Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
File: QoWCG7eoRF779DPUwZiQp_qUn6g.mft (raw, json)
Hash identifier: M2Q99VAb1YVD5vfGv8uMGTmew5l9vbM9Swoca8RPqR8=
Subject key identifier: F5:F4:95:60:20:73:C4:90:64:13:48:68:EF:9A:7C:5F:09:FD:33:51
Authority key identifier: 42:85:82:1B:B7:A8:44:5E:FB:F4:33:D4:C1:98:90:A7:FA:94:9F:A8
Certificate issuer: /CN=4285821bb7a8445efbf433d4c19890a7fa949fa8
Certificate serial: 01969E637B1336FF2A849AD13EAFBA220DAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
Manifest number: 0EA4
Signing time: Mon 05 May 2025 03:00:41 +0000
Manifest this update: Mon 05 May 2025 03:00:41 +0000
Manifest next update: Tue 06 May 2025 03:00:41 +0000
Files and hashes: 1: NpEQQ6T9aVptT2KcAU9qB9-deTo.roa (hash: V25DurbdNpjhByTtNYzzliIkfyOB4iKBrQpwxulmxQk=)
2: QoWCG7eoRF779DPUwZiQp_qUn6g.crl (hash: JrDd8M9eXr9GrwQAhxZTqJjNTQ6lLi+CYqO1CZiCSpw=)
3: dXU4DETp8nIDnLG7KEh2JLzmLfs.roa (hash: 6MeBPQNbwHlZMr7MIfbBomU5a0ddmvu6v9rTAYtxlHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:63:7b:13:36:ff:2a:84:9a:d1:3e:af:ba:22:0d:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4285821bb7a8445efbf433d4c19890a7fa949fa8
Validity
Not Before: May 5 03:00:41 2025 GMT
Not After : May 6 03:00:41 2025 GMT
Subject: CN=f5f495602073c49064134868ef9a7c5f09fd3351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bf:d0:84:53:6f:d4:66:b4:63:53:86:44:08:
e5:d1:e8:87:97:51:cf:25:c6:93:5c:64:6e:45:af:
bd:d7:c0:18:fd:5a:78:79:6c:8e:93:3a:23:e8:e1:
c0:ef:96:a4:ec:08:bb:91:5f:5b:22:3c:fa:44:fa:
43:65:78:c0:90:64:4c:c5:e0:c0:d9:71:b4:3c:fc:
9e:a8:f3:79:d4:c5:f1:44:0b:4a:b2:d3:59:4f:53:
00:81:56:03:c4:77:41:67:c9:e1:82:18:07:85:19:
54:97:8a:44:14:b4:8b:cf:e7:16:48:df:15:b1:c5:
34:08:59:74:fc:98:78:91:2e:20:8e:d1:ac:fa:73:
5e:9c:56:37:cf:d6:b3:fe:bd:7e:67:ad:c2:3e:c5:
82:ad:86:bd:02:2b:9a:9e:8e:40:1c:63:55:d6:bc:
d5:41:a5:c7:c2:07:e1:02:b0:1e:96:1b:74:e1:2e:
5a:e6:cc:34:15:ee:a3:91:5c:5e:e7:4a:8b:f6:18:
6d:58:5d:6f:6c:68:82:5d:c5:8b:8f:92:3f:d5:c3:
11:79:ce:ae:f2:59:b9:5f:09:00:13:a3:80:ff:f1:
ba:99:65:f7:14:7f:3c:7d:2e:39:3a:a9:09:b7:c3:
0a:85:a9:73:40:43:64:3f:ec:af:c4:5c:44:3c:39:
16:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F4:95:60:20:73:C4:90:64:13:48:68:EF:9A:7C:5F:09:FD:33:51
X509v3 Authority Key Identifier:
keyid:42:85:82:1B:B7:A8:44:5E:FB:F4:33:D4:C1:98:90:A7:FA:94:9F:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:91:e7:99:c9:16:c7:06:19:01:03:b7:2b:0f:57:f7:63:67:
3d:29:f3:08:58:0c:46:87:f5:db:62:91:e2:fc:b8:15:a1:e7:
ba:8e:e3:ac:9c:5d:55:ed:06:c9:1a:53:72:f1:ea:a4:34:a5:
4d:87:ec:6b:bb:89:6b:26:c6:3c:24:a2:d5:dc:2c:23:01:0a:
58:36:7f:1d:66:81:73:25:94:b0:c1:9f:c6:12:55:5d:1b:40:
b8:9d:15:e6:38:5c:4d:f6:08:7c:71:51:12:e7:b7:cb:6e:f1:
26:fd:40:dc:43:70:76:ba:66:3f:a4:b4:d1:37:92:6a:b1:80:
3e:c9:f2:03:7d:79:48:fc:11:b0:96:89:51:9b:c1:04:0f:6b:
9a:93:13:32:15:e8:95:99:3b:05:b5:3c:1a:7f:56:e8:f0:ca:
50:80:d6:9b:62:7a:9c:ff:a8:d7:91:f6:0e:18:94:43:a9:94:
c6:97:1c:e1:85:f6:51:c6:47:3b:a2:a4:19:c5:e8:5e:58:20:
d5:1a:2a:cf:46:77:f1:2a:5d:04:5a:57:e0:c0:17:5b:d9:fb:
cf:de:8f:d2:eb:37:f1:8a:0a:d5:8b:22:04:e7:a7:b2:77:fa:
5e:d3:57:60:dd:e9:f3:39:24:38:18:8d:86:b2:9b:93:a4:92:
c0:a9:77:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaeY3sTNv8qhJrRPq+6Ig2tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyODU4MjFiYjdhODQ0NWVmYmY0MzNkNGMxOTg5MGE3ZmE5
NDlmYTgwHhcNMjUwNTA1MDMwMDQxWhcNMjUwNTA2MDMwMDQxWjAzMTEwLwYDVQQD
EyhmNWY0OTU2MDIwNzNjNDkwNjQxMzQ4NjhlZjlhN2M1ZjA5ZmQzMzUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyL/QhFNv1Ga0Y1OGRAjl0eiHl1HP
JcaTXGRuRa+918AY/Vp4eWyOkzoj6OHA75ak7Ai7kV9bIjz6RPpDZXjAkGRMxeDA
2XG0PPyeqPN51MXxRAtKstNZT1MAgVYDxHdBZ8nhghgHhRlUl4pEFLSLz+cWSN8V
scU0CFl0/Jh4kS4gjtGs+nNenFY3z9az/r1+Z63CPsWCrYa9Aiuano5AHGNV1rzV
QaXHwgfhArAelht04S5a5sw0Fe6jkVxe50qL9hhtWF1vbGiCXcWLj5I/1cMRec6u
8lm5XwkAE6OA//G6mWX3FH88fS45OqkJt8MKhalzQENkP+yvxFxEPDkWqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPX0lWAgc8SQZBNIaO+afF8J/TNRMB8GA1UdIwQY
MBaAFEKFghu3qERe+/Qz1MGYkKf6lJ+oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUW9XQ0c3ZW9SRjc3OURQVXdaaVFwX3FVbjZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9mOTM0MmMtNTdhOS00OGYzLTllNjct
OGEzZDhkYzM1OGViLzEvUW9XQ0c3ZW9SRjc3OURQVXdaaVFwX3FVbjZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9mOTM0MmMtNTdhOS00OGYzLTllNjctOGEzZDhkYzM1OGVi
LzEvUW9XQ0c3ZW9SRjc3OURQVXdaaVFwX3FVbjZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEZHnmckW
xwYZAQO3Kw9X92NnPSnzCFgMRof122KR4vy4FaHnuo7jrJxdVe0GyRpTcvHqpDSl
TYfsa7uJaybGPCSi1dwsIwEKWDZ/HWaBcyWUsMGfxhJVXRtAuJ0V5jhcTfYIfHFR
Eue3y27xJv1A3ENwdrpmP6S00TeSarGAPsnyA315SPwRsJaJUZvBBA9rmpMTMhXo
lZk7BbU8Gn9W6PDKUIDWm2J6nP+o15H2DhiUQ6mUxpcc4YX2UcZHO6KkGcXoXlgg
1Roqz0Z38SpdBFpX4MAXW9n7z96P0us38YoK1YsiBOensnf6XtNXYN3p8zkkOBiN
hrKbk6SSwKl3dA==
-----END CERTIFICATE-----
Generated at Mon May 5 05:58:00 2025 by rpki-client