Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
File: QoWCG7eoRF779DPUwZiQp_qUn6g.mft (raw, json)
Hash identifier: o0gCaj0WROVio2LyNmHsZAJZBIW+HykwszW4/+J/4iA=
Subject key identifier: 30:32:D6:6D:71:7D:40:A3:F6:7B:EA:F7:7F:76:70:C1:28:AC:F1:38
Authority key identifier: 42:85:82:1B:B7:A8:44:5E:FB:F4:33:D4:C1:98:90:A7:FA:94:9F:A8
Certificate issuer: /CN=4285821bb7a8445efbf433d4c19890a7fa949fa8
Certificate serial: 0198D661286E25FD4B9B1C29513EE77753A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
Manifest number: 0FCA
Signing time: Sat 23 Aug 2025 10:02:28 +0000
Manifest this update: Sat 23 Aug 2025 10:02:28 +0000
Manifest next update: Sun 24 Aug 2025 10:02:28 +0000
Files and hashes: 1: NpEQQ6T9aVptT2KcAU9qB9-deTo.roa (hash: V25DurbdNpjhByTtNYzzliIkfyOB4iKBrQpwxulmxQk=)
2: QoWCG7eoRF779DPUwZiQp_qUn6g.crl (hash: /WIRejrydUD1XGAp7GfKHOjyS912V5L1bY9lM5hHOmg=)
3: dXU4DETp8nIDnLG7KEh2JLzmLfs.roa (hash: 6MeBPQNbwHlZMr7MIfbBomU5a0ddmvu6v9rTAYtxlHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:28:6e:25:fd:4b:9b:1c:29:51:3e:e7:77:53:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4285821bb7a8445efbf433d4c19890a7fa949fa8
Validity
Not Before: Aug 23 10:02:28 2025 GMT
Not After : Aug 24 10:02:28 2025 GMT
Subject: CN=3032d66d717d40a3f67beaf77f7670c128acf138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:65:1d:2b:a9:29:9b:e4:9d:3f:02:b2:8e:18:
e2:92:c3:13:99:1d:4e:92:28:bb:0d:7d:3a:2b:68:
bf:83:ec:83:42:1f:db:81:80:65:79:36:b9:be:f7:
f1:2b:89:e4:3d:f8:0e:72:6e:87:3f:a7:b1:df:44:
7b:7b:3e:4f:ed:4b:c5:69:95:19:65:94:d0:0a:c0:
00:53:e3:ac:df:dc:92:b1:94:c4:08:b7:11:59:63:
de:a0:4b:1c:19:ae:25:00:ae:47:2c:ee:9f:5e:89:
fc:10:90:86:79:ac:d8:1d:65:57:e5:75:d8:9f:83:
40:49:94:f7:72:65:4b:d8:97:ae:8b:82:62:27:2a:
91:8c:82:71:48:ca:ba:ec:c7:c2:4d:9f:0a:5d:98:
0f:8a:c1:3d:e8:a5:8e:54:6e:7e:be:38:06:ae:ad:
01:4c:8d:97:f2:46:a4:5a:b2:08:2f:cc:77:14:5c:
65:48:44:fa:71:55:75:80:62:d0:ab:b0:63:ce:aa:
33:e9:b5:70:8e:b6:0e:c5:ca:26:ee:e6:35:e0:13:
db:a9:2c:ce:58:ef:1a:c4:fc:aa:b1:6c:95:12:8d:
c7:b3:06:c7:4f:37:b9:ec:fa:e9:e5:45:7f:68:0e:
92:6b:05:4f:1e:ba:06:2c:2c:6b:94:2c:80:ef:1f:
a7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:32:D6:6D:71:7D:40:A3:F6:7B:EA:F7:7F:76:70:C1:28:AC:F1:38
X509v3 Authority Key Identifier:
keyid:42:85:82:1B:B7:A8:44:5E:FB:F4:33:D4:C1:98:90:A7:FA:94:9F:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:bd:a5:35:f5:a9:2e:5f:cc:ed:6d:25:74:2a:8e:01:0d:3b:
01:60:76:03:ff:5f:7f:94:df:e0:fb:42:50:72:1c:37:27:fd:
15:b4:c4:91:7b:b1:3e:c7:ad:4d:cd:fe:ca:cc:69:0b:7d:31:
4f:fa:1e:c8:35:94:f6:7d:a0:f3:94:29:fe:8c:2f:45:b1:49:
fd:f0:6e:ce:0a:43:9c:1d:af:3a:9e:33:63:5c:8c:50:f7:c7:
d2:3f:7b:43:c1:a2:eb:a8:bc:6f:c2:ac:60:a2:c7:ba:19:80:
f2:e8:95:76:ad:16:59:22:c7:0b:ec:5b:2e:80:6c:bc:ae:8b:
64:4e:7e:73:a1:e7:8d:2e:1a:aa:48:94:82:14:a3:9a:11:13:
64:28:42:d1:0e:d4:46:b6:64:c2:50:19:44:32:64:37:f8:ba:
27:c0:a8:c2:2c:62:ff:fe:d8:ce:58:58:20:a6:61:3b:f0:9d:
f3:0c:01:aa:5b:cc:ca:6e:6e:30:2f:0b:a1:eb:45:ed:1c:37:
b9:a8:00:ba:b2:0a:01:bb:78:93:96:32:94:b8:cf:fb:6a:6b:
9c:e3:4e:72:e6:81:4c:9c:61:36:ba:e7:ec:0f:56:13:9b:72:
ee:72:b3:43:1c:c3:3f:dd:9f:1b:a0:3f:11:d3:98:d3:00:44:
c0:66:4c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:29:53 2025 by rpki-client