Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/64ae5a-8622-45e2-9327-512f565ac011/1/qqbmeSWCHkuHnIA-wKUiRflnOtA.mft
File: qqbmeSWCHkuHnIA-wKUiRflnOtA.mft (raw, json)
Hash identifier: FG93pxII44R7qiBPsJKoVVCrG7TL5v9rT1nSIWZat+M=
Subject key identifier: F2:CC:7F:95:C4:9F:97:4D:0B:5F:EB:77:C9:51:0D:B9:7F:75:EE:CF
Authority key identifier: AA:A6:E6:79:25:82:1E:4B:87:9C:80:3E:C0:A5:22:45:F9:67:3A:D0
Certificate issuer: /CN=aaa6e67925821e4b879c803ec0a52245f9673ad0
Certificate serial: 019921E774960864B8752A834838468FF23F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqbmeSWCHkuHnIA-wKUiRflnOtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/64ae5a-8622-45e2-9327-512f565ac011/1/qqbmeSWCHkuHnIA-wKUiRflnOtA.mft
Manifest number: 0413
Signing time: Sun 07 Sep 2025 02:00:40 +0000
Manifest this update: Sun 07 Sep 2025 02:00:40 +0000
Manifest next update: Mon 08 Sep 2025 02:00:40 +0000
Files and hashes: 1: qqbmeSWCHkuHnIA-wKUiRflnOtA.crl (hash: IN62ntZvwBCH8IeicU3OmUleIU86JaFmJbmwmfHNTnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/64ae5a-8622-45e2-9327-512f565ac011/1/qqbmeSWCHkuHnIA-wKUiRflnOtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/64ae5a-8622-45e2-9327-512f565ac011/1/qqbmeSWCHkuHnIA-wKUiRflnOtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qqbmeSWCHkuHnIA-wKUiRflnOtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:74:96:08:64:b8:75:2a:83:48:38:46:8f:f2:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaa6e67925821e4b879c803ec0a52245f9673ad0
Validity
Not Before: Sep 7 02:00:40 2025 GMT
Not After : Sep 8 02:00:40 2025 GMT
Subject: CN=f2cc7f95c49f974d0b5feb77c9510db97f75eecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:89:ca:6f:fa:99:76:6c:3a:67:71:7f:f3:d9:
22:3a:8e:12:55:14:f6:7c:bb:1f:3f:44:c7:87:f4:
6a:12:75:1a:12:4d:f0:be:43:44:58:ad:0b:19:16:
8b:76:db:89:5e:60:37:bd:51:53:4c:40:3b:be:f9:
2e:c3:34:a1:74:70:3d:49:b9:c6:48:34:11:2e:21:
1a:9b:b5:6d:5d:55:07:63:81:cb:f7:17:6e:7e:22:
46:4d:bd:c2:a0:3e:8b:e1:e0:ec:de:50:d4:af:41:
0f:68:1b:6a:c5:80:b8:b6:c0:cb:d6:32:34:63:cb:
27:b1:95:a9:90:19:7f:47:fb:9d:8b:60:b0:52:81:
09:1e:84:9a:24:79:ab:f2:78:4f:c8:c4:08:37:ed:
56:fb:52:eb:05:a1:d5:8d:e1:14:3e:68:ca:b6:96:
33:75:b9:32:e9:0b:ac:86:18:81:d0:e8:1c:c5:e2:
d9:cb:14:45:f8:f2:66:3d:bf:d8:6a:05:4e:6b:61:
16:8d:19:b0:f5:cd:56:8b:a5:5f:85:77:31:dc:7d:
08:75:45:c1:2e:9a:c2:72:88:ef:f2:08:f4:93:0f:
c0:09:16:43:a6:67:cf:21:9d:1e:cf:58:62:d1:7e:
0c:98:83:70:aa:6f:e4:39:0a:c5:2f:de:22:3d:70:
22:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:CC:7F:95:C4:9F:97:4D:0B:5F:EB:77:C9:51:0D:B9:7F:75:EE:CF
X509v3 Authority Key Identifier:
keyid:AA:A6:E6:79:25:82:1E:4B:87:9C:80:3E:C0:A5:22:45:F9:67:3A:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqbmeSWCHkuHnIA-wKUiRflnOtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/64ae5a-8622-45e2-9327-512f565ac011/1/qqbmeSWCHkuHnIA-wKUiRflnOtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/64ae5a-8622-45e2-9327-512f565ac011/1/qqbmeSWCHkuHnIA-wKUiRflnOtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:41:57:93:57:61:a8:9b:c3:33:ed:6c:5a:16:48:5b:ae:23:
e5:70:70:1c:64:e2:bd:14:c8:e3:82:88:8f:30:c3:7d:e0:f0:
1a:a0:51:11:e7:6d:3a:c0:35:2a:3b:c4:66:52:32:ad:1e:46:
c9:5f:b2:bd:0a:6f:62:34:74:9e:d5:0c:f9:25:66:48:2b:5f:
45:9a:91:e3:61:22:b7:a6:77:1f:c7:5f:4c:b7:26:ea:dc:05:
a6:66:34:5c:fb:d8:22:67:c3:95:23:68:41:7a:af:d4:f6:17:
8f:34:58:3d:05:24:af:d3:18:e7:da:61:db:45:f5:ec:e1:2c:
51:e0:d5:b6:69:65:05:ba:dd:da:b7:d0:78:f1:72:74:8e:07:
31:26:98:f5:df:a1:e6:ac:72:b0:de:2d:3b:9d:18:31:3d:4f:
a1:37:3c:3b:a4:e7:86:6e:60:66:fb:ee:4b:d2:41:1f:3d:dd:
58:19:f3:08:ea:78:de:e1:7a:43:d3:e0:30:8a:5c:d5:16:cd:
42:16:d6:3e:08:76:54:fa:e1:7b:95:f3:7a:58:f8:75:83:aa:
70:df:86:42:87:56:ed:8b:81:5e:bd:56:70:55:96:aa:5e:8c:
e3:61:d1:21:da:5e:6e:76:81:43:59:0f:f7:e9:41:42:91:c5:
f9:e6:35:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:08:18 2025 by rpki-client