Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.mft
File: qqxhl3mf1otuW74LV-ZS_YDdNiE.mft (raw, json)
Hash identifier: xOudzkMNz7iCsh4OZ/60l7PpuCLlVEn+wgBG6toxPEY=
Subject key identifier: 24:63:F2:46:3B:B2:6F:F9:59:9D:14:3E:7E:E2:0D:C9:6B:22:4D:6F
Authority key identifier: AA:AC:61:97:79:9F:D6:8B:6E:5B:BE:0B:57:E6:52:FD:80:DD:36:21
Certificate issuer: /CN=aaac6197799fd68b6e5bbe0b57e652fd80dd3621
Certificate serial: 0199FDDA4D69E2DC215AAA243CDB710017A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqxhl3mf1otuW74LV-ZS_YDdNiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.mft
Manifest number: 02D0
Signing time: Sun 19 Oct 2025 19:02:46 +0000
Manifest this update: Sun 19 Oct 2025 19:02:46 +0000
Manifest next update: Mon 20 Oct 2025 19:02:46 +0000
Files and hashes: 1: HW--gyFyIjJfbbNnSxJATPWJGEI.roa (hash: shKJNjvcZlh2Drp2JswFM6L89Fwml75F7pDB0H15/3Q=)
2: qqxhl3mf1otuW74LV-ZS_YDdNiE.crl (hash: qSn3jHhfg7FdMj7ZV17scSb6e661VPuQPOrI1bPInKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qqxhl3mf1otuW74LV-ZS_YDdNiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:4d:69:e2:dc:21:5a:aa:24:3c:db:71:00:17:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaac6197799fd68b6e5bbe0b57e652fd80dd3621
Validity
Not Before: Oct 19 19:02:46 2025 GMT
Not After : Oct 20 19:02:46 2025 GMT
Subject: CN=2463f2463bb26ff9599d143e7ee20dc96b224d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f5:33:ac:58:91:a0:62:ba:d2:f0:05:29:b0:
ff:31:1d:e5:05:0f:8a:95:83:0c:bd:c5:79:3e:72:
b5:b3:05:c1:62:64:3b:d7:b7:20:c1:33:ba:cd:ff:
a3:ff:ec:9f:0c:f2:3d:dc:5f:b3:d9:68:f6:ef:56:
9d:eb:b9:a3:99:ba:5b:ec:2d:a8:94:5b:65:aa:dc:
28:cc:e5:17:93:d0:84:30:fa:db:12:96:79:2f:79:
40:2c:83:40:fd:9d:a4:6c:48:77:1e:78:84:e8:ba:
ab:0e:2d:b3:57:3d:f6:b3:a5:15:1d:cc:6f:21:ed:
36:cd:0b:4b:14:15:54:59:49:44:1e:f8:73:4b:75:
a2:85:e7:e5:24:9c:30:68:de:0a:5d:95:43:02:f5:
c9:3b:6d:c2:8d:8d:6d:2c:de:d4:f5:6f:3c:53:a6:
21:41:63:a9:3f:6f:bf:b7:02:55:3b:9a:6e:f1:3d:
48:d6:4b:25:c2:4b:b3:62:d9:bd:c0:de:06:cc:98:
25:e8:ea:df:33:ac:cc:59:4b:b1:1d:ef:54:6f:6c:
03:e0:50:82:a3:5b:67:ee:da:81:62:48:fc:3a:99:
2d:84:4b:15:cb:b2:78:b9:98:85:7e:1d:d1:f5:41:
80:5a:ca:2a:c6:88:2c:35:f2:e4:31:87:81:f5:2c:
bf:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:63:F2:46:3B:B2:6F:F9:59:9D:14:3E:7E:E2:0D:C9:6B:22:4D:6F
X509v3 Authority Key Identifier:
keyid:AA:AC:61:97:79:9F:D6:8B:6E:5B:BE:0B:57:E6:52:FD:80:DD:36:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqxhl3mf1otuW74LV-ZS_YDdNiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:b5:03:2d:2d:e7:6f:60:c2:30:f9:1e:99:61:8c:2d:d8:94:
5c:0e:0a:65:d4:54:d1:24:93:cb:05:c9:95:a7:3d:60:74:f0:
af:a1:ce:78:49:15:5d:dc:7c:0a:c2:64:53:ff:45:c1:bd:49:
b0:a9:45:1c:dd:8d:dc:2b:6f:bd:49:d9:5c:3b:00:95:d7:80:
cf:7b:e4:72:19:4e:21:55:af:1c:df:11:8b:a9:c9:89:05:f4:
30:d7:12:94:e4:d7:fe:21:e5:43:f1:c9:53:38:3a:53:f2:92:
2d:2b:ed:0c:f7:f6:4f:6c:24:5f:0f:cd:82:4d:d5:20:78:57:
14:61:e6:73:bf:ef:75:b4:6b:df:0e:5e:14:80:26:b7:c7:1a:
0d:4b:fa:c4:f2:ab:db:a8:97:af:20:9a:cd:14:5b:7a:93:6b:
78:06:5e:90:ed:b8:01:c9:55:9b:dc:14:69:e9:44:d1:79:61:
63:94:96:e2:2c:cb:6d:44:a2:f0:ec:d6:1c:83:b0:19:90:d4:
86:e5:2c:e3:22:ab:db:23:94:07:ec:eb:07:38:9c:b3:39:27:
c0:81:09:a1:7c:20:95:4c:a5:c5:cc:e7:9b:69:f9:ef:35:a8:
a9:35:c7:50:d2:2e:71:e5:fd:a1:b4:02:40:d3:07:83:9a:e9:
d2:af:b2:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92k1p4twhWqokPNtxABelMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhYWM2MTk3Nzk5ZmQ2OGI2ZTViYmUwYjU3ZTY1MmZkODBk
ZDM2MjEwHhcNMjUxMDE5MTkwMjQ2WhcNMjUxMDIwMTkwMjQ2WjAzMTEwLwYDVQQD
EygyNDYzZjI0NjNiYjI2ZmY5NTk5ZDE0M2U3ZWUyMGRjOTZiMjI0ZDZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/UzrFiRoGK60vAFKbD/MR3lBQ+K
lYMMvcV5PnK1swXBYmQ717cgwTO6zf+j/+yfDPI93F+z2Wj271ad67mjmbpb7C2o
lFtlqtwozOUXk9CEMPrbEpZ5L3lALINA/Z2kbEh3HniE6LqrDi2zVz32s6UVHcxv
Ie02zQtLFBVUWUlEHvhzS3WiheflJJwwaN4KXZVDAvXJO23CjY1tLN7U9W88U6Yh
QWOpP2+/twJVO5pu8T1I1kslwkuzYtm9wN4GzJgl6OrfM6zMWUuxHe9Ub2wD4FCC
o1tn7tqBYkj8OpkthEsVy7J4uZiFfh3R9UGAWsoqxogsNfLkMYeB9Sy/AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCRj8kY7sm/5WZ0UPn7iDclrIk1vMB8GA1UdIwQY
MBaAFKqsYZd5n9aLblu+C1fmUv2A3TYhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXF4aGwzbWYxb3R1Vzc0TFYtWlNfWURkTmlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC84ODMwMWMtYWM3OS00MDgzLTkyOGYt
NWI0OWRiNjVjNTQ1LzEvcXF4aGwzbWYxb3R1Vzc0TFYtWlNfWURkTmlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC84ODMwMWMtYWM3OS00MDgzLTkyOGYtNWI0OWRiNjVjNTQ1
LzEvcXF4aGwzbWYxb3R1Vzc0TFYtWlNfWURkTmlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQrUDLS3n
b2DCMPkemWGMLdiUXA4KZdRU0SSTywXJlac9YHTwr6HOeEkVXdx8CsJkU/9Fwb1J
sKlFHN2N3CtvvUnZXDsAldeAz3vkchlOIVWvHN8Ri6nJiQX0MNcSlOTX/iHlQ/HJ
Uzg6U/KSLSvtDPf2T2wkXw/Ngk3VIHhXFGHmc7/vdbRr3w5eFIAmt8caDUv6xPKr
26iXryCazRRbepNreAZekO24AclVm9wUaelE0XlhY5SW4izLbUSi8OzWHIOwGZDU
huUs4yKr2yOUB+zrBzicszknwIEJoXwglUylxcznm2n57zWoqTXHUNIuceX9obQC
QNMHg5rp0q+y4g==
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:02:36 2025 by rpki-client