Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d09fb9-f3fa-45b8-a5cd-77b489249fa4/1/qqlyrDzBD3FspJhQRaXwgktgyh8.mft
File: qqlyrDzBD3FspJhQRaXwgktgyh8.mft (raw, json)
Hash identifier: VDlIX0k09QNU+X+YW8UtamiUUynaHpVta+fir4NO3+Y=
Subject key identifier: C8:EA:86:84:26:4F:84:A9:E2:F8:61:F6:CA:3B:8E:37:DC:95:F9:64
Authority key identifier: AA:A9:72:AC:3C:C1:0F:71:6C:A4:98:50:45:A5:F0:82:4B:60:CA:1F
Certificate issuer: /CN=aaa972ac3cc10f716ca4985045a5f0824b60ca1f
Certificate serial: 0198D5BB96E64584F010AE3B47AFEB44E51E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqlyrDzBD3FspJhQRaXwgktgyh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d09fb9-f3fa-45b8-a5cd-77b489249fa4/1/qqlyrDzBD3FspJhQRaXwgktgyh8.mft
Manifest number: 0155
Signing time: Sat 23 Aug 2025 07:01:37 +0000
Manifest this update: Sat 23 Aug 2025 07:01:37 +0000
Manifest next update: Sun 24 Aug 2025 07:01:37 +0000
Files and hashes: 1: qqlyrDzBD3FspJhQRaXwgktgyh8.crl (hash: wtmqOrejiJeS2UbTwu1YXsiQ0NykJCxiIEdmZRNuGKU=)
2: yIGIxees9MuARoWN6t0oVINh_4A.roa (hash: geAsTIsbC4XBTKHwgmaJ0ZNmwh/Z8F8NnaAnGD8ONe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d09fb9-f3fa-45b8-a5cd-77b489249fa4/1/qqlyrDzBD3FspJhQRaXwgktgyh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/d09fb9-f3fa-45b8-a5cd-77b489249fa4/1/qqlyrDzBD3FspJhQRaXwgktgyh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qqlyrDzBD3FspJhQRaXwgktgyh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 07:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:96:e6:45:84:f0:10:ae:3b:47:af:eb:44:e5:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaa972ac3cc10f716ca4985045a5f0824b60ca1f
Validity
Not Before: Aug 23 07:01:37 2025 GMT
Not After : Aug 24 07:01:37 2025 GMT
Subject: CN=c8ea8684264f84a9e2f861f6ca3b8e37dc95f964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b4:56:a9:f1:76:c4:00:5b:2a:50:62:9a:05:
13:0f:b2:82:cc:c2:5d:8c:92:0d:b1:59:4f:de:d4:
1a:b9:fd:ba:81:50:bd:0f:60:b4:55:66:5d:d2:91:
50:42:fd:ba:7c:2f:56:21:a9:d0:a6:f7:0d:87:63:
fb:6f:ff:b4:36:f2:83:2b:6d:25:7b:24:be:58:31:
e1:e3:d0:14:4c:ae:85:f3:cc:34:e1:0a:b4:f7:b6:
2c:f1:26:15:13:a3:91:3c:22:e5:a8:70:7a:0c:95:
11:da:46:97:9e:01:36:75:97:2b:56:9e:ec:b6:d4:
3f:14:0c:fd:7b:85:0d:97:81:16:7d:33:b6:41:26:
0b:7e:c9:44:e1:66:8b:83:27:d8:8c:a5:f6:cd:0c:
f4:98:46:96:68:74:34:aa:cd:fc:70:bc:87:90:38:
47:08:cd:2f:ce:d6:b6:dd:84:d6:eb:dc:33:fc:a9:
09:bd:e2:67:94:e3:16:5d:3c:dd:27:57:f8:46:2f:
ec:29:7c:b1:ae:d5:5e:1c:2f:5a:a5:66:2e:7e:60:
e0:0e:5e:56:53:5a:43:9c:4c:2d:6c:22:b5:18:6b:
e7:43:de:0f:c7:43:2d:d6:68:01:a0:9c:4d:b1:4a:
17:a6:22:55:2b:6c:32:21:d8:2d:2d:5e:63:ac:21:
22:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:EA:86:84:26:4F:84:A9:E2:F8:61:F6:CA:3B:8E:37:DC:95:F9:64
X509v3 Authority Key Identifier:
keyid:AA:A9:72:AC:3C:C1:0F:71:6C:A4:98:50:45:A5:F0:82:4B:60:CA:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqlyrDzBD3FspJhQRaXwgktgyh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d09fb9-f3fa-45b8-a5cd-77b489249fa4/1/qqlyrDzBD3FspJhQRaXwgktgyh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d09fb9-f3fa-45b8-a5cd-77b489249fa4/1/qqlyrDzBD3FspJhQRaXwgktgyh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:54:fe:63:10:76:a2:7c:f0:fe:41:8d:ac:c7:f4:db:13:a9:
84:a0:b2:96:5c:fc:3c:8b:a8:8b:44:d9:69:ed:a8:f7:fd:06:
2b:1e:77:08:81:df:0f:fc:ab:6e:86:b5:c7:36:4d:12:bc:fa:
c4:66:90:c4:2c:70:83:92:e4:3d:74:24:13:86:ba:d9:87:f8:
ad:f4:f6:a6:c6:12:a7:e7:d0:db:88:4e:ad:96:d1:59:18:04:
bf:fa:0f:e7:4c:e8:da:75:41:cc:eb:db:80:5d:ce:56:36:96:
cd:8e:6b:d4:ca:76:99:e6:c1:9b:19:8d:bd:a1:29:95:f9:dd:
51:7b:62:d6:8c:e4:b3:27:67:79:81:39:f6:ee:73:3c:51:ed:
de:56:ac:09:49:d5:04:ec:2c:8b:97:6d:59:de:3b:92:40:2f:
a3:85:37:fe:c2:f1:84:8a:3b:0b:7f:a1:f0:0d:7f:75:db:00:
89:d5:6c:89:4d:48:3c:08:5a:ef:32:15:c6:7c:9d:88:a1:16:
ff:ab:dd:ed:df:74:b3:6f:4c:f6:c7:93:40:59:96:7d:84:6d:
25:aa:0d:b9:e8:63:f5:e7:51:5f:e4:5f:e7:4b:5f:4c:12:43:
6c:8e:e2:ab:7d:a8:db:7f:ab:a3:fe:55:1a:1f:f4:12:e4:4d:
c8:ca:01:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:41:35 2025 by rpki-client