Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
File: mQqAlo5MlgPKKxPdHRRlll2PPb8.mft (raw, json)
Hash identifier: WPl2oNJsVdjBw1l583tCQzmNHPEBSWYClnYUC3TTvyY=
Subject key identifier: 52:D3:46:53:4F:A8:87:73:21:46:62:CC:EA:B5:69:41:12:D5:EC:01
Authority key identifier: 99:0A:80:96:8E:4C:96:03:CA:2B:13:DD:1D:14:65:96:5D:8F:3D:BF
Certificate issuer: /CN=990a80968e4c9603ca2b13dd1d1465965d8f3dbf
Certificate serial: 019A22F78026E2E4C9FCA13B2E1209D4AAA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQqAlo5MlgPKKxPdHRRlll2PPb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
Manifest number: 16F7
Signing time: Mon 27 Oct 2025 00:00:36 +0000
Manifest this update: Mon 27 Oct 2025 00:00:36 +0000
Manifest next update: Tue 28 Oct 2025 00:00:36 +0000
Files and hashes: 1: Hcqbxc0FBGXnzzN6vZTEDk24h2s.roa (hash: 17n/7XCLJpAu2o2kBzK/5NmH6Sp4FBInaBa6mT4JmYc=)
2: W1ibYg0ozN5f0hkwbRX6gypQu6o.roa (hash: Q9hgjCdv4TipN26ttaTBJrYXDexn3QBOgW7gbPj7Hi8=)
3: mQqAlo5MlgPKKxPdHRRlll2PPb8.crl (hash: NfC3jay58cxggFHjuDd/vd4Lmvn8GSffc7fMA3mAwDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQqAlo5MlgPKKxPdHRRlll2PPb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 00:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:f7:80:26:e2:e4:c9:fc:a1:3b:2e:12:09:d4:aa:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=990a80968e4c9603ca2b13dd1d1465965d8f3dbf
Validity
Not Before: Oct 27 00:00:36 2025 GMT
Not After : Oct 28 00:00:36 2025 GMT
Subject: CN=52d346534fa88773214662cceab5694112d5ec01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:51:6c:6a:7a:7f:30:3b:88:3f:3e:d8:c7:5c:
32:ac:f8:07:bd:51:10:1a:06:aa:3c:fa:d5:f6:42:
7d:77:cf:26:7b:e3:f9:7e:6d:d1:ab:02:14:a6:a8:
c9:a9:42:1f:c3:9d:80:02:8f:4c:04:ad:34:26:e0:
ec:32:0e:e9:0e:a2:4a:d6:88:70:c9:1a:a4:5b:15:
4f:ae:59:cf:af:f9:9e:fd:11:61:c2:cd:01:2e:08:
ce:42:c9:19:b0:d1:aa:92:06:f8:b1:87:6e:ba:40:
33:d9:c9:03:dd:82:18:e6:b8:bb:d9:d1:cb:82:98:
65:1e:5f:4c:f0:1d:32:25:fa:f1:42:0b:cf:1e:4b:
3e:6e:f0:fa:48:e5:28:12:fb:30:53:f1:9f:61:8b:
40:10:f4:bb:d2:60:ff:6c:8f:f7:0d:cb:dc:87:66:
cd:9f:53:fc:eb:b6:1e:e0:d8:c5:83:58:d7:2d:29:
e3:cf:60:c5:20:82:f7:7f:26:1f:f1:de:ca:ad:18:
d1:b7:73:5a:d9:d7:4a:13:6e:55:a6:23:1a:99:7e:
bf:8a:ad:d4:1c:2b:d5:37:09:49:11:b4:ae:d2:57:
29:bb:cc:11:7d:c0:a4:55:4a:e6:34:7e:c9:2c:39:
44:b8:1d:d0:95:da:36:f3:d9:39:2d:27:73:c7:2e:
8b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D3:46:53:4F:A8:87:73:21:46:62:CC:EA:B5:69:41:12:D5:EC:01
X509v3 Authority Key Identifier:
keyid:99:0A:80:96:8E:4C:96:03:CA:2B:13:DD:1D:14:65:96:5D:8F:3D:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQqAlo5MlgPKKxPdHRRlll2PPb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:9f:44:ca:c7:bc:0f:93:67:3c:4a:27:9c:35:54:b5:c2:32:
40:ff:d4:78:36:76:ed:0e:6b:82:8d:18:a7:0f:34:fe:63:b1:
4f:7a:d8:8d:22:24:e0:bc:64:cb:32:4a:ff:01:63:ba:58:b6:
85:da:84:74:a8:26:e4:e3:2b:76:77:fe:48:28:83:ce:b0:09:
94:0e:31:2a:90:9f:21:91:e5:eb:17:92:e5:7d:ef:80:11:bd:
5f:68:56:3b:a0:1b:71:04:92:dd:93:e8:c5:b3:ed:09:cd:9b:
55:b0:47:dd:45:fc:53:15:9f:25:68:f5:5d:91:be:23:6d:d6:
8a:10:fc:5c:50:a9:43:de:7f:ab:cd:21:b1:c7:24:c4:34:40:
6c:6f:23:54:41:71:57:76:2b:c5:aa:ea:bb:96:ea:e1:9f:b3:
98:23:45:d5:48:29:7b:e4:87:bf:aa:8a:9e:1f:92:3f:d4:84:
42:2c:6e:95:b2:fd:fb:44:94:10:51:52:51:f8:46:cd:23:bb:
f0:b3:75:e6:dc:80:28:9d:c2:76:28:dc:b8:99:a7:7b:5b:d3:
67:d9:d4:60:a3:44:ab:83:69:c5:10:ba:78:84:f3:14:de:1e:
5b:fd:5e:ee:8a:6e:f5:c1:72:70:ca:cf:b9:08:95:f5:4f:6e:
d5:8a:22:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 09:23:36 2025 by rpki-client