Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft
File: qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft (raw, json)
Hash identifier: gEEfX66OyWDCC+uo/OtxX1pbBiyhILlU3MNG1UY7ozw=
Subject key identifier: F7:84:72:4C:B4:54:F6:74:39:4C:93:33:92:C5:1B:62:D9:B8:17:9D
Authority key identifier: A8:B5:FE:67:C2:07:97:D3:94:15:55:55:4F:8C:98:8C:A2:F7:C1:7B
Certificate issuer: /CN=a8b5fe67c20797d3941555554f8c988ca2f7c17b
Certificate serial: 01987CE516F6201D3A04F90B84EC1E99B576
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft
Manifest number: 1622
Signing time: Wed 06 Aug 2025 01:00:44 +0000
Manifest this update: Wed 06 Aug 2025 01:00:44 +0000
Manifest next update: Thu 07 Aug 2025 01:00:44 +0000
Files and hashes: 1: 4b-QnhZG2HZCZ361-cHusX-pjXk.roa (hash: j7SZly2Vh9/97I+L9CrIza0RGFP+q4iam4ta+RVbZYI=)
2: qLX-Z8IHl9OUFVVVT4yYjKL3wXs.crl (hash: wif13twTMDqqC6y0ZHrFy3QGEs+t7It9gLS+CT+zL1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:e5:16:f6:20:1d:3a:04:f9:0b:84:ec:1e:99:b5:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8b5fe67c20797d3941555554f8c988ca2f7c17b
Validity
Not Before: Aug 6 01:00:44 2025 GMT
Not After : Aug 7 01:00:44 2025 GMT
Subject: CN=f784724cb454f674394c933392c51b62d9b8179d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e9:d6:a8:05:b2:3e:36:1a:a5:27:6b:b5:e0:
20:84:73:0b:5e:f9:cb:76:19:3f:4f:11:b2:87:48:
fc:21:09:74:85:29:f5:92:19:42:8e:c5:14:48:6f:
0b:7b:c0:c6:2e:f8:0c:4d:40:65:ae:34:08:78:60:
b5:e9:e1:99:da:48:f7:75:6a:36:40:cf:2e:81:aa:
d3:27:b2:74:65:97:34:c9:d2:fe:dc:a7:bb:c6:61:
8b:1a:dd:81:74:1d:9a:e0:a6:ff:89:d2:1b:8f:db:
3a:00:f1:ac:00:20:b4:3b:4f:36:a3:f7:06:d8:c7:
e6:27:c8:82:39:ee:fa:2c:0c:92:13:19:09:0a:3b:
47:c7:43:52:81:9c:17:2e:97:38:55:f5:46:5f:a7:
85:9b:3f:72:88:9a:5b:ed:1c:b9:f2:ad:b6:aa:8f:
5b:03:02:95:c9:41:f3:a5:11:a4:14:e1:34:be:2b:
74:e6:54:4e:fe:3c:dd:98:e6:8e:fe:58:ed:5f:31:
c2:ef:9c:88:d2:97:02:e6:1f:58:34:70:22:ef:7a:
6d:32:cf:19:27:a1:39:0c:b8:b5:cb:5f:18:da:95:
c0:b6:86:98:e1:8e:07:18:19:d2:31:15:6b:1c:4d:
e7:59:44:6e:13:ce:cd:ad:25:75:53:6d:d4:57:42:
23:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:84:72:4C:B4:54:F6:74:39:4C:93:33:92:C5:1B:62:D9:B8:17:9D
X509v3 Authority Key Identifier:
keyid:A8:B5:FE:67:C2:07:97:D3:94:15:55:55:4F:8C:98:8C:A2:F7:C1:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:8b:c7:bb:77:3e:c1:f9:ed:69:c4:b1:e3:d6:c4:3e:1a:4e:
e2:49:12:b5:b9:4f:c9:5d:20:b3:cd:23:dd:ed:55:46:57:eb:
25:17:49:c4:bf:bb:34:9d:94:a1:30:e5:dd:c2:64:9c:d4:f1:
57:62:0f:d9:75:5c:53:26:3f:bd:4f:75:34:6d:03:f6:80:55:
40:65:53:95:e5:03:d3:5d:f9:61:16:e2:77:03:ba:11:fc:d8:
83:2e:8c:9b:7c:13:cd:3c:7a:68:bd:57:cf:05:28:80:8b:31:
23:3c:49:22:8d:34:6a:28:96:e6:b1:7e:46:8a:d2:0f:24:3d:
f2:52:f5:b9:12:e9:e3:5e:a4:a0:57:b8:04:e9:7a:36:fe:bc:
5c:9d:3e:4d:61:28:d9:df:47:26:83:23:59:31:ff:78:c1:a7:
28:0d:0c:a5:24:66:c6:f1:42:e1:c3:8e:b2:43:b8:62:be:ef:
d4:21:49:87:db:3f:e8:ad:79:e2:81:32:71:7d:69:66:b0:85:
a2:3f:27:28:37:e1:89:b8:1a:1d:e2:f7:a6:ef:2a:c7:cc:19:
c7:bc:49:5c:0b:6b:5b:af:f3:a2:94:f4:3e:9d:c6:14:a4:ea:
1a:13:02:b5:c1:f6:c0:5e:77:3a:e5:ca:ee:f2:0f:f5:cd:77:
16:b2:63:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:39:29 2025 by rpki-client