Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.mft
File: qoXGfyIwng2EwwtUJSlyUyhgUVE.mft (raw, json)
Hash identifier: Gqc0J37I2/LpFvI0dugmSAOzAeyc+bG2Et1nj84pXkE=
Subject key identifier: A2:29:25:B6:5A:AA:EA:79:D6:FD:36:98:F7:6E:0F:B4:44:02:69:BD
Authority key identifier: AA:85:C6:7F:22:30:9E:0D:84:C3:0B:54:25:29:72:53:28:60:51:51
Certificate issuer: /CN=aa85c67f22309e0d84c30b542529725328605151
Certificate serial: 0198D6605AAFAE512BDC1F3D1412D038779A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoXGfyIwng2EwwtUJSlyUyhgUVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.mft
Manifest number: 0CCB
Signing time: Sat 23 Aug 2025 10:01:35 +0000
Manifest this update: Sat 23 Aug 2025 10:01:35 +0000
Manifest next update: Sun 24 Aug 2025 10:01:35 +0000
Files and hashes: 1: U6h0E3CpWcLE4IcpdPD5N0_flWE.roa (hash: /MeOIU5IzJfeECJ9wAs+zMCbOflzuiKPgRuM31+tyrU=)
2: qoXGfyIwng2EwwtUJSlyUyhgUVE.crl (hash: SB7kaBQVouwIwvrqbwxe2S8+eDlxhid8HFhWqGrGThI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qoXGfyIwng2EwwtUJSlyUyhgUVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:5a:af:ae:51:2b:dc:1f:3d:14:12:d0:38:77:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa85c67f22309e0d84c30b542529725328605151
Validity
Not Before: Aug 23 10:01:35 2025 GMT
Not After : Aug 24 10:01:35 2025 GMT
Subject: CN=a22925b65aaaea79d6fd3698f76e0fb4440269bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:92:b0:2d:03:da:18:a4:b8:47:f9:75:ac:76:
4b:c3:35:33:43:f2:22:bd:cb:19:cb:40:08:e6:b0:
9e:65:c0:4b:a5:13:d9:98:cf:b3:1b:69:fd:df:83:
3b:4a:c1:65:71:68:fb:1b:a3:aa:e1:11:41:ab:b4:
07:38:1e:b6:53:b9:37:1a:62:3e:30:d1:f0:91:6f:
95:65:f3:2a:b3:34:33:09:90:ee:95:59:14:df:fe:
ab:9d:7f:7a:51:de:73:7e:69:36:40:5f:3e:02:f8:
2e:bd:72:d2:1c:e1:c5:54:ec:37:68:e0:33:01:58:
f9:8f:34:b1:40:9f:a0:50:e5:e8:2b:a2:c6:7d:1b:
08:0b:94:47:f9:d8:3a:9f:49:ed:8c:fb:7c:9d:7f:
6f:30:be:ce:e2:22:c1:a8:f6:73:0e:3d:f2:44:90:
67:8b:6a:3a:ee:d0:fd:40:b4:76:cc:c3:13:f3:84:
12:64:c6:29:df:3d:f5:b3:11:6f:e5:10:8d:4e:a4:
1c:5b:fd:29:b8:e6:8e:d9:b7:c9:a4:7a:ce:04:bb:
11:e6:f1:b4:a1:78:78:46:38:74:81:e9:62:65:af:
79:4c:3d:f3:c5:29:9b:ee:13:db:51:4f:e9:96:63:
4d:45:7b:7b:79:1b:48:e0:13:6b:ae:48:bf:5b:e5:
92:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:29:25:B6:5A:AA:EA:79:D6:FD:36:98:F7:6E:0F:B4:44:02:69:BD
X509v3 Authority Key Identifier:
keyid:AA:85:C6:7F:22:30:9E:0D:84:C3:0B:54:25:29:72:53:28:60:51:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoXGfyIwng2EwwtUJSlyUyhgUVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:10:60:3d:ca:a5:3e:2f:4c:ff:71:89:4c:ab:c9:a7:0b:9a:
27:67:2d:0f:68:d4:d0:ee:ca:c9:f6:69:27:74:26:e7:ca:82:
9a:85:96:e7:21:08:5f:b7:c0:af:91:9a:c5:19:0c:ec:65:1d:
40:ea:19:85:8b:40:04:a9:d7:49:81:94:22:b2:27:a1:cc:14:
ad:c8:90:08:06:ed:56:62:95:d7:93:34:fc:59:bc:29:ed:2d:
d3:2a:d7:7f:13:75:9b:5b:77:fa:d8:5b:75:a3:9a:3f:23:66:
92:36:96:57:d4:8b:c8:a4:11:41:75:f1:66:1d:75:db:74:a6:
44:ae:f4:34:c8:be:c1:22:78:9f:0c:67:13:be:68:9e:d9:11:
b8:4d:6f:91:db:67:6a:29:d8:c1:03:0a:af:e9:65:17:ee:42:
fb:bb:77:1f:70:4b:0f:52:ed:66:ba:22:46:29:75:13:20:cf:
0d:78:bb:80:da:10:6e:b9:86:ae:e1:89:21:f1:44:94:e2:16:
4f:14:e0:32:e7:57:f6:bb:86:1a:bc:4c:f9:74:ef:47:0b:35:
22:92:c4:9f:42:b5:45:3c:2b:b7:a1:f7:20:3b:e4:aa:cf:23:
45:d0:93:34:c3:82:a5:27:3c:7a:b5:ae:4b:0a:48:0d:f4:e1:
eb:3b:7b:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYFqvrlEr3B89FBLQOHeaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhODVjNjdmMjIzMDllMGQ4NGMzMGI1NDI1Mjk3MjUzMjg2
MDUxNTEwHhcNMjUwODIzMTAwMTM1WhcNMjUwODI0MTAwMTM1WjAzMTEwLwYDVQQD
EyhhMjI5MjViNjVhYWFlYTc5ZDZmZDM2OThmNzZlMGZiNDQ0MDI2OWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5pKwLQPaGKS4R/l1rHZLwzUzQ/Ii
vcsZy0AI5rCeZcBLpRPZmM+zG2n934M7SsFlcWj7G6Oq4RFBq7QHOB62U7k3GmI+
MNHwkW+VZfMqszQzCZDulVkU3/6rnX96Ud5zfmk2QF8+AvguvXLSHOHFVOw3aOAz
AVj5jzSxQJ+gUOXoK6LGfRsIC5RH+dg6n0ntjPt8nX9vML7O4iLBqPZzDj3yRJBn
i2o67tD9QLR2zMMT84QSZMYp3z31sxFv5RCNTqQcW/0puOaO2bfJpHrOBLsR5vG0
oXh4Rjh0geliZa95TD3zxSmb7hPbUU/plmNNRXt7eRtI4BNrrki/W+WSewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKIpJbZaqup51v02mPduD7REAmm9MB8GA1UdIwQY
MBaAFKqFxn8iMJ4NhMMLVCUpclMoYFFRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW9YR2Z5SXduZzJFd3d0VUpTbHlVeWhnVVZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9lNzkyMDItYWNhYi00YjFhLTk5MmIt
MmEyZWQ0NWUyNzEyLzEvcW9YR2Z5SXduZzJFd3d0VUpTbHlVeWhnVVZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9lNzkyMDItYWNhYi00YjFhLTk5MmItMmEyZWQ0NWUyNzEy
LzEvcW9YR2Z5SXduZzJFd3d0VUpTbHlVeWhnVVZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACxBgPcql
Pi9M/3GJTKvJpwuaJ2ctD2jU0O7KyfZpJ3Qm58qCmoWW5yEIX7fAr5GaxRkM7GUd
QOoZhYtABKnXSYGUIrInocwUrciQCAbtVmKV15M0/Fm8Ke0t0yrXfxN1m1t3+thb
daOaPyNmkjaWV9SLyKQRQXXxZh1123SmRK70NMi+wSJ4nwxnE75ontkRuE1vkdtn
ainYwQMKr+llF+5C+7t3H3BLD1LtZroiRil1EyDPDXi7gNoQbrmGruGJIfFElOIW
TxTgMudX9ruGGrxM+XTvRws1IpLEn0K1RTwrt6H3IDvkqs8jRdCTNMOCpSc8erWu
SwpIDfTh6zt7Dw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:29:01 2025 by rpki-client