Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
File: qoXp2iInNFwYq9fnUnL4HCmzDRs.mft (raw, json)
Hash identifier: iaGwKJa+x+c+jQr4Y0DgVLHU0I4s0dXVFbfT63u44wA=
Subject key identifier: A6:E0:A2:00:83:E9:2E:E7:4F:D1:1B:19:CF:2B:4D:44:92:C7:C0:39
Authority key identifier: AA:85:E9:DA:22:27:34:5C:18:AB:D7:E7:52:72:F8:1C:29:B3:0D:1B
Certificate issuer: /CN=aa85e9da2227345c18abd7e75272f81c29b30d1b
Certificate serial: 01976F2BBAF8641C54BCB2644003F0F19DEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoXp2iInNFwYq9fnUnL4HCmzDRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
Manifest number: 1522
Signing time: Sat 14 Jun 2025 16:00:26 +0000
Manifest this update: Sat 14 Jun 2025 16:00:26 +0000
Manifest next update: Sun 15 Jun 2025 16:00:26 +0000
Files and hashes: 1: lVJpe260qGX3e6stTFn772vx8lk.roa (hash: yoxYAKlvQPYmMi4Wc+00BZ6o5xl5cSxpwL5SfaGUG28=)
2: qoXp2iInNFwYq9fnUnL4HCmzDRs.crl (hash: Ng3+RtGhufUiq7eiLRmcHmlYoy/6DU7iCU2wapylamY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qoXp2iInNFwYq9fnUnL4HCmzDRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 16:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2b:ba:f8:64:1c:54:bc:b2:64:40:03:f0:f1:9d:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa85e9da2227345c18abd7e75272f81c29b30d1b
Validity
Not Before: Jun 14 16:00:26 2025 GMT
Not After : Jun 15 16:00:26 2025 GMT
Subject: CN=a6e0a20083e92ee74fd11b19cf2b4d4492c7c039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:be:65:61:71:ba:2b:c3:a1:07:7c:8f:3c:09:
01:59:1d:27:2f:a8:dc:d3:1d:8b:50:f1:63:fb:fa:
5d:79:79:6a:6f:5f:d6:91:4e:f9:7f:7c:a6:3c:03:
3e:04:8f:7f:0a:01:c7:95:99:65:5b:6e:d4:af:6d:
30:1b:e1:4e:76:25:f7:42:ed:c1:af:51:0d:63:2c:
79:28:53:c3:4c:cf:51:86:3e:9a:6b:72:de:11:e7:
5e:07:40:2c:f8:bd:5e:a6:53:08:88:4d:26:26:04:
a2:a9:eb:19:4f:dd:3e:03:70:d0:20:ad:16:0c:86:
b1:ae:e4:e5:28:a4:89:56:32:36:54:8d:32:cd:87:
cc:f4:fc:5a:f2:2e:e5:83:7a:e5:ee:b7:53:79:44:
a0:93:43:8f:8f:ba:79:9e:92:33:9e:4c:48:7a:ad:
58:22:2d:c8:6b:1f:10:2e:27:ca:b6:8e:74:2a:3f:
2a:72:10:6b:76:79:eb:ff:9b:65:4b:b9:fc:1f:bc:
c8:e2:b6:35:fd:38:38:66:7b:1d:76:6c:b0:39:21:
dc:a5:a8:74:ae:08:c9:06:73:f4:cf:21:0c:55:fc:
df:51:07:3b:dc:24:8d:a1:7f:d1:3d:ff:7b:f0:37:
88:d0:d5:55:8c:4e:52:c6:cc:11:4f:39:6e:6d:0a:
10:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E0:A2:00:83:E9:2E:E7:4F:D1:1B:19:CF:2B:4D:44:92:C7:C0:39
X509v3 Authority Key Identifier:
keyid:AA:85:E9:DA:22:27:34:5C:18:AB:D7:E7:52:72:F8:1C:29:B3:0D:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoXp2iInNFwYq9fnUnL4HCmzDRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:e0:bb:e1:2d:ab:5e:c4:be:59:b7:e9:58:42:5c:33:f1:62:
02:4a:63:4f:2b:f1:2f:0f:32:9c:89:2a:64:9d:b7:87:0a:71:
de:ef:18:3c:74:fc:80:2d:db:8a:79:33:81:61:16:bd:52:e9:
8b:b2:29:d9:8b:f2:35:9a:35:96:69:8c:35:41:1a:ef:53:63:
fe:55:89:f6:75:b4:89:46:4f:7e:a6:1b:fb:17:09:51:3a:22:
42:c4:ec:0b:5d:8b:cc:eb:49:15:a7:a4:35:cc:a5:ae:8b:99:
1a:89:d1:32:9d:52:2c:cf:15:86:f5:2a:83:d0:a7:41:b8:c0:
bb:59:42:8f:b6:b8:36:7e:5b:d8:76:64:5b:74:9a:91:76:41:
63:47:10:b0:df:dc:e7:10:6a:c0:7b:65:0c:1e:cb:89:df:e4:
d2:f9:d2:82:c2:48:61:69:0b:35:7a:a7:dc:91:9e:56:84:11:
66:14:b2:82:ad:d5:c9:e6:16:ae:76:d4:6f:1b:82:7c:af:36:
30:6c:77:10:da:be:d8:7c:78:21:39:78:bc:dd:a9:33:db:98:
50:2c:be:0f:51:f2:b3:28:22:72:a5:c8:36:d8:b6:22:8d:bd:
fe:6f:27:27:3c:e8:dd:b0:cf:0c:8b:74:bc:38:0b:7e:b3:4c:
4c:5c:69:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:34:18 2025 by rpki-client