Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.mft
File: qoXGfyIwng2EwwtUJSlyUyhgUVE.mft (raw, json)
Hash identifier: rZ0M5Lx74wxvqh5DvtPRfUUf3slDJRPVLLIHDpO43UM=
Subject key identifier: 75:07:C8:3A:A9:57:6D:FE:ED:85:B8:7A:12:80:57:B2:83:A1:98:32
Authority key identifier: AA:85:C6:7F:22:30:9E:0D:84:C3:0B:54:25:29:72:53:28:60:51:51
Certificate issuer: /CN=aa85c67f22309e0d84c30b542529725328605151
Certificate serial: 0199FDDA4732780A6F3223D400E61863ACD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoXGfyIwng2EwwtUJSlyUyhgUVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.mft
Manifest number: 0D64
Signing time: Sun 19 Oct 2025 19:02:44 +0000
Manifest this update: Sun 19 Oct 2025 19:02:44 +0000
Manifest next update: Mon 20 Oct 2025 19:02:44 +0000
Files and hashes: 1: U6h0E3CpWcLE4IcpdPD5N0_flWE.roa (hash: /MeOIU5IzJfeECJ9wAs+zMCbOflzuiKPgRuM31+tyrU=)
2: qoXGfyIwng2EwwtUJSlyUyhgUVE.crl (hash: 7HZJZlRhrmdM6j2ls9PtpOS0QQ+YKhzVZYsuHZNJqi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qoXGfyIwng2EwwtUJSlyUyhgUVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:47:32:78:0a:6f:32:23:d4:00:e6:18:63:ac:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa85c67f22309e0d84c30b542529725328605151
Validity
Not Before: Oct 19 19:02:44 2025 GMT
Not After : Oct 20 19:02:44 2025 GMT
Subject: CN=7507c83aa9576dfeed85b87a128057b283a19832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b9:62:0c:26:5b:01:ba:42:77:98:22:3b:d9:
f2:18:fd:4a:d0:17:67:28:a9:b3:4e:7c:09:5f:53:
40:ef:39:33:8f:47:19:9d:65:7e:0c:5b:31:24:1c:
f2:c6:9f:7c:11:cb:a1:e8:cf:86:07:f4:92:44:bd:
a3:9a:f6:6b:bc:c8:46:95:a7:3e:63:71:7e:ac:3d:
0a:6b:96:1b:5a:d3:27:be:60:bf:40:8f:c3:4d:a0:
e5:98:6e:53:ec:ef:ea:cb:59:de:60:26:f1:03:89:
a1:97:31:93:96:5f:91:e8:2b:e7:dc:a0:20:dc:eb:
4b:12:ec:45:92:6b:31:ba:bb:23:39:a8:93:28:35:
6f:af:32:fd:99:6d:66:11:44:a8:ab:11:bc:e9:2a:
58:66:80:7b:70:bc:45:7c:a4:2c:2e:ee:31:3d:0e:
f1:9d:31:0b:ce:db:bc:66:38:03:4a:d3:5e:c8:72:
99:3b:f8:91:84:50:08:17:90:8c:0b:ab:52:e7:ae:
d9:c8:d7:d2:25:4b:76:4d:7b:5c:4f:24:0f:b0:f7:
eb:ae:94:b6:e9:64:7b:d8:d6:46:fa:2f:8d:7d:bb:
bc:d1:0b:3a:d8:82:9c:f3:e5:8a:3f:05:49:e9:4e:
6a:4b:1f:38:5a:ae:77:84:fc:53:62:94:12:52:8e:
af:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:07:C8:3A:A9:57:6D:FE:ED:85:B8:7A:12:80:57:B2:83:A1:98:32
X509v3 Authority Key Identifier:
keyid:AA:85:C6:7F:22:30:9E:0D:84:C3:0B:54:25:29:72:53:28:60:51:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoXGfyIwng2EwwtUJSlyUyhgUVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ba:88:3a:c8:57:ce:31:fb:63:3e:30:eb:05:fb:2b:16:e5:
0c:0d:7f:37:76:58:4f:b2:3f:cd:54:a8:21:1a:23:bf:98:c0:
37:48:e1:ec:d9:67:4d:2e:f3:d1:90:5f:69:53:78:22:7c:b0:
83:d2:de:ad:2e:35:b9:e0:c8:4f:12:af:27:96:06:9c:3a:7a:
61:39:75:0e:16:14:e8:bc:9a:51:95:58:d4:fd:c6:e3:a2:9c:
0b:3c:68:d4:bc:4d:85:2b:18:a9:37:43:63:3f:a2:48:71:b8:
f6:8e:7d:e9:2a:0b:0e:71:a6:8f:98:1f:86:a9:62:01:a1:4d:
da:88:44:31:fe:dd:7a:87:1e:f7:92:6f:9d:92:56:65:22:4d:
6f:47:dc:97:50:87:1d:df:da:88:25:ca:c7:2d:31:ce:f7:10:
37:44:3c:93:5c:1d:0b:03:0a:a9:3f:97:7e:b5:65:b4:52:9b:
77:89:96:f9:1e:80:1b:52:9c:db:06:f6:7c:35:78:0e:29:1d:
77:d2:5f:e5:a8:7f:e4:76:e6:86:e9:71:72:41:dc:f0:ac:08:
49:d8:39:f9:96:a7:4a:42:e5:14:f7:95:31:cf:48:08:74:b9:
fa:66:ef:d1:4a:de:22:ec:e6:17:f8:9a:22:76:21:3a:f7:7a:
8e:17:eb:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92kcyeApvMiPUAOYYY6zUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhODVjNjdmMjIzMDllMGQ4NGMzMGI1NDI1Mjk3MjUzMjg2
MDUxNTEwHhcNMjUxMDE5MTkwMjQ0WhcNMjUxMDIwMTkwMjQ0WjAzMTEwLwYDVQQD
Eyg3NTA3YzgzYWE5NTc2ZGZlZWQ4NWI4N2ExMjgwNTdiMjgzYTE5ODMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrliDCZbAbpCd5giO9nyGP1K0Bdn
KKmzTnwJX1NA7zkzj0cZnWV+DFsxJBzyxp98Ecuh6M+GB/SSRL2jmvZrvMhGlac+
Y3F+rD0Ka5YbWtMnvmC/QI/DTaDlmG5T7O/qy1neYCbxA4mhlzGTll+R6Cvn3KAg
3OtLEuxFkmsxursjOaiTKDVvrzL9mW1mEUSoqxG86SpYZoB7cLxFfKQsLu4xPQ7x
nTELztu8ZjgDStNeyHKZO/iRhFAIF5CMC6tS567ZyNfSJUt2TXtcTyQPsPfrrpS2
6WR72NZG+i+Nfbu80Qs62IKc8+WKPwVJ6U5qSx84Wq53hPxTYpQSUo6vdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHUHyDqpV23+7YW4ehKAV7KDoZgyMB8GA1UdIwQY
MBaAFKqFxn8iMJ4NhMMLVCUpclMoYFFRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW9YR2Z5SXduZzJFd3d0VUpTbHlVeWhnVVZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9lNzkyMDItYWNhYi00YjFhLTk5MmIt
MmEyZWQ0NWUyNzEyLzEvcW9YR2Z5SXduZzJFd3d0VUpTbHlVeWhnVVZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9lNzkyMDItYWNhYi00YjFhLTk5MmItMmEyZWQ0NWUyNzEy
LzEvcW9YR2Z5SXduZzJFd3d0VUpTbHlVeWhnVVZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfrqIOshX
zjH7Yz4w6wX7KxblDA1/N3ZYT7I/zVSoIRojv5jAN0jh7NlnTS7z0ZBfaVN4Inyw
g9LerS41ueDITxKvJ5YGnDp6YTl1DhYU6LyaUZVY1P3G46KcCzxo1LxNhSsYqTdD
Yz+iSHG49o596SoLDnGmj5gfhqliAaFN2ohEMf7deoce95JvnZJWZSJNb0fcl1CH
Hd/aiCXKxy0xzvcQN0Q8k1wdCwMKqT+XfrVltFKbd4mW+R6AG1Kc2wb2fDV4Dikd
d9Jf5ah/5HbmhulxckHc8KwISdg5+ZanSkLlFPeVMc9ICHS5+mbv0UreIuzmF/ia
InYhOvd6jhfruA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:08:45 2025 by rpki-client