Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d09fb9-f3fa-45b8-a5cd-77b489249fa4/1/qqlyrDzBD3FspJhQRaXwgktgyh8.mft
File: qqlyrDzBD3FspJhQRaXwgktgyh8.mft (raw, json)
Hash identifier: Qp6hhT9yGj0JqH+lMLcLMhUNLpI0EfWkxJb1SWTzHgI=
Subject key identifier: 7E:96:85:61:62:CE:07:9F:F9:5B:17:FE:44:C3:B2:F6:77:B2:15:8C
Authority key identifier: AA:A9:72:AC:3C:C1:0F:71:6C:A4:98:50:45:A5:F0:82:4B:60:CA:1F
Certificate issuer: /CN=aaa972ac3cc10f716ca4985045a5f0824b60ca1f
Certificate serial: 019897EF0227388D26184C1CB791B10CCFD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqlyrDzBD3FspJhQRaXwgktgyh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d09fb9-f3fa-45b8-a5cd-77b489249fa4/1/qqlyrDzBD3FspJhQRaXwgktgyh8.mft
Manifest number: 0135
Signing time: Mon 11 Aug 2025 07:01:19 +0000
Manifest this update: Mon 11 Aug 2025 07:01:19 +0000
Manifest next update: Tue 12 Aug 2025 07:01:19 +0000
Files and hashes: 1: qqlyrDzBD3FspJhQRaXwgktgyh8.crl (hash: KAgj55a+qEMTEPSEP1uIBdh2ljsuws7w8LfpbQPortQ=)
2: yIGIxees9MuARoWN6t0oVINh_4A.roa (hash: geAsTIsbC4XBTKHwgmaJ0ZNmwh/Z8F8NnaAnGD8ONe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d09fb9-f3fa-45b8-a5cd-77b489249fa4/1/qqlyrDzBD3FspJhQRaXwgktgyh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/d09fb9-f3fa-45b8-a5cd-77b489249fa4/1/qqlyrDzBD3FspJhQRaXwgktgyh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qqlyrDzBD3FspJhQRaXwgktgyh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:ef:02:27:38:8d:26:18:4c:1c:b7:91:b1:0c:cf:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaa972ac3cc10f716ca4985045a5f0824b60ca1f
Validity
Not Before: Aug 11 07:01:19 2025 GMT
Not After : Aug 12 07:01:19 2025 GMT
Subject: CN=7e96856162ce079ff95b17fe44c3b2f677b2158c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4e:dd:75:ca:1a:f5:fc:5d:50:83:08:58:24:
74:b8:06:f2:8c:fb:d9:5f:08:3a:4c:f5:ab:53:fd:
8c:6c:a4:f7:4d:e3:40:70:6f:cb:dc:ba:35:23:4a:
1b:99:cd:b5:39:75:6b:1a:a1:0f:cb:a5:12:6a:a6:
3f:b1:aa:25:a6:8d:55:7c:82:9e:b8:d8:18:96:ef:
5e:73:07:a2:44:27:6b:62:1d:c3:c5:87:5f:c6:ed:
a9:ea:de:43:8b:63:81:35:12:d8:bd:62:4c:2c:a0:
d7:1f:50:1a:c9:30:21:e3:4b:71:61:35:ee:de:57:
41:1f:ee:a7:af:93:8e:99:b1:36:e1:9b:09:ec:30:
a0:65:75:48:93:29:bc:8c:62:e8:0e:35:5d:e2:56:
e7:c9:4b:b6:23:47:a6:63:ce:49:52:b6:dc:77:94:
52:e5:6f:82:4e:f0:36:9d:d0:11:a5:8d:f3:44:d5:
cb:e9:fa:dc:0b:d6:38:1f:ea:7c:2a:54:17:dd:6b:
76:63:13:05:72:cd:98:e9:47:ba:ce:50:c6:02:e9:
19:be:40:1e:c0:6f:0c:6e:5d:04:02:a9:a1:58:a1:
aa:e3:de:a4:bc:f5:49:e4:25:88:e0:54:07:3d:f8:
7d:da:0f:44:b1:e6:60:8a:e9:ce:cd:b8:35:a0:c3:
f6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:96:85:61:62:CE:07:9F:F9:5B:17:FE:44:C3:B2:F6:77:B2:15:8C
X509v3 Authority Key Identifier:
keyid:AA:A9:72:AC:3C:C1:0F:71:6C:A4:98:50:45:A5:F0:82:4B:60:CA:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqlyrDzBD3FspJhQRaXwgktgyh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d09fb9-f3fa-45b8-a5cd-77b489249fa4/1/qqlyrDzBD3FspJhQRaXwgktgyh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d09fb9-f3fa-45b8-a5cd-77b489249fa4/1/qqlyrDzBD3FspJhQRaXwgktgyh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:8c:f0:7c:e6:44:78:c6:ef:e3:9c:48:9b:ea:98:b0:a5:78:
52:76:28:d5:98:fa:e5:51:0f:70:a4:b5:f4:60:6e:2e:58:4e:
6f:75:5a:2e:6c:ad:bc:c8:35:75:aa:c7:6d:3f:34:73:24:8a:
ef:ab:99:b5:68:7b:a6:6d:ca:40:4a:d6:65:0d:01:03:3e:20:
1d:5e:34:4f:b5:6f:5e:66:0e:50:3f:37:7e:b5:58:ea:4f:31:
65:7d:4e:75:f3:33:b6:28:a5:4f:d4:14:92:7f:f5:20:12:71:
07:74:91:5f:f4:f5:3a:b4:e3:50:33:6e:98:dd:11:fb:a9:e1:
1b:b5:89:64:68:a5:3f:db:b8:3c:72:53:cf:38:47:5d:bf:19:
ed:e0:ef:09:5c:c6:5a:d5:2a:61:b1:bd:e0:af:5a:c4:98:15:
a3:7e:36:b5:88:c9:65:24:62:9e:f2:a2:66:b1:11:19:83:4a:
f8:de:28:4a:5a:e5:9f:b5:ab:5b:37:b9:80:75:bc:6e:40:59:
b4:85:9b:57:ef:38:17:d7:be:c3:0c:5a:be:fb:4a:9a:fa:e4:
55:7e:bd:3c:1e:f6:11:60:ef:53:ef:ce:37:07:ea:9b:d8:85:
4d:1f:a3:d7:a2:45:cb:06:f3:5d:94:67:ea:78:6e:60:a0:ce:
b5:a4:d9:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:29:15 2025 by rpki-client