Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
File: qlemjwii4wun1z1EyabiQA_Qo7E.mft (raw, json)
Hash identifier: oP1dxeRIKiz95SPs9nysvTGvI6AI+QEcRUbpk6Zj7P4=
Subject key identifier: F6:18:39:CB:0B:74:8D:82:28:19:F4:40:CD:14:88:8C:31:40:A7:37
Authority key identifier: AA:57:A6:8F:08:A2:E3:0B:A7:D7:3D:44:C9:A6:E2:40:0F:D0:A3:B1
Certificate issuer: /CN=aa57a68f08a2e30ba7d73d44c9a6e2400fd0a3b1
Certificate serial: 019A4EF587F5BD7FE81A54603CC8137B90D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
Manifest number: 08E4
Signing time: Tue 04 Nov 2025 13:01:45 +0000
Manifest this update: Tue 04 Nov 2025 13:01:45 +0000
Manifest next update: Wed 05 Nov 2025 13:01:45 +0000
Files and hashes: 1: _uIcjPbTo2tZZuPbQQgAGU6uFaU.roa (hash: mFbVT5EqFo/vqgifNq4fzGvwXcCU4t6Rafq12c4CSak=)
2: qlemjwii4wun1z1EyabiQA_Qo7E.crl (hash: l3OFiIn0Ka3qieasNyoTlFI6BZbZUlMTmneNICii8YI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:87:f5:bd:7f:e8:1a:54:60:3c:c8:13:7b:90:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa57a68f08a2e30ba7d73d44c9a6e2400fd0a3b1
Validity
Not Before: Nov 4 13:01:45 2025 GMT
Not After : Nov 5 13:01:45 2025 GMT
Subject: CN=f61839cb0b748d822819f440cd14888c3140a737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9a:a2:6f:26:ba:a8:fe:05:93:c7:a5:2e:17:
ee:7c:b2:07:88:87:f2:07:75:1a:dc:e3:16:9e:52:
ae:00:b2:b5:3f:b3:d7:ed:4d:8f:7f:a5:71:3d:e7:
44:d7:5c:74:44:1c:9e:1f:98:f6:e3:91:4a:0d:1d:
ef:f8:47:82:45:90:dc:4b:8e:8b:f7:6e:08:9d:a6:
97:f8:8b:2e:a1:0f:7d:f4:d4:98:ff:95:41:b2:a9:
7f:19:6e:b3:5b:c9:06:ea:95:2c:81:51:cf:d6:20:
5d:e6:a7:16:f5:a8:04:44:00:9e:40:d2:8c:a1:30:
fc:12:1a:83:02:3f:48:ab:15:31:26:47:17:e8:4a:
1f:a9:66:95:90:ff:b9:47:08:45:c7:57:3b:7b:25:
a2:08:4a:98:73:4c:33:c9:0d:5e:52:18:e6:20:ca:
39:fa:60:69:89:bf:ed:6f:1d:8d:08:d6:7e:29:51:
81:50:d5:ca:fe:93:65:a5:11:88:6d:4e:54:f9:1e:
e4:0a:c5:78:d6:b5:9e:66:50:34:8a:74:84:f3:48:
96:9a:29:83:fa:a6:62:f3:84:1d:85:9c:a3:82:9a:
ba:7c:14:43:d6:ad:ec:7d:bd:6e:d7:36:b3:aa:03:
37:6c:ab:90:f9:70:28:b8:aa:ac:0a:00:00:3f:d6:
ae:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:18:39:CB:0B:74:8D:82:28:19:F4:40:CD:14:88:8C:31:40:A7:37
X509v3 Authority Key Identifier:
keyid:AA:57:A6:8F:08:A2:E3:0B:A7:D7:3D:44:C9:A6:E2:40:0F:D0:A3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:f3:9a:ea:f7:fc:24:ee:e6:a6:48:98:50:f4:25:67:cb:6f:
d0:df:7a:38:a8:4b:ed:16:35:c1:8c:f6:6d:13:99:ad:34:b5:
c0:cb:03:cb:ac:05:b3:52:be:96:3f:c3:64:da:25:c7:91:f3:
51:81:19:29:1f:3f:3f:4e:6b:a1:f1:f7:3b:a5:1c:fa:1a:cb:
9e:db:f1:cc:7a:3b:54:86:c7:0e:36:1a:cf:bc:2b:ac:6b:3b:
42:9c:34:25:cf:ff:dc:7e:26:84:97:c3:26:6e:80:bc:3b:b7:
5a:33:8c:da:68:f6:2a:97:34:38:51:33:f1:03:0c:0f:65:ae:
8b:74:34:c5:04:93:75:67:e5:60:6f:34:f4:85:5d:34:cc:ce:
c1:34:c2:ce:9a:52:4d:1a:7c:51:9f:8a:ca:a9:76:bc:d7:91:
13:ce:7f:1f:1c:2c:81:82:75:8b:9d:0c:8a:3a:f8:dc:da:65:
79:98:9e:c3:2f:ea:46:6f:a3:6c:d4:ad:20:8e:9e:a5:e6:86:
66:75:bc:72:50:1c:b5:e3:c6:ee:00:bf:b7:fc:97:27:40:37:
cc:27:13:c3:a5:fc:7e:67:3d:69:48:55:75:99:fe:6a:5a:f1:
29:41:1b:6a:9c:31:e7:fc:ed:ac:f8:74:81:25:61:5d:da:77:
92:85:fc:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9Yf1vX/oGlRgPMgTe5DYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNTdhNjhmMDhhMmUzMGJhN2Q3M2Q0NGM5YTZlMjQwMGZk
MGEzYjEwHhcNMjUxMTA0MTMwMTQ1WhcNMjUxMTA1MTMwMTQ1WjAzMTEwLwYDVQQD
EyhmNjE4MzljYjBiNzQ4ZDgyMjgxOWY0NDBjZDE0ODg4YzMxNDBhNzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJqibya6qP4Fk8elLhfufLIHiIfy
B3Ua3OMWnlKuALK1P7PX7U2Pf6VxPedE11x0RByeH5j245FKDR3v+EeCRZDcS46L
924InaaX+IsuoQ999NSY/5VBsql/GW6zW8kG6pUsgVHP1iBd5qcW9agERACeQNKM
oTD8EhqDAj9IqxUxJkcX6EofqWaVkP+5RwhFx1c7eyWiCEqYc0wzyQ1eUhjmIMo5
+mBpib/tbx2NCNZ+KVGBUNXK/pNlpRGIbU5U+R7kCsV41rWeZlA0inSE80iWmimD
+qZi84QdhZyjgpq6fBRD1q3sfb1u1zazqgM3bKuQ+XAouKqsCgAAP9auAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPYYOcsLdI2CKBn0QM0UiIwxQKc3MB8GA1UdIwQY
MBaAFKpXpo8IouMLp9c9RMmm4kAP0KOxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWxlbWp3aWk0d3VuMXoxRXlhYmlRQV9RbzdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC85YjczNzctZDQ2NS00NmI5LWE1NjMt
ODQ2OGU0OWYwMGVkLzEvcWxlbWp3aWk0d3VuMXoxRXlhYmlRQV9RbzdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC85YjczNzctZDQ2NS00NmI5LWE1NjMtODQ2OGU0OWYwMGVk
LzEvcWxlbWp3aWk0d3VuMXoxRXlhYmlRQV9RbzdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcvOa6vf8
JO7mpkiYUPQlZ8tv0N96OKhL7RY1wYz2bROZrTS1wMsDy6wFs1K+lj/DZNolx5Hz
UYEZKR8/P05rofH3O6Uc+hrLntvxzHo7VIbHDjYaz7wrrGs7Qpw0Jc//3H4mhJfD
Jm6AvDu3WjOM2mj2Kpc0OFEz8QMMD2Wui3Q0xQSTdWflYG809IVdNMzOwTTCzppS
TRp8UZ+Kyql2vNeRE85/HxwsgYJ1i50Mijr43NpleZiewy/qRm+jbNStII6epeaG
ZnW8clActePG7gC/t/yXJ0A3zCcTw6X8fmc9aUhVdZn+alrxKUEbapwx5/ztrPh0
gSVhXdp3koX8kg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:40 2025 by rpki-client