Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
File: mQqAlo5MlgPKKxPdHRRlll2PPb8.mft (raw, json)
Hash identifier: Be9/aF2Xx4fIaspVi4fWS46GW0L7OupTrQ/ptVkRRHA=
Subject key identifier: AE:A3:AE:C1:E3:AB:5B:45:52:2D:65:C5:C2:51:7D:6A:81:5D:68:BD
Authority key identifier: 99:0A:80:96:8E:4C:96:03:CA:2B:13:DD:1D:14:65:96:5D:8F:3D:BF
Certificate issuer: /CN=990a80968e4c9603ca2b13dd1d1465965d8f3dbf
Certificate serial: 0199FE47637B42360D4DD3FAC4959B52354C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQqAlo5MlgPKKxPdHRRlll2PPb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 21:01:55 +0000
Manifest this update: Sun 19 Oct 2025 21:01:55 +0000
Manifest next update: Mon 20 Oct 2025 21:01:55 +0000
Files and hashes: 1: Hcqbxc0FBGXnzzN6vZTEDk24h2s.roa (hash: 17n/7XCLJpAu2o2kBzK/5NmH6Sp4FBInaBa6mT4JmYc=)
2: W1ibYg0ozN5f0hkwbRX6gypQu6o.roa (hash: Q9hgjCdv4TipN26ttaTBJrYXDexn3QBOgW7gbPj7Hi8=)
3: mQqAlo5MlgPKKxPdHRRlll2PPb8.crl (hash: 9039IR5Ra1Y5NjeWjEYwEwI1BkFwUWCTNzxSkzx1w2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQqAlo5MlgPKKxPdHRRlll2PPb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:63:7b:42:36:0d:4d:d3:fa:c4:95:9b:52:35:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=990a80968e4c9603ca2b13dd1d1465965d8f3dbf
Validity
Not Before: Oct 19 21:01:55 2025 GMT
Not After : Oct 20 21:01:55 2025 GMT
Subject: CN=aea3aec1e3ab5b45522d65c5c2517d6a815d68bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:dd:b3:9f:aa:55:f3:a7:92:e4:57:ef:ca:e9:
18:37:67:c6:60:e2:a4:8a:22:11:13:1c:0e:3b:b4:
93:af:f5:0b:e5:70:95:a6:44:50:61:04:d6:10:56:
17:51:0d:48:e6:7b:b1:da:b1:89:84:ae:26:4f:47:
7f:d5:2d:95:aa:0d:f6:3c:34:8d:3c:2d:49:8d:fb:
f7:83:03:51:a7:97:4d:3e:70:61:be:b0:f7:3b:4c:
f5:1e:17:16:b1:d3:b3:7c:a6:31:e8:5e:fb:e7:c5:
7a:dd:5e:ac:f0:c4:2e:69:35:0f:66:49:4f:e5:b3:
11:43:f3:7f:bc:4a:34:50:bb:91:c9:52:f7:9e:c4:
83:73:29:ad:cf:d2:80:80:fe:9c:a7:18:b7:22:fc:
98:c7:f1:c5:01:be:fd:d6:6c:1b:a1:90:e5:3c:7f:
49:02:bf:9d:69:33:4a:ce:3b:e6:23:40:e5:3a:5a:
9a:78:68:dd:1d:9d:85:e9:b3:0d:f3:fc:39:68:15:
b4:1a:da:ae:9e:b3:12:a7:91:ae:78:d4:a2:ef:40:
ed:bd:34:a5:a5:23:95:54:33:3b:6e:91:d7:a6:7b:
2d:2a:66:e7:0e:c9:48:2a:74:88:25:9f:52:89:25:
aa:cf:33:e7:e9:db:ac:e7:66:83:8e:03:d2:6c:c6:
42:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A3:AE:C1:E3:AB:5B:45:52:2D:65:C5:C2:51:7D:6A:81:5D:68:BD
X509v3 Authority Key Identifier:
keyid:99:0A:80:96:8E:4C:96:03:CA:2B:13:DD:1D:14:65:96:5D:8F:3D:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQqAlo5MlgPKKxPdHRRlll2PPb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:e4:44:f1:8e:09:1c:7d:b9:d2:85:a8:37:80:7d:9a:53:84:
1c:eb:03:b1:a5:03:e3:2f:20:47:2d:61:80:a6:98:e2:d9:52:
64:e6:3c:14:19:00:2a:a1:60:db:2b:36:70:7e:c2:6e:97:16:
40:73:5e:c9:21:c1:79:f4:f1:48:d6:25:23:2f:e9:95:dc:60:
fc:6e:3e:a0:a4:12:57:22:ac:6f:89:71:d3:c7:62:03:a3:ca:
ee:eb:f2:2b:2d:c6:3c:bc:cf:a8:90:dd:ac:2d:dd:7f:50:45:
61:ec:3c:7d:43:94:24:78:81:59:bf:f8:4a:1c:d8:77:4c:48:
f9:a9:22:82:45:aa:28:8a:65:6d:ae:9e:c7:c3:60:6e:7c:2b:
8b:65:f1:a9:92:23:5b:00:99:13:e7:62:55:89:8c:0e:1b:cf:
b5:46:5e:d3:93:7a:e7:7b:f5:9c:a4:45:00:de:93:1e:e3:78:
66:4f:22:90:2b:67:a7:56:82:9a:76:0d:37:eb:87:c2:f1:2c:
39:d0:e0:55:0b:e4:d3:c6:87:84:85:03:5d:5c:40:bc:ee:39:
19:ad:05:27:63:4c:5d:88:5b:c6:c1:4e:c4:47:f2:c6:47:59:
43:cc:7f:31:0f:36:fa:58:ba:8f:bc:16:e9:f4:05:55:04:19:
f2:68:a1:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:02:09 2025 by rpki-client