Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/64ae5a-8622-45e2-9327-512f565ac011/1/qqbmeSWCHkuHnIA-wKUiRflnOtA.mft
File: qqbmeSWCHkuHnIA-wKUiRflnOtA.mft (raw, json)
Hash identifier: VXC9HFksXE33Kf2gzkoxy1XJw1ZMXcGUhig3MOyJxN8=
Subject key identifier: 76:31:34:C1:56:FA:BA:2C:4A:EE:B2:00:C1:5D:F1:AE:56:F9:2D:A2
Authority key identifier: AA:A6:E6:79:25:82:1E:4B:87:9C:80:3E:C0:A5:22:45:F9:67:3A:D0
Certificate issuer: /CN=aaa6e67925821e4b879c803ec0a52245f9673ad0
Certificate serial: 019A71EE72905470F30D3417736381842FFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqbmeSWCHkuHnIA-wKUiRflnOtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/64ae5a-8622-45e2-9327-512f565ac011/1/qqbmeSWCHkuHnIA-wKUiRflnOtA.mft
Manifest number: 04C1
Signing time: Tue 11 Nov 2025 08:00:43 +0000
Manifest this update: Tue 11 Nov 2025 08:00:43 +0000
Manifest next update: Wed 12 Nov 2025 08:00:43 +0000
Files and hashes: 1: qqbmeSWCHkuHnIA-wKUiRflnOtA.crl (hash: kmuZbdaTb84rwvVKVCqVs8BlF8N0jsvt38FWvQSC7Ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/64ae5a-8622-45e2-9327-512f565ac011/1/qqbmeSWCHkuHnIA-wKUiRflnOtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/64ae5a-8622-45e2-9327-512f565ac011/1/qqbmeSWCHkuHnIA-wKUiRflnOtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qqbmeSWCHkuHnIA-wKUiRflnOtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:72:90:54:70:f3:0d:34:17:73:63:81:84:2f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaa6e67925821e4b879c803ec0a52245f9673ad0
Validity
Not Before: Nov 11 08:00:43 2025 GMT
Not After : Nov 12 08:00:43 2025 GMT
Subject: CN=763134c156faba2c4aeeb200c15df1ae56f92da2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a5:31:73:c2:04:ef:4d:a2:51:c9:76:a6:77:
65:75:f4:79:15:c1:02:47:10:70:e1:e7:6c:84:d4:
48:59:cd:fb:0d:49:28:8c:6b:eb:df:38:da:9b:ee:
6b:e1:cb:ea:d6:2c:8c:6f:a5:9a:a6:9d:3d:c4:62:
8e:19:36:00:be:c6:c3:12:8a:d8:d1:e1:71:52:a5:
ec:1d:a8:af:a2:53:fc:93:ce:13:38:26:61:f6:42:
cc:fc:43:a7:49:ad:70:a3:84:e4:6c:1e:42:fd:40:
80:1b:49:b5:fd:1b:21:6f:c0:24:d3:34:91:6e:f2:
fa:38:3f:40:bb:49:db:d2:45:14:02:92:1b:dd:68:
d3:1d:8c:a8:3d:ac:64:ee:07:c2:05:41:a1:dc:65:
6c:7d:ad:d6:e4:d3:a2:93:d4:96:0d:98:14:9a:49:
09:c2:db:2d:80:6a:67:e4:61:a3:0d:69:f5:fc:76:
30:7e:2f:d6:0b:48:55:3c:35:28:ce:e4:28:6b:6a:
70:44:23:2e:6f:48:e1:88:4e:ab:53:65:c2:a6:a4:
c7:13:bf:5f:96:c5:d6:41:3d:87:02:73:5b:ed:41:
57:10:75:74:4d:d2:34:52:2a:57:81:ba:59:6d:0f:
d0:64:ce:ca:75:80:67:30:f7:0e:5c:31:ce:c1:d7:
3b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:31:34:C1:56:FA:BA:2C:4A:EE:B2:00:C1:5D:F1:AE:56:F9:2D:A2
X509v3 Authority Key Identifier:
keyid:AA:A6:E6:79:25:82:1E:4B:87:9C:80:3E:C0:A5:22:45:F9:67:3A:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqbmeSWCHkuHnIA-wKUiRflnOtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/64ae5a-8622-45e2-9327-512f565ac011/1/qqbmeSWCHkuHnIA-wKUiRflnOtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/64ae5a-8622-45e2-9327-512f565ac011/1/qqbmeSWCHkuHnIA-wKUiRflnOtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:30:ef:fd:34:12:1a:cf:d6:ca:5e:d7:9c:e4:18:51:5a:f2:
b4:62:7c:21:70:8d:c4:bb:f1:18:25:7c:0d:9a:2a:92:bc:1e:
e3:2a:6f:1a:2e:c6:d7:c5:3b:b2:75:aa:fd:06:02:87:65:e1:
b6:3c:a2:89:7f:84:9d:f4:35:b3:8e:41:18:53:bb:e5:07:df:
5a:f8:fa:c3:11:6f:42:2f:63:b4:75:cd:12:af:21:18:01:55:
6d:d8:7a:ad:54:2b:df:95:53:38:c7:2f:ca:89:69:9e:1f:5a:
63:89:d8:49:80:56:e5:20:e4:19:29:39:75:b7:8d:66:0e:c6:
c6:04:63:ea:b8:ac:8f:f9:f6:ef:5d:63:f7:f4:b1:25:4f:41:
44:40:b6:94:f6:8e:a8:35:b2:62:76:f3:a5:a3:5d:74:8c:ff:
c1:2e:f9:c0:8b:cf:86:7d:97:8c:0e:55:35:a5:cf:a3:35:02:
1f:9c:36:76:b2:cb:e2:c9:39:3a:95:b2:41:0a:62:44:09:13:
a8:7a:82:ae:8c:48:ff:28:52:2e:ad:c7:89:4c:41:59:c9:43:
9c:dc:2b:91:79:ec:50:50:ae:3c:d6:9d:a9:45:c9:e2:67:dd:
eb:af:8f:ec:7d:0f:f8:6c:c3:65:59:21:25:75:3d:8b:d5:e8:
e6:2c:d6:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:44:21 2025 by rpki-client