Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d09fb9-f3fa-45b8-a5cd-77b489249fa4/1/qqlyrDzBD3FspJhQRaXwgktgyh8.mft
File: qqlyrDzBD3FspJhQRaXwgktgyh8.mft (raw, json)
Hash identifier: YWbwEoeJmps8WRoObgyJdpmbZGgbAn8VZIuOwoVme9Y=
Subject key identifier: 63:32:8A:35:2E:DB:F1:22:C7:31:F1:51:02:EB:35:2D:4A:A1:C5:7F
Authority key identifier: AA:A9:72:AC:3C:C1:0F:71:6C:A4:98:50:45:A5:F0:82:4B:60:CA:1F
Certificate issuer: /CN=aaa972ac3cc10f716ca4985045a5f0824b60ca1f
Certificate serial: 0199FD346A883CB024183C60F1380DE37E84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqlyrDzBD3FspJhQRaXwgktgyh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d09fb9-f3fa-45b8-a5cd-77b489249fa4/1/qqlyrDzBD3FspJhQRaXwgktgyh8.mft
Manifest number: 01EE
Signing time: Sun 19 Oct 2025 16:01:34 +0000
Manifest this update: Sun 19 Oct 2025 16:01:34 +0000
Manifest next update: Mon 20 Oct 2025 16:01:34 +0000
Files and hashes: 1: qqlyrDzBD3FspJhQRaXwgktgyh8.crl (hash: nBimAJLHyZirvxiOCs6vvmbiQjOCxJBNv2l9sLr2i4o=)
2: yIGIxees9MuARoWN6t0oVINh_4A.roa (hash: geAsTIsbC4XBTKHwgmaJ0ZNmwh/Z8F8NnaAnGD8ONe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d09fb9-f3fa-45b8-a5cd-77b489249fa4/1/qqlyrDzBD3FspJhQRaXwgktgyh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/d09fb9-f3fa-45b8-a5cd-77b489249fa4/1/qqlyrDzBD3FspJhQRaXwgktgyh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qqlyrDzBD3FspJhQRaXwgktgyh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:6a:88:3c:b0:24:18:3c:60:f1:38:0d:e3:7e:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaa972ac3cc10f716ca4985045a5f0824b60ca1f
Validity
Not Before: Oct 19 16:01:34 2025 GMT
Not After : Oct 20 16:01:34 2025 GMT
Subject: CN=63328a352edbf122c731f15102eb352d4aa1c57f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:16:84:c7:d3:53:24:ef:89:4d:31:d6:ec:3c:
b7:20:29:27:d2:93:99:85:db:b5:d8:c9:63:e3:b8:
24:22:b8:04:ec:e1:42:2c:b5:39:13:6f:a7:99:83:
3d:8e:5b:a1:32:16:0c:a2:aa:60:50:a6:9f:39:69:
b2:4a:a1:42:c1:a3:ca:7b:1d:76:20:5f:77:cc:ca:
02:23:69:eb:65:6c:fb:a4:11:8f:43:7c:b9:84:ca:
fc:4e:8e:7a:a6:99:5e:2c:fc:a2:b3:03:a8:94:c1:
88:b3:a6:e4:e2:8b:9e:b2:62:07:5c:73:d1:a7:c0:
0f:f4:41:24:db:16:fc:17:ec:bd:b1:5d:90:b0:31:
36:75:18:9c:17:17:87:16:c8:63:e8:8a:ea:f6:94:
ad:e4:30:33:7b:f6:e1:82:06:5a:ea:a0:a8:f1:40:
1f:61:60:ac:36:08:9b:39:db:a8:e6:9e:34:96:f8:
54:02:9e:52:5e:33:00:70:37:6d:d3:29:af:27:4d:
c2:7e:d7:e5:91:e4:0c:1b:32:7d:8b:58:00:0f:af:
d5:d5:17:c5:ac:18:0f:06:62:ba:b7:71:99:c4:ba:
92:07:09:9d:fe:a1:ba:d1:62:69:e1:f4:e8:b4:f8:
d3:0a:fe:62:1e:0a:15:70:ad:4a:81:a0:73:55:87:
d5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:32:8A:35:2E:DB:F1:22:C7:31:F1:51:02:EB:35:2D:4A:A1:C5:7F
X509v3 Authority Key Identifier:
keyid:AA:A9:72:AC:3C:C1:0F:71:6C:A4:98:50:45:A5:F0:82:4B:60:CA:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqlyrDzBD3FspJhQRaXwgktgyh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d09fb9-f3fa-45b8-a5cd-77b489249fa4/1/qqlyrDzBD3FspJhQRaXwgktgyh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d09fb9-f3fa-45b8-a5cd-77b489249fa4/1/qqlyrDzBD3FspJhQRaXwgktgyh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:a6:40:c0:2e:8b:6a:0a:b0:b6:39:bb:50:45:88:a0:ad:d8:
d2:2d:44:38:3f:58:69:78:f2:9a:a9:52:80:5e:dd:99:49:33:
c2:40:ca:8c:e7:b4:40:0c:1b:b8:29:54:48:b9:28:41:80:2a:
dd:70:09:e5:40:4c:18:3c:f2:b8:ee:8e:81:a6:d3:b8:76:9e:
82:2e:3c:e0:e4:38:63:76:f0:34:d3:de:0a:9b:73:d3:aa:93:
b7:65:4b:3c:91:15:c6:18:8b:fa:fa:76:69:ac:28:8e:6d:f5:
ce:45:40:93:6f:6c:0a:e6:73:ad:d7:57:63:31:9c:55:b9:ae:
55:7f:7c:e7:16:c1:39:c8:d6:06:1b:99:35:2c:66:e6:a6:30:
ad:5c:1c:f7:04:72:37:cc:80:1a:7a:fa:f2:4c:d1:ed:4b:03:
b3:f6:fc:fe:ac:fa:0c:be:8b:1c:8c:60:9f:e5:20:52:45:33:
57:4f:19:43:a2:6c:41:30:10:1a:d2:b5:4e:80:ef:f1:7c:d2:
11:5b:f3:c0:a2:e8:e3:0c:06:52:44:fa:17:d7:8a:de:1e:ed:
fe:a6:aa:9f:90:5f:57:d2:7d:ef:70:b1:8b:72:71:5f:9d:bf:
f6:1c:a8:e5:8f:b9:5b:f4:b4:76:ef:6f:93:2f:b1:3b:6c:c7:
ac:39:15:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:03:04 2025 by rpki-client