46:e8:63:76:a2:c6:a9:a5:2f:17:b3:08:1b:
3c:17:b8:d4:b6:21:a4:14:0e:5f:2b:03:5d:87:90:d1:e0:01:
6e:49:48:df:c3:84:90:3a:3c:51:54:08:04:75:a0:d6:b7:88:
02:69:ba:9e:5d:c8:d4:c6:47:65:28:0c:56:94:d8:8c:b8:d5:
ef:22:3b:ca:01:43:90:b8:ae:3e:fd:37:7e:b6:88:c9:a6:02:
3d:f2:5b:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4j/BVYclVkm3lSc2b186lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyODU4MjFiYjdhODQ0NWVmYmY0MzNkNGMxOTg5MGE3ZmE5
NDlmYTgwHhcNMjUwNjI4MjIwMjEwWhcNMjUwNjI5MjIwMjEwWjAzMTEwLwYDVQQD
EyhlMjk3NDIxOTY0ZWM4OWE5ZWFlODY4NTBkMDVlMmZlMzExZWRlYTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8rFDFoslOWYwUdRMX9dixE57XgYF
CLi5jFhdPjWcgUZIghIAiEABM6mUNeSYTpuj8wX/zR6j13tlff7U7Cgm9eMuywzO
0zi/6IhZ3WoxLIyvdhtYUFk5eJuHLNkLbEoGCjFtjgNBn4ayB6PE+VnvHt08/5PM
EB3zyGssLPEbrKHLuO6vf1Bam4GmCZ0TjCnIuGs5w1XHgiqabh4W0PQYYr7AeYW7
1iWYcDmp9qGWbji7/Ye3bFIoPa85810hbD6HS5qaoHwj4qAYYoPdYenavfFovUlz
F9209bSP9elyT4ZUSEWm6SU5CWD14gZkZe3gt5x7KdZPZYDa8CUiO7el9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOKXQhlk7Imp6uhoUNBeL+MR7epyMB8GA1UdIwQY
MBaAFEKFghu3qERe+/Qz1MGYkKf6lJ+oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUW9XQ0c3ZW9SRjc3OURQVXdaaVFwX3FVbjZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9mOTM0MmMtNTdhOS00OGYzLTllNjct
OGEzZDhkYzM1OGViLzEvUW9XQ0c3ZW9SRjc3OURQVXdaaVFwX3FVbjZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9mOTM0MmMtNTdhOS00OGYzLTllNjctOGEzZDhkYzM1OGVi
LzEvUW9XQ0c3ZW9SRjc3OURQVXdaaVFwX3FVbjZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAokT7UPGv
jIY5fY1MXsG9JM5CA1HDNcS+Xh0dJiawCyRU8D4MmT6QHkngiq3RRjFQrPUPeurb
NiiAhXCl0q8gvhE9AsDVySQ0mbX5aMVPJpLtZ1A+HmC3ghbb35ntF4bPWzrk5Oxy
qjcTiyppIXzOG7XZdYRBjabDQvotVb2H2FJPi0boGy8j9fbFWba1zL8VRAib2UkI
t7b8us2NiELBXEXB0x11mBBG6GN2osappS8XswgbPBe41LYhpBQOXysDXYeQ0eAB
bklI38OEkDo8UVQIBHWg1reIAmm6nl3I1MZHZSgMVpTYjLjV7yI7ygFDkLiuPv03
fraIyaYCPfJbnA==
-----END CERTIFICATE-----
Generated at Sun Jun 29 00:01:10 2025 by rpki-client