Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/c989ab-840c-4023-b842-ab3bdf8e5c48/1/Qqq-41QockWGZCkvpZLj914autQ.mft
File: Qqq-41QockWGZCkvpZLj914autQ.mft (raw, json)
Hash identifier: 2vAcKRkejtI1HUNOefgWn2ehPlUirNYZq/BuepJUsZA=
Subject key identifier: 26:38:CB:95:6D:B3:52:3C:BA:FB:97:67:BA:FC:CD:48:D6:34:9E:17
Authority key identifier: 42:AA:BE:E3:54:28:72:45:86:64:29:2F:A5:92:E3:F7:5E:1A:BA:D4
Certificate issuer: /CN=42aabee3542872458664292fa592e3f75e1abad4
Certificate serial: 0199239FF2719DF9061CDB2545EEA7040BEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qqq-41QockWGZCkvpZLj914autQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/c989ab-840c-4023-b842-ab3bdf8e5c48/1/Qqq-41QockWGZCkvpZLj914autQ.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 10:01:48 +0000
Manifest this update: Sun 07 Sep 2025 10:01:48 +0000
Manifest next update: Mon 08 Sep 2025 10:01:48 +0000
Files and hashes: 1: MSireW0ZSFLXi4hZyDwzhEe__YU.roa (hash: O2aKsS3fIrh6CwQIbUewE6uyCkwWy633kqbyFiBkW04=)
2: Qqq-41QockWGZCkvpZLj914autQ.crl (hash: fi13XHT+dPa/Psj+trfQTd3pOfUZ4pN0uzQgfgQVw/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/c989ab-840c-4023-b842-ab3bdf8e5c48/1/Qqq-41QockWGZCkvpZLj914autQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/c989ab-840c-4023-b842-ab3bdf8e5c48/1/Qqq-41QockWGZCkvpZLj914autQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qqq-41QockWGZCkvpZLj914autQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:f2:71:9d:f9:06:1c:db:25:45:ee:a7:04:0b:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42aabee3542872458664292fa592e3f75e1abad4
Validity
Not Before: Sep 7 10:01:48 2025 GMT
Not After : Sep 8 10:01:48 2025 GMT
Subject: CN=2638cb956db3523cbafb9767bafccd48d6349e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:83:77:1e:f9:d0:d8:b4:d9:67:1b:b6:62:13:
e5:5a:db:8e:4c:2d:c6:78:92:16:b2:d6:af:d1:4a:
4d:1b:d3:5b:c5:d1:4f:96:7f:94:f7:51:27:e1:38:
03:27:28:05:1a:f5:05:67:19:17:4e:4a:db:d3:cd:
41:3e:fd:98:33:f3:c4:ba:63:87:0c:95:ac:e9:f7:
08:d5:82:02:59:b6:1e:ac:e7:d8:c2:10:ba:f9:23:
4e:9f:d7:24:76:4c:0a:d6:0f:6a:0c:87:ff:c2:97:
62:8e:fc:96:21:7b:29:e5:3d:2e:66:c4:f4:5c:57:
c9:7f:65:2a:82:63:1a:c9:c4:eb:74:64:a3:38:6f:
a6:3b:66:97:7e:7a:e5:5a:96:a8:15:49:db:a9:89:
66:7b:21:c5:8b:ec:4b:8b:8a:cd:7b:73:22:98:e1:
7a:20:23:de:aa:89:f7:7c:7a:2b:a5:3e:e6:3f:88:
26:33:55:d7:36:e1:69:c7:44:66:09:db:c0:43:93:
91:d6:81:af:70:65:f0:c5:74:af:50:59:07:27:0e:
f8:0f:8c:23:fc:aa:cb:2f:a8:06:78:9f:87:15:37:
49:77:7e:d4:e8:9f:5a:1a:8f:e5:66:38:33:e7:7d:
d1:0d:bf:d9:d4:43:fc:71:a9:9c:5f:47:38:c3:cb:
f5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:38:CB:95:6D:B3:52:3C:BA:FB:97:67:BA:FC:CD:48:D6:34:9E:17
X509v3 Authority Key Identifier:
keyid:42:AA:BE:E3:54:28:72:45:86:64:29:2F:A5:92:E3:F7:5E:1A:BA:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qqq-41QockWGZCkvpZLj914autQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/c989ab-840c-4023-b842-ab3bdf8e5c48/1/Qqq-41QockWGZCkvpZLj914autQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/c989ab-840c-4023-b842-ab3bdf8e5c48/1/Qqq-41QockWGZCkvpZLj914autQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:80:08:fa:61:88:0a:44:b3:70:97:77:05:bb:04:28:33:73:
bd:cf:12:35:49:cc:24:2b:06:74:83:7c:45:f3:b5:24:08:bd:
3e:ec:f8:80:a2:f9:b3:ed:d3:2e:8c:6b:87:99:29:9c:4d:be:
7f:93:12:95:29:18:ef:7d:d6:02:a5:d5:6d:5d:d2:24:9c:72:
96:7c:52:f3:bc:62:24:bb:90:1f:d0:e7:7b:68:df:3d:0f:cb:
ed:61:d4:de:aa:17:4d:9d:6e:50:69:73:51:4f:4e:a0:cb:70:
85:5b:3c:2c:f8:b4:32:98:66:4e:a6:11:60:16:b0:a1:c1:0a:
7d:29:f5:03:0f:0b:a7:0e:6b:e4:48:3d:ce:d3:e2:f4:8d:00:
39:2c:75:9f:49:22:5a:7b:a9:34:e6:ab:c0:2a:c6:3a:7e:e6:
86:dd:3c:40:d0:c3:2f:58:cb:8a:2e:5c:e3:74:a8:c7:90:a1:
48:87:2d:d4:d0:41:88:af:f3:0d:e3:9a:c9:69:21:d9:fc:b7:
1c:fb:53:35:c2:77:9c:9c:65:37:38:ce:25:99:ce:84:ea:6f:
93:0e:46:f0:c3:57:d6:e7:18:d2:22:9c:44:b8:40:e1:e1:eb:
20:97:e7:9b:3e:5d:c5:07:42:c1:cf:11:8c:2b:8f:fd:63:cd:
c4:2e:c6:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:24:27 2025 by rpki-client