Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
File: qoXp2iInNFwYq9fnUnL4HCmzDRs.mft (raw, json)
Hash identifier: i3KUrsoLrUI2Y+oFkbQTJQx1/ZckQaFG2n5l/PWo0qE=
Subject key identifier: AD:AB:C5:A7:C1:E9:2A:35:E8:77:6F:FD:F1:1A:33:E4:39:57:EA:94
Authority key identifier: AA:85:E9:DA:22:27:34:5C:18:AB:D7:E7:52:72:F8:1C:29:B3:0D:1B
Certificate issuer: /CN=aa85e9da2227345c18abd7e75272f81c29b30d1b
Certificate serial: 0199FFC84129633878E63869AA40D276DBEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoXp2iInNFwYq9fnUnL4HCmzDRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
Manifest number: 1676
Signing time: Mon 20 Oct 2025 04:02:17 +0000
Manifest this update: Mon 20 Oct 2025 04:02:17 +0000
Manifest next update: Tue 21 Oct 2025 04:02:17 +0000
Files and hashes: 1: lVJpe260qGX3e6stTFn772vx8lk.roa (hash: yoxYAKlvQPYmMi4Wc+00BZ6o5xl5cSxpwL5SfaGUG28=)
2: qoXp2iInNFwYq9fnUnL4HCmzDRs.crl (hash: BgDdu0IbwzQZFfCrBNEXoMdwAA+aoCQoWDt+BHC04tA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qoXp2iInNFwYq9fnUnL4HCmzDRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:41:29:63:38:78:e6:38:69:aa:40:d2:76:db:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa85e9da2227345c18abd7e75272f81c29b30d1b
Validity
Not Before: Oct 20 04:02:17 2025 GMT
Not After : Oct 21 04:02:17 2025 GMT
Subject: CN=adabc5a7c1e92a35e8776ffdf11a33e43957ea94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:20:cd:dd:15:e1:b0:b9:91:8f:1f:b8:9b:6d:
7e:70:92:f7:2c:83:99:43:6d:98:c5:2c:ab:20:54:
a9:99:df:9a:4a:6a:5f:a9:dc:dd:e9:88:23:14:c5:
51:f7:fe:fe:33:cb:ed:7e:6d:52:ad:a5:37:f1:f4:
eb:38:41:5e:cc:da:cf:b1:e7:65:86:79:c8:2f:51:
01:a2:c0:ea:1b:4e:dd:3d:a6:b8:b8:48:d7:7d:a4:
c7:21:6a:de:58:b7:7a:4c:44:e3:45:38:fe:aa:b7:
94:1b:6d:29:18:61:05:c6:29:3c:ca:60:61:da:d8:
6f:3c:45:c5:40:eb:b3:1e:dd:44:46:0f:cf:ef:7a:
8b:f1:dd:a8:76:6e:cc:31:37:fe:83:75:d0:94:52:
92:52:12:e8:4c:4a:6c:c6:6f:9c:f5:26:42:94:d2:
dd:f2:27:10:a3:d8:87:94:c2:73:35:ca:e4:05:64:
c0:91:3a:42:5b:3a:af:e9:ac:6b:82:62:20:8c:5c:
bc:61:88:79:9c:72:bf:ad:7a:68:16:ba:2b:59:9d:
db:fb:7d:34:63:81:c9:6d:01:bc:fa:03:ac:68:ee:
51:e3:41:71:81:32:75:eb:66:de:bb:9c:c8:f9:54:
98:fc:fb:b1:93:58:33:f9:a7:f1:70:11:ca:60:02:
79:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:AB:C5:A7:C1:E9:2A:35:E8:77:6F:FD:F1:1A:33:E4:39:57:EA:94
X509v3 Authority Key Identifier:
keyid:AA:85:E9:DA:22:27:34:5C:18:AB:D7:E7:52:72:F8:1C:29:B3:0D:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoXp2iInNFwYq9fnUnL4HCmzDRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:31:27:c1:f9:30:ac:e5:8c:61:18:42:98:ac:16:ca:4a:1c:
a6:f7:0a:31:83:ec:d7:ff:45:dc:31:fa:be:dd:1d:44:e7:8b:
4d:28:a8:56:b5:a5:3e:2b:ed:a3:68:0a:cc:3c:e4:3b:99:1b:
92:b0:17:c3:da:29:94:80:ec:67:2e:e3:dd:b2:7d:d1:85:4a:
c4:14:be:7e:71:dd:98:1c:b8:20:5c:eb:38:ac:eb:69:0e:e3:
ae:ed:7c:79:76:89:c6:5e:d5:25:48:bd:96:ad:9a:62:d0:97:
a0:77:ce:b8:19:d7:83:e8:c2:2b:38:56:fd:c3:b8:db:14:1b:
22:dc:a6:25:b5:25:32:ac:5f:3f:82:5c:76:55:5e:2f:5f:9a:
7c:85:23:09:b4:09:da:69:85:09:6a:21:3b:a1:2b:05:f0:b0:
a6:e2:78:73:2e:58:f3:d9:e7:2f:74:9d:c2:bf:0c:f8:d8:62:
17:e0:2d:28:19:04:d7:e8:36:5c:6f:b8:f7:46:63:e1:80:5f:
5d:83:0d:3f:a2:26:5d:0c:a1:63:b5:73:04:2f:d5:08:43:52:
96:ea:cf:b6:15:d3:d4:d2:a4:cd:8e:dc:5c:9c:d9:17:be:e1:
bc:29:0e:c6:70:9a:7d:00:1d:5b:eb:6f:d0:9a:8f:10:ac:00:
30:af:91:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:01:11 2025 by rpki-client