Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
File: qoXp2iInNFwYq9fnUnL4HCmzDRs.mft (raw, json)
Hash identifier: sbwYTS7AMQQ3bkiwRdLuCBa+7MTsXkCDd9oEEh9+dX4=
Subject key identifier: 21:84:EB:0C:18:2F:E5:41:98:AF:FF:FB:88:BA:9A:43:EB:FA:CA:CC
Authority key identifier: AA:85:E9:DA:22:27:34:5C:18:AB:D7:E7:52:72:F8:1C:29:B3:0D:1B
Certificate issuer: /CN=aa85e9da2227345c18abd7e75272f81c29b30d1b
Certificate serial: 0198496512CBBCE8116AB68BBC1FBFEFA4CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoXp2iInNFwYq9fnUnL4HCmzDRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
Manifest number: 1593
Signing time: Sun 27 Jul 2025 01:00:17 +0000
Manifest this update: Sun 27 Jul 2025 01:00:17 +0000
Manifest next update: Mon 28 Jul 2025 01:00:17 +0000
Files and hashes: 1: lVJpe260qGX3e6stTFn772vx8lk.roa (hash: yoxYAKlvQPYmMi4Wc+00BZ6o5xl5cSxpwL5SfaGUG28=)
2: qoXp2iInNFwYq9fnUnL4HCmzDRs.crl (hash: 8kL08/S8djWrf2W8FcroznNs/m+Ncv/ZGF8EyiiXreM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qoXp2iInNFwYq9fnUnL4HCmzDRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:12:cb:bc:e8:11:6a:b6:8b:bc:1f:bf:ef:a4:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa85e9da2227345c18abd7e75272f81c29b30d1b
Validity
Not Before: Jul 27 01:00:17 2025 GMT
Not After : Jul 28 01:00:17 2025 GMT
Subject: CN=2184eb0c182fe54198affffb88ba9a43ebfacacc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b8:97:80:bf:40:f4:ff:0e:a3:11:b8:c5:94:
62:c0:c9:93:85:53:07:02:c6:35:7a:82:e0:5a:1f:
00:e0:fe:d6:5f:13:3c:0b:0f:e9:ae:9b:04:0b:f5:
e2:b9:ae:f7:3a:77:65:71:91:76:fc:5d:c3:de:d1:
4f:2f:b7:a2:95:b3:ec:75:ff:65:88:10:69:11:95:
d7:77:e9:ca:eb:75:f2:25:a7:7e:a9:5a:83:09:6e:
3b:8a:1d:aa:61:b6:94:df:a2:8d:29:b2:3e:2b:34:
ae:8e:2c:38:00:8d:c4:be:3e:27:56:16:7c:07:3b:
f9:20:bc:f1:12:13:a5:d9:60:fd:dd:98:46:8b:31:
09:5c:87:82:bc:78:43:aa:6a:50:9b:51:86:57:31:
ce:bd:47:dd:45:3d:59:e7:bc:d3:ae:39:bf:33:59:
37:59:69:92:fa:ec:d1:05:42:6e:1a:2a:db:5d:ce:
56:00:78:ba:a6:97:05:4b:24:c4:ea:3c:f1:f1:4b:
7d:6c:d5:4d:e6:83:40:f3:c1:e5:82:a3:e6:c7:30:
2c:09:51:5e:f0:44:26:e0:1d:32:43:d5:ce:94:b9:
d3:52:5f:a8:6e:58:80:56:b5:78:f3:07:73:3c:5e:
60:e8:61:56:05:5e:fc:08:d3:b5:b4:93:21:ba:56:
c1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:84:EB:0C:18:2F:E5:41:98:AF:FF:FB:88:BA:9A:43:EB:FA:CA:CC
X509v3 Authority Key Identifier:
keyid:AA:85:E9:DA:22:27:34:5C:18:AB:D7:E7:52:72:F8:1C:29:B3:0D:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoXp2iInNFwYq9fnUnL4HCmzDRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:ee:eb:eb:38:37:83:0e:b6:87:98:5c:95:0f:13:f2:57:1f:
14:5d:ba:d0:00:e4:eb:5e:4f:b2:32:a0:cf:2d:83:97:57:4f:
2f:7a:ab:12:0b:70:9a:f1:f8:95:13:aa:94:cc:5c:4c:f2:e8:
ca:c7:e4:93:00:b3:5e:2a:87:5f:ce:ff:26:7b:94:06:47:8e:
dc:a3:fc:ac:44:ad:ec:82:ef:29:8b:c8:2a:35:63:78:b6:31:
90:eb:e4:33:95:55:dd:db:c3:f8:86:be:03:70:f9:1b:7c:ae:
68:b6:d4:f7:f7:8f:db:76:8b:5d:39:09:df:1a:f0:c0:e5:8d:
4a:6d:b5:82:7d:fd:a9:07:5b:99:3f:fe:f9:ab:9b:b9:24:49:
78:53:14:51:85:32:e3:d6:21:5f:19:e4:8a:aa:06:a1:70:e7:
52:26:b0:d1:b2:d7:02:92:8c:25:54:98:44:13:c4:07:31:66:
33:dc:01:67:8d:e1:2c:da:e1:a5:76:4f:c9:02:9d:dc:77:7f:
7f:42:f3:2e:0e:3b:8d:f2:f7:77:12:6b:4e:60:b1:df:3a:fd:
d3:ba:6c:b1:63:1f:98:a1:79:90:d4:4f:a2:8f:64:7d:54:37:
ef:33:d0:cd:7b:7d:5c:15:b2:62:6d:1e:1d:db:de:fa:74:b3:
94:aa:8a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:27:13 2025 by rpki-client