Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft
File: qlPNLFhKPcFiCLqTsNt0dzs_I74.mft (raw, json)
Hash identifier: MOWLgDF5JDSlLc6VTbnuOlDQr//ktp1Y1f0jrUlBSHg=
Subject key identifier: 81:AB:D3:86:24:40:D9:A3:90:92:8F:8C:D4:86:38:09:2F:5B:98:18
Authority key identifier: AA:53:CD:2C:58:4A:3D:C1:62:08:BA:93:B0:DB:74:77:3B:3F:23:BE
Certificate issuer: /CN=aa53cd2c584a3dc16208ba93b0db74773b3f23be
Certificate serial: 01988CFD27583E6A891136C79E2A81843D8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlPNLFhKPcFiCLqTsNt0dzs_I74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft
Manifest number: 1624
Signing time: Sat 09 Aug 2025 04:00:57 +0000
Manifest this update: Sat 09 Aug 2025 04:00:57 +0000
Manifest next update: Sun 10 Aug 2025 04:00:57 +0000
Files and hashes: 1: eIuvCKiUKqnjxChjtjEAvL7JvnI.roa (hash: wyV3lMaUUP7vVQqM6FlcaWTPKvU8kW+p1xMsgVv6OJA=)
2: qlPNLFhKPcFiCLqTsNt0dzs_I74.crl (hash: BYjW/+jGCHwMZvuTl7uuxfTZ+EzyNCpAmKuLopx+gdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlPNLFhKPcFiCLqTsNt0dzs_I74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:fd:27:58:3e:6a:89:11:36:c7:9e:2a:81:84:3d:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa53cd2c584a3dc16208ba93b0db74773b3f23be
Validity
Not Before: Aug 9 04:00:57 2025 GMT
Not After : Aug 10 04:00:57 2025 GMT
Subject: CN=81abd3862440d9a390928f8cd48638092f5b9818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:ba:65:a2:3c:12:9c:f8:d2:d3:fd:03:dc:44:
d9:95:5c:b3:fe:0d:dc:51:7b:81:a8:cd:a0:2a:1e:
61:b0:97:b4:66:ba:8e:9b:e8:dd:83:42:eb:04:dc:
9f:5a:a9:f2:03:34:69:c6:f0:ca:c3:d4:a2:f1:df:
2c:6b:5a:be:b8:59:3a:9a:04:e2:0a:79:01:21:eb:
1c:e9:96:db:af:3a:3e:1f:20:fb:cd:cb:7d:64:e3:
41:69:a5:67:b6:fa:7a:16:68:89:b3:22:58:65:59:
c4:84:da:32:aa:3e:8d:29:77:b8:51:c8:bb:c4:ab:
2c:36:ac:af:05:5b:ec:d1:de:e7:a8:8e:08:41:ee:
45:75:11:a0:51:ef:d2:f3:0f:d9:8f:08:b4:b5:11:
32:eb:c1:61:06:9d:eb:7e:fb:19:4b:e2:25:a4:18:
d3:8f:f4:b0:17:e6:13:d7:f8:7c:22:34:09:c1:c8:
0e:50:2a:91:9f:05:69:29:73:f1:7d:e8:4f:b8:65:
a1:e0:22:82:4f:87:41:cb:3f:ee:93:b7:3c:ed:1d:
73:96:ad:32:21:c9:f5:06:6d:1b:39:d3:32:53:88:
a7:65:5a:87:87:cd:04:74:4a:06:e6:69:d1:ee:3b:
b9:77:b3:3e:f9:e9:9e:db:7b:98:b1:39:f3:12:e0:
0e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:AB:D3:86:24:40:D9:A3:90:92:8F:8C:D4:86:38:09:2F:5B:98:18
X509v3 Authority Key Identifier:
keyid:AA:53:CD:2C:58:4A:3D:C1:62:08:BA:93:B0:DB:74:77:3B:3F:23:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlPNLFhKPcFiCLqTsNt0dzs_I74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:fe:05:5b:36:e4:fa:15:11:2b:ba:71:bb:06:29:ba:90:ee:
03:cc:9c:47:06:af:ca:d8:aa:20:6e:60:1a:70:87:3f:f4:e5:
c1:44:46:b5:9a:06:16:52:93:70:59:7b:b7:3e:a7:31:9d:00:
fb:ec:df:cd:15:d8:3e:21:4b:28:9b:bf:2a:09:e1:f5:fe:ae:
7e:e0:05:a5:25:8a:07:0c:f9:d5:77:df:73:e9:3e:26:99:bd:
c3:a3:7d:c9:16:d5:89:b4:39:9b:77:ff:ad:f2:5a:95:10:fc:
67:64:e4:6d:fb:85:fa:cb:8f:af:9f:9b:da:05:fa:7e:44:73:
3c:f6:fe:76:ac:2d:e0:e4:ab:b3:cc:30:fb:24:a8:7f:a1:25:
89:a6:29:4f:db:ff:26:36:ee:2f:9e:6e:63:49:16:c9:0c:29:
09:8b:40:ea:51:1c:69:39:4a:26:b6:f6:c3:03:6e:26:6c:c9:
f8:d7:c7:4e:d3:d7:d4:01:02:15:ee:6d:da:52:68:e2:32:fd:
43:f6:4d:13:58:21:e3:03:ad:67:44:8b:e0:63:bb:29:6b:13:
0b:3c:45:3b:27:7b:4b:5e:0a:62:68:23:fc:89:15:ca:58:fa:
b0:a0:40:78:06:96:f1:dd:5f:0d:9e:d7:21:23:b7:cd:5a:e4:
0b:0c:ee:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiM/SdYPmqJETbHniqBhD2OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNTNjZDJjNTg0YTNkYzE2MjA4YmE5M2IwZGI3NDc3M2Iz
ZjIzYmUwHhcNMjUwODA5MDQwMDU3WhcNMjUwODEwMDQwMDU3WjAzMTEwLwYDVQQD
Eyg4MWFiZDM4NjI0NDBkOWEzOTA5MjhmOGNkNDg2MzgwOTJmNWI5ODE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7rplojwSnPjS0/0D3ETZlVyz/g3c
UXuBqM2gKh5hsJe0ZrqOm+jdg0LrBNyfWqnyAzRpxvDKw9Si8d8sa1q+uFk6mgTi
CnkBIesc6Zbbrzo+HyD7zct9ZONBaaVntvp6FmiJsyJYZVnEhNoyqj6NKXe4Uci7
xKssNqyvBVvs0d7nqI4IQe5FdRGgUe/S8w/Zjwi0tREy68FhBp3rfvsZS+IlpBjT
j/SwF+YT1/h8IjQJwcgOUCqRnwVpKXPxfehPuGWh4CKCT4dByz/uk7c87R1zlq0y
Icn1Bm0bOdMyU4inZVqHh80EdEoG5mnR7ju5d7M++eme23uYsTnzEuAOzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIGr04YkQNmjkJKPjNSGOAkvW5gYMB8GA1UdIwQY
MBaAFKpTzSxYSj3BYgi6k7DbdHc7PyO+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWxQTkxGaEtQY0ZpQ0xxVHNOdDBkenNfSTc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9lNjcwYTctYWQ3OC00NTdlLWFkODAt
MDA3OTc4YmRiMDUyLzEvcWxQTkxGaEtQY0ZpQ0xxVHNOdDBkenNfSTc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9lNjcwYTctYWQ3OC00NTdlLWFkODAtMDA3OTc4YmRiMDUy
LzEvcWxQTkxGaEtQY0ZpQ0xxVHNOdDBkenNfSTc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO/4FWzbk
+hURK7pxuwYpupDuA8ycRwavytiqIG5gGnCHP/TlwURGtZoGFlKTcFl7tz6nMZ0A
++zfzRXYPiFLKJu/Kgnh9f6ufuAFpSWKBwz51Xffc+k+Jpm9w6N9yRbVibQ5m3f/
rfJalRD8Z2TkbfuF+suPr5+b2gX6fkRzPPb+dqwt4OSrs8ww+ySof6EliaYpT9v/
JjbuL55uY0kWyQwpCYtA6lEcaTlKJrb2wwNuJmzJ+NfHTtPX1AECFe5t2lJo4jL9
Q/ZNE1gh4wOtZ0SL4GO7KWsTCzxFOyd7S14KYmgj/IkVylj6sKBAeAaW8d1fDZ7X
ISO3zVrkCwzuHg==
-----END CERTIFICATE-----
Generated at Sat Aug 9 14:23:33 2025 by rpki-client