Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/dba306-9199-4b75-a2c3-4f6af0883979/1/qoxALCO4BeCVMBFbvkREAg9PIDQ.mft
File: qoxALCO4BeCVMBFbvkREAg9PIDQ.mft (raw, json)
Hash identifier: 959kipIRoXGnmKMeSV0YjWzP/QWcabWDLa72g3A6WNc=
Subject key identifier: 88:E7:76:DC:D7:20:64:F5:E5:C3:26:98:89:21:B3:CA:B5:03:A9:39
Authority key identifier: AA:8C:40:2C:23:B8:05:E0:95:30:11:5B:BE:44:44:02:0F:4F:20:34
Certificate issuer: /CN=aa8c402c23b805e09530115bbe4444020f4f2034
Certificate serial: 01987B9B9E60A0217D2B75E9A25CA171B710
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoxALCO4BeCVMBFbvkREAg9PIDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/dba306-9199-4b75-a2c3-4f6af0883979/1/qoxALCO4BeCVMBFbvkREAg9PIDQ.mft
Manifest number: 0719
Signing time: Tue 05 Aug 2025 19:00:52 +0000
Manifest this update: Tue 05 Aug 2025 19:00:52 +0000
Manifest next update: Wed 06 Aug 2025 19:00:52 +0000
Files and hashes: 1: qoxALCO4BeCVMBFbvkREAg9PIDQ.crl (hash: tTTlBMjyrhZInuMJerQaAu0W4G/+IDKVLwPezh3crSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/dba306-9199-4b75-a2c3-4f6af0883979/1/qoxALCO4BeCVMBFbvkREAg9PIDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/dba306-9199-4b75-a2c3-4f6af0883979/1/qoxALCO4BeCVMBFbvkREAg9PIDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qoxALCO4BeCVMBFbvkREAg9PIDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 19:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9b:9e:60:a0:21:7d:2b:75:e9:a2:5c:a1:71:b7:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa8c402c23b805e09530115bbe4444020f4f2034
Validity
Not Before: Aug 5 19:00:52 2025 GMT
Not After : Aug 6 19:00:52 2025 GMT
Subject: CN=88e776dcd72064f5e5c326988921b3cab503a939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:69:2e:7c:b4:fd:3a:e0:26:b6:d1:9b:76:2b:
ce:bf:8e:2c:6e:0a:37:a6:d0:c9:9a:57:4c:af:74:
47:ec:d7:2a:13:1b:d1:5e:b6:5d:41:01:cb:8e:00:
e8:90:e8:90:0a:dd:03:fd:30:c1:b0:80:a5:e3:c6:
3a:36:6b:84:70:35:97:13:6b:24:05:3e:02:d8:76:
74:d9:7f:d5:d8:c1:1d:4f:90:af:6f:4a:a9:dd:a5:
a9:6b:de:18:18:5b:b7:9f:1c:56:de:51:e7:d2:ac:
e0:d8:dd:06:ff:a5:26:10:3b:eb:4d:5d:1c:38:d3:
2a:98:9e:ce:12:10:90:bd:67:f1:d7:fa:97:b7:3c:
8b:9d:79:21:5a:76:cc:5d:e7:92:0f:f8:99:cf:f3:
e8:d4:c2:6f:ea:e4:2b:2b:b8:f1:5c:6a:7a:4d:27:
ab:95:ac:9e:ec:f5:2d:8f:fa:be:29:b0:19:59:e8:
04:01:2f:22:cc:56:05:11:f7:00:01:fb:10:8e:ce:
28:cc:d8:06:c6:20:1e:63:f8:15:4a:93:57:d1:66:
c6:66:5f:d9:61:39:73:4b:a4:1b:c1:34:17:5c:4a:
ba:1a:23:3e:d6:04:98:8b:60:0c:ce:d2:84:1e:61:
44:e0:77:95:7d:89:69:59:62:62:0d:e1:23:27:8d:
e2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E7:76:DC:D7:20:64:F5:E5:C3:26:98:89:21:B3:CA:B5:03:A9:39
X509v3 Authority Key Identifier:
keyid:AA:8C:40:2C:23:B8:05:E0:95:30:11:5B:BE:44:44:02:0F:4F:20:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoxALCO4BeCVMBFbvkREAg9PIDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/dba306-9199-4b75-a2c3-4f6af0883979/1/qoxALCO4BeCVMBFbvkREAg9PIDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/dba306-9199-4b75-a2c3-4f6af0883979/1/qoxALCO4BeCVMBFbvkREAg9PIDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:9d:7e:ad:0b:7c:8b:b8:6a:86:a8:f3:cf:a2:d0:6c:ea:57:
ea:e6:3c:55:24:ce:c7:bc:07:18:8d:b3:b5:d7:99:ce:c2:24:
9b:03:31:b3:52:fa:a5:5d:e7:0b:d1:84:af:b3:0f:34:aa:65:
79:62:57:4d:bf:58:af:74:a9:e5:6f:3f:03:d8:63:6c:fc:50:
36:bc:80:ad:25:ba:76:40:7a:aa:0b:43:77:f9:ec:25:bd:aa:
60:cd:68:0e:25:ef:fa:76:09:6c:f7:60:22:b2:62:e9:55:8c:
83:12:cc:b6:a2:c2:af:91:d6:8a:63:c5:65:eb:73:b9:55:2f:
ba:dc:3d:ee:58:9b:49:6e:90:7e:2f:9d:f9:94:1e:fb:ed:9f:
7a:a3:8a:d3:64:8a:99:36:4f:76:33:72:73:20:85:94:d2:ca:
21:b6:9f:11:8d:81:61:b4:d2:32:15:a3:0e:b1:9d:ca:b3:d4:
73:29:ba:51:59:8a:7d:5e:77:04:fb:b3:a1:66:50:3b:da:5e:
48:0c:37:12:c9:34:96:32:65:86:0c:e9:9f:ba:e4:4f:7f:d1:
44:3b:f9:79:9a:ae:11:68:81:4a:50:26:2a:0e:2a:38:eb:ff:
93:7f:2a:14:f1:9a:3d:6f:02:a0:1b:85:51:4d:5f:3a:bd:21:
3a:ba:a4:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh7m55goCF9K3XpolyhcbcQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhOGM0MDJjMjNiODA1ZTA5NTMwMTE1YmJlNDQ0NDAyMGY0
ZjIwMzQwHhcNMjUwODA1MTkwMDUyWhcNMjUwODA2MTkwMDUyWjAzMTEwLwYDVQQD
Eyg4OGU3NzZkY2Q3MjA2NGY1ZTVjMzI2OTg4OTIxYjNjYWI1MDNhOTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWkufLT9OuAmttGbdivOv44sbgo3
ptDJmldMr3RH7NcqExvRXrZdQQHLjgDokOiQCt0D/TDBsICl48Y6NmuEcDWXE2sk
BT4C2HZ02X/V2MEdT5Cvb0qp3aWpa94YGFu3nxxW3lHn0qzg2N0G/6UmEDvrTV0c
ONMqmJ7OEhCQvWfx1/qXtzyLnXkhWnbMXeeSD/iZz/Po1MJv6uQrK7jxXGp6TSer
laye7PUtj/q+KbAZWegEAS8izFYFEfcAAfsQjs4ozNgGxiAeY/gVSpNX0WbGZl/Z
YTlzS6QbwTQXXEq6GiM+1gSYi2AMztKEHmFE4HeVfYlpWWJiDeEjJ43iTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIjndtzXIGT15cMmmIkhs8q1A6k5MB8GA1UdIwQY
MBaAFKqMQCwjuAXglTARW75ERAIPTyA0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW94QUxDTzRCZUNWTUJGYnZrUkVBZzlQSURRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9kYmEzMDYtOTE5OS00Yjc1LWEyYzMt
NGY2YWYwODgzOTc5LzEvcW94QUxDTzRCZUNWTUJGYnZrUkVBZzlQSURRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9kYmEzMDYtOTE5OS00Yjc1LWEyYzMtNGY2YWYwODgzOTc5
LzEvcW94QUxDTzRCZUNWTUJGYnZrUkVBZzlQSURRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXp1+rQt8
i7hqhqjzz6LQbOpX6uY8VSTOx7wHGI2ztdeZzsIkmwMxs1L6pV3nC9GEr7MPNKpl
eWJXTb9Yr3Sp5W8/A9hjbPxQNryArSW6dkB6qgtDd/nsJb2qYM1oDiXv+nYJbPdg
IrJi6VWMgxLMtqLCr5HWimPFZetzuVUvutw97libSW6Qfi+d+ZQe++2feqOK02SK
mTZPdjNycyCFlNLKIbafEY2BYbTSMhWjDrGdyrPUcym6UVmKfV53BPuzoWZQO9pe
SAw3Esk0ljJlhgzpn7rkT3/RRDv5eZquEWiBSlAmKg4qOOv/k38qFPGaPW8CoBuF
UU1fOr0hOrqkfQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 04:12:26 2025 by rpki-client