Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
File: qoXp2iInNFwYq9fnUnL4HCmzDRs.mft (raw, json)
Hash identifier: qK+SHpDqgaQ76nkPFLOAJZyM6EzcBmOGKHWWQvzZm9w=
Subject key identifier: DE:97:76:D0:72:C8:D6:B1:6F:6C:44:B5:69:40:34:19:CF:6F:9C:37
Authority key identifier: AA:85:E9:DA:22:27:34:5C:18:AB:D7:E7:52:72:F8:1C:29:B3:0D:1B
Certificate issuer: /CN=aa85e9da2227345c18abd7e75272f81c29b30d1b
Certificate serial: 01993123884DF888A855B8CDA1349F24E49E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoXp2iInNFwYq9fnUnL4HCmzDRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
Manifest number: 160B
Signing time: Wed 10 Sep 2025 01:00:36 +0000
Manifest this update: Wed 10 Sep 2025 01:00:36 +0000
Manifest next update: Thu 11 Sep 2025 01:00:36 +0000
Files and hashes: 1: lVJpe260qGX3e6stTFn772vx8lk.roa (hash: yoxYAKlvQPYmMi4Wc+00BZ6o5xl5cSxpwL5SfaGUG28=)
2: qoXp2iInNFwYq9fnUnL4HCmzDRs.crl (hash: 8N6KsF7XMbIAFhu+4LoPmoKTvyyDp0xzJIpniEApZ5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qoXp2iInNFwYq9fnUnL4HCmzDRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 01:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:23:88:4d:f8:88:a8:55:b8:cd:a1:34:9f:24:e4:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa85e9da2227345c18abd7e75272f81c29b30d1b
Validity
Not Before: Sep 10 01:00:36 2025 GMT
Not After : Sep 11 01:00:36 2025 GMT
Subject: CN=de9776d072c8d6b16f6c44b569403419cf6f9c37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1d:a0:8a:b9:86:21:86:e7:6f:1e:aa:e3:49:
51:e4:b3:70:57:d4:84:4c:95:8e:0f:c4:e3:0c:03:
c8:21:29:bd:ed:5c:e1:51:ca:dd:8a:ab:6b:29:b4:
78:a3:a3:95:55:87:a8:9f:8a:e9:8a:b6:57:45:d0:
7e:88:0c:a8:ec:74:d8:24:e3:1f:7d:74:2f:1b:4b:
58:1d:f2:14:89:be:46:87:89:91:d9:b9:73:b3:ab:
e9:38:8c:9f:7c:06:54:44:77:96:23:6c:58:a5:f6:
cf:3c:e4:2d:11:61:66:e2:20:8d:d3:3f:a4:3d:b6:
24:6f:53:8c:c4:c3:bf:4b:1e:c8:d9:77:33:37:6e:
38:02:50:da:29:28:83:6d:1a:2a:8e:ce:8d:42:14:
e5:de:a7:89:92:6a:95:22:58:f3:1c:d4:a0:c5:89:
86:2e:5c:cf:13:69:ae:6f:96:8b:57:9f:19:0b:9e:
a4:c9:6e:9d:44:e7:f5:48:e2:13:d0:67:c1:00:37:
82:6a:ea:8a:23:99:81:7d:2d:68:a1:d9:d8:8b:2c:
55:aa:37:61:55:be:0f:15:5c:c4:fc:9a:db:61:5c:
94:0c:b8:a7:a5:a2:ee:44:19:06:79:a0:b7:48:51:
07:5d:02:8c:3d:4e:9c:82:05:eb:0e:8e:26:be:89:
6f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:97:76:D0:72:C8:D6:B1:6F:6C:44:B5:69:40:34:19:CF:6F:9C:37
X509v3 Authority Key Identifier:
keyid:AA:85:E9:DA:22:27:34:5C:18:AB:D7:E7:52:72:F8:1C:29:B3:0D:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoXp2iInNFwYq9fnUnL4HCmzDRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:d3:15:8d:19:18:ab:dd:fc:87:89:05:58:4c:85:5d:32:85:
fb:73:28:0c:4c:7a:cf:0c:8c:81:0f:00:64:2a:61:cc:ed:56:
fd:fe:08:5f:85:9a:6e:81:d9:4d:5b:39:f3:ac:f4:6c:38:99:
f1:31:ff:3d:38:ca:4f:5e:4a:e4:f6:03:53:e2:cb:95:af:c2:
e7:85:3e:db:78:39:8b:0d:6a:cd:2e:ad:b8:27:65:6e:eb:26:
ec:0b:02:2a:d9:2f:ec:41:c6:72:96:07:ac:02:70:e5:18:98:
39:84:5e:54:e0:62:e7:c5:81:37:69:58:ac:f5:84:27:a2:45:
96:c1:67:94:76:3f:9e:b2:f8:49:7a:2c:43:c9:d3:6e:23:69:
26:49:89:dc:83:0d:0c:a9:4a:2b:cf:54:a8:48:81:c0:2d:aa:
30:76:fa:6a:41:67:18:8c:08:99:dd:1e:9a:d1:aa:94:cd:2d:
8c:57:fb:ba:ff:91:82:c5:d7:91:40:0d:ae:85:5d:ac:4b:9a:
8b:ac:aa:d3:ba:8a:1f:df:db:02:0f:35:20:72:22:4f:d8:a6:
37:12:2d:52:2a:84:f4:5a:fd:e4:04:a8:fa:1d:49:36:ad:f4:
29:84:62:f3:24:8a:06:5c:ce:80:43:99:aa:39:8a:f4:5a:e0:
7a:de:81:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 10:06:17 2025 by rpki-client