
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
File: mQqAlo5MlgPKKxPdHRRlll2PPb8.mft (raw, json)
Hash identifier: QONuIuQbMKrn3IzymgbBWG9KhnuDi5qluXtrFzjtw0U=
Subject key identifier: 90:B9:FF:CF:D5:19:58:E9:B1:8F:D0:5E:93:21:98:9C:68:31:99:70
Authority key identifier: 99:0A:80:96:8E:4C:96:03:CA:2B:13:DD:1D:14:65:96:5D:8F:3D:BF
Certificate issuer: /CN=990a80968e4c9603ca2b13dd1d1465965d8f3dbf
Certificate serial: 019897131F6D7FA61ED8B471A1FAAD8812CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQqAlo5MlgPKKxPdHRRlll2PPb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
Manifest number: 162A
Signing time: Mon 11 Aug 2025 03:01:09 +0000
Manifest this update: Mon 11 Aug 2025 03:01:09 +0000
Manifest next update: Tue 12 Aug 2025 03:01:09 +0000
Files and hashes: 1: Hcqbxc0FBGXnzzN6vZTEDk24h2s.roa (hash: 17n/7XCLJpAu2o2kBzK/5NmH6Sp4FBInaBa6mT4JmYc=)
2: W1ibYg0ozN5f0hkwbRX6gypQu6o.roa (hash: Q9hgjCdv4TipN26ttaTBJrYXDexn3QBOgW7gbPj7Hi8=)
3: mQqAlo5MlgPKKxPdHRRlll2PPb8.crl (hash: MADz7/MO7pZgrPXPWbqWlsbZzn6pcqth3DtVV2z0u8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQqAlo5MlgPKKxPdHRRlll2PPb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:13:1f:6d:7f:a6:1e:d8:b4:71:a1:fa:ad:88:12:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=990a80968e4c9603ca2b13dd1d1465965d8f3dbf
Validity
Not Before: Aug 11 03:01:09 2025 GMT
Not After : Aug 12 03:01:09 2025 GMT
Subject: CN=90b9ffcfd51958e9b18fd05e9321989c68319970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4c:f8:a2:b1:7a:4f:14:d4:e7:0d:45:1e:a6:
eb:97:2a:62:d1:7d:46:80:30:43:c3:55:4e:7f:21:
ab:0a:8e:4d:64:bc:f8:93:ff:1c:95:34:70:75:02:
ce:5f:3a:87:46:9d:d8:e2:7b:02:e0:cf:a1:14:04:
23:16:54:db:32:5f:7e:8b:a4:5d:43:a8:16:18:bd:
2a:e8:cf:f0:5a:11:6f:59:48:cf:33:c8:2d:bd:53:
a5:7a:ad:1d:64:b5:63:35:a4:ae:cc:19:4d:d2:1c:
ee:c2:a4:01:70:62:66:5b:1b:34:e0:78:f2:6c:1c:
25:c3:99:25:d2:48:49:d9:eb:6e:a8:e2:5e:4b:ac:
dc:ae:8c:73:b1:c0:ae:ca:0e:25:4c:bc:20:a8:6b:
5d:a3:e3:e0:75:e9:07:a0:49:61:10:85:9b:0a:4a:
32:69:bf:e4:b3:b2:ca:be:be:7b:21:e8:d8:0a:2d:
de:7a:e1:c7:f3:33:28:1f:86:78:52:06:64:f1:b1:
4f:50:0f:eb:4a:1d:10:ad:c6:bd:d5:c8:4e:25:c7:
50:23:4c:a3:2b:47:34:38:1c:65:8e:ec:63:20:98:
0f:87:c0:83:c4:e2:55:78:c2:35:c7:5b:12:b3:14:
6a:d5:33:b2:9d:41:95:86:8a:3e:c8:73:8f:f0:65:
da:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B9:FF:CF:D5:19:58:E9:B1:8F:D0:5E:93:21:98:9C:68:31:99:70
X509v3 Authority Key Identifier:
keyid:99:0A:80:96:8E:4C:96:03:CA:2B:13:DD:1D:14:65:96:5D:8F:3D:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQqAlo5MlgPKKxPdHRRlll2PPb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:ec:c3:ba:f0:40:b8:4d:08:ee:27:2b:b2:b6:ae:4f:5a:aa:
f5:b0:b9:7a:ca:5d:bc:f6:60:e8:c1:1e:3e:9d:e5:ae:00:ff:
78:ae:ba:5e:f0:f0:9f:bd:43:81:3f:26:fc:86:0c:5e:f9:6d:
f5:de:89:cf:8b:89:eb:ff:24:c7:07:19:4e:c7:44:63:ec:98:
94:1c:44:0c:3e:d4:02:a6:4b:6e:f7:64:94:dd:11:55:ff:7d:
6b:a3:6d:90:86:da:8f:3e:b9:ca:2c:52:dc:b6:16:9b:1f:1a:
8b:16:88:36:ad:63:96:3b:8f:5f:8c:ec:47:fb:93:02:17:7b:
3c:2c:10:4e:3c:92:28:3d:b3:a0:93:33:15:c9:61:a9:47:1b:
7b:84:61:21:f5:53:23:1c:f8:35:ac:b2:29:cf:be:a4:be:1e:
87:e3:97:6f:90:9a:4a:20:c0:2f:cf:5d:76:cb:33:40:82:85:
a2:2d:b3:24:ee:e7:ce:7c:f6:85:ba:8b:c7:ca:53:7a:1e:b3:
b8:2a:bd:28:34:41:d9:86:80:ac:d8:74:fd:5b:07:02:79:77:
02:5c:53:e4:e2:76:a6:e6:14:16:37:82:8b:15:07:c1:d7:b3:
a3:25:42:fb:98:bb:d4:76:a4:8e:eb:c4:70:90:0e:29:74:7d:
06:2e:ec:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 08:45:57 2025 by rpki-client