Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
File: QoWCG7eoRF779DPUwZiQp_qUn6g.mft (raw, json)
Hash identifier: hkBgrSHXIYLP0i3dVZMTmIDC8hwmHs1YKLvTAEcSH2I=
Subject key identifier: A4:58:69:44:B5:7C:FE:E6:2B:D0:5F:D7:9F:FF:C8:F9:20:23:01:56
Authority key identifier: 42:85:82:1B:B7:A8:44:5E:FB:F4:33:D4:C1:98:90:A7:FA:94:9F:A8
Certificate issuer: /CN=4285821bb7a8445efbf433d4c19890a7fa949fa8
Certificate serial: 019955D6ECE9F77AAE5E3C91438D291A9060
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
Manifest number: 100C
Signing time: Wed 17 Sep 2025 04:02:52 +0000
Manifest this update: Wed 17 Sep 2025 04:02:52 +0000
Manifest next update: Thu 18 Sep 2025 04:02:52 +0000
Files and hashes: 1: NpEQQ6T9aVptT2KcAU9qB9-deTo.roa (hash: V25DurbdNpjhByTtNYzzliIkfyOB4iKBrQpwxulmxQk=)
2: QoWCG7eoRF779DPUwZiQp_qUn6g.crl (hash: xtzYvS4ltlXfRQiUrFmzPx1/0dkgGpcqcUlLEjeh3m4=)
3: dXU4DETp8nIDnLG7KEh2JLzmLfs.roa (hash: 6MeBPQNbwHlZMr7MIfbBomU5a0ddmvu6v9rTAYtxlHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 22:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:55:d6:ec:e9:f7:7a:ae:5e:3c:91:43:8d:29:1a:90:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4285821bb7a8445efbf433d4c19890a7fa949fa8
Validity
Not Before: Sep 17 04:02:52 2025 GMT
Not After : Sep 18 04:02:52 2025 GMT
Subject: CN=a4586944b57cfee62bd05fd79fffc8f920230156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:29:c3:71:3f:27:f0:21:17:10:fc:5d:82:1c:
6e:3b:10:d3:43:8e:b6:e0:c6:2e:54:ec:1b:49:d5:
5b:e2:f1:a1:f2:fc:a1:cc:0b:c7:22:ee:25:3b:61:
c1:ef:47:5e:bc:aa:15:a0:cb:6b:a2:2c:08:aa:34:
f5:e6:74:a1:44:df:75:af:2a:ad:8d:f0:32:9c:88:
46:f0:7e:a7:5d:09:88:79:37:67:ff:92:63:bf:05:
00:ec:ff:c7:97:e3:ab:31:8a:d1:eb:40:0c:e7:07:
a2:92:4d:90:13:03:02:26:8e:6f:c3:d1:5b:2f:ff:
b1:aa:4f:b5:1b:72:7b:c0:11:41:20:83:8b:d8:8e:
13:ba:f0:e5:eb:14:94:c0:7c:a4:33:ce:d3:10:8d:
10:64:0f:9b:b9:cd:a1:9b:17:3e:e5:04:12:ad:88:
28:3e:d3:97:c5:f8:f5:b5:dc:b9:53:d5:4f:4a:01:
79:30:0c:12:a1:7b:ed:25:9b:52:a1:b5:e7:17:21:
26:80:a0:11:e1:3d:5b:08:e6:34:b1:6c:03:01:63:
60:f7:c6:e9:8a:fb:3f:bf:d3:d5:e1:b7:70:45:b4:
2c:93:23:0d:d9:eb:6f:64:cb:2a:18:b6:3a:c7:be:
a8:e3:73:ef:3f:ef:42:2b:04:e0:54:14:b1:4a:f3:
6f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:58:69:44:B5:7C:FE:E6:2B:D0:5F:D7:9F:FF:C8:F9:20:23:01:56
X509v3 Authority Key Identifier:
keyid:42:85:82:1B:B7:A8:44:5E:FB:F4:33:D4:C1:98:90:A7:FA:94:9F:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:1b:6d:df:86:27:c0:b6:68:8b:d9:18:53:c7:7c:c0:2a:37:
a0:3d:f6:d4:3f:a7:a8:7d:87:0f:89:a3:0d:c2:ee:5e:1b:5a:
7a:7f:46:8d:54:09:73:59:7a:ab:aa:e1:63:ff:2e:1e:6a:c8:
6d:9d:e6:b0:11:80:6e:de:43:b4:07:eb:19:f5:06:d9:f7:cb:
72:e3:f1:2d:22:6c:fd:5d:f5:e4:99:64:22:aa:db:6d:26:2f:
24:6d:1f:8b:d4:4b:7a:da:b3:db:29:37:8e:a8:4b:82:5c:3c:
4d:3d:7e:b7:6a:42:b7:89:b5:bb:78:05:81:6d:5e:0d:3d:75:
18:55:b5:7a:92:b8:2f:e8:61:a2:8b:5e:fd:dd:06:ef:0c:b1:
73:cd:91:c5:00:ac:44:83:d9:8a:ee:2d:eb:a9:57:48:94:67:
76:d5:5a:70:2b:df:10:c8:06:af:99:55:fa:ab:b5:5b:ce:df:
d7:f6:52:23:be:f7:57:7f:0e:bd:b5:74:1b:83:22:a5:8f:7f:
1c:0d:3e:55:8a:46:bd:e5:39:88:5f:3d:6b:da:99:5c:8f:65:
b2:bd:16:1e:7c:45:51:43:86:bb:42:01:1b:3a:04:a1:7b:5b:
53:ef:1c:cd:6e:e7:d8:43:b4:0a:08:63:d4:0b:9d:fb:22:1f:
eb:79:1e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 06:45:03 2025 by rpki-client