Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
File: QoWCG7eoRF779DPUwZiQp_qUn6g.mft (raw, json)
Hash identifier: 5lnZl5PIUTZeFj0ED4OBev2IqkwuXpZSqwuY2WTFIJ0=
Subject key identifier: 7C:D5:A5:F2:78:95:C9:70:E4:A1:C7:AC:EF:9D:BD:B4:88:AA:BA:49
Authority key identifier: 42:85:82:1B:B7:A8:44:5E:FB:F4:33:D4:C1:98:90:A7:FA:94:9F:A8
Certificate issuer: /CN=4285821bb7a8445efbf433d4c19890a7fa949fa8
Certificate serial: 019873E3EAEAAE3E987229571C27549DB91B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
Manifest number: 0F97
Signing time: Mon 04 Aug 2025 07:02:53 +0000
Manifest this update: Mon 04 Aug 2025 07:02:53 +0000
Manifest next update: Tue 05 Aug 2025 07:02:53 +0000
Files and hashes: 1: NpEQQ6T9aVptT2KcAU9qB9-deTo.roa (hash: V25DurbdNpjhByTtNYzzliIkfyOB4iKBrQpwxulmxQk=)
2: QoWCG7eoRF779DPUwZiQp_qUn6g.crl (hash: UFsVPn36yRx2fImBQTY0AmC/61K1pGvGIG2iPgvvEE4=)
3: dXU4DETp8nIDnLG7KEh2JLzmLfs.roa (hash: 6MeBPQNbwHlZMr7MIfbBomU5a0ddmvu6v9rTAYtxlHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:ea:ea:ae:3e:98:72:29:57:1c:27:54:9d:b9:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4285821bb7a8445efbf433d4c19890a7fa949fa8
Validity
Not Before: Aug 4 07:02:53 2025 GMT
Not After : Aug 5 07:02:53 2025 GMT
Subject: CN=7cd5a5f27895c970e4a1c7acef9dbdb488aaba49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:1a:fb:02:c9:bd:a2:04:fa:8e:c4:91:ed:e8:
9a:12:7f:dd:37:31:22:5a:c6:7f:39:1e:84:27:cd:
16:12:e2:08:cb:5b:4c:ad:c7:d1:b8:6c:23:a0:46:
fd:4b:39:ac:15:df:25:b6:f6:60:87:14:97:c7:b2:
2f:ea:53:30:08:22:6c:50:c4:b2:f4:5f:b6:dc:07:
e0:44:f4:3f:cf:9d:1b:54:1a:a6:dd:17:06:a1:e2:
a3:15:09:16:2f:19:f1:1a:94:4f:7d:10:23:8d:5b:
e1:19:b1:f3:ce:cd:4a:98:66:ef:07:1b:9b:55:ea:
f1:79:5c:0a:6a:0b:a4:de:2a:53:39:65:87:48:79:
dd:c6:43:f3:e3:a3:13:68:1c:25:07:68:71:a2:17:
8b:be:30:40:4e:3e:f3:63:d9:21:dc:d8:50:5d:5a:
97:11:99:33:96:e7:9a:54:d7:82:5f:13:7e:17:b0:
f6:aa:43:fe:88:f7:26:c5:b3:ce:55:45:34:00:df:
d9:b1:3d:7e:50:2e:74:24:a1:f3:49:64:03:f5:64:
00:91:84:6a:9d:f9:d0:57:47:70:44:52:d5:6a:b5:
a4:78:81:b0:a6:54:a6:9a:5f:57:8b:3a:86:4b:c4:
09:08:17:6e:16:25:9a:fc:b3:ea:f2:61:cf:d3:1c:
2d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D5:A5:F2:78:95:C9:70:E4:A1:C7:AC:EF:9D:BD:B4:88:AA:BA:49
X509v3 Authority Key Identifier:
keyid:42:85:82:1B:B7:A8:44:5E:FB:F4:33:D4:C1:98:90:A7:FA:94:9F:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:7e:9d:ba:c9:e1:7b:5f:28:ea:58:39:ed:5f:57:d8:f3:6b:
a3:ec:1a:88:dd:57:38:50:b8:c6:be:02:02:7e:ef:49:08:5a:
66:8c:5f:ee:3c:ce:c0:e0:f7:89:2b:24:f8:da:3c:95:59:3d:
7f:43:c6:7b:c1:b4:24:b9:bd:76:2e:75:c9:de:a7:cf:44:08:
a4:18:f6:9f:8f:76:79:ef:53:4d:79:eb:c0:3d:25:7d:ce:04:
31:8b:e8:42:dc:43:0a:8e:3c:46:14:60:3e:d3:18:63:ec:17:
a7:b8:fe:e7:f5:05:f9:4f:f6:b2:95:c4:9e:ca:e5:90:e2:80:
8d:49:cd:9f:2f:17:af:ae:0a:21:05:27:75:db:72:d1:9e:fc:
b4:81:04:7c:eb:f8:5f:c1:ea:fe:77:d7:c0:ab:3f:35:ce:85:
89:50:d2:ee:0a:3d:cf:4b:ea:41:f0:b5:4e:5f:0a:82:0a:05:
a2:da:36:96:92:f4:ed:cd:49:7d:30:67:94:c5:3a:7a:14:46:
4f:c5:ed:79:b1:3c:ef:1e:3d:b6:73:a8:ff:1f:87:ea:31:47:
cd:9c:c9:67:37:ec:1b:45:35:cc:bb:8a:e8:43:1d:8b:0a:d8:
4a:b9:fd:d6:2d:59:20:b8:44:55:8e:c6:d8:76:b2:eb:5f:07:
53:3c:f5:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4+rqrj6YcilXHCdUnbkbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyODU4MjFiYjdhODQ0NWVmYmY0MzNkNGMxOTg5MGE3ZmE5
NDlmYTgwHhcNMjUwODA0MDcwMjUzWhcNMjUwODA1MDcwMjUzWjAzMTEwLwYDVQQD
Eyg3Y2Q1YTVmMjc4OTVjOTcwZTRhMWM3YWNlZjlkYmRiNDg4YWFiYTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hr7Asm9ogT6jsSR7eiaEn/dNzEi
WsZ/OR6EJ80WEuIIy1tMrcfRuGwjoEb9SzmsFd8ltvZghxSXx7Iv6lMwCCJsUMSy
9F+23AfgRPQ/z50bVBqm3RcGoeKjFQkWLxnxGpRPfRAjjVvhGbHzzs1KmGbvBxub
VerxeVwKaguk3ipTOWWHSHndxkPz46MTaBwlB2hxoheLvjBATj7zY9kh3NhQXVqX
EZkzlueaVNeCXxN+F7D2qkP+iPcmxbPOVUU0AN/ZsT1+UC50JKHzSWQD9WQAkYRq
nfnQV0dwRFLVarWkeIGwplSmml9XizqGS8QJCBduFiWa/LPq8mHP0xwtMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHzVpfJ4lclw5KHHrO+dvbSIqrpJMB8GA1UdIwQY
MBaAFEKFghu3qERe+/Qz1MGYkKf6lJ+oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUW9XQ0c3ZW9SRjc3OURQVXdaaVFwX3FVbjZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9mOTM0MmMtNTdhOS00OGYzLTllNjct
OGEzZDhkYzM1OGViLzEvUW9XQ0c3ZW9SRjc3OURQVXdaaVFwX3FVbjZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9mOTM0MmMtNTdhOS00OGYzLTllNjctOGEzZDhkYzM1OGVi
LzEvUW9XQ0c3ZW9SRjc3OURQVXdaaVFwX3FVbjZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlX6dusnh
e18o6lg57V9X2PNro+waiN1XOFC4xr4CAn7vSQhaZoxf7jzOwOD3iSsk+No8lVk9
f0PGe8G0JLm9di51yd6nz0QIpBj2n492ee9TTXnrwD0lfc4EMYvoQtxDCo48RhRg
PtMYY+wXp7j+5/UF+U/2spXEnsrlkOKAjUnNny8Xr64KIQUnddty0Z78tIEEfOv4
X8Hq/nfXwKs/Nc6FiVDS7go9z0vqQfC1Tl8KggoFoto2lpL07c1JfTBnlMU6ehRG
T8XtebE87x49tnOo/x+H6jFHzZzJZzfsG0U1zLuK6EMdiwrYSrn91i1ZILhEVY7G
2Hay618HUzz1jg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:22:40 2025 by rpki-client