Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.mft
File: qqxhl3mf1otuW74LV-ZS_YDdNiE.mft (raw, json)
Hash identifier: OqfPBEp1ee+1YwJSN2VThERV76TyJJaMLHqj90/90Q8=
Subject key identifier: 29:5F:23:16:12:14:BE:F3:19:05:54:50:2E:6D:CC:31:5E:BA:0F:8F
Authority key identifier: AA:AC:61:97:79:9F:D6:8B:6E:5B:BE:0B:57:E6:52:FD:80:DD:36:21
Certificate issuer: /CN=aaac6197799fd68b6e5bbe0b57e652fd80dd3621
Certificate serial: 0198D6600AF489F7B73A79F42B32AC859724
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqxhl3mf1otuW74LV-ZS_YDdNiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.mft
Manifest number: 0237
Signing time: Sat 23 Aug 2025 10:01:14 +0000
Manifest this update: Sat 23 Aug 2025 10:01:14 +0000
Manifest next update: Sun 24 Aug 2025 10:01:14 +0000
Files and hashes: 1: HW--gyFyIjJfbbNnSxJATPWJGEI.roa (hash: shKJNjvcZlh2Drp2JswFM6L89Fwml75F7pDB0H15/3Q=)
2: qqxhl3mf1otuW74LV-ZS_YDdNiE.crl (hash: WM8sX+KLrZGkSGaev8YrC64TaaddThN3D6P4QSuvf74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qqxhl3mf1otuW74LV-ZS_YDdNiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:0a:f4:89:f7:b7:3a:79:f4:2b:32:ac:85:97:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaac6197799fd68b6e5bbe0b57e652fd80dd3621
Validity
Not Before: Aug 23 10:01:14 2025 GMT
Not After : Aug 24 10:01:14 2025 GMT
Subject: CN=295f23161214bef3190554502e6dcc315eba0f8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:87:80:6c:5a:31:7f:36:64:99:c7:ae:b1:7c:
99:69:56:43:ce:de:90:39:18:ce:ba:b5:19:57:73:
98:2d:50:2a:2d:07:4c:a0:fa:2f:d0:14:c7:1f:5c:
44:e1:cf:6e:28:d6:ce:f9:ee:0e:99:29:0b:3a:15:
0c:1d:b1:08:c9:cf:63:61:89:a3:9c:5b:3f:9b:da:
9c:04:c0:6f:1b:7c:c1:4e:72:92:9c:c5:3c:c2:9c:
6a:80:5c:f0:3e:92:df:39:9f:1a:4a:37:99:5e:69:
83:ea:4f:1f:01:93:4b:6a:f5:88:bd:96:27:96:b9:
00:4d:6e:70:25:2a:e3:d6:97:02:63:ce:8d:ca:ac:
9b:7b:14:d4:01:60:2f:8b:91:54:d3:91:21:af:0b:
8d:fb:8e:6d:a4:f1:d7:4a:0e:17:35:e5:d1:96:83:
4f:a3:ab:5c:06:fa:47:84:a6:11:0f:f5:00:1f:d0:
0a:5f:25:b7:99:78:ab:11:d4:fb:0a:a8:5e:97:33:
b3:c8:bf:88:5d:f8:18:75:82:11:1c:1a:b5:6f:d4:
93:fd:7b:f1:64:3e:57:c2:7e:c5:b7:14:9e:b4:29:
0c:c0:7c:97:be:da:91:5e:97:b9:97:87:53:76:7b:
bb:e0:7d:09:54:4c:6e:db:d1:19:4a:ce:5e:72:79:
fb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:5F:23:16:12:14:BE:F3:19:05:54:50:2E:6D:CC:31:5E:BA:0F:8F
X509v3 Authority Key Identifier:
keyid:AA:AC:61:97:79:9F:D6:8B:6E:5B:BE:0B:57:E6:52:FD:80:DD:36:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqxhl3mf1otuW74LV-ZS_YDdNiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:09:b8:bf:8f:6c:12:88:ab:71:7b:c8:0f:4c:34:89:0b:5e:
c7:d6:b5:be:d7:a5:57:78:76:aa:6f:3d:9e:a4:a6:5c:8f:32:
a3:5c:7c:d9:d1:9f:c0:93:7c:73:54:da:3c:d4:93:1e:7c:74:
fd:09:47:10:0e:05:d5:98:4c:34:d9:4b:fe:11:f1:f2:d3:36:
26:1e:40:c3:5f:a1:f3:59:b2:8e:b5:cd:2f:86:ea:6e:55:d3:
c3:69:7e:57:d4:50:f7:ab:37:d3:a6:e4:76:39:46:98:df:ad:
39:f9:d5:c7:67:7a:22:b9:a5:29:1f:7c:28:64:a4:75:54:d8:
c4:41:ac:e9:ce:c9:43:5f:05:f8:8f:6d:67:f3:7f:ed:be:68:
ef:d7:d3:c5:a2:b5:cd:be:84:e7:e8:56:f2:60:e0:08:bc:74:
d3:14:ae:10:c2:09:cc:16:fc:76:c4:1d:96:4b:53:51:4e:11:
17:33:65:bd:e5:21:11:c4:48:de:04:03:56:0c:1a:05:91:08:
ca:e0:e8:e4:33:2c:9c:31:dd:4e:fe:d1:47:bc:ab:d3:c7:74:
dc:f0:17:50:78:c4:7b:df:b0:ba:8e:b0:02:b2:bb:aa:a1:da:
c1:6d:84:dc:6d:6a:27:3f:9e:89:c6:f4:41:61:6a:c1:12:62:
f5:17:98:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:45:04 2025 by rpki-client