Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.mft
File: qoXGfyIwng2EwwtUJSlyUyhgUVE.mft (raw, json)
Hash identifier: CoO+GdK4xpublt4HuiqwuWb2tOJN2TYpADYVKKXF01U=
Subject key identifier: 28:9A:22:40:4D:D0:DA:05:17:CF:0D:33:C6:38:BF:42:D1:72:79:C0
Authority key identifier: AA:85:C6:7F:22:30:9E:0D:84:C3:0B:54:25:29:72:53:28:60:51:51
Certificate issuer: /CN=aa85c67f22309e0d84c30b542529725328605151
Certificate serial: 01995F7DB4BF6476A5BF7BCEF364CD282415
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoXGfyIwng2EwwtUJSlyUyhgUVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.mft
Manifest number: 0D12
Signing time: Fri 19 Sep 2025 01:01:37 +0000
Manifest this update: Fri 19 Sep 2025 01:01:37 +0000
Manifest next update: Sat 20 Sep 2025 01:01:37 +0000
Files and hashes: 1: U6h0E3CpWcLE4IcpdPD5N0_flWE.roa (hash: /MeOIU5IzJfeECJ9wAs+zMCbOflzuiKPgRuM31+tyrU=)
2: qoXGfyIwng2EwwtUJSlyUyhgUVE.crl (hash: jvibwoKwTwRxF85mgBPwLkoNp5Aqh1I7rmQumYbd2zU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qoXGfyIwng2EwwtUJSlyUyhgUVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 22:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5f:7d:b4:bf:64:76:a5:bf:7b:ce:f3:64:cd:28:24:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa85c67f22309e0d84c30b542529725328605151
Validity
Not Before: Sep 19 01:01:37 2025 GMT
Not After : Sep 20 01:01:37 2025 GMT
Subject: CN=289a22404dd0da0517cf0d33c638bf42d17279c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f7:9d:19:5a:13:56:a6:a4:d9:1a:b8:62:97:
00:81:11:10:a4:94:f1:96:69:ee:bb:7d:c7:cd:cc:
9a:00:c3:1e:e7:92:44:e5:0a:a2:ec:85:56:3f:cc:
e4:c4:ba:03:61:b1:89:73:85:21:e4:d5:45:44:f5:
59:44:ab:15:7a:4f:c2:3d:1b:f0:74:e5:3a:43:93:
25:37:ba:42:07:cd:d3:ae:5d:58:44:88:b4:f1:eb:
0c:51:ec:85:12:0f:66:a6:1a:bf:26:4f:01:b7:c7:
a3:e2:35:d0:5f:d0:da:35:c8:80:9b:72:74:38:02:
09:4c:ea:e6:98:21:97:1b:99:f4:5b:5f:6b:ae:b1:
57:72:ff:17:8d:74:4a:b8:ea:ef:99:59:52:ae:fa:
d7:e7:27:e6:be:e6:86:8a:90:88:a6:a8:e4:42:ea:
44:06:6c:f6:7a:70:ce:98:3d:cc:11:7c:90:e2:b4:
dd:6c:03:99:d2:ce:c9:fe:03:ef:2d:2f:3e:45:27:
3a:05:5c:bb:23:17:2c:82:11:75:37:bc:24:5a:b7:
e0:f4:90:a3:a6:fa:64:cd:8a:18:c7:7f:75:1d:c9:
35:2a:aa:49:57:21:fc:ea:1d:3d:ba:53:96:44:e6:
47:dd:1b:48:e3:a8:9f:27:d5:8e:bd:b0:ff:19:d0:
20:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:9A:22:40:4D:D0:DA:05:17:CF:0D:33:C6:38:BF:42:D1:72:79:C0
X509v3 Authority Key Identifier:
keyid:AA:85:C6:7F:22:30:9E:0D:84:C3:0B:54:25:29:72:53:28:60:51:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoXGfyIwng2EwwtUJSlyUyhgUVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:30:4a:b1:4c:e9:1d:36:d6:bd:f2:4b:6e:c1:85:71:ff:c8:
06:bb:56:94:dc:7d:bd:0f:89:7f:46:d3:e1:ee:0e:c8:cd:74:
92:e1:8c:0c:8e:b8:39:c5:0b:2b:ab:a6:07:9f:4d:38:a0:15:
13:e9:5a:3a:54:c2:a3:27:ba:7f:76:c5:36:e1:b6:20:44:fa:
41:fb:0a:93:77:89:c1:ca:18:29:e2:23:dd:f2:69:3c:a3:a1:
d4:b0:2a:57:37:cc:86:d4:43:98:aa:24:41:11:35:54:5c:11:
11:24:f8:a8:81:92:79:9f:2b:ce:ae:88:6d:ae:52:d8:e8:46:
59:53:6a:e6:02:04:d9:1d:5c:d9:05:36:1b:df:62:a1:a4:96:
8d:a1:58:d6:6c:1c:2c:31:2f:5a:91:1e:16:33:6a:c1:3f:03:
bc:a2:20:c5:40:b4:e3:21:86:9b:9e:13:21:25:ce:d8:b8:25:
1c:86:0d:8f:9c:c2:11:97:cd:52:8e:ae:d3:b6:5d:7c:30:ec:
f4:99:9f:90:f3:c5:bd:1b:07:25:d8:08:3a:dc:eb:e8:72:63:
9d:ee:88:4a:6c:8d:b3:bc:5d:e2:a0:1c:31:14:67:d0:8d:19:
72:94:9e:c6:4d:0a:71:4d:cd:4e:a5:72:cc:81:41:4a:ea:0f:
17:d4:a0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 03:59:49 2025 by rpki-client