Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a666f4-f6cf-4aed-b9bc-451b96afc2b1/1/qqng6Jg9netBVxbWHoyRJRCibCQ.mft
File: qqng6Jg9netBVxbWHoyRJRCibCQ.mft (raw, json)
Hash identifier: N6ZuL/EyqOL/JujiiWJW8r/uvfHANq3fmR7QPFKs1JI=
Subject key identifier: 26:2B:9C:43:FC:61:F8:34:2A:F8:C3:A6:CE:28:78:15:EE:A4:A1:A8
Authority key identifier: AA:A9:E0:E8:98:3D:9D:EB:41:57:16:D6:1E:8C:91:25:10:A2:6C:24
Certificate issuer: /CN=aaa9e0e8983d9deb415716d61e8c912510a26c24
Certificate serial: 0199FBEB8DB91CC9DA1A28F98A694ABC41B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqng6Jg9netBVxbWHoyRJRCibCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a666f4-f6cf-4aed-b9bc-451b96afc2b1/1/qqng6Jg9netBVxbWHoyRJRCibCQ.mft
Manifest number: 0227
Signing time: Sun 19 Oct 2025 10:02:22 +0000
Manifest this update: Sun 19 Oct 2025 10:02:22 +0000
Manifest next update: Mon 20 Oct 2025 10:02:22 +0000
Files and hashes: 1: qqng6Jg9netBVxbWHoyRJRCibCQ.crl (hash: 4GMW0EiklRmIOnhP4f5/pwRN7DST9wS1TtjKF4bKBM4=)
2: wSW6JHry9aEuEbZj9sUvZUmXDYs.roa (hash: chgjDOS+AVkY8OsmOxsnvb6k6+1kPmgvTXMxVKADzP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/a666f4-f6cf-4aed-b9bc-451b96afc2b1/1/qqng6Jg9netBVxbWHoyRJRCibCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/a666f4-f6cf-4aed-b9bc-451b96afc2b1/1/qqng6Jg9netBVxbWHoyRJRCibCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qqng6Jg9netBVxbWHoyRJRCibCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:8d:b9:1c:c9:da:1a:28:f9:8a:69:4a:bc:41:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaa9e0e8983d9deb415716d61e8c912510a26c24
Validity
Not Before: Oct 19 10:02:22 2025 GMT
Not After : Oct 20 10:02:22 2025 GMT
Subject: CN=262b9c43fc61f8342af8c3a6ce287815eea4a1a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8e:19:db:8e:2e:84:ca:e5:5a:00:ec:80:73:
fd:28:c4:89:ba:c3:d0:9a:9a:db:87:2e:81:cb:9d:
b2:b3:bf:0d:c3:80:34:0b:28:2b:e5:10:be:89:cc:
99:58:61:06:4c:da:06:72:c8:31:6e:61:ba:ae:8d:
db:ad:1f:b3:a2:c7:16:82:9b:3f:3e:d6:8f:d6:2b:
26:9a:98:95:06:d9:88:bb:6e:6d:ce:4f:4d:1c:39:
d0:be:ed:8a:7f:87:db:a0:5c:e4:70:26:ee:dc:c1:
59:24:6d:f8:fb:18:cc:e5:24:e0:e3:bf:3c:ea:56:
68:fe:4e:4a:d1:b0:e3:e1:19:28:9c:d1:59:86:de:
39:38:84:ff:64:33:a7:dc:80:ff:c9:34:0a:e6:56:
e4:61:95:13:b3:f2:33:07:74:ab:b5:41:83:24:5a:
26:1d:fe:81:f3:51:39:94:35:6f:4e:29:7d:39:71:
a3:3f:72:30:a9:67:03:6d:9c:38:57:1e:9d:75:c0:
dc:71:8e:9d:96:16:ef:f1:7f:77:07:91:30:d9:b8:
3e:b9:a5:d1:e5:3e:bf:6a:82:ad:60:d1:6c:5b:07:
9e:37:d7:2f:1e:f9:1c:57:18:11:05:1b:be:99:2c:
fa:c9:d1:fd:f2:e7:14:bf:b2:65:77:29:5c:ba:fd:
26:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:2B:9C:43:FC:61:F8:34:2A:F8:C3:A6:CE:28:78:15:EE:A4:A1:A8
X509v3 Authority Key Identifier:
keyid:AA:A9:E0:E8:98:3D:9D:EB:41:57:16:D6:1E:8C:91:25:10:A2:6C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqng6Jg9netBVxbWHoyRJRCibCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a666f4-f6cf-4aed-b9bc-451b96afc2b1/1/qqng6Jg9netBVxbWHoyRJRCibCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a666f4-f6cf-4aed-b9bc-451b96afc2b1/1/qqng6Jg9netBVxbWHoyRJRCibCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:88:62:15:90:7a:a5:d1:78:52:71:f0:f6:b2:ae:d5:6b:f4:
6e:3c:a8:b5:64:df:b6:2f:2c:8f:14:45:f4:73:a2:9c:dc:dc:
d4:32:08:5a:a1:89:b6:7f:5a:f6:b7:43:77:ee:ce:da:8c:d1:
8b:74:71:0d:de:e3:1f:72:52:57:80:b7:2b:29:e2:cb:7f:2f:
5d:e8:59:d1:5d:9c:e0:62:ea:2d:f5:e4:04:8b:74:0d:dc:33:
19:13:6f:49:c5:7d:f7:15:e7:ea:c8:42:e2:53:be:ba:13:f8:
cf:8a:ef:ab:19:a0:16:27:ce:35:5a:5b:c5:65:03:e5:3e:a8:
28:6b:ed:87:cb:4a:52:6d:da:07:29:ed:b4:4f:e5:71:9b:1d:
0f:b8:49:9e:af:7d:3e:f2:f9:e2:26:a5:bc:f0:93:e9:db:21:
8d:ba:91:3a:c9:11:c4:e7:c1:d1:33:95:42:29:a5:37:bb:24:
c1:c4:07:43:ca:36:4d:6a:95:56:5e:c2:3f:50:d2:f5:ab:87:
f6:dd:7e:1b:0d:25:d7:07:47:6a:6d:c7:c5:17:59:58:51:d2:
d3:71:8f:e0:45:14:77:c7:59:22:36:f8:d2:f9:b6:e3:5a:2f:
29:0a:fa:31:2a:e4:f9:42:f6:8e:0d:9f:a4:ea:34:2c:27:9c:
c7:d2:0d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:19 2025 by rpki-client