Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a666f4-f6cf-4aed-b9bc-451b96afc2b1/1/qqng6Jg9netBVxbWHoyRJRCibCQ.mft
File: qqng6Jg9netBVxbWHoyRJRCibCQ.mft (raw, json)
Hash identifier: sV79gz46HR4qVE9/6fTRGlvFktYhqd2pQ1mUIEq5c44=
Subject key identifier: 9D:D7:40:90:5A:2D:E4:6F:9D:1B:5D:24:D2:7C:1E:F8:2D:93:63:A7
Authority key identifier: AA:A9:E0:E8:98:3D:9D:EB:41:57:16:D6:1E:8C:91:25:10:A2:6C:24
Certificate issuer: /CN=aaa9e0e8983d9deb415716d61e8c912510a26c24
Certificate serial: 019849657130B802B08A3ACC1CAC2B095935
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqng6Jg9netBVxbWHoyRJRCibCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a666f4-f6cf-4aed-b9bc-451b96afc2b1/1/qqng6Jg9netBVxbWHoyRJRCibCQ.mft
Manifest number: 0146
Signing time: Sun 27 Jul 2025 01:00:41 +0000
Manifest this update: Sun 27 Jul 2025 01:00:41 +0000
Manifest next update: Mon 28 Jul 2025 01:00:41 +0000
Files and hashes: 1: qqng6Jg9netBVxbWHoyRJRCibCQ.crl (hash: +9J+P3cLUbbBw55Xc/dT6TkpITYvvn3uT6PWb+U9V7k=)
2: wSW6JHry9aEuEbZj9sUvZUmXDYs.roa (hash: chgjDOS+AVkY8OsmOxsnvb6k6+1kPmgvTXMxVKADzP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/a666f4-f6cf-4aed-b9bc-451b96afc2b1/1/qqng6Jg9netBVxbWHoyRJRCibCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/a666f4-f6cf-4aed-b9bc-451b96afc2b1/1/qqng6Jg9netBVxbWHoyRJRCibCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qqng6Jg9netBVxbWHoyRJRCibCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:71:30:b8:02:b0:8a:3a:cc:1c:ac:2b:09:59:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaa9e0e8983d9deb415716d61e8c912510a26c24
Validity
Not Before: Jul 27 01:00:41 2025 GMT
Not After : Jul 28 01:00:41 2025 GMT
Subject: CN=9dd740905a2de46f9d1b5d24d27c1ef82d9363a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:08:52:da:42:5e:8f:a9:14:42:1b:9c:a1:1f:
f1:90:8c:3a:e7:4a:ca:a7:7f:a0:53:de:e4:74:f3:
63:c1:d3:69:7c:e5:73:70:b6:97:2c:82:41:ab:38:
39:1d:9d:b5:ee:7d:03:3f:cb:c9:f5:4f:ef:4e:65:
b7:df:e0:c9:01:93:d6:26:e9:b9:b8:25:a8:68:13:
d4:8d:5c:b1:8b:e8:75:76:24:63:a0:a0:a8:ab:b7:
86:bc:0b:da:03:20:e5:19:72:f0:45:d0:68:7e:fe:
f9:38:fa:e0:45:77:50:ba:25:31:77:e1:1d:7c:96:
57:fd:6d:80:f3:c7:ba:01:a0:c9:5a:fe:c5:dd:e5:
b3:de:49:fd:4a:dc:c3:24:f5:4b:46:b7:61:5d:12:
0e:bf:73:69:d4:97:2b:db:e6:fe:3c:2d:22:dc:e6:
f0:7f:7e:83:58:eb:15:c6:9b:35:34:ec:9b:6d:7d:
19:38:1a:86:2b:9b:40:fb:53:82:e5:24:23:19:9f:
01:d3:53:63:8f:04:d0:64:ba:37:90:85:91:0a:5a:
a1:97:e7:c8:22:db:a0:53:fb:6d:b8:cd:4b:bd:c8:
be:a4:c6:65:7b:d0:1b:aa:3f:82:d7:47:48:d5:e4:
49:2c:cf:32:74:97:ab:6e:b1:3d:da:f9:2b:1a:5d:
d9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D7:40:90:5A:2D:E4:6F:9D:1B:5D:24:D2:7C:1E:F8:2D:93:63:A7
X509v3 Authority Key Identifier:
keyid:AA:A9:E0:E8:98:3D:9D:EB:41:57:16:D6:1E:8C:91:25:10:A2:6C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqng6Jg9netBVxbWHoyRJRCibCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a666f4-f6cf-4aed-b9bc-451b96afc2b1/1/qqng6Jg9netBVxbWHoyRJRCibCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a666f4-f6cf-4aed-b9bc-451b96afc2b1/1/qqng6Jg9netBVxbWHoyRJRCibCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:7b:c9:15:a8:34:28:46:6a:51:cd:e6:0f:c7:73:2a:ac:fa:
7c:4a:b0:39:35:e4:34:84:09:d4:db:3b:56:f5:f3:d5:ab:ad:
e1:8c:c5:1b:49:23:a7:04:ff:72:d7:97:5d:da:27:0f:f8:bd:
da:01:b8:e9:e1:2f:fb:89:d8:8d:8e:f0:88:74:7c:40:b7:cd:
cf:9b:e1:03:c4:8a:ec:65:74:73:cb:12:00:01:38:30:24:d5:
8f:ce:a0:be:f5:2e:c0:98:58:bb:8f:c2:2a:42:3d:05:d6:9b:
94:0b:47:ee:c3:f4:60:22:c4:14:30:90:12:dd:37:ec:f3:34:
e6:0d:15:c7:42:75:4b:c3:56:b4:e6:2c:1e:c6:e5:1e:c7:81:
e6:de:e2:46:7e:5c:0b:12:e2:4d:39:76:76:c6:49:ac:d9:82:
6c:6b:e0:89:ab:5d:cb:be:d5:7f:fe:bf:43:cb:f8:55:15:cb:
e8:5d:db:95:f0:6f:56:7c:cf:d3:57:05:96:1b:41:06:24:ec:
0f:ea:46:d2:d4:28:12:8e:55:fe:68:4d:34:90:0e:64:e6:85:
57:85:70:ed:16:81:eb:a0:39:85:31:fe:fa:66:9b:0f:93:03:
79:cb:0a:05:c8:5b:ff:da:0a:1d:75:84:2e:94:73:fb:97:59:
f0:9d:fc:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZXEwuAKwijrMHKwrCVk1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhYTllMGU4OTgzZDlkZWI0MTU3MTZkNjFlOGM5MTI1MTBh
MjZjMjQwHhcNMjUwNzI3MDEwMDQxWhcNMjUwNzI4MDEwMDQxWjAzMTEwLwYDVQQD
Eyg5ZGQ3NDA5MDVhMmRlNDZmOWQxYjVkMjRkMjdjMWVmODJkOTM2M2E3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQhS2kJej6kUQhucoR/xkIw650rK
p3+gU97kdPNjwdNpfOVzcLaXLIJBqzg5HZ217n0DP8vJ9U/vTmW33+DJAZPWJum5
uCWoaBPUjVyxi+h1diRjoKCoq7eGvAvaAyDlGXLwRdBofv75OPrgRXdQuiUxd+Ed
fJZX/W2A88e6AaDJWv7F3eWz3kn9StzDJPVLRrdhXRIOv3Np1Jcr2+b+PC0i3Obw
f36DWOsVxps1NOybbX0ZOBqGK5tA+1OC5SQjGZ8B01NjjwTQZLo3kIWRClqhl+fI
ItugU/ttuM1Lvci+pMZle9Abqj+C10dI1eRJLM8ydJerbrE92vkrGl3ZHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ3XQJBaLeRvnRtdJNJ8Hvgtk2OnMB8GA1UdIwQY
MBaAFKqp4OiYPZ3rQVcW1h6MkSUQomwkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXFuZzZKZzluZXRCVnhiV0hveVJKUkNpYkNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9hNjY2ZjQtZjZjZi00YWVkLWI5YmMt
NDUxYjk2YWZjMmIxLzEvcXFuZzZKZzluZXRCVnhiV0hveVJKUkNpYkNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9hNjY2ZjQtZjZjZi00YWVkLWI5YmMtNDUxYjk2YWZjMmIx
LzEvcXFuZzZKZzluZXRCVnhiV0hveVJKUkNpYkNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd3vJFag0
KEZqUc3mD8dzKqz6fEqwOTXkNIQJ1Ns7VvXz1aut4YzFG0kjpwT/cteXXdonD/i9
2gG46eEv+4nYjY7wiHR8QLfNz5vhA8SK7GV0c8sSAAE4MCTVj86gvvUuwJhYu4/C
KkI9BdablAtH7sP0YCLEFDCQEt037PM05g0Vx0J1S8NWtOYsHsblHseB5t7iRn5c
CxLiTTl2dsZJrNmCbGvgiatdy77Vf/6/Q8v4VRXL6F3blfBvVnzP01cFlhtBBiTs
D+pG0tQoEo5V/mhNNJAOZOaFV4Vw7RaB66A5hTH++mabD5MDecsKBchb/9oKHXWE
LpRz+5dZ8J38Og==
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:25:33 2025 by rpki-client