Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft
File: CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft (raw, json)
Hash identifier: Zzm90NwPpZWEE/rRrNye40IWkA/EbCB8Nj4YEO/rdTE=
Subject key identifier: 86:01:8B:6C:D2:49:6D:80:2D:82:32:88:38:14:15:9E:FA:4E:17:A6
Authority key identifier: 0A:AA:A7:9C:AA:CF:F5:F0:30:4B:9A:E9:00:2E:27:13:FB:FF:6D:52
Certificate issuer: /CN=0aaaa79caacff5f0304b9ae9002e2713fbff6d52
Certificate serial: 0199FE7DD45357C7B61E89443129D0B89059
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CqqnnKrP9fAwS5rpAC4nE_v_bVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft
Manifest number: 0E7D
Signing time: Sun 19 Oct 2025 22:01:23 +0000
Manifest this update: Sun 19 Oct 2025 22:01:23 +0000
Manifest next update: Mon 20 Oct 2025 22:01:23 +0000
Files and hashes: 1: CqqnnKrP9fAwS5rpAC4nE_v_bVI.crl (hash: Ty62sH7qnB0DC+aBjnwWsziXKtCflUkh0aWzdlDb+QQ=)
2: YVDiu2Bt78Tw59IN2GiD08sPbEY.roa (hash: gfGYuVaf6Cp8c+ZZnEv2bV6oyjPxVpLPDTmNGZk2jGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CqqnnKrP9fAwS5rpAC4nE_v_bVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:d4:53:57:c7:b6:1e:89:44:31:29:d0:b8:90:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aaaa79caacff5f0304b9ae9002e2713fbff6d52
Validity
Not Before: Oct 19 22:01:23 2025 GMT
Not After : Oct 20 22:01:23 2025 GMT
Subject: CN=86018b6cd2496d802d8232883814159efa4e17a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:eb:d9:7d:58:da:a8:86:3a:c8:7a:9f:f5:82:
35:2c:75:17:e8:45:d0:4b:bd:44:80:56:7e:30:05:
99:f0:50:d4:92:83:b6:69:81:29:6a:13:34:21:16:
40:8e:fc:4d:71:73:37:f8:38:ab:f4:af:d9:3b:ae:
59:64:03:68:27:04:ec:49:3a:76:c8:16:b1:9f:41:
16:dd:a4:39:3b:e4:96:55:87:6a:a3:b5:1a:c2:d0:
7f:22:45:19:c6:65:32:ff:8f:25:bf:db:69:00:2c:
b4:14:98:e5:5b:ef:a2:08:ea:6e:66:5a:57:e8:f8:
aa:22:c0:9c:b3:ff:30:1d:7b:c7:6a:2c:ec:cf:6a:
5e:ac:e1:ff:e5:dc:9a:50:bc:c1:e0:8e:54:2d:ae:
92:11:be:ff:bc:1e:c4:1d:e8:85:c4:81:5e:14:18:
9e:ec:63:0a:12:58:10:34:01:ab:2d:1a:a2:b3:04:
e8:c6:ea:ee:ce:0f:64:1e:25:2a:8b:20:64:d3:f4:
1e:7d:2a:b8:fa:27:2d:e3:ae:10:82:97:9a:e8:22:
75:78:24:88:44:3c:5c:5e:cc:2f:44:ba:56:a2:e5:
fb:de:28:d3:9b:32:a1:c0:5b:e2:b0:ae:2a:3c:b5:
b9:de:22:c1:bf:43:37:dd:27:6b:2e:a6:58:96:01:
eb:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:01:8B:6C:D2:49:6D:80:2D:82:32:88:38:14:15:9E:FA:4E:17:A6
X509v3 Authority Key Identifier:
keyid:0A:AA:A7:9C:AA:CF:F5:F0:30:4B:9A:E9:00:2E:27:13:FB:FF:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CqqnnKrP9fAwS5rpAC4nE_v_bVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:24:4e:21:7c:e0:32:43:de:1a:81:67:47:13:cb:92:a5:94:
3b:95:0b:1a:8e:48:ae:0c:17:ce:ed:24:a3:e4:a7:74:ae:e7:
43:8b:72:af:4e:cc:bd:d6:12:ac:53:65:d4:19:61:df:03:45:
22:01:8a:a1:c3:aa:c6:3c:15:0d:85:db:c7:63:48:b7:60:f9:
5e:9b:b2:3c:2d:32:76:e8:97:69:fb:f0:2e:0e:9a:28:4f:8b:
50:3c:fb:53:fc:fb:c4:66:8e:43:a7:43:55:54:c7:c1:91:c5:
e9:0f:9a:ea:cf:8d:6c:0f:9c:fa:98:02:7b:7c:2d:73:46:30:
09:fd:f1:df:48:5c:15:b4:2f:2a:f0:45:e5:4a:3a:eb:b4:1e:
0a:d6:57:81:96:9d:c2:bd:5d:53:09:cf:67:68:a4:a0:c0:65:
82:ea:06:d3:97:cd:91:38:d0:82:31:51:83:a1:77:f0:b0:ea:
43:51:75:14:73:50:0f:e6:f5:62:05:79:0d:69:8d:7a:32:0d:
44:8d:f4:7a:cd:3e:2c:1d:06:ad:6a:84:ed:a5:75:57:6e:0f:
a6:c1:8a:1c:e3:d7:36:68:ac:21:dc:fd:95:2a:1a:20:57:18:
ab:fe:16:ee:45:b6:e1:8f:46:b0:d5:83:c0:61:ab:c5:b5:c4:
1c:ec:04:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+fdRTV8e2HolEMSnQuJBZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhYWFhNzljYWFjZmY1ZjAzMDRiOWFlOTAwMmUyNzEzZmJm
ZjZkNTIwHhcNMjUxMDE5MjIwMTIzWhcNMjUxMDIwMjIwMTIzWjAzMTEwLwYDVQQD
Eyg4NjAxOGI2Y2QyNDk2ZDgwMmQ4MjMyODgzODE0MTU5ZWZhNGUxN2E2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOvZfVjaqIY6yHqf9YI1LHUX6EXQ
S71EgFZ+MAWZ8FDUkoO2aYEpahM0IRZAjvxNcXM3+Dir9K/ZO65ZZANoJwTsSTp2
yBaxn0EW3aQ5O+SWVYdqo7UawtB/IkUZxmUy/48lv9tpACy0FJjlW++iCOpuZlpX
6PiqIsCcs/8wHXvHaizsz2perOH/5dyaULzB4I5ULa6SEb7/vB7EHeiFxIFeFBie
7GMKElgQNAGrLRqiswToxuruzg9kHiUqiyBk0/QefSq4+ict464Qgpea6CJ1eCSI
RDxcXswvRLpWouX73ijTmzKhwFvisK4qPLW53iLBv0M33SdrLqZYlgHryQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIYBi2zSSW2ALYIyiDgUFZ76ThemMB8GA1UdIwQY
MBaAFAqqp5yqz/XwMEua6QAuJxP7/21SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3Fxbm5LclA5ZkF3UzVycEFDNG5FX3ZfYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8yZmMyNjYtMTI0Ny00ZjAwLWIxNjEt
NmViOWEyMjEyOWUxLzEvQ3Fxbm5LclA5ZkF3UzVycEFDNG5FX3ZfYlZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8yZmMyNjYtMTI0Ny00ZjAwLWIxNjEtNmViOWEyMjEyOWUx
LzEvQ3Fxbm5LclA5ZkF3UzVycEFDNG5FX3ZfYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAriROIXzg
MkPeGoFnRxPLkqWUO5ULGo5IrgwXzu0ko+SndK7nQ4tyr07MvdYSrFNl1Blh3wNF
IgGKocOqxjwVDYXbx2NIt2D5XpuyPC0yduiXafvwLg6aKE+LUDz7U/z7xGaOQ6dD
VVTHwZHF6Q+a6s+NbA+c+pgCe3wtc0YwCf3x30hcFbQvKvBF5Uo667QeCtZXgZad
wr1dUwnPZ2ikoMBlguoG05fNkTjQgjFRg6F38LDqQ1F1FHNQD+b1YgV5DWmNejIN
RI30es0+LB0GrWqE7aV1V24PpsGKHOPXNmisIdz9lSoaIFcYq/4W7kW24Y9GsNWD
wGGrxbXEHOwEYg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:41:35 2025 by rpki-client