Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft
File: qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft (raw, json)
Hash identifier: pTS+jSlfMh37+YCa7pp+YJ7cQ9uhjdoCWseyno2TF6U=
Subject key identifier: 0F:D2:75:A3:87:45:16:02:BB:07:25:B5:D3:83:71:09:CE:C1:C0:D6
Authority key identifier: A8:B5:FE:67:C2:07:97:D3:94:15:55:55:4F:8C:98:8C:A2:F7:C1:7B
Certificate issuer: /CN=a8b5fe67c20797d3941555554f8c988ca2f7c17b
Certificate serial: 01984AAF228ED076A5E94C9D5AE76779094F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft
Manifest number: 1608
Signing time: Sun 27 Jul 2025 07:00:48 +0000
Manifest this update: Sun 27 Jul 2025 07:00:48 +0000
Manifest next update: Mon 28 Jul 2025 07:00:48 +0000
Files and hashes: 1: 4b-QnhZG2HZCZ361-cHusX-pjXk.roa (hash: j7SZly2Vh9/97I+L9CrIza0RGFP+q4iam4ta+RVbZYI=)
2: qLX-Z8IHl9OUFVVVT4yYjKL3wXs.crl (hash: Um+HA0ShL9wcK0R01xqzQKXexdIbF/wQAhVlla5JiUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:af:22:8e:d0:76:a5:e9:4c:9d:5a:e7:67:79:09:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8b5fe67c20797d3941555554f8c988ca2f7c17b
Validity
Not Before: Jul 27 07:00:48 2025 GMT
Not After : Jul 28 07:00:48 2025 GMT
Subject: CN=0fd275a387451602bb0725b5d3837109cec1c0d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bd:22:52:32:a8:a2:21:e7:8d:30:bd:b1:97:
17:2e:ab:b6:a6:af:fd:1d:33:74:61:e6:b1:aa:cd:
65:c3:9e:e0:e4:6c:84:7a:29:75:93:7b:8b:b9:d9:
d1:32:62:84:75:aa:1f:b3:8f:5f:ac:8c:b5:24:b1:
47:f5:fd:69:04:d0:d3:df:dd:08:e0:11:6f:d6:30:
96:d5:69:0b:60:3f:ae:18:7d:13:9f:e5:e6:69:3a:
03:80:55:24:12:01:3c:88:46:d2:50:f5:aa:5a:95:
d7:32:cc:5e:35:ea:74:f1:3c:85:aa:cf:6e:94:b8:
48:00:bd:ca:a0:6f:a5:cd:04:16:a2:bf:da:22:93:
ac:9a:92:65:35:1a:da:dc:f2:2c:c0:0c:19:fb:99:
fc:5f:1f:a8:d3:8d:23:3a:1b:99:bb:60:6f:0b:0e:
da:58:2e:4a:4c:f2:31:d9:d4:d1:fa:45:a4:20:d9:
93:47:ef:c9:b2:7d:7c:39:4e:ae:13:d7:22:14:55:
61:dc:a3:d1:7e:d7:5b:a3:e0:90:60:6b:a4:ed:11:
64:0d:fd:ea:ac:06:4d:f1:bd:29:b3:a9:37:34:21:
7a:2b:f1:7c:49:5b:75:82:bc:f6:ae:cc:2a:c2:a2:
a2:ef:71:4c:a8:bd:32:ec:fa:f1:3b:2f:d8:71:59:
37:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D2:75:A3:87:45:16:02:BB:07:25:B5:D3:83:71:09:CE:C1:C0:D6
X509v3 Authority Key Identifier:
keyid:A8:B5:FE:67:C2:07:97:D3:94:15:55:55:4F:8C:98:8C:A2:F7:C1:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:d9:3a:c5:2c:b7:7b:3c:3e:a8:7a:2e:e6:4b:b5:45:4d:60:
04:5e:e2:37:10:61:59:62:89:09:bd:35:81:7f:29:e3:d4:b6:
50:88:a3:9b:3d:17:3f:fd:d4:d2:67:01:c2:4a:ef:8a:1c:11:
8e:09:37:29:77:9c:b8:ed:f0:f7:fc:e1:f2:86:3d:04:b3:75:
e5:6f:bd:48:f4:e4:1b:2f:bc:5b:5b:43:2c:af:31:2c:c5:54:
75:41:3c:20:9f:84:56:ea:26:a8:ed:da:ce:45:cb:40:dc:8e:
24:fc:2d:48:24:ab:17:4e:76:b3:4a:67:9b:21:a6:a7:62:e2:
51:6c:2e:bc:82:24:b0:8c:c3:9a:60:fd:99:1a:19:72:de:99:
ab:06:95:c9:d9:4f:a5:87:8b:3a:2d:24:e3:92:25:08:fa:1d:
b5:e6:51:7f:42:a4:0f:66:61:30:9b:bc:6d:8f:31:d7:2d:bc:
82:fb:7f:8f:65:de:da:5a:07:47:0a:70:ef:aa:09:9c:99:dd:
30:04:c2:66:00:d6:18:7a:bd:36:8a:bd:4b:b6:fa:ca:df:21:
63:2d:ef:34:72:48:73:00:85:65:25:f6:7e:fb:85:7b:2b:2d:
07:db:06:ef:fb:d7:3d:47:5e:9f:7e:51:e7:b9:7a:98:ae:31:
58:ba:a2:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:12:03 2025 by rpki-client