Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
File: QoWCG7eoRF779DPUwZiQp_qUn6g.mft (raw, json)
Hash identifier: NcNVENnyBShXPXyBa7QpHYpZGwCv7XJaYikG6CkiCBw=
Subject key identifier: B5:58:50:BA:32:2D:DD:59:EF:7F:C2:C7:7A:E5:50:F0:00:57:A5:E1
Authority key identifier: 42:85:82:1B:B7:A8:44:5E:FB:F4:33:D4:C1:98:90:A7:FA:94:9F:A8
Certificate issuer: /CN=4285821bb7a8445efbf433d4c19890a7fa949fa8
Certificate serial: 01976D066A0E028D1B38B98637247BB4940C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
Manifest number: 0F0F
Signing time: Sat 14 Jun 2025 06:00:26 +0000
Manifest this update: Sat 14 Jun 2025 06:00:26 +0000
Manifest next update: Sun 15 Jun 2025 06:00:26 +0000
Files and hashes: 1: NpEQQ6T9aVptT2KcAU9qB9-deTo.roa (hash: V25DurbdNpjhByTtNYzzliIkfyOB4iKBrQpwxulmxQk=)
2: QoWCG7eoRF779DPUwZiQp_qUn6g.crl (hash: xjkHFOYqFNrXOvuprMxILPtJIeMYoVeoYmdYvl7NFn8=)
3: dXU4DETp8nIDnLG7KEh2JLzmLfs.roa (hash: 6MeBPQNbwHlZMr7MIfbBomU5a0ddmvu6v9rTAYtxlHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:6a:0e:02:8d:1b:38:b9:86:37:24:7b:b4:94:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4285821bb7a8445efbf433d4c19890a7fa949fa8
Validity
Not Before: Jun 14 06:00:26 2025 GMT
Not After : Jun 15 06:00:26 2025 GMT
Subject: CN=b55850ba322ddd59ef7fc2c77ae550f00057a5e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f6:11:93:c0:16:fc:5e:8a:fb:53:10:fe:3d:
97:37:37:72:6f:18:09:78:08:6f:4e:e6:ff:7b:4b:
85:22:2d:5d:6a:71:8e:f7:3d:02:d8:a4:38:1b:e5:
3d:cc:f3:90:bb:69:f6:bc:dc:bb:da:42:7e:d4:67:
2e:12:23:0c:a4:88:b9:da:0c:ad:9c:63:f1:ae:2b:
60:9e:54:d7:78:74:62:0d:9e:6b:b6:26:91:03:43:
d3:60:c7:d0:79:55:45:b9:d9:8b:9c:14:53:cb:2d:
c5:09:27:2d:80:62:39:42:b5:50:6f:59:ea:89:a9:
91:3e:d2:1b:b5:9f:17:33:d8:1f:2d:7b:6f:d8:f1:
71:d6:33:f3:a1:2e:f2:01:25:07:5e:a0:ac:82:f0:
0f:60:25:a5:e4:35:2b:c8:1d:7a:55:c9:32:10:75:
1f:44:3f:ee:0e:9c:c2:08:c3:d3:b8:8b:a8:c7:72:
47:cd:b6:38:bc:34:32:fc:f0:a5:fa:45:dd:0f:7f:
26:54:80:79:e1:bb:49:4d:34:a4:d6:ae:a9:d0:65:
b0:94:87:41:0d:af:83:94:0d:aa:4b:39:cf:7d:db:
23:26:bf:f2:bd:85:97:f6:ea:ac:b4:e9:ed:c5:39:
a0:93:14:8f:6b:70:01:08:a0:bf:83:ce:4c:a2:ff:
0b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:58:50:BA:32:2D:DD:59:EF:7F:C2:C7:7A:E5:50:F0:00:57:A5:E1
X509v3 Authority Key Identifier:
keyid:42:85:82:1B:B7:A8:44:5E:FB:F4:33:D4:C1:98:90:A7:FA:94:9F:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:c1:1f:0e:29:55:56:01:4a:31:68:52:05:44:6b:71:ff:5e:
a8:ce:18:1f:43:93:52:d1:6a:5e:58:2b:50:03:df:b8:76:18:
47:32:76:79:05:26:05:41:88:2d:fd:7c:18:44:63:7c:3f:a2:
67:00:ea:ae:cc:71:d4:54:5d:04:7a:87:1e:1b:08:66:c2:34:
39:52:a3:e7:63:c0:40:0d:dd:07:c8:47:c7:47:e2:4e:cb:30:
94:e9:bf:67:f9:e7:90:d7:88:48:e3:db:80:05:4c:7a:de:3d:
c2:5a:d1:38:75:e6:6a:4b:d8:90:30:c8:fc:a7:f5:57:8a:c0:
c0:a3:3a:59:6d:05:31:33:a6:09:d7:48:c3:0b:0d:a8:8d:e7:
9c:eb:c9:2a:2f:90:85:3a:ab:42:87:4e:bc:98:f3:09:b3:2a:
b3:15:e5:40:13:bd:d6:4f:b2:2a:78:7c:38:55:38:14:c2:0f:
af:4c:c8:d4:e2:96:6d:7d:30:21:76:a2:a1:8f:fd:36:70:a3:
75:bb:ef:f2:01:09:8d:10:5e:6f:97:42:03:b5:05:4e:08:5c:
6c:79:f1:21:e4:d1:f2:2b:c4:19:12:b5:5b:c7:ba:16:48:a2:
6c:84:fd:bf:57:e6:f0:07:88:b9:2d:8b:62:2e:82:6a:fd:a8:
63:d3:a4:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:08:33 2025 by rpki-client