Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a666f4-f6cf-4aed-b9bc-451b96afc2b1/1/qqng6Jg9netBVxbWHoyRJRCibCQ.mft
File: qqng6Jg9netBVxbWHoyRJRCibCQ.mft (raw, json)
Hash identifier: nhTQtTBCd6cYk88h20mzdhKjhCSXtI8Z9/M8UeN3uw8=
Subject key identifier: 85:65:2E:BA:E8:7F:14:52:79:5D:14:6D:5D:4F:65:5B:33:4D:DD:38
Authority key identifier: AA:A9:E0:E8:98:3D:9D:EB:41:57:16:D6:1E:8C:91:25:10:A2:6C:24
Certificate issuer: /CN=aaa9e0e8983d9deb415716d61e8c912510a26c24
Certificate serial: 019A71B8839EC9E1837CC07AD82D0AA5E359
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqng6Jg9netBVxbWHoyRJRCibCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a666f4-f6cf-4aed-b9bc-451b96afc2b1/1/qqng6Jg9netBVxbWHoyRJRCibCQ.mft
Manifest number: 0264
Signing time: Tue 11 Nov 2025 07:01:48 +0000
Manifest this update: Tue 11 Nov 2025 07:01:48 +0000
Manifest next update: Wed 12 Nov 2025 07:01:48 +0000
Files and hashes: 1: qqng6Jg9netBVxbWHoyRJRCibCQ.crl (hash: i/eDELTCKnqTkiPWFc7WQrcuXFCMMZ7PLoT3gXgrxGY=)
2: wSW6JHry9aEuEbZj9sUvZUmXDYs.roa (hash: chgjDOS+AVkY8OsmOxsnvb6k6+1kPmgvTXMxVKADzP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/a666f4-f6cf-4aed-b9bc-451b96afc2b1/1/qqng6Jg9netBVxbWHoyRJRCibCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/a666f4-f6cf-4aed-b9bc-451b96afc2b1/1/qqng6Jg9netBVxbWHoyRJRCibCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qqng6Jg9netBVxbWHoyRJRCibCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:83:9e:c9:e1:83:7c:c0:7a:d8:2d:0a:a5:e3:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaa9e0e8983d9deb415716d61e8c912510a26c24
Validity
Not Before: Nov 11 07:01:48 2025 GMT
Not After : Nov 12 07:01:48 2025 GMT
Subject: CN=85652ebae87f1452795d146d5d4f655b334ddd38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8f:e5:8e:48:57:55:35:cf:84:3f:1a:4e:69:
0c:4d:53:75:b7:d9:8a:32:71:68:6e:33:09:26:30:
e3:16:6c:dd:25:98:92:fc:7c:1f:52:e6:c7:97:0a:
96:d1:c0:ff:de:c7:d6:1c:ee:e9:1f:79:3a:ce:ba:
de:ab:b9:2f:36:65:5c:39:32:b7:e6:27:55:b2:18:
ae:fb:c9:ac:a4:a7:e1:ff:ac:e3:54:45:11:8a:50:
8e:75:0b:03:d0:5c:8c:5e:bc:08:28:f4:99:0a:30:
9a:8f:3c:e8:42:56:68:51:b3:ec:e2:7a:16:f5:a9:
45:ff:5b:a7:2a:70:3f:05:c6:78:ab:87:d9:ba:e6:
fe:5c:fd:6d:72:8c:85:d5:d9:54:6b:df:e6:d1:84:
1e:29:ce:2b:98:d5:d4:d2:5e:a6:8a:07:be:b3:44:
8a:77:30:73:00:c0:1f:ac:c4:71:2b:f3:2c:1f:c0:
26:57:49:c5:75:a7:f9:ca:82:4f:ef:ed:4e:d2:1f:
ac:0a:b8:11:ba:24:28:e6:b4:21:05:4f:64:c8:12:
38:75:3f:68:c0:45:89:89:48:da:7d:ce:9c:b9:55:
2f:0d:b6:08:df:a7:f4:fc:52:26:66:45:ae:91:53:
15:86:a1:c3:b1:a1:d5:38:f0:1b:99:04:6b:1f:a1:
08:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:65:2E:BA:E8:7F:14:52:79:5D:14:6D:5D:4F:65:5B:33:4D:DD:38
X509v3 Authority Key Identifier:
keyid:AA:A9:E0:E8:98:3D:9D:EB:41:57:16:D6:1E:8C:91:25:10:A2:6C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqng6Jg9netBVxbWHoyRJRCibCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a666f4-f6cf-4aed-b9bc-451b96afc2b1/1/qqng6Jg9netBVxbWHoyRJRCibCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a666f4-f6cf-4aed-b9bc-451b96afc2b1/1/qqng6Jg9netBVxbWHoyRJRCibCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:b8:9e:06:f0:49:fe:4d:b1:ae:c8:3e:39:a7:b6:ca:d7:99:
c0:78:c5:31:b4:1c:1a:6c:61:bd:70:b9:e4:47:5c:3f:ff:38:
5f:82:b7:db:47:a8:03:cf:25:16:c5:b1:91:2b:ae:9a:23:ba:
e1:1a:e8:0c:6c:df:72:90:7a:8b:80:0c:c0:db:98:de:b7:20:
0c:7a:f8:a8:71:c6:81:ca:55:3f:3b:80:ed:ed:6d:10:cb:2b:
67:f5:5a:95:1d:1b:8c:ef:29:dd:f6:9c:d7:aa:96:65:1b:a0:
8b:62:8d:b9:1f:06:0f:86:11:6b:31:bd:34:60:9f:6b:56:86:
92:0d:fc:8f:1c:d5:ed:89:8d:7b:12:b1:1e:dd:6b:ef:15:c6:
b7:69:f6:5a:4f:fd:b9:08:07:0b:19:41:f6:8f:fd:67:a2:b9:
4d:cc:ce:d5:61:82:e5:0f:5d:c4:ed:c8:40:6b:7d:20:69:38:
8a:f8:de:e0:25:a8:d8:0a:e3:7a:c7:3d:ed:21:b5:96:05:0c:
e6:3d:62:ee:ae:84:58:7b:5c:97:73:07:33:d3:59:0a:4b:6a:
7d:30:8d:ce:c2:39:91:9a:25:6b:47:65:49:d3:ca:2a:42:41:
e1:5d:22:f9:35:29:bb:1e:d2:fb:8b:87:97:43:a0:02:94:14:
0a:0d:47:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:14:05 2025 by rpki-client