Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft
File: qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft (raw, json)
Hash identifier: eWBNJ6AGcWky3lgFSNgzVzi64APwwGpXpwhqX0yr4o4=
Subject key identifier: C4:6B:1E:EC:DC:1C:C2:A0:8B:F5:3B:D1:9F:38:F3:EF:56:19:90:DA
Authority key identifier: AA:A5:34:64:A8:10:AA:38:C9:36:D9:D9:8B:6A:2D:13:2F:CB:FF:58
Certificate issuer: /CN=aaa53464a810aa38c936d9d98b6a2d132fcbff58
Certificate serial: 019A01B4CF726D202AF8DDCE18D846699372
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqU0ZKgQqjjJNtnZi2otEy_L_1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 13:00:17 +0000
Manifest this update: Mon 20 Oct 2025 13:00:17 +0000
Manifest next update: Tue 21 Oct 2025 13:00:17 +0000
Files and hashes: 1: nEGj30N7Wbasb6AnvF-74ldwKOw.roa (hash: 4FClR6vcMY2SCJnOebSa9NEF0JcRgbJiRCF7Wp1Q7zQ=)
2: qqU0ZKgQqjjJNtnZi2otEy_L_1g.crl (hash: Wk28gS/fQt+viz0YxyvWVcOf6dfP5/2Xk16KOJpAMbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/qqU0ZKgQqjjJNtnZi2otEy_L_1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b4:cf:72:6d:20:2a:f8:dd:ce:18:d8:46:69:93:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaa53464a810aa38c936d9d98b6a2d132fcbff58
Validity
Not Before: Oct 20 13:00:17 2025 GMT
Not After : Oct 21 13:00:17 2025 GMT
Subject: CN=c46b1eecdc1cc2a08bf53bd19f38f3ef561990da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:97:b4:0f:57:7b:41:f9:d9:f6:01:97:03:98:
5e:1f:b0:7d:c3:dd:55:d9:7f:82:35:38:e8:63:2d:
d2:e8:c5:96:59:ac:9e:cd:72:e7:5b:34:d9:70:fb:
38:f0:6a:da:22:53:71:62:29:c2:fb:a6:b3:30:27:
ab:5e:f3:22:23:fe:3c:73:17:dd:33:09:98:b5:c7:
ed:f4:b4:37:2c:ad:cb:48:ba:e7:54:a5:b5:97:ab:
93:db:11:52:79:83:76:8d:36:4c:f2:0d:3a:69:f7:
6e:47:b1:4c:57:8a:d8:b1:b0:5c:c5:70:d5:7b:f4:
ed:03:36:98:aa:87:e7:4b:c1:42:da:b6:3e:49:7e:
8c:87:4b:ae:5f:5f:06:1f:44:1d:5b:aa:7f:2d:d8:
21:b8:70:50:84:1c:aa:42:de:04:d8:e3:ab:4c:25:
d8:4e:92:71:c5:7c:5d:26:3b:3f:56:c3:89:47:82:
87:9d:22:3e:3b:65:e2:15:eb:ea:86:cd:a5:d5:d1:
25:fa:9c:67:fd:4b:17:ca:1a:72:b4:82:9f:bb:3e:
71:7f:38:b8:60:b1:e1:9f:aa:6a:86:c8:77:db:53:
88:87:28:a9:56:49:9a:c7:b2:0f:b5:7f:d9:21:d0:
0f:93:e2:60:5b:c4:83:7f:ed:d3:4c:59:af:65:3e:
27:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:6B:1E:EC:DC:1C:C2:A0:8B:F5:3B:D1:9F:38:F3:EF:56:19:90:DA
X509v3 Authority Key Identifier:
keyid:AA:A5:34:64:A8:10:AA:38:C9:36:D9:D9:8B:6A:2D:13:2F:CB:FF:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqU0ZKgQqjjJNtnZi2otEy_L_1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:2a:b2:90:71:7b:d3:e6:0d:f3:d7:06:64:e4:ae:4a:0b:24:
a0:97:93:9c:c3:27:66:fe:c5:41:be:d2:70:95:77:4a:e2:22:
ac:79:1e:ed:60:99:2c:c2:d2:b7:14:42:cc:de:70:d8:f9:fc:
73:fa:47:10:0e:6b:ef:85:41:03:b3:f5:7e:e6:46:fb:e0:af:
74:32:05:21:4e:bf:60:a7:08:04:eb:24:39:07:56:ed:b6:46:
8f:63:fa:1b:43:cd:1a:76:54:0b:be:b9:b5:85:db:8c:31:df:
17:7f:ab:06:8e:ab:d8:e2:cd:83:ca:56:4c:e5:35:f4:97:f1:
f1:bd:d2:62:75:19:30:07:95:17:62:17:38:a1:8b:f7:06:2c:
e2:a5:5b:cf:44:f2:35:ee:d7:27:9a:e7:bc:49:24:fb:0c:a4:
39:e8:a6:77:a8:a5:2d:1a:82:49:13:64:46:27:50:9a:8e:f9:
e8:d3:71:a3:78:02:96:05:08:b7:71:33:53:61:35:48:19:83:
cd:a4:0b:71:ab:62:b5:11:a6:d7:96:8d:ff:65:5f:17:7e:d8:
c3:38:f7:d3:a6:45:5b:1c:c6:27:9b:56:01:59:cb:ed:bb:08:
bd:17:5b:c7:da:63:07:e0:c7:54:53:20:7c:72:a4:fa:d0:de:
0e:66:7c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:21:24 2025 by rpki-client