Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
File: qoXp2iInNFwYq9fnUnL4HCmzDRs.mft (raw, json)
Hash identifier: OtsbeLfAapLMcX5W/sL6gfeRl6uyBf99VxtYrut9+TA=
Subject key identifier: E4:0B:54:4E:3A:75:C5:BB:72:41:3F:AC:31:03:BE:74:2B:5E:47:45
Authority key identifier: AA:85:E9:DA:22:27:34:5C:18:AB:D7:E7:52:72:F8:1C:29:B3:0D:1B
Certificate issuer: /CN=aa85e9da2227345c18abd7e75272f81c29b30d1b
Certificate serial: 01974C68C9C31C129C22C52A5C6795D4F6F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoXp2iInNFwYq9fnUnL4HCmzDRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
Manifest number: 1510
Signing time: Sat 07 Jun 2025 22:00:25 +0000
Manifest this update: Sat 07 Jun 2025 22:00:25 +0000
Manifest next update: Sun 08 Jun 2025 22:00:25 +0000
Files and hashes: 1: lVJpe260qGX3e6stTFn772vx8lk.roa (hash: yoxYAKlvQPYmMi4Wc+00BZ6o5xl5cSxpwL5SfaGUG28=)
2: qoXp2iInNFwYq9fnUnL4HCmzDRs.crl (hash: ujUuTC+bm7xVH5o/PbQD8JJZHfM02R3W3WePf90FGno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qoXp2iInNFwYq9fnUnL4HCmzDRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:68:c9:c3:1c:12:9c:22:c5:2a:5c:67:95:d4:f6:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa85e9da2227345c18abd7e75272f81c29b30d1b
Validity
Not Before: Jun 7 22:00:25 2025 GMT
Not After : Jun 8 22:00:25 2025 GMT
Subject: CN=e40b544e3a75c5bb72413fac3103be742b5e4745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c0:bb:2c:dc:67:7a:2d:86:ae:22:b9:29:dc:
7b:2f:cf:e0:ba:ba:5b:ea:d4:e6:11:95:65:24:bd:
c7:e3:be:2b:d6:d0:59:f0:4b:0c:ce:8a:ad:66:e6:
a1:67:26:88:5e:9d:ae:f2:7f:34:78:59:c7:1f:d1:
35:00:9b:a8:b2:20:39:46:46:26:97:82:54:dd:c5:
ff:d0:b2:37:20:43:79:35:7e:1d:76:2e:df:55:11:
3b:0d:57:e6:92:1f:2e:ff:69:26:32:d1:34:72:b6:
4a:97:51:73:54:de:12:2f:2e:99:f0:5c:80:9b:7c:
c4:59:01:96:e7:e1:d7:23:79:91:b9:72:cd:9a:1a:
f4:60:d7:94:46:55:6c:ec:b2:c3:a1:41:a8:9c:46:
35:bb:0f:93:3a:e0:68:84:6b:1b:b2:b4:6f:ef:0e:
d4:cb:62:2c:b6:a4:db:f4:05:8d:ae:a3:b2:03:3d:
7a:c4:bc:d2:4f:b5:90:59:08:fc:b7:10:8a:44:a8:
ae:12:8e:26:2a:59:26:2d:f8:2d:2f:a2:16:e4:99:
6f:94:45:92:52:1d:c5:4c:97:45:06:89:43:f6:99:
49:f4:33:1b:fd:a6:42:15:a4:1e:c2:fa:c1:8b:c3:
fa:82:9f:96:ff:bb:d3:10:a0:65:f4:37:fa:bb:6d:
96:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:0B:54:4E:3A:75:C5:BB:72:41:3F:AC:31:03:BE:74:2B:5E:47:45
X509v3 Authority Key Identifier:
keyid:AA:85:E9:DA:22:27:34:5C:18:AB:D7:E7:52:72:F8:1C:29:B3:0D:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoXp2iInNFwYq9fnUnL4HCmzDRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:48:a1:a5:a1:cf:7f:c6:19:28:08:ae:f3:54:ff:76:a0:08:
65:8d:01:04:6c:14:44:9b:c8:cc:b2:13:2d:d7:fb:82:1f:65:
c2:1d:65:61:40:57:aa:1f:7f:ff:fd:a7:03:a0:ce:d7:b0:83:
a5:42:7a:19:b8:9c:01:f0:0e:c7:fa:91:d8:54:ac:0c:63:47:
70:ed:2a:40:94:bc:92:d4:ed:25:8a:78:37:fa:8c:72:56:be:
64:c9:94:5d:b7:23:47:cc:4b:d3:2c:84:83:74:e3:4c:52:a9:
43:3f:cb:a1:87:76:2f:c2:24:da:cc:e2:29:df:05:66:0b:11:
a0:c1:24:2b:5f:70:b0:78:38:9d:c1:80:36:15:7a:1e:86:74:
2a:ad:a5:18:c4:35:e4:e1:b4:d8:d2:25:0a:db:22:81:38:57:
ac:59:dc:38:46:9d:24:b6:b5:7b:5b:ac:a4:85:ac:bd:fe:68:
4f:87:24:7f:15:33:c0:e4:1f:e9:b7:99:4d:af:50:d7:80:81:
df:35:09:af:a0:7e:2f:60:bc:26:cc:99:2c:f2:cc:ba:ae:5c:
22:75:21:26:d5:d1:8c:f9:98:3e:82:e9:0d:ac:88:b0:2d:fa:
a6:6b:34:71:7d:2e:e5:4f:4d:5b:13:6e:cf:8e:dd:48:44:51:
35:c7:dc:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdMaMnDHBKcIsUqXGeV1PbwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhODVlOWRhMjIyNzM0NWMxOGFiZDdlNzUyNzJmODFjMjli
MzBkMWIwHhcNMjUwNjA3MjIwMDI1WhcNMjUwNjA4MjIwMDI1WjAzMTEwLwYDVQQD
EyhlNDBiNTQ0ZTNhNzVjNWJiNzI0MTNmYWMzMTAzYmU3NDJiNWU0NzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcC7LNxnei2GriK5Kdx7L8/gurpb
6tTmEZVlJL3H474r1tBZ8EsMzoqtZuahZyaIXp2u8n80eFnHH9E1AJuosiA5RkYm
l4JU3cX/0LI3IEN5NX4ddi7fVRE7DVfmkh8u/2kmMtE0crZKl1FzVN4SLy6Z8FyA
m3zEWQGW5+HXI3mRuXLNmhr0YNeURlVs7LLDoUGonEY1uw+TOuBohGsbsrRv7w7U
y2IstqTb9AWNrqOyAz16xLzST7WQWQj8txCKRKiuEo4mKlkmLfgtL6IW5JlvlEWS
Uh3FTJdFBolD9plJ9DMb/aZCFaQewvrBi8P6gp+W/7vTEKBl9Df6u22WNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOQLVE46dcW7ckE/rDEDvnQrXkdFMB8GA1UdIwQY
MBaAFKqF6doiJzRcGKvX51Jy+Bwpsw0bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW9YcDJpSW5ORndZcTlmblVuTDRIQ216RFJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mMmZjMGUtYmJiOS00OTI0LWE4OWMt
NzYyMGRiMjc5OTYyLzEvcW9YcDJpSW5ORndZcTlmblVuTDRIQ216RFJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9mMmZjMGUtYmJiOS00OTI0LWE4OWMtNzYyMGRiMjc5OTYy
LzEvcW9YcDJpSW5ORndZcTlmblVuTDRIQ216RFJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgUihpaHP
f8YZKAiu81T/dqAIZY0BBGwURJvIzLITLdf7gh9lwh1lYUBXqh9///2nA6DO17CD
pUJ6GbicAfAOx/qR2FSsDGNHcO0qQJS8ktTtJYp4N/qMcla+ZMmUXbcjR8xL0yyE
g3TjTFKpQz/LoYd2L8Ik2sziKd8FZgsRoMEkK19wsHg4ncGANhV6HoZ0Kq2lGMQ1
5OG02NIlCtsigThXrFncOEadJLa1e1uspIWsvf5oT4ckfxUzwOQf6beZTa9Q14CB
3zUJr6B+L2C8JsyZLPLMuq5cInUhJtXRjPmYPoLpDayIsC36pms0cX0u5U9NWxNu
z47dSERRNcfcCw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 02:40:38 2025 by rpki-client