Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.mft
File: qoXGfyIwng2EwwtUJSlyUyhgUVE.mft (raw, json)
Hash identifier: KaE4y56FIKfjquaPPTOMgSKw0PhMJcxtwKgVA8alvj4=
Subject key identifier: A2:3F:59:97:6C:D4:90:B7:A6:3B:2D:8D:7F:B5:02:1D:92:7D:F6:AC
Authority key identifier: AA:85:C6:7F:22:30:9E:0D:84:C3:0B:54:25:29:72:53:28:60:51:51
Certificate issuer: /CN=aa85c67f22309e0d84c30b542529725328605151
Certificate serial: 0197B6A2067314A7DC21963B65B4F9A20B6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoXGfyIwng2EwwtUJSlyUyhgUVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.mft
Manifest number: 0C36
Signing time: Sat 28 Jun 2025 13:02:41 +0000
Manifest this update: Sat 28 Jun 2025 13:02:41 +0000
Manifest next update: Sun 29 Jun 2025 13:02:41 +0000
Files and hashes: 1: U6h0E3CpWcLE4IcpdPD5N0_flWE.roa (hash: /MeOIU5IzJfeECJ9wAs+zMCbOflzuiKPgRuM31+tyrU=)
2: qoXGfyIwng2EwwtUJSlyUyhgUVE.crl (hash: M0NGo2kPxLmQBsQx9n7ibn9DYlzhBWIun80GFYLxrg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qoXGfyIwng2EwwtUJSlyUyhgUVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:06:73:14:a7:dc:21:96:3b:65:b4:f9:a2:0b:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa85c67f22309e0d84c30b542529725328605151
Validity
Not Before: Jun 28 13:02:41 2025 GMT
Not After : Jun 29 13:02:41 2025 GMT
Subject: CN=a23f59976cd490b7a63b2d8d7fb5021d927df6ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5c:cf:ea:2d:b8:bf:be:5f:b2:5b:0c:21:48:
d4:4f:33:b6:53:4e:e8:c0:73:a1:ae:8a:76:a0:f6:
b9:93:be:b6:54:40:e4:69:37:88:56:58:f7:8b:09:
97:73:46:a9:c7:57:bd:55:b0:ae:bc:f7:ac:7a:fb:
8d:9c:4d:db:5b:17:9f:9e:29:0b:27:40:d3:53:e2:
4f:5a:95:54:26:e2:ce:87:93:f8:0e:f3:99:7b:f3:
57:e4:3f:4b:cc:86:19:f7:0c:7e:ed:92:6d:e2:b9:
de:c7:eb:b8:e6:0b:30:38:16:0a:8e:47:2b:ef:c7:
97:81:47:13:85:06:7c:4b:a3:1c:59:77:8e:35:98:
b5:c0:4d:a2:bd:49:5a:8e:38:2e:ff:36:16:49:95:
5a:d8:12:fa:a6:4f:c3:9a:be:cb:bf:74:5d:22:6f:
77:f7:98:85:c4:0a:ea:37:e1:49:de:c7:43:2f:67:
09:bf:da:9c:ec:72:fa:b5:61:05:99:bc:10:f2:69:
ef:60:9a:a5:2e:0c:f9:f6:05:db:0e:e2:3c:ac:48:
e5:f8:1d:7f:ed:7f:cc:01:c4:cb:00:58:bc:86:0b:
98:d6:25:fd:e2:dc:b9:0f:78:0e:21:08:aa:6a:b5:
26:b1:00:f9:89:28:20:c5:10:93:af:ca:83:20:94:
78:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:3F:59:97:6C:D4:90:B7:A6:3B:2D:8D:7F:B5:02:1D:92:7D:F6:AC
X509v3 Authority Key Identifier:
keyid:AA:85:C6:7F:22:30:9E:0D:84:C3:0B:54:25:29:72:53:28:60:51:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoXGfyIwng2EwwtUJSlyUyhgUVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:8a:20:a6:56:ea:5e:c0:8b:47:90:ea:b2:33:97:83:69:41:
88:9e:91:5e:de:8f:08:82:8a:c5:6c:c6:0e:c9:53:c2:42:84:
de:ca:33:67:80:29:09:e1:2e:d3:ad:27:8e:fc:c5:3d:95:c3:
cc:a8:8e:33:e0:9d:d5:73:65:4e:16:2e:21:a3:24:33:71:a3:
52:7a:01:7c:1e:1f:19:10:4a:12:fa:21:c8:22:1d:da:b9:75:
45:d4:80:7e:8f:1c:2a:9e:77:dc:c9:f0:71:9f:80:42:03:d2:
de:9e:77:e2:fc:cc:72:10:f7:c3:28:b3:e6:46:51:5e:e5:f9:
ac:73:a9:11:63:6b:c9:e7:49:ff:a3:96:84:3a:9d:28:67:ff:
fd:f7:10:b3:f8:2a:45:73:6f:b9:1e:d5:72:78:7b:db:b9:d8:
b0:b4:1b:e8:cd:37:3e:e8:26:51:51:5f:6b:10:23:66:6d:58:
c0:ae:a1:ff:d2:14:7b:69:7d:b7:70:3d:18:33:91:8b:d4:c4:
64:e8:46:79:1b:25:7f:ec:45:7b:a0:2f:05:5e:7a:3e:00:12:
1c:08:dd:46:7d:87:75:4a:19:c0:a7:67:f4:0e:37:b2:65:76:
80:e0:6d:b3:2a:46:0e:16:26:10:e8:8e:c0:24:2d:a1:2a:b6:
e9:8f:38:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2ogZzFKfcIZY7ZbT5ogtrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhODVjNjdmMjIzMDllMGQ4NGMzMGI1NDI1Mjk3MjUzMjg2
MDUxNTEwHhcNMjUwNjI4MTMwMjQxWhcNMjUwNjI5MTMwMjQxWjAzMTEwLwYDVQQD
EyhhMjNmNTk5NzZjZDQ5MGI3YTYzYjJkOGQ3ZmI1MDIxZDkyN2RmNmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVzP6i24v75fslsMIUjUTzO2U07o
wHOhrop2oPa5k762VEDkaTeIVlj3iwmXc0apx1e9VbCuvPesevuNnE3bWxefnikL
J0DTU+JPWpVUJuLOh5P4DvOZe/NX5D9LzIYZ9wx+7ZJt4rnex+u45gswOBYKjkcr
78eXgUcThQZ8S6McWXeONZi1wE2ivUlajjgu/zYWSZVa2BL6pk/Dmr7Lv3RdIm93
95iFxArqN+FJ3sdDL2cJv9qc7HL6tWEFmbwQ8mnvYJqlLgz59gXbDuI8rEjl+B1/
7X/MAcTLAFi8hguY1iX94ty5D3gOIQiqarUmsQD5iSggxRCTr8qDIJR4oQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKI/WZds1JC3pjstjX+1Ah2SffasMB8GA1UdIwQY
MBaAFKqFxn8iMJ4NhMMLVCUpclMoYFFRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW9YR2Z5SXduZzJFd3d0VUpTbHlVeWhnVVZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9lNzkyMDItYWNhYi00YjFhLTk5MmIt
MmEyZWQ0NWUyNzEyLzEvcW9YR2Z5SXduZzJFd3d0VUpTbHlVeWhnVVZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9lNzkyMDItYWNhYi00YjFhLTk5MmItMmEyZWQ0NWUyNzEy
LzEvcW9YR2Z5SXduZzJFd3d0VUpTbHlVeWhnVVZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYoogplbq
XsCLR5DqsjOXg2lBiJ6RXt6PCIKKxWzGDslTwkKE3sozZ4ApCeEu060njvzFPZXD
zKiOM+Cd1XNlThYuIaMkM3GjUnoBfB4fGRBKEvohyCId2rl1RdSAfo8cKp533Mnw
cZ+AQgPS3p534vzMchD3wyiz5kZRXuX5rHOpEWNryedJ/6OWhDqdKGf//fcQs/gq
RXNvuR7Vcnh727nYsLQb6M03PugmUVFfaxAjZm1YwK6h/9IUe2l9t3A9GDORi9TE
ZOhGeRslf+xFe6AvBV56PgASHAjdRn2HdUoZwKdn9A43smV2gOBtsypGDhYmEOiO
wCQtoSq26Y84qA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:39:22 2025 by rpki-client