Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft
File: qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft (raw, json)
Hash identifier: 73uI9w345gm1vbrDVgaLsV7cO76zvd8THGfaNR56ymo=
Subject key identifier: 8B:FD:DA:A9:29:55:EB:CE:D9:9A:A2:88:AA:76:8D:21:CA:00:EB:B8
Authority key identifier: AA:A5:34:64:A8:10:AA:38:C9:36:D9:D9:8B:6A:2D:13:2F:CB:FF:58
Certificate issuer: /CN=aaa53464a810aa38c936d9d98b6a2d132fcbff58
Certificate serial: 0199CBA2A3BBAECB731DE01A74C77054BE86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqU0ZKgQqjjJNtnZi2otEy_L_1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft
Manifest number: 16C9
Signing time: Fri 10 Oct 2025 01:00:57 +0000
Manifest this update: Fri 10 Oct 2025 01:00:57 +0000
Manifest next update: Sat 11 Oct 2025 01:00:57 +0000
Files and hashes: 1: nEGj30N7Wbasb6AnvF-74ldwKOw.roa (hash: 4FClR6vcMY2SCJnOebSa9NEF0JcRgbJiRCF7Wp1Q7zQ=)
2: qqU0ZKgQqjjJNtnZi2otEy_L_1g.crl (hash: otmEDRUdEa6eXZ8bNgijVuK7lPHTcIEEvx9Jd+YU9ZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/qqU0ZKgQqjjJNtnZi2otEy_L_1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Oct 2025 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:cb:a2:a3:bb:ae:cb:73:1d:e0:1a:74:c7:70:54:be:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaa53464a810aa38c936d9d98b6a2d132fcbff58
Validity
Not Before: Oct 10 01:00:57 2025 GMT
Not After : Oct 11 01:00:57 2025 GMT
Subject: CN=8bfddaa92955ebced99aa288aa768d21ca00ebb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:11:f2:12:a3:ff:a7:86:bf:55:0d:21:c1:9f:
4a:92:f6:f8:1f:44:32:be:c3:22:81:76:1a:73:13:
f2:e8:88:3c:3b:64:0a:42:e2:28:e9:6b:44:37:28:
ac:bb:df:22:be:e0:d5:60:f5:38:36:81:6b:1e:a2:
a5:30:19:84:65:07:c2:3d:dc:f4:7e:36:7f:6f:a6:
40:44:a2:c3:74:64:3d:6d:56:ac:3a:96:ef:1e:2e:
9e:95:aa:dd:3b:45:1d:a4:1e:a8:4c:12:34:50:7e:
a5:27:b9:46:60:2e:6a:0b:a5:ed:36:f5:64:6a:5e:
fa:1c:88:64:8c:7d:86:21:65:a5:d2:8e:e0:12:b8:
7d:97:03:76:20:4b:7c:93:64:95:a9:03:26:d8:19:
82:cf:ef:a3:9a:eb:58:f0:10:dd:93:05:79:fa:af:
8c:58:71:22:ed:54:27:af:3a:78:ef:e0:10:34:5a:
b0:81:b7:c0:b5:63:13:a1:3b:42:75:dc:b6:19:de:
0f:46:c1:96:93:d0:23:e4:bd:48:02:27:a7:f0:0f:
7c:dd:1c:4f:a9:44:ed:4d:ee:61:14:71:89:64:30:
ef:80:b8:bc:d9:cc:54:1c:6d:72:63:af:6b:41:f1:
2c:5d:9d:7f:2c:fd:8f:c1:94:4c:9f:fb:a5:0f:08:
63:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:FD:DA:A9:29:55:EB:CE:D9:9A:A2:88:AA:76:8D:21:CA:00:EB:B8
X509v3 Authority Key Identifier:
keyid:AA:A5:34:64:A8:10:AA:38:C9:36:D9:D9:8B:6A:2D:13:2F:CB:FF:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqU0ZKgQqjjJNtnZi2otEy_L_1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:5f:f2:0a:1b:9f:75:89:57:1e:99:ce:ec:aa:0c:73:cd:7c:
92:49:55:47:81:28:a6:cd:5b:29:fd:6e:c2:72:ee:80:87:e3:
d1:e6:c6:98:7f:22:8a:ef:d2:52:d8:2b:56:6c:ab:a5:52:69:
dc:85:00:7c:3a:15:ae:c0:64:28:01:0a:d2:7d:65:e2:b5:88:
88:79:9f:84:80:db:bb:b6:ce:44:eb:6d:b8:ba:0f:34:e7:4d:
2b:7a:a7:10:f7:d6:e1:96:91:18:04:46:03:53:f5:6a:19:5a:
d5:de:eb:24:a4:fc:49:02:3b:97:31:62:ea:b8:9e:67:c7:7d:
5a:5d:67:1f:61:7e:f0:b5:9c:67:a6:16:36:a1:71:75:44:44:
05:20:30:de:f1:80:1c:30:9b:b2:e6:7e:33:4e:46:9d:ef:62:
c5:c0:99:f2:3e:e5:26:ad:01:ba:83:1b:3e:05:05:a7:0c:54:
a6:92:ac:5a:ee:70:42:9b:b8:a9:1d:e3:1b:bb:5f:1a:e9:2b:
63:04:56:8b:df:67:8b:f5:b9:22:61:27:07:91:33:58:b7:34:
17:4b:c2:c8:50:4f:01:d7:60:e7:ca:86:82:1d:0b:1c:ba:7e:
b1:b9:57:c7:79:a8:b0:4c:0d:cc:7a:d3:05:6b:f8:4e:be:b6:
17:52:8b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 03:26:22 2025 by rpki-client