Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft
File: qoj641tmtN4uQcpe4He17wtKtkk.mft (raw, json)
Hash identifier: HjdLhiEW15UkQPpTx8SRnHXwBrFP7ZleJd5CWxoMMKM=
Subject key identifier: FF:46:32:7D:D2:E1:F3:B9:AC:42:1D:A0:2E:39:F7:7E:12:12:A6:CA
Authority key identifier: AA:88:FA:E3:5B:66:B4:DE:2E:41:CA:5E:E0:77:B5:EF:0B:4A:B6:49
Certificate issuer: /CN=aa88fae35b66b4de2e41ca5ee077b5ef0b4ab649
Certificate serial: 0199161A6667F4B3EAEF3F3C76912BF9AF32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoj641tmtN4uQcpe4He17wtKtkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft
Manifest number: 15D2
Signing time: Thu 04 Sep 2025 19:00:52 +0000
Manifest this update: Thu 04 Sep 2025 19:00:52 +0000
Manifest next update: Fri 05 Sep 2025 19:00:52 +0000
Files and hashes: 1: oS0baXfZNGyY1D73J2ZM4dbyUEc.roa (hash: Etkc7DGAN6PIaAjm/aO1aFavjNa8wspYkBLe0PvWnjU=)
2: qoj641tmtN4uQcpe4He17wtKtkk.crl (hash: uo9weXG+yOv7ABeNtEecWdG5kdX44p9cF2kJOcFabTg=)
3: r-zsasbUjJEaU71e8kbXi99TukU.roa (hash: gv3XffgL881eMS9I6xI/He9cs/3EXg91NLNFK1oWx0g=)
4: zeGJY-nsOInvvd3T0IdWJNf1k28.roa (hash: p/aKgF7SzmiRfhNkcpLsPCyw0fGJ04jvtIbzFNx9GZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qoj641tmtN4uQcpe4He17wtKtkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:1a:66:67:f4:b3:ea:ef:3f:3c:76:91:2b:f9:af:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa88fae35b66b4de2e41ca5ee077b5ef0b4ab649
Validity
Not Before: Sep 4 19:00:52 2025 GMT
Not After : Sep 5 19:00:52 2025 GMT
Subject: CN=ff46327dd2e1f3b9ac421da02e39f77e1212a6ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0d:31:d6:74:1a:84:ae:1e:3b:20:fa:a5:16:
d1:14:40:61:e5:49:f5:c4:32:89:1c:81:a4:28:ac:
05:f4:c0:ed:0b:67:5d:49:bd:d4:8d:1f:dc:b5:bb:
28:49:3b:93:84:be:8f:ca:85:94:be:5f:2d:e9:66:
b1:ea:a2:4e:07:f0:ff:ff:17:64:f2:75:57:55:a4:
d7:a9:a5:ad:75:e4:bc:56:0e:78:18:b6:53:a9:c8:
6e:be:4d:ad:9c:b7:40:ac:1d:24:e2:7f:b6:6c:e8:
59:88:c5:bd:02:ad:45:8e:2b:af:af:3b:82:8f:27:
d4:b2:a0:3c:fb:89:b7:16:95:c0:da:a4:fc:92:f5:
71:2e:da:e5:5f:90:da:ea:91:28:dc:4b:cc:f2:79:
54:f3:0b:39:0f:f8:ee:bd:46:a0:1f:5f:cc:22:f2:
c6:5f:11:57:15:f7:22:ad:b2:00:61:29:a2:e6:fe:
d8:cb:61:f8:4d:20:f6:26:85:cd:7a:13:75:f0:50:
c4:46:a6:6b:ae:f3:ce:b8:51:b1:05:23:32:8e:7a:
b6:0e:f2:ee:17:00:f0:46:c5:a9:87:95:36:81:38:
00:27:0e:92:5f:2c:4a:54:fc:e7:c5:47:46:20:5d:
63:d7:f1:fa:a2:f1:25:0b:6f:2f:64:d7:56:9f:64:
2f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:46:32:7D:D2:E1:F3:B9:AC:42:1D:A0:2E:39:F7:7E:12:12:A6:CA
X509v3 Authority Key Identifier:
keyid:AA:88:FA:E3:5B:66:B4:DE:2E:41:CA:5E:E0:77:B5:EF:0B:4A:B6:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoj641tmtN4uQcpe4He17wtKtkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:fe:ef:25:8e:ce:d0:a0:85:92:77:91:64:c4:84:b7:c0:93:
b1:0b:fd:c1:69:98:8b:d6:61:cc:db:d0:f5:52:d4:90:12:c0:
36:3f:dd:08:ca:21:9a:fa:47:2c:05:b4:5a:83:d7:cf:7d:2b:
e2:79:cb:32:d3:d6:89:29:75:25:5a:0a:fa:c2:5d:11:98:13:
7d:9f:64:60:36:52:55:44:c7:59:fb:da:a4:e7:e3:0b:85:fe:
02:f9:0a:d8:e1:7a:67:12:a0:c0:d4:a6:03:4a:da:22:d6:3c:
be:65:46:19:ce:c7:4d:b5:53:7b:82:09:8e:00:1b:ad:79:3d:
5e:0c:dc:ec:f4:d1:ac:e0:ff:78:d0:72:79:82:4e:8b:83:02:
20:07:41:0f:9b:e2:31:cc:ad:f1:7a:22:64:c0:87:ce:14:a9:
5c:44:4e:d9:49:fa:9f:1a:09:57:31:36:18:b5:ef:71:97:0d:
3b:54:27:77:e7:8c:64:ab:96:40:b9:12:2d:5d:29:83:3c:a9:
26:cb:f0:21:f5:79:e2:41:12:ef:bc:3a:c9:00:32:2b:28:f4:
99:ff:60:fd:10:fa:c4:44:bb:bf:f0:56:80:a3:86:08:24:7d:
e2:18:87:2f:53:fa:a4:69:74:d6:49:6e:20:d0:00:ef:48:ad:
af:a8:fd:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:30:16 2025 by rpki-client