Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
File: qoXp2iInNFwYq9fnUnL4HCmzDRs.mft (raw, json)
Hash identifier: atpcivN2uC0JkxkRT1zzgJa+VKBePbiZxt7gXieohbo=
Subject key identifier: 0C:CE:EA:F8:D9:36:13:5F:EB:26:B3:0A:F7:3D:0A:3E:58:74:C8:39
Authority key identifier: AA:85:E9:DA:22:27:34:5C:18:AB:D7:E7:52:72:F8:1C:29:B3:0D:1B
Certificate issuer: /CN=aa85e9da2227345c18abd7e75272f81c29b30d1b
Certificate serial: 0197B6A15DF66B8B36339E94AC5291EC2041
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoXp2iInNFwYq9fnUnL4HCmzDRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
Manifest number: 1547
Signing time: Sat 28 Jun 2025 13:01:58 +0000
Manifest this update: Sat 28 Jun 2025 13:01:58 +0000
Manifest next update: Sun 29 Jun 2025 13:01:58 +0000
Files and hashes: 1: lVJpe260qGX3e6stTFn772vx8lk.roa (hash: yoxYAKlvQPYmMi4Wc+00BZ6o5xl5cSxpwL5SfaGUG28=)
2: qoXp2iInNFwYq9fnUnL4HCmzDRs.crl (hash: voGRNBhx3LDalBAR7L+hxsz8kjE6pec25YSjT5V/qgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qoXp2iInNFwYq9fnUnL4HCmzDRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:5d:f6:6b:8b:36:33:9e:94:ac:52:91:ec:20:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa85e9da2227345c18abd7e75272f81c29b30d1b
Validity
Not Before: Jun 28 13:01:58 2025 GMT
Not After : Jun 29 13:01:58 2025 GMT
Subject: CN=0cceeaf8d936135feb26b30af73d0a3e5874c839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:27:33:82:9a:6d:24:2e:78:15:d6:7a:d9:39:
0a:c2:00:1a:3e:4a:76:26:67:dd:13:f2:e4:a2:05:
5e:f9:5b:5a:cc:7f:fb:cc:43:62:4a:84:bc:0e:20:
30:2d:2f:ba:14:04:5b:fc:34:42:ac:03:3c:6a:40:
78:a0:8f:ad:d0:55:72:a9:f8:57:d7:a5:6d:68:c9:
a1:ae:17:f0:0c:fa:e5:d2:6e:d1:c6:b5:50:ab:40:
65:de:96:39:7c:8b:07:4b:1e:da:68:d1:5f:86:ca:
bc:09:14:68:e0:c6:31:e1:a3:5b:3c:ff:fa:70:56:
79:ea:2f:d7:fb:52:f3:dd:7e:16:8c:00:f5:e7:88:
f2:f1:3e:77:db:c6:c4:63:c0:dc:2f:5d:7d:a7:d5:
a4:49:85:44:46:a0:67:3d:6d:e6:5b:c5:d7:ed:aa:
c9:9c:3d:de:a8:8d:48:e6:c7:a0:2a:ab:1c:d5:91:
0a:b3:6e:34:f0:7a:8e:d7:77:07:30:6a:da:68:f1:
ac:1b:ca:3b:bc:e2:ea:0f:45:8c:0d:d6:f6:55:a4:
7a:e2:52:73:30:e6:29:2b:64:f5:d8:86:47:04:fd:
ac:26:fe:0a:17:1e:a0:f1:0c:b1:a5:51:d4:76:f2:
2d:4a:00:30:05:00:50:b7:1e:86:7d:22:6d:04:d7:
70:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:CE:EA:F8:D9:36:13:5F:EB:26:B3:0A:F7:3D:0A:3E:58:74:C8:39
X509v3 Authority Key Identifier:
keyid:AA:85:E9:DA:22:27:34:5C:18:AB:D7:E7:52:72:F8:1C:29:B3:0D:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoXp2iInNFwYq9fnUnL4HCmzDRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:e6:5a:dd:50:36:e5:6e:aa:01:b3:35:09:ff:fd:8b:25:6c:
9a:1f:3c:d3:62:83:a4:83:e6:e5:1a:e2:cf:26:22:a5:78:b8:
62:6c:c4:60:6d:17:23:a6:fa:5c:16:f4:f5:54:cc:b8:b4:f1:
80:3b:08:32:45:71:be:67:e9:46:38:06:d7:7d:bc:be:2d:11:
7f:c5:87:2c:44:7e:c2:43:a5:b4:a9:6a:15:a1:7a:0a:32:df:
f8:74:94:68:b6:d5:2f:bd:7a:ad:9e:6f:c2:02:f8:65:08:97:
fd:de:fa:99:46:d8:d9:01:08:52:fd:77:24:71:08:b6:c2:65:
a8:47:28:52:17:24:52:6c:79:a4:4c:0f:ed:49:47:0c:ee:2d:
89:94:95:3d:49:2a:03:e7:f5:a2:8a:84:da:6a:98:9c:16:43:
d5:cc:49:b8:dd:68:c9:27:23:e8:af:fd:4a:1f:c8:2e:58:e4:
92:8e:67:0c:83:4a:45:b0:b8:85:f3:d0:71:ee:e6:b3:ae:29:
dc:22:0c:f5:36:c5:32:8b:82:9e:cf:1c:ce:65:cc:65:0b:8d:
0c:e3:5c:d0:f6:aa:f1:74:e5:e2:ad:9d:79:b6:93:bb:ce:8f:
3e:83:78:26:87:49:1f:5e:11:26:c1:1d:78:e2:42:16:27:1f:
a2:0b:e8:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oV32a4s2M56UrFKR7CBBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhODVlOWRhMjIyNzM0NWMxOGFiZDdlNzUyNzJmODFjMjli
MzBkMWIwHhcNMjUwNjI4MTMwMTU4WhcNMjUwNjI5MTMwMTU4WjAzMTEwLwYDVQQD
EygwY2NlZWFmOGQ5MzYxMzVmZWIyNmIzMGFmNzNkMGEzZTU4NzRjODM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyczgpptJC54FdZ62TkKwgAaPkp2
JmfdE/LkogVe+VtazH/7zENiSoS8DiAwLS+6FARb/DRCrAM8akB4oI+t0FVyqfhX
16VtaMmhrhfwDPrl0m7RxrVQq0Bl3pY5fIsHSx7aaNFfhsq8CRRo4MYx4aNbPP/6
cFZ56i/X+1Lz3X4WjAD154jy8T5328bEY8DcL119p9WkSYVERqBnPW3mW8XX7arJ
nD3eqI1I5segKqsc1ZEKs2408HqO13cHMGraaPGsG8o7vOLqD0WMDdb2VaR64lJz
MOYpK2T12IZHBP2sJv4KFx6g8QyxpVHUdvItSgAwBQBQtx6GfSJtBNdwHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAzO6vjZNhNf6yazCvc9Cj5YdMg5MB8GA1UdIwQY
MBaAFKqF6doiJzRcGKvX51Jy+Bwpsw0bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW9YcDJpSW5ORndZcTlmblVuTDRIQ216RFJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mMmZjMGUtYmJiOS00OTI0LWE4OWMt
NzYyMGRiMjc5OTYyLzEvcW9YcDJpSW5ORndZcTlmblVuTDRIQ216RFJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9mMmZjMGUtYmJiOS00OTI0LWE4OWMtNzYyMGRiMjc5OTYy
LzEvcW9YcDJpSW5ORndZcTlmblVuTDRIQ216RFJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaeZa3VA2
5W6qAbM1Cf/9iyVsmh8802KDpIPm5RrizyYipXi4YmzEYG0XI6b6XBb09VTMuLTx
gDsIMkVxvmfpRjgG1328vi0Rf8WHLER+wkOltKlqFaF6CjLf+HSUaLbVL716rZ5v
wgL4ZQiX/d76mUbY2QEIUv13JHEItsJlqEcoUhckUmx5pEwP7UlHDO4tiZSVPUkq
A+f1ooqE2mqYnBZD1cxJuN1oyScj6K/9Sh/ILljkko5nDINKRbC4hfPQce7ms64p
3CIM9TbFMouCns8czmXMZQuNDONc0Paq8XTl4q2debaTu86PPoN4JodJH14RJsEd
eOJCFicfogvoKQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:48:01 2025 by rpki-client