Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
File: qlemjwii4wun1z1EyabiQA_Qo7E.mft (raw, json)
Hash identifier: BO3m/UNLN/1UO9Cv9C0Pr46iNoQzAfqcYNaRDiJeDBg=
Subject key identifier: 69:6A:BE:95:1B:C3:4D:40:9A:8F:A8:82:46:DF:21:E1:4C:04:19:B2
Authority key identifier: AA:57:A6:8F:08:A2:E3:0B:A7:D7:3D:44:C9:A6:E2:40:0F:D0:A3:B1
Certificate issuer: /CN=aa57a68f08a2e30ba7d73d44c9a6e2400fd0a3b1
Certificate serial: 019887336EAB85C460D9F0E871450E71DEEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
Manifest number: 07F8
Signing time: Fri 08 Aug 2025 01:02:31 +0000
Manifest this update: Fri 08 Aug 2025 01:02:31 +0000
Manifest next update: Sat 09 Aug 2025 01:02:31 +0000
Files and hashes: 1: _uIcjPbTo2tZZuPbQQgAGU6uFaU.roa (hash: mFbVT5EqFo/vqgifNq4fzGvwXcCU4t6Rafq12c4CSak=)
2: qlemjwii4wun1z1EyabiQA_Qo7E.crl (hash: oRZJ3/MSUPQ/vj/2qcLwPN3M8fRl1sR9xBpfSmBbC8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 01:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:33:6e:ab:85:c4:60:d9:f0:e8:71:45:0e:71:de:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa57a68f08a2e30ba7d73d44c9a6e2400fd0a3b1
Validity
Not Before: Aug 8 01:02:31 2025 GMT
Not After : Aug 9 01:02:31 2025 GMT
Subject: CN=696abe951bc34d409a8fa88246df21e14c0419b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:99:a2:b2:88:a1:f9:56:f3:58:7a:06:a9:79:
46:1c:e4:f2:4f:e6:41:06:e6:63:06:ed:da:22:24:
09:69:5f:07:8a:89:73:82:b3:be:4c:03:52:71:98:
0c:ad:f8:8c:85:c2:be:ae:d3:30:a1:91:2a:1f:41:
44:1f:66:76:cd:c4:f3:e3:57:2b:76:8a:51:55:39:
56:86:fb:b8:23:c6:1a:fc:70:ca:84:14:2f:02:e7:
38:97:ca:d6:27:a5:91:6a:35:64:19:4e:cf:5f:2a:
29:80:15:03:16:c8:6e:b1:f5:b1:0d:d6:3c:47:38:
aa:bc:3a:58:18:bc:5b:3c:1c:42:29:cb:70:60:5a:
0b:92:bd:26:89:3d:da:54:2c:fc:89:3e:dc:38:d9:
59:cb:f4:ce:8b:39:9c:00:de:97:c6:69:fa:dc:c4:
ca:3b:c4:1e:89:2b:0e:59:78:93:2a:ff:b8:2b:ae:
7b:9c:b6:3a:ef:db:b7:59:ea:a0:1c:2e:6d:1f:5a:
c0:0d:c0:47:d8:6b:3d:42:3e:d8:f8:12:47:db:3a:
01:e6:3f:2d:14:c3:82:ae:9f:60:77:03:45:b7:b4:
8b:de:fc:7b:b4:d5:9d:36:64:a0:5e:d5:5c:0d:fd:
18:89:51:8f:b1:33:19:7c:56:c2:62:c9:0e:66:1f:
51:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:6A:BE:95:1B:C3:4D:40:9A:8F:A8:82:46:DF:21:E1:4C:04:19:B2
X509v3 Authority Key Identifier:
keyid:AA:57:A6:8F:08:A2:E3:0B:A7:D7:3D:44:C9:A6:E2:40:0F:D0:A3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:3e:b5:5c:70:da:f7:4f:83:6a:71:d3:a5:0d:99:e4:a4:55:
ad:38:c3:0a:42:f4:40:8f:a6:43:e1:0e:a8:84:bb:02:82:01:
5b:72:cd:d7:3f:0e:87:f3:eb:e9:92:80:24:71:66:e1:04:a4:
0a:83:7d:39:4d:b8:71:19:53:cb:89:2f:d9:e3:97:78:9a:7e:
99:e7:36:e3:c4:46:c0:b4:95:e3:c0:7b:51:be:71:c9:67:39:
69:60:7a:20:8b:9e:62:22:3f:a3:81:44:26:b1:24:2d:37:31:
69:5f:5c:04:82:0c:ca:35:57:58:bb:f6:29:c0:7e:b4:f1:87:
9c:3f:06:bb:2b:b9:1d:32:13:ce:61:c0:24:00:35:f7:9e:54:
99:5c:69:c8:4c:a7:8a:15:a6:8b:a8:23:fa:05:df:b9:41:57:
42:38:2a:d7:a9:77:39:93:5d:36:a1:1e:40:33:c7:1b:4e:07:
fc:c8:4d:4f:4e:e0:e1:a8:12:f8:dc:e6:e4:1b:f5:f4:45:d9:
16:d7:50:e4:dc:6e:ed:39:e3:07:cc:bf:53:15:28:0e:eb:18:
62:92:57:96:e3:79:0d:12:00:b8:7b:55:94:cc:6d:9b:21:96:
54:01:d5:59:fb:4d:06:ad:f8:6b:92:e8:07:e6:fe:d4:c8:a7:
55:47:cb:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:20:34 2025 by rpki-client