Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
File: QoWCG7eoRF779DPUwZiQp_qUn6g.mft (raw, json)
Hash identifier: 32P/NA8jK4o/aFURL4MnepOGSK4HVa+DxFTJbRhVYPU=
Subject key identifier: 86:00:CB:A3:E2:F7:E4:38:5E:2A:13:4F:E5:38:9D:58:E8:8B:29:29
Authority key identifier: 42:85:82:1B:B7:A8:44:5E:FB:F4:33:D4:C1:98:90:A7:FA:94:9F:A8
Certificate issuer: /CN=4285821bb7a8445efbf433d4c19890a7fa949fa8
Certificate serial: 019847780ECDAEF83CD8FD7B2AE263571AC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
Manifest number: 0F80
Signing time: Sat 26 Jul 2025 16:01:47 +0000
Manifest this update: Sat 26 Jul 2025 16:01:47 +0000
Manifest next update: Sun 27 Jul 2025 16:01:47 +0000
Files and hashes: 1: NpEQQ6T9aVptT2KcAU9qB9-deTo.roa (hash: V25DurbdNpjhByTtNYzzliIkfyOB4iKBrQpwxulmxQk=)
2: QoWCG7eoRF779DPUwZiQp_qUn6g.crl (hash: a4ASi8kiZWmO5YYofxLImtWEgEDVTYXuHwZGHy/tyD8=)
3: dXU4DETp8nIDnLG7KEh2JLzmLfs.roa (hash: 6MeBPQNbwHlZMr7MIfbBomU5a0ddmvu6v9rTAYtxlHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:78:0e:cd:ae:f8:3c:d8:fd:7b:2a:e2:63:57:1a:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4285821bb7a8445efbf433d4c19890a7fa949fa8
Validity
Not Before: Jul 26 16:01:47 2025 GMT
Not After : Jul 27 16:01:47 2025 GMT
Subject: CN=8600cba3e2f7e4385e2a134fe5389d58e88b2929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:11:7b:b5:3b:1b:d7:37:6f:d6:b6:4a:6b:88:
87:3b:5f:57:14:33:12:4f:74:7b:61:cd:42:b5:33:
20:0b:fd:b5:a8:73:72:89:79:fb:5c:d5:1c:07:59:
18:65:49:ca:cf:1c:68:da:6f:23:d5:03:6b:a2:0f:
6c:c5:1b:0d:3a:14:e2:11:ee:90:17:e7:40:d9:5b:
0e:4f:98:f1:12:65:9e:60:72:bc:90:27:e0:d1:86:
3b:9e:a1:dc:33:c5:ec:af:17:4b:66:e7:e8:f8:2c:
45:75:e8:a5:7f:a8:8b:2b:7f:08:cf:e1:7a:f1:5c:
d3:60:33:0b:06:63:48:af:06:b5:2c:d0:36:97:b8:
1a:cc:5c:3c:30:e0:5e:80:ea:29:34:4c:d9:08:69:
17:c4:05:20:c5:e6:89:ea:15:47:a1:de:05:34:65:
96:46:70:ce:95:b1:f1:e1:77:6c:46:66:40:4e:cc:
01:1c:51:3b:03:b4:60:fc:c7:a6:bd:bc:ec:77:76:
c1:23:1d:09:ce:99:66:e2:50:4d:e0:b4:76:9e:5b:
31:d5:87:c8:52:9d:eb:ae:65:fd:91:62:84:fa:f4:
d6:95:75:c7:1a:f1:72:f5:de:54:3d:42:e4:b2:53:
e2:74:fa:ab:1d:5d:c0:35:0c:d6:c1:20:d0:3d:fd:
f9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:00:CB:A3:E2:F7:E4:38:5E:2A:13:4F:E5:38:9D:58:E8:8B:29:29
X509v3 Authority Key Identifier:
keyid:42:85:82:1B:B7:A8:44:5E:FB:F4:33:D4:C1:98:90:A7:FA:94:9F:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:a5:cc:e5:1f:78:e9:3c:9f:dc:14:ae:ff:b4:5b:b3:8c:c1:
d7:c8:4d:60:a7:a2:6b:3f:5a:dd:3f:7a:a2:f6:62:f2:06:d3:
2c:dd:46:c9:42:cb:ce:ca:ed:b9:f2:10:75:f2:1e:75:91:8f:
bd:bb:56:c7:97:d9:62:9b:e0:38:c8:5b:4f:9d:e6:4b:98:0b:
d3:8f:3e:10:a9:57:e8:4d:0b:be:01:55:d1:71:d6:cf:74:64:
dc:0d:ef:3b:c4:03:84:46:83:8c:6e:25:03:87:43:af:66:8d:
62:e0:c4:87:2f:9a:43:8f:cc:4e:03:d2:9e:dc:78:88:6c:b4:
44:06:e4:a4:1c:13:8b:79:2f:3d:bf:e3:5b:ba:6d:b9:68:63:
96:83:41:ad:47:28:8a:94:8a:d0:b6:12:f8:9c:07:39:d7:0d:
34:f2:89:6f:2d:1a:66:43:8f:37:6c:12:f6:98:3f:59:78:80:
da:28:8f:66:b1:a3:28:0b:16:29:b6:db:8a:23:7a:97:2a:28:
5b:19:21:d6:a5:06:35:59:38:7c:e1:fa:16:30:0c:27:c9:5b:
ba:1a:b2:1a:b3:d3:cd:cc:7f:25:6a:1b:ed:81:f0:16:f5:c8:
b9:07:4b:71:06:85:b9:2e:6a:19:d8:1f:02:5f:d4:be:4e:64:
d1:7b:c7:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:47:47 2025 by rpki-client