Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
File: QoWCG7eoRF779DPUwZiQp_qUn6g.mft (raw, json)
Hash identifier: OT/QFIIPfW3tsEqoJeYMB6vEMF+SCNrM2sibv2solnI=
Subject key identifier: 31:69:49:88:66:EC:4D:63:6C:5C:D6:24:BD:11:4D:0C:E7:BA:1B:1E
Authority key identifier: 42:85:82:1B:B7:A8:44:5E:FB:F4:33:D4:C1:98:90:A7:FA:94:9F:A8
Certificate issuer: /CN=4285821bb7a8445efbf433d4c19890a7fa949fa8
Certificate serial: 019A71B829C21DE97853EB7453BE507C69A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
Manifest number: 109F
Signing time: Tue 11 Nov 2025 07:01:25 +0000
Manifest this update: Tue 11 Nov 2025 07:01:25 +0000
Manifest next update: Wed 12 Nov 2025 07:01:25 +0000
Files and hashes: 1: NpEQQ6T9aVptT2KcAU9qB9-deTo.roa (hash: V25DurbdNpjhByTtNYzzliIkfyOB4iKBrQpwxulmxQk=)
2: QoWCG7eoRF779DPUwZiQp_qUn6g.crl (hash: DAH9kKwEb1Cz7HPVWT3TA6dmboPV3PNZhSTQp/oEAls=)
3: dXU4DETp8nIDnLG7KEh2JLzmLfs.roa (hash: 6MeBPQNbwHlZMr7MIfbBomU5a0ddmvu6v9rTAYtxlHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:29:c2:1d:e9:78:53:eb:74:53:be:50:7c:69:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4285821bb7a8445efbf433d4c19890a7fa949fa8
Validity
Not Before: Nov 11 07:01:25 2025 GMT
Not After : Nov 12 07:01:25 2025 GMT
Subject: CN=3169498866ec4d636c5cd624bd114d0ce7ba1b1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:18:2c:40:4e:18:34:e1:4b:5b:03:6f:19:74:
1c:41:84:9c:99:01:e0:b6:8c:c6:03:69:37:7f:b6:
c1:41:ee:37:f2:f8:95:93:31:d3:b0:1c:8a:d9:d3:
63:0b:b9:57:a7:6d:8e:24:cf:b6:6b:10:a2:55:da:
0e:ff:92:66:4a:50:a0:d9:8f:42:6a:ef:c8:47:f2:
98:77:9a:54:ea:ec:7b:f6:3f:b1:b5:a8:9d:ca:ce:
28:1d:67:24:68:76:d4:b0:8e:63:1a:4c:7a:d6:93:
c3:15:a7:dd:dd:04:07:8c:2a:80:3b:a1:f6:18:5a:
58:cb:82:72:56:7f:40:69:91:54:bd:a2:b4:b7:40:
94:f6:e2:58:ae:f9:78:15:a9:e6:8f:7f:14:c0:83:
3c:76:d8:e2:b8:51:d7:7d:a9:e1:fc:c2:bc:4a:5d:
69:64:4c:85:dc:6d:7e:5f:34:cc:38:ef:7e:9f:8c:
93:b5:31:20:c7:4f:40:c4:37:ec:b2:07:4c:68:cf:
a7:c0:58:81:04:0c:e5:bd:e5:d9:c2:6b:b1:a2:cc:
f3:c9:bb:29:3f:e8:f2:dd:cf:9b:73:1f:55:9b:69:
55:d0:6a:0a:0a:38:6c:79:c2:8a:f6:4e:8c:91:7b:
f5:89:65:f4:a5:e2:c3:69:a6:67:8a:75:59:17:19:
b0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:69:49:88:66:EC:4D:63:6C:5C:D6:24:BD:11:4D:0C:E7:BA:1B:1E
X509v3 Authority Key Identifier:
keyid:42:85:82:1B:B7:A8:44:5E:FB:F4:33:D4:C1:98:90:A7:FA:94:9F:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:45:9c:1b:6a:ad:4a:f3:e3:08:37:61:4d:ae:f1:8b:c2:65:
ff:e6:5f:fb:37:a6:f1:60:80:25:3c:a3:f4:4f:a6:03:9c:4a:
95:3b:09:62:76:95:4c:38:82:1b:80:4e:8e:2d:4a:0c:e2:d2:
fc:3a:c4:83:e9:dd:cc:6e:89:8f:82:a6:00:ec:31:36:0f:02:
c1:54:bf:22:e4:e2:b1:06:22:38:60:b6:30:84:e5:51:78:46:
a4:e2:b2:5c:f6:3a:0b:c7:93:0b:66:f0:ba:ed:09:e0:24:2a:
c5:d8:79:ea:44:8c:28:06:16:61:51:1b:bf:28:32:14:96:81:
79:2b:e4:49:d5:f6:a0:6a:f2:15:82:9c:22:9b:66:e2:ff:c3:
d9:58:64:08:a8:ac:b2:ef:88:1b:67:43:bd:23:6d:14:ce:6a:
57:97:0c:c4:04:c6:f2:26:26:b9:7d:bc:ea:5d:ed:9e:38:1d:
c5:2e:86:9e:ad:f5:fb:a1:6e:72:bb:02:6b:63:50:80:23:be:
05:98:6d:4e:a0:b1:84:91:f3:e5:f6:f4:26:c3:e3:04:d4:bc:
01:69:e1:f1:70:f0:0e:e4:f7:e4:b4:58:18:b4:34:71:28:35:
9f:dd:fb:b8:69:28:4e:bf:4e:1a:c8:05:3f:ad:45:1f:d4:20:
c3:a8:26:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuCnCHel4U+t0U75QfGmgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyODU4MjFiYjdhODQ0NWVmYmY0MzNkNGMxOTg5MGE3ZmE5
NDlmYTgwHhcNMjUxMTExMDcwMTI1WhcNMjUxMTEyMDcwMTI1WjAzMTEwLwYDVQQD
EygzMTY5NDk4ODY2ZWM0ZDYzNmM1Y2Q2MjRiZDExNGQwY2U3YmExYjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxgsQE4YNOFLWwNvGXQcQYScmQHg
tozGA2k3f7bBQe438viVkzHTsByK2dNjC7lXp22OJM+2axCiVdoO/5JmSlCg2Y9C
au/IR/KYd5pU6ux79j+xtaidys4oHWckaHbUsI5jGkx61pPDFafd3QQHjCqAO6H2
GFpYy4JyVn9AaZFUvaK0t0CU9uJYrvl4Fanmj38UwIM8dtjiuFHXfanh/MK8Sl1p
ZEyF3G1+XzTMOO9+n4yTtTEgx09AxDfssgdMaM+nwFiBBAzlveXZwmuxoszzybsp
P+jy3c+bcx9Vm2lV0GoKCjhsecKK9k6MkXv1iWX0peLDaaZninVZFxmwQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDFpSYhm7E1jbFzWJL0RTQznuhseMB8GA1UdIwQY
MBaAFEKFghu3qERe+/Qz1MGYkKf6lJ+oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUW9XQ0c3ZW9SRjc3OURQVXdaaVFwX3FVbjZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9mOTM0MmMtNTdhOS00OGYzLTllNjct
OGEzZDhkYzM1OGViLzEvUW9XQ0c3ZW9SRjc3OURQVXdaaVFwX3FVbjZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9mOTM0MmMtNTdhOS00OGYzLTllNjctOGEzZDhkYzM1OGVi
LzEvUW9XQ0c3ZW9SRjc3OURQVXdaaVFwX3FVbjZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAEWcG2qt
SvPjCDdhTa7xi8Jl/+Zf+zem8WCAJTyj9E+mA5xKlTsJYnaVTDiCG4BOji1KDOLS
/DrEg+ndzG6Jj4KmAOwxNg8CwVS/IuTisQYiOGC2MITlUXhGpOKyXPY6C8eTC2bw
uu0J4CQqxdh56kSMKAYWYVEbvygyFJaBeSvkSdX2oGryFYKcIptm4v/D2VhkCKis
su+IG2dDvSNtFM5qV5cMxATG8iYmuX286l3tnjgdxS6Gnq31+6FucrsCa2NQgCO+
BZhtTqCxhJHz5fb0JsPjBNS8AWnh8XDwDuT35LRYGLQ0cSg1n937uGkoTr9OGsgF
P61FH9Qgw6gmIQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:16:51 2025 by rpki-client