Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
File: qoXp2iInNFwYq9fnUnL4HCmzDRs.mft (raw, json)
Hash identifier: eoLCEKZxCiKvZ+evZU9wjrV+3xP58EuN4AnzCTnNSjE=
Subject key identifier: 74:67:5E:BD:71:61:2F:98:B2:36:14:8B:AF:BF:E2:1F:C5:E5:13:3F
Authority key identifier: AA:85:E9:DA:22:27:34:5C:18:AB:D7:E7:52:72:F8:1C:29:B3:0D:1B
Certificate issuer: /CN=aa85e9da2227345c18abd7e75272f81c29b30d1b
Certificate serial: 0198D65F2C64856FC1FCB3E1E1EB50AD1611
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoXp2iInNFwYq9fnUnL4HCmzDRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
Manifest number: 15DC
Signing time: Sat 23 Aug 2025 10:00:18 +0000
Manifest this update: Sat 23 Aug 2025 10:00:18 +0000
Manifest next update: Sun 24 Aug 2025 10:00:18 +0000
Files and hashes: 1: lVJpe260qGX3e6stTFn772vx8lk.roa (hash: yoxYAKlvQPYmMi4Wc+00BZ6o5xl5cSxpwL5SfaGUG28=)
2: qoXp2iInNFwYq9fnUnL4HCmzDRs.crl (hash: qeF7umF5EG8tEn558fmft1ug/4EMF4oj6WsGPdsySc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qoXp2iInNFwYq9fnUnL4HCmzDRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:2c:64:85:6f:c1:fc:b3:e1:e1:eb:50:ad:16:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa85e9da2227345c18abd7e75272f81c29b30d1b
Validity
Not Before: Aug 23 10:00:18 2025 GMT
Not After : Aug 24 10:00:18 2025 GMT
Subject: CN=74675ebd71612f98b236148bafbfe21fc5e5133f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b8:b5:c9:33:74:28:5c:8f:99:b5:65:be:e3:
69:2a:f7:b6:8a:42:d2:3d:47:56:2a:ba:e2:b4:c3:
7f:72:80:f4:e7:d3:85:f5:02:98:4d:13:78:34:93:
98:80:92:09:59:27:ba:f0:77:cb:f4:e6:c5:b5:a5:
33:ab:d6:72:bd:db:52:01:48:ab:1c:90:50:14:21:
0a:0a:ef:f1:4f:c5:54:a2:9b:2f:78:a2:22:dc:2f:
5c:6b:30:91:86:45:ca:aa:3e:ed:69:99:33:ed:55:
4a:15:bf:0d:c0:98:76:0f:57:80:2b:c2:3e:d9:46:
70:b7:42:44:e0:93:35:c3:38:26:5e:cd:8c:6c:aa:
da:5d:0c:0a:d9:21:40:dd:b9:44:3c:00:b1:92:f7:
d6:90:80:f9:62:0c:b4:67:a7:f2:0c:43:52:bf:26:
5d:42:ed:bb:92:ef:79:21:13:ac:0d:b4:21:c4:ba:
b5:56:51:a5:9e:b0:19:28:be:7e:d9:43:b1:e6:b7:
6d:d9:d6:f3:65:7a:91:aa:26:40:44:17:fb:cc:1a:
ec:db:72:19:a7:ab:01:71:8c:14:4e:5e:cf:47:24:
e9:1c:d1:d1:d8:1e:be:f9:55:a2:dd:05:47:dd:a4:
05:95:6e:34:a1:30:65:c9:6d:51:70:33:88:2a:6a:
eb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:67:5E:BD:71:61:2F:98:B2:36:14:8B:AF:BF:E2:1F:C5:E5:13:3F
X509v3 Authority Key Identifier:
keyid:AA:85:E9:DA:22:27:34:5C:18:AB:D7:E7:52:72:F8:1C:29:B3:0D:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoXp2iInNFwYq9fnUnL4HCmzDRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:d3:52:55:7a:07:2b:61:d5:34:8b:92:bd:d4:91:b1:3b:22:
29:16:15:b3:cd:52:c8:10:73:80:c9:1e:ef:d7:d0:b2:29:b9:
3f:b5:cb:87:31:7b:1c:d2:e2:72:94:7c:51:07:bc:38:de:ab:
c8:69:cb:c8:11:f2:2a:6f:97:21:4e:da:24:a4:43:9a:8f:48:
22:32:be:c7:96:ab:5c:d3:05:f9:a7:5d:71:84:8e:6c:11:4b:
78:be:84:d8:e3:16:1a:eb:93:cd:ad:83:a4:d1:c3:43:89:8a:
82:08:8e:db:e8:a5:61:52:a9:ba:cc:ed:ca:a7:c8:72:3b:a0:
12:e9:07:12:82:9a:fc:ab:aa:1b:a8:f1:c4:97:10:19:9a:8f:
42:62:c8:1e:6c:3a:f6:26:ee:c3:f0:a6:c1:71:7f:67:4e:93:
82:7f:38:11:27:1e:a7:7e:39:36:7a:c6:c2:f4:96:4a:38:2f:
e0:f7:4b:3d:79:36:4a:d2:78:25:81:5a:cb:a0:32:8d:3a:1a:
3d:2a:53:1c:c4:41:85:ce:6c:38:fe:4f:28:c3:3c:d2:95:be:
da:0a:41:38:92:76:63:31:92:32:55:9b:18:04:18:b1:3e:e7:
19:76:09:33:e7:3a:00:30:3d:86:9f:d1:73:d3:47:9d:c3:03:
5d:c1:f5:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:40:59 2025 by rpki-client