Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.mft
File: qo_QXutuoFoR1mer7djqEJPScbM.mft (raw, json)
Hash identifier: G4ZuZSygraO8IJabzgalyPr2PHacYyttSSBgc5seYi4=
Subject key identifier: DD:19:3C:57:8C:AE:64:EE:05:18:D6:BB:E3:0A:03:C8:20:50:7E:F2
Authority key identifier: AA:8F:D0:5E:EB:6E:A0:5A:11:D6:67:AB:ED:D8:EA:10:93:D2:71:B3
Certificate issuer: /CN=aa8fd05eeb6ea05a11d667abedd8ea1093d271b3
Certificate serial: 0199FD347D087DBFACA6BAAF7517862B2C28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qo_QXutuoFoR1mer7djqEJPScbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 16:01:39 +0000
Manifest this update: Sun 19 Oct 2025 16:01:39 +0000
Manifest next update: Mon 20 Oct 2025 16:01:39 +0000
Files and hashes: 1: lfJUEj9OpKtkyjj6xaEeSMukOrA.roa (hash: 9AsF2IZpbVSPw/O9UldkVW9AyHlVo6jZ0snpU1eDlm8=)
2: qo_QXutuoFoR1mer7djqEJPScbM.crl (hash: hbSVqL6xxKxKWvzP1PEd4q12M3xftRsUphBt75Oxpjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qo_QXutuoFoR1mer7djqEJPScbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:7d:08:7d:bf:ac:a6:ba:af:75:17:86:2b:2c:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa8fd05eeb6ea05a11d667abedd8ea1093d271b3
Validity
Not Before: Oct 19 16:01:39 2025 GMT
Not After : Oct 20 16:01:39 2025 GMT
Subject: CN=dd193c578cae64ee0518d6bbe30a03c820507ef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6a:41:69:bd:a1:ec:b6:5c:2b:b5:4c:dc:fe:
3c:0a:94:f8:24:c4:7f:70:ce:4d:0c:98:7a:6b:e5:
d4:fe:46:37:32:d9:c2:b7:29:50:7f:0f:d0:9e:71:
96:6e:a1:7b:1f:ee:86:26:e0:7a:ac:20:34:8c:db:
04:8f:3c:00:41:a6:30:7f:88:16:00:f6:9c:e5:0b:
d1:20:9c:1b:1d:ae:9f:e1:c8:8b:e1:06:8d:2d:5c:
3f:12:cb:ad:e2:cc:81:7e:dc:27:3a:1d:0c:91:f3:
f9:98:7b:66:8a:cc:b5:2c:9d:d8:6f:a6:90:e5:e7:
2b:d8:a7:01:aa:6d:00:ef:b9:91:80:30:fc:60:e4:
f8:a7:9c:a5:b5:35:7f:9c:60:88:da:c2:2a:09:98:
6d:f8:e6:5d:5a:50:96:0a:c0:a7:e5:44:1c:d3:11:
5e:d9:ec:26:f9:12:b1:94:cb:fa:ad:88:5a:46:a6:
cc:79:0d:ac:3c:9c:d4:a5:b3:4d:16:7f:06:f6:af:
18:01:22:5d:58:20:71:4b:fe:e6:02:2c:79:a0:e3:
4f:dd:d8:1b:b0:42:e8:10:2c:2b:9a:f8:e2:dc:79:
b2:db:30:93:09:89:68:23:39:2b:63:f7:9a:da:c8:
e1:1f:a1:af:c5:28:b9:ce:ae:ab:0c:97:ed:0f:8b:
ba:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:19:3C:57:8C:AE:64:EE:05:18:D6:BB:E3:0A:03:C8:20:50:7E:F2
X509v3 Authority Key Identifier:
keyid:AA:8F:D0:5E:EB:6E:A0:5A:11:D6:67:AB:ED:D8:EA:10:93:D2:71:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qo_QXutuoFoR1mer7djqEJPScbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:29:f3:12:63:1a:43:14:83:52:28:53:0f:ec:77:9b:fc:2e:
f1:92:d8:85:65:c4:e0:51:f3:3b:7e:54:bd:19:0d:0a:fc:22:
55:5b:48:7a:87:7c:c6:9e:f2:a1:2e:14:d6:74:b0:9d:30:f9:
48:01:44:4a:86:63:5a:e9:b9:79:41:d7:bf:cb:77:26:8b:2f:
a6:01:be:b7:d2:09:32:fd:18:cd:97:c8:a5:3b:2d:e8:dc:65:
d8:a7:ed:80:cc:94:cb:27:a0:8a:04:45:1d:c1:0e:59:a9:9d:
9a:62:9c:58:0b:75:b3:b5:8a:8e:73:99:5f:b8:33:2b:c5:b2:
ef:bd:eb:2f:03:3d:43:71:5c:c3:54:a3:5c:d6:ef:95:87:7e:
9e:97:bf:57:b3:f7:dc:00:2e:15:ee:f1:27:8e:5a:ec:5d:84:
80:39:15:5b:d5:7a:4b:a2:58:1d:37:06:d4:20:94:6f:2d:67:
b7:10:a2:f7:f0:40:7c:51:ec:f1:b9:fe:62:b6:6b:bc:4a:f0:
b6:8d:d9:1d:62:17:d7:d2:f8:2e:e0:5c:3c:a9:77:08:bf:a8:
8b:48:fb:05:18:80:e1:97:16:c6:f4:78:29:f2:50:95:d7:90:
b1:9e:13:58:42:e6:98:8d:76:2c:b6:78:5b:9e:68:1d:87:bc:
dd:0a:49:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:55:12 2025 by rpki-client