
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.mft
File: qltHHQugidnp9GwpExlnT6yBKNA.mft (raw, json)
Hash identifier: B4znFdWv14r5V5WMkDb4HgM53UfVzXIfW9+7UqiVEwU=
Subject key identifier: 3F:C1:3E:2C:6E:12:96:EA:28:25:F2:31:EB:84:59:61:04:01:8C:BC
Authority key identifier: AA:5B:47:1D:0B:A0:89:D9:E9:F4:6C:29:13:19:67:4F:AC:81:28:D0
Certificate issuer: /CN=aa5b471d0ba089d9e9f46c291319674fac8128d0
Certificate serial: 01988B0F2447F6A697C5CDFB44561674E552
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qltHHQugidnp9GwpExlnT6yBKNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.mft
Manifest number: 0C75
Signing time: Fri 08 Aug 2025 19:01:21 +0000
Manifest this update: Fri 08 Aug 2025 19:01:21 +0000
Manifest next update: Sat 09 Aug 2025 19:01:21 +0000
Files and hashes: 1: 2K6387yyM5gxakFjGUcn1KUMQ58.roa (hash: KwEJI06hkpRX+nj9eXMKKI3vC9xa4ElKQ9FhYTbVyds=)
2: VNd90Fl0tWahsmhhQvhoAAT8f5U.roa (hash: U+zi8hpH0S9lksZLxaBLhZX/Hg0tdOzYwVmTSHbyaHY=)
3: qltHHQugidnp9GwpExlnT6yBKNA.crl (hash: Yd5QxQot3wBojT+hDijJH/oSQFBWRczYTWXdfRLnQ2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qltHHQugidnp9GwpExlnT6yBKNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0f:24:47:f6:a6:97:c5:cd:fb:44:56:16:74:e5:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa5b471d0ba089d9e9f46c291319674fac8128d0
Validity
Not Before: Aug 8 19:01:21 2025 GMT
Not After : Aug 9 19:01:21 2025 GMT
Subject: CN=3fc13e2c6e1296ea2825f231eb84596104018cbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:dd:f3:1e:cb:ca:72:5c:36:7e:cf:f7:fe:7d:
1d:ae:0e:8c:e2:77:95:76:94:46:d2:e3:6d:cd:38:
09:78:97:24:1c:96:b3:ae:91:c8:6d:c7:a5:da:ad:
8d:cf:87:8e:b2:f5:2a:56:d3:9d:23:10:34:3b:42:
78:86:ee:e6:5d:a9:2e:a8:bd:66:49:97:66:76:c1:
62:26:ef:c7:6a:e3:d0:78:fc:44:ea:34:6a:46:5d:
5d:2f:6c:dd:99:59:09:68:35:45:42:42:6a:25:5e:
88:75:c6:34:20:a0:39:b3:29:18:ff:5e:73:f5:c0:
1f:78:80:05:10:e3:54:3a:65:ff:c2:b9:3a:9c:28:
5c:32:aa:69:41:55:bf:d5:5a:27:d1:5a:a8:cc:55:
93:6d:83:5c:bb:fd:dd:45:bf:b7:92:c3:c5:92:44:
65:40:af:9c:56:c8:9b:84:54:58:ce:71:84:85:2b:
9e:e4:5d:ac:b0:72:8c:77:27:f3:a0:e2:69:e6:87:
b7:27:f3:02:2d:89:09:38:ad:9e:ce:c9:25:d1:74:
35:59:ba:9a:64:58:df:ff:df:f1:3f:69:55:68:dd:
7c:b7:c1:0a:60:ee:c3:58:c9:bc:4e:b0:ab:3f:9e:
06:fc:91:b8:ce:77:12:65:e7:5c:bb:95:39:14:be:
23:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C1:3E:2C:6E:12:96:EA:28:25:F2:31:EB:84:59:61:04:01:8C:BC
X509v3 Authority Key Identifier:
keyid:AA:5B:47:1D:0B:A0:89:D9:E9:F4:6C:29:13:19:67:4F:AC:81:28:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qltHHQugidnp9GwpExlnT6yBKNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:11:e6:80:d8:25:ba:60:94:b6:ef:d9:ed:af:65:cd:95:99:
75:ad:c5:2f:fb:47:5b:85:83:21:cd:06:94:8c:b8:11:3c:f3:
97:16:ae:12:6e:8d:69:b3:6e:48:1d:04:f0:4a:ef:d0:b4:3f:
a7:f3:69:47:ec:8f:2b:f1:2f:84:27:7b:59:10:5b:70:36:be:
83:a5:68:1d:8a:02:3d:64:49:47:6b:5b:cd:6a:00:46:04:6c:
c3:31:bf:9f:52:3e:2d:82:be:cb:77:fd:4a:b6:26:51:61:6b:
b1:e6:86:c6:ab:d2:fe:19:ce:b6:d9:74:e5:07:ef:2d:ca:22:
86:69:ad:7e:0f:d0:6b:94:89:0b:56:6b:cd:87:42:d5:10:0d:
14:7d:b5:ff:56:b3:50:dc:9f:e5:99:6b:c1:b0:0e:00:a8:12:
b4:e7:76:6c:b3:27:60:03:46:51:53:95:e1:a7:1d:5c:d6:68:
3b:15:67:cf:91:9c:6e:1f:ba:aa:21:e7:3b:8f:26:76:c4:c9:
70:8d:a7:9e:e3:88:30:f5:da:a9:c6:be:ca:39:ca:a9:bf:67:
d4:2a:a9:48:26:4e:63:53:2d:79:b4:4d:f9:a8:04:92:54:86:
73:8e:3c:5a:f6:d6:70:1f:52:e4:f7:c6:d0:3b:93:ff:41:fc:
b1:85:83:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:04:39 2025 by rpki-client