Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/549b8b-6494-4a92-a94e-cf8ce22c3af7/1/Qq_VYNUTB34zn6v-DM2pCUC92BQ.mft
File: Qq_VYNUTB34zn6v-DM2pCUC92BQ.mft (raw, json)
Hash identifier: jHHZUCsUcqe4Nu9BJ1fKtcuspy29S8UjeVAJcNH1Bb8=
Subject key identifier: A1:6B:85:3E:38:73:C7:22:58:E5:7E:8F:D2:75:23:96:9C:43:2B:F9
Authority key identifier: 42:AF:D5:60:D5:13:07:7E:33:9F:AB:FE:0C:CD:A9:09:40:BD:D8:14
Certificate issuer: /CN=42afd560d513077e339fabfe0ccda90940bdd814
Certificate serial: 019A70A54FD170A601E8050B156F7F2B97D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qq_VYNUTB34zn6v-DM2pCUC92BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/549b8b-6494-4a92-a94e-cf8ce22c3af7/1/Qq_VYNUTB34zn6v-DM2pCUC92BQ.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 02:01:13 +0000
Manifest this update: Tue 11 Nov 2025 02:01:13 +0000
Manifest next update: Wed 12 Nov 2025 02:01:13 +0000
Files and hashes: 1: Qq_VYNUTB34zn6v-DM2pCUC92BQ.crl (hash: UJ+tQUOY5Esk+46jb3RUh+fq+QKiq/WWbxeH4kzVIlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/549b8b-6494-4a92-a94e-cf8ce22c3af7/1/Qq_VYNUTB34zn6v-DM2pCUC92BQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/549b8b-6494-4a92-a94e-cf8ce22c3af7/1/Qq_VYNUTB34zn6v-DM2pCUC92BQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qq_VYNUTB34zn6v-DM2pCUC92BQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:4f:d1:70:a6:01:e8:05:0b:15:6f:7f:2b:97:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42afd560d513077e339fabfe0ccda90940bdd814
Validity
Not Before: Nov 11 02:01:13 2025 GMT
Not After : Nov 12 02:01:13 2025 GMT
Subject: CN=a16b853e3873c72258e57e8fd27523969c432bf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5d:cf:39:cd:8f:07:cb:54:68:af:55:55:64:
a9:57:1f:4d:f9:d9:b1:92:95:60:63:08:c5:ad:b5:
ce:83:13:2c:ab:db:99:c3:61:9c:a5:e2:a3:bf:35:
14:34:d0:fe:81:61:9e:6e:eb:92:e9:85:2e:02:ff:
38:88:c5:01:87:d5:19:03:0b:e2:80:20:24:9d:28:
67:f4:35:db:33:79:58:e6:4d:a1:1f:67:eb:c2:0a:
2e:df:a1:dc:65:00:68:cd:95:c2:5c:76:78:a2:78:
ec:ee:c4:03:04:7a:3f:0c:6d:2f:3e:db:da:44:5c:
6d:74:7c:cd:e6:c7:02:2b:f3:f1:e8:47:01:21:06:
3f:c1:6e:69:9a:83:5b:a3:89:98:c2:c3:1a:ed:b6:
84:02:cc:73:6f:47:bc:61:db:be:15:9a:8b:da:96:
63:0a:57:54:6b:3a:db:63:72:bd:9f:67:bb:c6:f0:
21:29:ed:f0:bb:d9:8a:73:69:69:de:91:25:0f:ed:
63:f8:3d:1f:4e:f2:e1:76:66:cd:d7:f7:40:12:2b:
44:e6:83:58:74:c7:7d:b5:8e:fd:24:83:a6:3b:71:
b6:b1:b2:f8:21:0d:06:00:1b:06:64:fc:9b:eb:37:
34:ff:71:ef:20:ca:3f:59:8f:f7:ff:41:6d:be:0b:
1c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:6B:85:3E:38:73:C7:22:58:E5:7E:8F:D2:75:23:96:9C:43:2B:F9
X509v3 Authority Key Identifier:
keyid:42:AF:D5:60:D5:13:07:7E:33:9F:AB:FE:0C:CD:A9:09:40:BD:D8:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qq_VYNUTB34zn6v-DM2pCUC92BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/549b8b-6494-4a92-a94e-cf8ce22c3af7/1/Qq_VYNUTB34zn6v-DM2pCUC92BQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/549b8b-6494-4a92-a94e-cf8ce22c3af7/1/Qq_VYNUTB34zn6v-DM2pCUC92BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:ad:96:b0:c5:93:70:2a:4d:7b:bc:77:a6:b1:58:2e:41:b9:
c1:35:81:14:31:89:1b:b9:cd:89:db:db:70:fc:1b:48:3f:66:
ac:09:fa:78:77:bd:44:1c:1a:62:e5:69:eb:af:1f:10:02:81:
40:fa:e2:00:e7:b7:35:5b:20:20:1d:28:28:f2:22:df:88:07:
40:bd:cf:21:65:7a:de:aa:db:c7:5c:58:f6:23:c4:e9:93:bd:
0b:f2:d3:29:47:4a:83:aa:c1:28:86:56:a5:98:17:43:5c:b6:
42:d4:54:ef:99:d8:6c:bc:83:54:87:b9:e5:e0:4e:e2:d9:4b:
be:62:f3:0f:7a:e7:64:23:a8:bc:0e:e2:fd:09:00:b1:9d:54:
94:00:1a:fa:e7:6f:1d:1c:ba:28:8d:f7:ff:2f:62:b1:9b:2d:
29:fe:f5:ce:46:1a:8e:19:66:72:fc:08:a9:a5:a7:d3:a5:e1:
c5:5f:ea:bd:50:3c:ae:85:d6:05:88:cb:16:62:7c:25:de:f9:
18:c1:38:58:3e:34:b2:32:c8:07:0c:e2:2c:5c:4a:0a:20:f1:
95:f7:4b:e5:12:32:01:de:5f:8e:95:73:36:09:c8:eb:d3:67:
14:db:9c:b2:a8:e5:05:da:df:bb:d7:cc:d6:20:1d:4e:fa:3e:
e2:7c:e2:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:50 2025 by rpki-client