Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
File: qoXp2iInNFwYq9fnUnL4HCmzDRs.mft (raw, json)
Hash identifier: MZa66c71s3gKn1MK5s+gtKQpoq8HkP8SESnEDG5xF5M=
Subject key identifier: 0B:E8:7C:87:F8:2E:0C:9E:DE:0F:D6:05:7A:69:8B:45:5C:DB:4F:79
Authority key identifier: AA:85:E9:DA:22:27:34:5C:18:AB:D7:E7:52:72:F8:1C:29:B3:0D:1B
Certificate issuer: /CN=aa85e9da2227345c18abd7e75272f81c29b30d1b
Certificate serial: 01988166C41FA7A88D75F0D71CF12AB69E87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoXp2iInNFwYq9fnUnL4HCmzDRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
Manifest number: 15B0
Signing time: Wed 06 Aug 2025 22:00:52 +0000
Manifest this update: Wed 06 Aug 2025 22:00:52 +0000
Manifest next update: Thu 07 Aug 2025 22:00:52 +0000
Files and hashes: 1: lVJpe260qGX3e6stTFn772vx8lk.roa (hash: yoxYAKlvQPYmMi4Wc+00BZ6o5xl5cSxpwL5SfaGUG28=)
2: qoXp2iInNFwYq9fnUnL4HCmzDRs.crl (hash: hT21OPkkTlmqZHDfJ59PqqT6hEy8fXNKjRNV4ikLSyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qoXp2iInNFwYq9fnUnL4HCmzDRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:66:c4:1f:a7:a8:8d:75:f0:d7:1c:f1:2a:b6:9e:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa85e9da2227345c18abd7e75272f81c29b30d1b
Validity
Not Before: Aug 6 22:00:52 2025 GMT
Not After : Aug 7 22:00:52 2025 GMT
Subject: CN=0be87c87f82e0c9ede0fd6057a698b455cdb4f79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a7:c7:05:29:86:9b:4d:af:41:00:7c:dd:2e:
7a:c5:bd:81:36:44:ee:38:5c:a8:56:9f:09:d5:1d:
04:4d:71:6c:ea:1e:6a:0a:0b:92:04:6e:17:54:a2:
33:15:2e:b6:2c:ed:53:f8:55:bf:d6:63:4d:79:c0:
40:71:99:67:de:89:8e:26:69:59:9a:1a:34:9e:1e:
70:86:9e:37:ac:c8:2a:20:b8:00:59:fa:cb:e9:5e:
ab:27:a2:f5:5d:00:51:a8:00:75:23:e8:eb:7c:09:
ca:32:65:65:e7:87:da:45:52:41:8b:9b:f8:65:b2:
ef:01:81:80:e5:f4:47:cf:ee:4f:0f:36:2f:1e:05:
75:a4:95:57:a7:34:2f:5a:85:eb:f9:74:53:af:0d:
ff:c3:01:56:d8:22:a9:1a:5d:68:b7:f3:81:a6:59:
c3:81:71:ee:83:0b:62:d7:83:9c:93:85:76:be:7f:
ec:c3:d0:0a:67:32:4d:e8:a8:bf:19:84:f4:ab:88:
84:93:9a:3e:94:54:a3:8b:1e:dc:36:cd:32:41:d4:
68:d7:9c:1f:46:88:52:97:c2:03:5d:2c:09:7b:73:
31:a2:f5:59:d9:e4:b9:bc:98:eb:87:d2:d9:f3:c0:
ff:af:a9:81:4e:60:1c:c2:78:55:20:e4:9e:d6:80:
97:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E8:7C:87:F8:2E:0C:9E:DE:0F:D6:05:7A:69:8B:45:5C:DB:4F:79
X509v3 Authority Key Identifier:
keyid:AA:85:E9:DA:22:27:34:5C:18:AB:D7:E7:52:72:F8:1C:29:B3:0D:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoXp2iInNFwYq9fnUnL4HCmzDRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:49:e0:8e:7d:8d:96:b0:e4:ea:47:d4:28:e9:6e:3c:45:ed:
fd:cc:10:1f:be:86:99:03:5a:d9:1a:e5:01:be:49:12:cb:17:
63:2e:c1:80:db:f9:fb:be:86:59:aa:fe:38:1c:13:27:dd:b9:
0e:4f:3b:3b:57:fd:ab:69:7f:90:c8:3d:78:5a:66:4e:3e:b9:
40:36:d4:04:0a:63:9b:a5:db:96:bc:67:ca:9a:f6:d0:08:ad:
fa:3e:f3:50:72:75:01:0f:97:5f:a1:cb:ca:6a:aa:fa:fb:0c:
de:4f:59:4c:e5:29:ee:7c:32:4c:90:23:ff:45:c0:d2:96:f9:
4d:e1:1f:83:3f:30:fc:72:38:0e:06:7d:db:2d:46:4a:9d:b4:
c1:60:e0:71:2e:01:c6:57:35:27:d1:0c:2e:8b:6c:66:23:4e:
12:81:d2:c3:79:78:11:7d:e2:69:c6:18:35:d6:94:be:dd:2e:
2e:7d:23:57:2b:ad:38:df:f8:b7:a5:2d:6b:78:a5:fc:e0:69:
f5:3e:6e:81:71:8b:84:bb:ab:f7:92:f7:a4:2d:02:67:f4:f2:
92:dc:ae:cc:99:28:a2:58:90:36:73:c5:8d:06:84:67:1f:63:
39:e3:b6:91:dd:85:a2:37:31:fa:c4:80:72:19:1b:9c:f8:9c:
45:92:ae:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:43:55 2025 by rpki-client