
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/64ae5a-8622-45e2-9327-512f565ac011/1/qqbmeSWCHkuHnIA-wKUiRflnOtA.mft
File: qqbmeSWCHkuHnIA-wKUiRflnOtA.mft (raw, json)
Hash identifier: YUaHrWaNFvjg7t+1wQ2CuFKNCRcOsY1TsftOr/jZ3G8=
Subject key identifier: F1:4A:D8:6F:E3:59:B5:4F:13:66:CC:35:0A:32:5C:1C:D0:01:00:4F
Authority key identifier: AA:A6:E6:79:25:82:1E:4B:87:9C:80:3E:C0:A5:22:45:F9:67:3A:D0
Certificate issuer: /CN=aaa6e67925821e4b879c803ec0a52245f9673ad0
Certificate serial: 01988B45B91E577520B9F12DD6253996D043
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqbmeSWCHkuHnIA-wKUiRflnOtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/64ae5a-8622-45e2-9327-512f565ac011/1/qqbmeSWCHkuHnIA-wKUiRflnOtA.mft
Manifest number: 03C5
Signing time: Fri 08 Aug 2025 20:00:59 +0000
Manifest this update: Fri 08 Aug 2025 20:00:59 +0000
Manifest next update: Sat 09 Aug 2025 20:00:59 +0000
Files and hashes: 1: qqbmeSWCHkuHnIA-wKUiRflnOtA.crl (hash: /vdnDP+QGnTNyFvTvp+9TCuUPQT8xY31FdgwyOsFNo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/64ae5a-8622-45e2-9327-512f565ac011/1/qqbmeSWCHkuHnIA-wKUiRflnOtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/64ae5a-8622-45e2-9327-512f565ac011/1/qqbmeSWCHkuHnIA-wKUiRflnOtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qqbmeSWCHkuHnIA-wKUiRflnOtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:45:b9:1e:57:75:20:b9:f1:2d:d6:25:39:96:d0:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaa6e67925821e4b879c803ec0a52245f9673ad0
Validity
Not Before: Aug 8 20:00:59 2025 GMT
Not After : Aug 9 20:00:59 2025 GMT
Subject: CN=f14ad86fe359b54f1366cc350a325c1cd001004f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:11:86:f6:dc:da:f1:4b:3f:17:31:df:18:0e:
62:41:8b:fc:2f:d8:9a:cc:30:2f:db:6d:fc:17:b8:
1a:7d:cf:11:b9:55:40:6a:dc:ed:cb:3d:87:0b:7b:
43:4a:1c:67:0c:9e:3b:8c:2e:5f:8e:c6:98:04:a7:
bf:46:8e:1f:b4:8e:9e:72:b6:64:68:28:a6:67:a1:
39:70:ad:a3:88:ab:24:8a:cb:c0:71:c0:2d:a9:f4:
99:c6:54:ad:97:d6:6c:37:dc:35:b9:c1:8a:2a:c8:
1b:cc:fb:dd:bb:e6:7e:6b:e5:b6:b8:23:71:64:64:
7b:7e:55:12:38:26:49:3a:1a:0b:89:73:a5:d4:13:
12:60:5f:03:6a:51:e0:f5:15:0f:a6:d2:9c:b2:e8:
54:cd:a2:bf:52:1e:f5:04:52:d4:54:7a:ee:a0:49:
5a:2a:bd:c6:79:78:c4:0c:c0:7a:34:6e:ce:1d:ee:
69:45:33:f5:01:98:db:d9:c4:f6:b5:cf:9d:1d:5d:
74:ff:5c:0d:aa:f7:f3:eb:cd:fd:10:23:76:93:cd:
69:ca:50:e3:5d:93:66:77:2b:c5:49:54:59:01:9d:
3d:fe:d3:07:85:1e:32:93:3a:5b:c3:44:1d:4f:67:
bc:4b:c5:62:7d:1c:aa:75:69:82:46:4d:37:a8:43:
a4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:4A:D8:6F:E3:59:B5:4F:13:66:CC:35:0A:32:5C:1C:D0:01:00:4F
X509v3 Authority Key Identifier:
keyid:AA:A6:E6:79:25:82:1E:4B:87:9C:80:3E:C0:A5:22:45:F9:67:3A:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqbmeSWCHkuHnIA-wKUiRflnOtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/64ae5a-8622-45e2-9327-512f565ac011/1/qqbmeSWCHkuHnIA-wKUiRflnOtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/64ae5a-8622-45e2-9327-512f565ac011/1/qqbmeSWCHkuHnIA-wKUiRflnOtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:31:57:50:73:1e:00:eb:ab:f5:11:8d:0f:2e:e2:4d:7c:51:
22:3a:f0:5b:a6:7c:f1:1c:c4:4f:cf:5e:34:e5:0b:b4:a9:40:
74:38:21:63:cd:93:ad:8b:5a:ac:fd:9d:81:5a:39:c3:70:ec:
c7:7c:a3:23:f9:85:05:c3:b5:e1:a8:11:45:4b:86:e4:55:a3:
da:fd:0b:6b:c2:02:d3:f6:77:95:45:0c:88:73:c8:38:ca:cb:
64:8c:88:0e:64:e2:ee:a1:df:9b:ec:a8:f6:b9:ad:65:a2:2b:
b5:22:c8:01:99:17:75:e9:a3:42:b9:f3:86:b5:4b:6c:3a:b8:
35:77:ca:c5:c5:45:80:8d:b1:c5:00:9c:2e:c0:9c:bf:b0:91:
87:3a:49:fb:9b:eb:43:23:ec:81:28:99:17:2c:bd:72:b1:98:
bf:ed:d1:60:ed:9b:1a:23:78:bb:8e:5e:cc:97:a3:05:f0:be:
72:c5:dd:0e:7b:ab:8e:ee:07:66:23:2d:bf:57:e9:69:16:8b:
8b:45:80:da:cb:c5:76:ad:89:0d:54:23:ed:18:32:93:99:ea:
a6:34:86:59:87:c1:e8:fc:8d:15:ef:81:2e:13:d7:62:0e:74:
03:97:fe:0a:32:6c:37:10:05:84:aa:91:80:6e:8a:a3:5f:0f:
f4:63:6d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:47:39 2025 by rpki-client