Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
File: mQqAlo5MlgPKKxPdHRRlll2PPb8.mft (raw, json)
Hash identifier: alDMazfrUbkE7pDw+qtqHhmJZhl5ty0ZtfFGzM1SM3g=
Subject key identifier: 27:72:F9:66:7E:95:48:B0:46:6B:EF:B2:2F:E2:47:DC:57:C7:F4:FC
Authority key identifier: 99:0A:80:96:8E:4C:96:03:CA:2B:13:DD:1D:14:65:96:5D:8F:3D:BF
Certificate issuer: /CN=990a80968e4c9603ca2b13dd1d1465965d8f3dbf
Certificate serial: 0198D6CD9588474C6F64E7E24F4B3CEE1D70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQqAlo5MlgPKKxPdHRRlll2PPb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 12:00:54 +0000
Manifest this update: Sat 23 Aug 2025 12:00:54 +0000
Manifest next update: Sun 24 Aug 2025 12:00:54 +0000
Files and hashes: 1: Hcqbxc0FBGXnzzN6vZTEDk24h2s.roa (hash: 17n/7XCLJpAu2o2kBzK/5NmH6Sp4FBInaBa6mT4JmYc=)
2: W1ibYg0ozN5f0hkwbRX6gypQu6o.roa (hash: Q9hgjCdv4TipN26ttaTBJrYXDexn3QBOgW7gbPj7Hi8=)
3: mQqAlo5MlgPKKxPdHRRlll2PPb8.crl (hash: LAO/O6C5kXxxxQBsUZY+RfyhuU30E+sPeIynmBWeJJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQqAlo5MlgPKKxPdHRRlll2PPb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:95:88:47:4c:6f:64:e7:e2:4f:4b:3c:ee:1d:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=990a80968e4c9603ca2b13dd1d1465965d8f3dbf
Validity
Not Before: Aug 23 12:00:54 2025 GMT
Not After : Aug 24 12:00:54 2025 GMT
Subject: CN=2772f9667e9548b0466befb22fe247dc57c7f4fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1c:58:fd:b0:27:6d:f1:76:86:f5:a5:44:53:
3e:1a:c0:d3:4a:80:45:7a:cf:58:a8:15:f8:7d:33:
4f:05:b0:12:65:b6:f1:cb:1f:8c:c5:be:2b:4a:ef:
f8:58:ab:96:d3:77:2e:56:78:08:32:0d:f7:43:ab:
1f:4f:48:26:e3:d5:2b:51:7d:e0:62:c2:2f:2c:9c:
7e:f2:c7:c9:6c:a0:54:b7:c5:44:b3:c0:21:dc:82:
49:d2:3e:01:be:7d:6c:88:ed:79:18:79:6f:06:88:
11:44:98:9f:d1:4b:27:f2:5f:12:27:a9:55:f5:dd:
be:8b:7d:2c:b7:27:8d:07:07:eb:c7:1b:de:2d:00:
10:9a:8e:cb:45:fa:11:5a:40:43:b1:6d:6f:71:4d:
9a:95:42:bd:45:1b:d4:34:84:22:b4:ac:2b:c3:0a:
a1:fa:16:1f:51:3f:be:17:26:14:5a:bf:99:49:56:
f8:09:42:09:c0:77:a1:e3:e2:a6:9f:8f:83:ec:97:
bc:d9:31:0f:94:87:9f:96:28:e6:84:95:d6:c7:ae:
f1:99:db:60:68:2c:71:72:b0:1d:5d:7c:eb:34:bd:
de:0a:c4:df:80:ff:01:bd:81:aa:df:df:1b:6e:71:
8e:ca:99:06:6c:58:a4:89:46:aa:b1:6b:83:cd:1f:
83:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:72:F9:66:7E:95:48:B0:46:6B:EF:B2:2F:E2:47:DC:57:C7:F4:FC
X509v3 Authority Key Identifier:
keyid:99:0A:80:96:8E:4C:96:03:CA:2B:13:DD:1D:14:65:96:5D:8F:3D:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQqAlo5MlgPKKxPdHRRlll2PPb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:a6:42:48:1f:1f:90:32:c4:94:77:19:12:77:27:2c:ad:59:
c2:d8:13:8e:d1:3c:b8:2b:ee:3e:94:4b:74:f6:20:ef:ad:e6:
24:9c:50:dd:f5:35:4c:6f:9e:5c:19:03:22:38:bc:14:70:c3:
ec:8e:39:9a:e6:bc:90:df:fd:b6:8c:e4:99:dd:73:f6:50:e5:
b4:a2:ea:45:10:bd:47:09:d8:14:36:b6:1e:53:d3:61:6d:52:
86:7d:39:33:11:e1:88:d5:95:91:18:1f:1c:cc:04:27:4b:dd:
12:fd:c1:70:31:3e:e3:18:e8:76:62:c1:6e:4b:94:3e:23:52:
7d:d6:a2:7d:aa:10:28:84:28:70:b1:e2:31:2c:a1:e3:42:97:
a9:f4:44:4f:f1:36:ff:53:9a:55:8e:fb:a3:8a:f8:30:4e:d8:
ee:48:e9:77:56:9a:b1:98:f0:c1:c1:e3:bd:a8:f0:2b:6d:8d:
8e:8a:1f:03:0b:67:ae:d8:7b:e9:bb:89:54:5f:9f:1e:88:1c:
ea:da:dd:b5:7c:8d:15:b1:e0:00:d3:30:e1:0c:ab:39:93:4d:
5c:4f:d9:10:fa:2b:5c:83:9a:44:30:4b:99:e4:ee:8c:a9:2c:
a3:56:93:9d:51:49:85:7a:90:de:6c:42:25:c7:bc:e6:ef:0b:
2b:49:8a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:02:42 2025 by rpki-client