Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft
File: QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft (raw, json)
Hash identifier: DMFKFyWpEYtT08TWwhMlPf3VD42YdGo/aCWWiPODlnA=
Subject key identifier: CD:DD:6B:B8:2D:E7:1A:70:4E:61:A9:82:19:18:57:EE:12:12:E8:58
Authority key identifier: 42:7A:26:70:50:8B:94:51:23:BE:EC:BF:13:14:5F:FB:D7:BF:CD:E4
Certificate issuer: /CN=427a2670508b945123beecbf13145ffbd7bfcde4
Certificate serial: 0198CB01D9A2436BFD4010A00C2D7BA11BEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft
Manifest number: 0831
Signing time: Thu 21 Aug 2025 05:02:32 +0000
Manifest this update: Thu 21 Aug 2025 05:02:32 +0000
Manifest next update: Fri 22 Aug 2025 05:02:32 +0000
Files and hashes: 1: QnomcFCLlFEjvuy_ExRf-9e_zeQ.crl (hash: v+8MqUlALjk5Exqhdy6JANoLszVuqc997YpP2oamr8I=)
2: bC15MrNbvaHvc_M6-zAakBbyrww.roa (hash: w8+yaL/cYfTmT9iePHgIvZ5N3rV9yU+eea+yLs6LsB4=)
3: ey2THT3vxYZt7oPHCFWCPLFWheU.roa (hash: 24QSz9cCbqNcvUaGh3j8TGkQz+MS9kGdeKEW+Heclys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 23:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cb:01:d9:a2:43:6b:fd:40:10:a0:0c:2d:7b:a1:1b:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=427a2670508b945123beecbf13145ffbd7bfcde4
Validity
Not Before: Aug 21 05:02:32 2025 GMT
Not After : Aug 22 05:02:32 2025 GMT
Subject: CN=cddd6bb82de71a704e61a982191857ee1212e858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4e:fd:af:4a:8c:80:43:c6:38:74:25:af:d3:
9b:46:ff:82:2d:9e:db:4a:f0:2d:da:1e:b6:e7:0f:
57:1d:c8:f8:2d:81:a7:80:a5:0f:97:db:95:41:ea:
bd:f9:da:cb:bc:e9:4e:d8:78:a6:64:ef:3b:1a:03:
93:79:a0:b9:ac:67:9d:25:64:bd:3b:2f:2e:6a:e4:
d8:17:b8:b4:b7:19:c5:6b:74:99:20:8d:49:7a:2c:
80:ab:ec:2a:20:7a:ba:f2:56:66:33:be:e5:01:d0:
65:ed:3b:37:5c:fb:bd:f1:a7:bc:9d:02:a4:f9:be:
75:cf:6a:b8:3b:cb:90:af:dd:18:58:57:ec:43:5c:
a0:5a:c4:27:b5:90:80:60:cf:63:75:42:68:0d:48:
ea:42:e3:76:58:92:15:d2:e3:73:eb:de:6d:a7:45:
4b:e2:1e:f3:aa:23:52:26:c2:d1:e4:f8:84:b8:ef:
c9:4f:01:50:b7:41:b0:a0:cd:c3:ef:55:26:74:71:
f7:49:b5:6d:e8:06:6a:a1:b5:2d:2b:38:d2:a6:7a:
3d:d4:97:5b:67:ed:0f:ed:c9:f9:13:2a:3f:b1:c0:
ea:2d:bb:b9:22:d1:78:e6:ea:19:76:d5:3e:08:8f:
68:e5:ad:f3:3c:04:6c:22:30:67:d5:cd:8f:5a:37:
49:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:DD:6B:B8:2D:E7:1A:70:4E:61:A9:82:19:18:57:EE:12:12:E8:58
X509v3 Authority Key Identifier:
keyid:42:7A:26:70:50:8B:94:51:23:BE:EC:BF:13:14:5F:FB:D7:BF:CD:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:96:e9:29:ad:61:9e:d0:8b:76:c2:03:2a:84:19:bc:7e:b3:
d9:8a:52:95:73:c4:ec:47:44:fb:15:4c:ab:a6:98:86:f6:ee:
f0:24:af:a1:22:76:dc:77:bd:27:cf:2a:43:1f:86:c7:59:82:
9e:79:64:db:ae:86:53:e4:9e:0a:d6:8a:28:f9:17:89:79:2d:
73:a2:0c:95:0e:46:66:7d:c3:7c:15:ef:18:d9:64:9a:b9:ae:
6a:9b:7d:79:36:23:ac:89:79:77:fa:38:7a:4f:6f:1b:da:5d:
47:39:a9:69:00:c2:3c:5a:7a:73:c9:01:0f:72:06:72:75:ab:
c4:8e:0e:3e:a2:80:6a:6d:a8:96:2f:a7:ed:51:b1:73:9c:d0:
a9:35:d0:d3:d3:db:f9:f4:08:76:8b:ba:0d:94:00:5f:d3:d1:
fa:b6:f8:54:cc:9d:cb:fd:e8:f0:3e:ae:e9:e0:4d:51:0e:54:
9c:f6:10:9e:b3:12:c2:7d:2a:c2:a3:fa:18:c0:dd:93:dd:42:
df:0e:ba:c4:2a:ee:6f:c8:c6:e9:e5:73:81:5d:ae:64:a4:d0:
d2:bf:b8:1f:88:fa:33:66:31:c4:2c:d2:cc:dc:1c:e4:e4:84:
7f:f3:55:57:86:6d:ef:4a:79:d2:92:f0:c5:91:d9:1a:38:b7:
d7:65:77:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 07:16:04 2025 by rpki-client