Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.mft
File: XQoNOW92k2k2XyuYPFMa_sqXEKc.mft (raw, json)
Hash identifier: fLH9NijHFb9nTbTtfRZ124Bfz9ZVTohnOE2ZiMtnVQk=
Subject key identifier: 22:93:B2:E1:05:38:EC:95:8D:C8:51:CA:C1:FF:B2:E2:F6:2E:4A:17
Authority key identifier: 5D:0A:0D:39:6F:76:93:69:36:5F:2B:98:3C:53:1A:FE:CA:97:10:A7
Certificate issuer: /CN=5d0a0d396f769369365f2b983c531afeca9710a7
Certificate serial: 019847090369760923EFECF5C20CC04E1E6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XQoNOW92k2k2XyuYPFMa_sqXEKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.mft
Manifest number: 04C8
Signing time: Sat 26 Jul 2025 14:00:29 +0000
Manifest this update: Sat 26 Jul 2025 14:00:29 +0000
Manifest next update: Sun 27 Jul 2025 14:00:29 +0000
Files and hashes: 1: 4qFSko06M6ldKhEnW5jCnn4ySD4.roa (hash: 9ZDGMUNQVPx9Ca0E8soIFoMtBGmde/WvzWxmQVvH3aE=)
2: ODlja_b59i-133EBdAMvNxg_FGs.roa (hash: BeeBcCK5yZ18C4O3Tfyd1bLor0is1i1bKSBKlJMjrjE=)
3: XQoNOW92k2k2XyuYPFMa_sqXEKc.crl (hash: pAS7yJbMGveRoH4FvHsthBAvIFMI6ZFiMZl7u2BnCeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XQoNOW92k2k2XyuYPFMa_sqXEKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:09:03:69:76:09:23:ef:ec:f5:c2:0c:c0:4e:1e:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d0a0d396f769369365f2b983c531afeca9710a7
Validity
Not Before: Jul 26 14:00:29 2025 GMT
Not After : Jul 27 14:00:29 2025 GMT
Subject: CN=2293b2e10538ec958dc851cac1ffb2e2f62e4a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:80:6e:c7:e3:56:ea:62:24:55:01:fe:e5:10:
03:b4:39:2e:8d:94:45:aa:54:1b:35:33:b1:ae:62:
6d:65:18:35:bc:38:1b:4d:03:d0:75:30:74:f6:d8:
15:92:2a:a5:08:52:94:76:df:c3:ce:62:44:61:57:
ee:6d:40:80:fa:1e:55:05:cc:b4:95:45:6c:40:c8:
8b:50:cf:4b:39:f4:0f:1f:c1:e0:89:24:17:f8:44:
f4:c7:4f:5a:b3:e0:e1:b6:4f:67:17:39:51:fa:fe:
b0:94:89:30:aa:f5:4d:3e:0e:d0:fe:df:fa:53:99:
18:0c:87:30:7f:d5:89:36:a2:2e:8d:1c:ef:5d:99:
69:7a:ec:17:c4:c9:f1:6c:7a:a7:fb:29:88:bc:a6:
75:cd:f3:08:ef:a1:e7:38:d0:72:3b:93:c0:be:3f:
84:5b:d1:c7:f4:1d:f7:15:1b:d8:25:ec:d5:72:da:
b2:5c:16:9b:ba:1b:cd:df:1a:2c:90:bb:ba:7a:ff:
93:d9:f1:d4:43:ed:7f:af:ce:a8:13:d2:df:46:e6:
2a:82:82:e8:79:a2:5a:e3:0b:b0:78:56:c5:95:a3:
55:ab:37:81:92:02:9d:bd:a0:e0:a7:e7:35:df:7b:
dc:99:ad:a1:14:7d:42:b8:26:31:70:fe:13:60:13:
a4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:93:B2:E1:05:38:EC:95:8D:C8:51:CA:C1:FF:B2:E2:F6:2E:4A:17
X509v3 Authority Key Identifier:
keyid:5D:0A:0D:39:6F:76:93:69:36:5F:2B:98:3C:53:1A:FE:CA:97:10:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XQoNOW92k2k2XyuYPFMa_sqXEKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:d8:c0:79:1d:cd:85:7a:9e:e5:05:b9:42:e6:ca:fa:13:9e:
7e:83:6b:bb:01:1e:7e:4e:73:bf:e5:e2:d1:7e:3c:73:06:f3:
17:53:fe:de:f7:8f:66:4e:a8:1d:ef:18:11:d3:78:4a:4a:0c:
c7:bd:b0:db:cb:da:27:1a:cd:24:18:ff:9e:4b:f8:3b:a6:bb:
58:9b:57:20:54:fe:48:84:00:e1:f2:df:ae:fb:b9:1c:13:16:
c6:ef:79:b4:a2:d4:a1:20:dd:bb:7e:a3:06:80:bd:cc:66:20:
cb:04:bc:4f:22:2d:7f:26:80:38:a9:0e:4d:d3:55:ec:28:f8:
14:8d:99:f9:73:7a:b3:a3:ca:19:b5:73:cf:9d:91:e2:3e:c6:
a5:d1:78:7f:30:8c:0e:ed:ee:48:37:5f:53:9e:71:68:3a:69:
b2:00:cf:54:3b:ba:b1:30:38:a7:79:2a:38:a5:56:49:98:1f:
ce:26:20:43:be:87:9d:d9:d3:d0:29:58:c4:73:77:71:84:16:
5f:61:f8:3a:69:02:ac:22:81:8d:f6:4c:bf:3c:40:a8:61:af:
6b:38:60:da:21:7c:c8:89:3c:1e:d7:fc:4d:60:d8:ce:a1:27:
53:97:2a:97:8d:e5:90:74:4c:76:25:b8:c8:57:bd:05:99:9c:
79:da:e7:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHCQNpdgkj7+z1wgzATh5vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkMGEwZDM5NmY3NjkzNjkzNjVmMmI5ODNjNTMxYWZlY2E5
NzEwYTcwHhcNMjUwNzI2MTQwMDI5WhcNMjUwNzI3MTQwMDI5WjAzMTEwLwYDVQQD
EygyMjkzYjJlMTA1MzhlYzk1OGRjODUxY2FjMWZmYjJlMmY2MmU0YTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA54Bux+NW6mIkVQH+5RADtDkujZRF
qlQbNTOxrmJtZRg1vDgbTQPQdTB09tgVkiqlCFKUdt/DzmJEYVfubUCA+h5VBcy0
lUVsQMiLUM9LOfQPH8HgiSQX+ET0x09as+Dhtk9nFzlR+v6wlIkwqvVNPg7Q/t/6
U5kYDIcwf9WJNqIujRzvXZlpeuwXxMnxbHqn+ymIvKZ1zfMI76HnONByO5PAvj+E
W9HH9B33FRvYJezVctqyXBabuhvN3xoskLu6ev+T2fHUQ+1/r86oE9LfRuYqgoLo
eaJa4wuweFbFlaNVqzeBkgKdvaDgp+c133vcma2hFH1CuCYxcP4TYBOkPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCKTsuEFOOyVjchRysH/suL2LkoXMB8GA1UdIwQY
MBaAFF0KDTlvdpNpNl8rmDxTGv7KlxCnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFFvTk9XOTJrMmsyWHl1WVBGTWFfc3FYRUtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yMjNkOGYtNThhYy00ZGY3LWJmMWUt
NDQyMDEwYjU3OWVmLzEvWFFvTk9XOTJrMmsyWHl1WVBGTWFfc3FYRUtjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yMjNkOGYtNThhYy00ZGY3LWJmMWUtNDQyMDEwYjU3OWVm
LzEvWFFvTk9XOTJrMmsyWHl1WVBGTWFfc3FYRUtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb9jAeR3N
hXqe5QW5QubK+hOefoNruwEefk5zv+Xi0X48cwbzF1P+3vePZk6oHe8YEdN4SkoM
x72w28vaJxrNJBj/nkv4O6a7WJtXIFT+SIQA4fLfrvu5HBMWxu95tKLUoSDdu36j
BoC9zGYgywS8TyItfyaAOKkOTdNV7Cj4FI2Z+XN6s6PKGbVzz52R4j7GpdF4fzCM
Du3uSDdfU55xaDppsgDPVDu6sTA4p3kqOKVWSZgfziYgQ76HndnT0ClYxHN3cYQW
X2H4OmkCrCKBjfZMvzxAqGGvazhg2iF8yIk8Htf8TWDYzqEnU5cql43lkHRMdiW4
yFe9BZmcedrnNA==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:02:27 2025 by rpki-client