Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
File: QoWCG7eoRF779DPUwZiQp_qUn6g.mft (raw, json)
Hash identifier: O150O2Q+QtErBnfsB0EJLPYM2ox1dLnDISiu5cfAPpE=
Subject key identifier: 35:66:74:50:C8:A0:BE:89:C2:23:62:AE:05:BE:E7:A3:46:0F:EC:04
Authority key identifier: 42:85:82:1B:B7:A8:44:5E:FB:F4:33:D4:C1:98:90:A7:FA:94:9F:A8
Certificate issuer: /CN=4285821bb7a8445efbf433d4c19890a7fa949fa8
Certificate serial: 0199FDD962FA232000FD5D60DB4956CC5BE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
Manifest number: 1063
Signing time: Sun 19 Oct 2025 19:01:46 +0000
Manifest this update: Sun 19 Oct 2025 19:01:46 +0000
Manifest next update: Mon 20 Oct 2025 19:01:46 +0000
Files and hashes: 1: NpEQQ6T9aVptT2KcAU9qB9-deTo.roa (hash: V25DurbdNpjhByTtNYzzliIkfyOB4iKBrQpwxulmxQk=)
2: QoWCG7eoRF779DPUwZiQp_qUn6g.crl (hash: 2XqG6zF56OsQAn8FHHm6+XCzsqjDtA6SJULMfdOiG10=)
3: dXU4DETp8nIDnLG7KEh2JLzmLfs.roa (hash: 6MeBPQNbwHlZMr7MIfbBomU5a0ddmvu6v9rTAYtxlHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:62:fa:23:20:00:fd:5d:60:db:49:56:cc:5b:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4285821bb7a8445efbf433d4c19890a7fa949fa8
Validity
Not Before: Oct 19 19:01:46 2025 GMT
Not After : Oct 20 19:01:46 2025 GMT
Subject: CN=35667450c8a0be89c22362ae05bee7a3460fec04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d2:ed:72:22:ea:c5:60:d2:d3:52:94:fa:78:
8c:f6:64:bb:ce:3b:df:c4:c5:6f:3b:6a:82:c8:e6:
95:5b:86:22:48:99:17:f9:cf:3d:e5:f6:d6:ed:84:
1d:71:47:31:b2:8b:9b:e4:c0:c1:20:8f:99:98:85:
a3:d3:70:ab:f0:73:67:d1:d3:51:f1:0e:cb:07:9a:
d4:ff:09:cb:07:e1:02:d5:cb:9b:93:24:76:0a:2b:
15:9f:43:07:fa:d0:30:4e:8b:6a:3b:65:4f:3f:1a:
cc:51:21:84:56:48:41:4c:40:43:8e:40:69:4c:ab:
0b:a9:a2:c8:c3:20:ca:a4:be:52:06:69:8d:55:a6:
74:fb:ca:4b:8a:97:12:3c:a3:02:e9:83:e0:fd:5d:
c4:7a:10:a4:e3:a4:51:56:ba:72:54:e1:e3:e9:54:
c1:c9:73:c2:d1:7f:bf:19:21:9b:28:30:f3:20:4b:
06:60:6f:39:c7:82:6c:2d:2b:69:08:ef:6c:79:1e:
bc:34:97:2a:77:a3:4c:ec:fb:71:63:f5:06:49:a5:
6e:88:ed:c1:47:e9:05:c9:52:5a:fd:f7:57:0e:77:
f3:7d:08:b6:86:39:7e:02:ad:ae:cf:a2:79:aa:f8:
2c:46:9a:79:64:a9:7d:24:43:0f:a0:9c:02:3a:4e:
51:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:66:74:50:C8:A0:BE:89:C2:23:62:AE:05:BE:E7:A3:46:0F:EC:04
X509v3 Authority Key Identifier:
keyid:42:85:82:1B:B7:A8:44:5E:FB:F4:33:D4:C1:98:90:A7:FA:94:9F:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:33:1e:e1:2c:e2:f5:37:12:45:60:4c:0a:4b:f7:75:dd:58:
d9:a6:ac:3f:b1:55:07:29:58:2e:b3:81:ce:95:58:d2:2f:da:
62:a6:27:86:33:e9:90:7a:e8:94:b7:c8:25:62:1a:b4:6f:5d:
b3:06:7b:d0:21:95:0c:1b:03:c9:ff:07:be:bf:47:3a:23:4d:
02:33:29:bb:c7:52:37:75:b5:02:a8:66:0e:34:74:a7:ce:15:
c8:ea:3a:8f:e5:02:1d:0c:a7:39:42:b2:71:31:1a:8b:bb:08:
14:77:79:78:d0:d2:27:72:db:e1:eb:76:6b:f2:1b:f5:ba:8e:
71:df:b5:b3:b3:f7:d3:29:e6:40:dc:18:d8:85:a3:a4:c8:8b:
c2:82:d8:bb:6c:ad:d3:bd:45:66:21:11:82:59:f1:18:c6:06:
f4:8a:c9:4e:12:84:fe:ee:c7:4c:f0:b7:be:f0:a5:8e:bf:c9:
45:5d:74:7a:68:f8:19:32:81:5f:36:95:9a:17:62:4d:d7:c5:
6a:0f:59:6e:cb:1c:3c:dc:30:66:15:39:ed:60:85:44:c1:4a:
f9:0c:8f:6d:fd:7f:c1:7a:74:51:31:20:8b:8e:5d:5e:c4:f7:
ff:35:83:e4:a1:c3:b7:25:76:6d:ac:2f:5e:a9:42:26:2a:81:
e3:88:c6:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92WL6IyAA/V1g20lWzFvnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyODU4MjFiYjdhODQ0NWVmYmY0MzNkNGMxOTg5MGE3ZmE5
NDlmYTgwHhcNMjUxMDE5MTkwMTQ2WhcNMjUxMDIwMTkwMTQ2WjAzMTEwLwYDVQQD
EygzNTY2NzQ1MGM4YTBiZTg5YzIyMzYyYWUwNWJlZTdhMzQ2MGZlYzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9LtciLqxWDS01KU+niM9mS7zjvf
xMVvO2qCyOaVW4YiSJkX+c895fbW7YQdcUcxsoub5MDBII+ZmIWj03Cr8HNn0dNR
8Q7LB5rU/wnLB+EC1cubkyR2CisVn0MH+tAwTotqO2VPPxrMUSGEVkhBTEBDjkBp
TKsLqaLIwyDKpL5SBmmNVaZ0+8pLipcSPKMC6YPg/V3EehCk46RRVrpyVOHj6VTB
yXPC0X+/GSGbKDDzIEsGYG85x4JsLStpCO9seR68NJcqd6NM7PtxY/UGSaVuiO3B
R+kFyVJa/fdXDnfzfQi2hjl+Aq2uz6J5qvgsRpp5ZKl9JEMPoJwCOk5R2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDVmdFDIoL6JwiNirgW+56NGD+wEMB8GA1UdIwQY
MBaAFEKFghu3qERe+/Qz1MGYkKf6lJ+oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUW9XQ0c3ZW9SRjc3OURQVXdaaVFwX3FVbjZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9mOTM0MmMtNTdhOS00OGYzLTllNjct
OGEzZDhkYzM1OGViLzEvUW9XQ0c3ZW9SRjc3OURQVXdaaVFwX3FVbjZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9mOTM0MmMtNTdhOS00OGYzLTllNjctOGEzZDhkYzM1OGVi
LzEvUW9XQ0c3ZW9SRjc3OURQVXdaaVFwX3FVbjZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFzMe4Szi
9TcSRWBMCkv3dd1Y2aasP7FVBylYLrOBzpVY0i/aYqYnhjPpkHrolLfIJWIatG9d
swZ70CGVDBsDyf8Hvr9HOiNNAjMpu8dSN3W1AqhmDjR0p84VyOo6j+UCHQynOUKy
cTEai7sIFHd5eNDSJ3Lb4et2a/Ib9bqOcd+1s7P30ynmQNwY2IWjpMiLwoLYu2yt
071FZiERglnxGMYG9IrJThKE/u7HTPC3vvCljr/JRV10emj4GTKBXzaVmhdiTdfF
ag9ZbsscPNwwZhU57WCFRMFK+QyPbf1/wXp0UTEgi45dXsT3/zWD5KHDtyV2bawv
XqlCJiqB44jGfw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:41:09 2025 by rpki-client