Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.mft
File: qqxhl3mf1otuW74LV-ZS_YDdNiE.mft (raw, json)
Hash identifier: bVrgQUDcDNRHaDi7bzJVr+VjTEyTL4L24CUp5FFLDUI=
Subject key identifier: 4A:6D:DD:88:91:72:9F:3A:22:15:3F:F8:2F:19:4D:01:FF:84:3A:62
Authority key identifier: AA:AC:61:97:79:9F:D6:8B:6E:5B:BE:0B:57:E6:52:FD:80:DD:36:21
Certificate issuer: /CN=aaac6197799fd68b6e5bbe0b57e652fd80dd3621
Certificate serial: 019890DA554002E5B189C55F877EC2BA4756
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqxhl3mf1otuW74LV-ZS_YDdNiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.mft
Manifest number: 0213
Signing time: Sat 09 Aug 2025 22:01:24 +0000
Manifest this update: Sat 09 Aug 2025 22:01:24 +0000
Manifest next update: Sun 10 Aug 2025 22:01:24 +0000
Files and hashes: 1: HW--gyFyIjJfbbNnSxJATPWJGEI.roa (hash: shKJNjvcZlh2Drp2JswFM6L89Fwml75F7pDB0H15/3Q=)
2: qqxhl3mf1otuW74LV-ZS_YDdNiE.crl (hash: 6xqvkIPrRue+jMIpFgd+eOYKCFcunJM9zQQrrC0LZCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qqxhl3mf1otuW74LV-ZS_YDdNiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 22:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:da:55:40:02:e5:b1:89:c5:5f:87:7e:c2:ba:47:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaac6197799fd68b6e5bbe0b57e652fd80dd3621
Validity
Not Before: Aug 9 22:01:24 2025 GMT
Not After : Aug 10 22:01:24 2025 GMT
Subject: CN=4a6ddd8891729f3a22153ff82f194d01ff843a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:38:fc:47:8a:64:33:e5:9b:58:eb:1c:c5:24:
05:71:7b:41:4f:6f:e7:70:4a:20:c3:69:96:dd:d0:
e9:c6:15:85:1d:c7:a6:94:69:a4:5c:b4:af:c7:74:
f7:7c:b1:2b:99:ca:13:e6:58:39:a1:b3:51:0b:43:
b3:04:d1:65:11:84:dc:a7:75:74:ff:bc:4b:b2:90:
7e:56:89:e6:71:73:69:8b:31:de:d6:d1:43:25:19:
ed:f0:55:b4:d5:98:aa:51:ea:22:aa:f4:ae:9e:a8:
bf:2b:9e:5e:61:d6:84:a6:73:8d:60:55:21:c3:77:
59:fb:2f:55:1e:60:bd:18:1e:a1:ba:0c:a8:9b:7d:
b7:dc:2f:af:be:fb:05:cf:1c:ff:00:bd:ee:5a:07:
2f:11:98:13:a8:25:79:39:85:0f:c1:77:dc:4f:ca:
a3:33:01:82:89:19:2f:2f:9b:f8:f9:c0:59:24:49:
6c:8c:98:f1:c5:ad:d3:dd:47:0e:c7:e7:1e:e5:b2:
96:27:79:e8:df:9c:a5:1a:99:e1:cb:ea:71:d1:01:
40:ce:f2:3e:2f:18:15:43:e1:47:d6:3c:69:ff:51:
3a:a1:d1:fa:ae:69:08:9a:6d:bf:46:9c:0b:39:d2:
aa:cf:d6:25:a6:7b:90:3c:d0:97:b0:a2:bb:46:91:
b9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:6D:DD:88:91:72:9F:3A:22:15:3F:F8:2F:19:4D:01:FF:84:3A:62
X509v3 Authority Key Identifier:
keyid:AA:AC:61:97:79:9F:D6:8B:6E:5B:BE:0B:57:E6:52:FD:80:DD:36:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqxhl3mf1otuW74LV-ZS_YDdNiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:f2:b8:37:7c:8d:2e:4e:09:f5:a9:98:43:10:8f:e0:20:5b:
40:53:e2:ba:e9:93:a5:5b:c3:f6:f1:75:04:61:e0:a0:5f:f7:
d9:2c:fd:6a:01:24:19:30:76:78:24:50:ca:8f:dc:a0:0d:74:
48:a2:cb:48:ea:b1:db:05:4f:e9:25:60:80:e1:f1:01:76:8f:
24:a1:b5:7e:b7:80:ce:71:0a:47:f1:b2:2c:68:d5:aa:a0:a2:
d5:92:26:f1:d8:fd:4c:35:4b:af:d3:17:95:bb:10:50:82:4e:
9b:53:3b:db:a1:77:b4:8e:ad:dd:44:89:e0:0a:76:c7:44:5e:
fb:97:fd:10:aa:c4:d9:a9:fd:52:39:61:d8:af:11:98:4a:7f:
d5:7b:f0:b9:ee:d1:45:9e:24:20:fb:06:98:1c:a0:3b:f5:59:
72:b2:96:e4:49:59:31:5b:35:c1:3a:71:57:af:b9:8a:b5:02:
8e:98:9b:66:49:cd:41:d0:67:39:9d:e6:63:07:f9:a4:86:79:
a4:fb:58:1a:12:10:a1:2f:0a:ca:cb:28:e6:37:d4:ae:2d:28:
a0:d9:7e:98:71:a1:3b:37:93:42:89:5b:f3:2b:25:18:aa:61:
31:3e:ab:8d:58:b8:6e:de:32:c4:bf:e0:97:82:57:96:35:92:
94:53:88:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:00:53 2025 by rpki-client