Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft
File: qlPNLFhKPcFiCLqTsNt0dzs_I74.mft (raw, json)
Hash identifier: EZFPHVeh7Pj4RhYwJpe88QlDoemQ3tRtVn4iRngzzm8=
Subject key identifier: F5:2F:7A:48:20:5B:32:95:FF:68:C0:11:FA:53:AC:49:2B:A3:E2:9D
Authority key identifier: AA:53:CD:2C:58:4A:3D:C1:62:08:BA:93:B0:DB:74:77:3B:3F:23:BE
Certificate issuer: /CN=aa53cd2c584a3dc16208ba93b0db74773b3f23be
Certificate serial: 0198439BA918557993BAFA07ED9EA8851192
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlPNLFhKPcFiCLqTsNt0dzs_I74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft
Manifest number: 15FE
Signing time: Fri 25 Jul 2025 22:02:11 +0000
Manifest this update: Fri 25 Jul 2025 22:02:11 +0000
Manifest next update: Sat 26 Jul 2025 22:02:11 +0000
Files and hashes: 1: eIuvCKiUKqnjxChjtjEAvL7JvnI.roa (hash: wyV3lMaUUP7vVQqM6FlcaWTPKvU8kW+p1xMsgVv6OJA=)
2: qlPNLFhKPcFiCLqTsNt0dzs_I74.crl (hash: RKz2fmz6liwcKurHnMxzD++LwRid/zDerH93oq7BmD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlPNLFhKPcFiCLqTsNt0dzs_I74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:9b:a9:18:55:79:93:ba:fa:07:ed:9e:a8:85:11:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa53cd2c584a3dc16208ba93b0db74773b3f23be
Validity
Not Before: Jul 25 22:02:11 2025 GMT
Not After : Jul 26 22:02:11 2025 GMT
Subject: CN=f52f7a48205b3295ff68c011fa53ac492ba3e29d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6d:82:9d:3a:cc:30:4e:62:d7:ff:56:ea:b1:
07:df:8e:fd:39:27:c8:79:48:a2:58:85:1e:8d:47:
d9:0d:5c:83:28:df:20:cc:86:f6:14:87:13:44:3a:
ce:22:b5:36:0d:83:5c:6b:ed:38:f9:c6:48:20:c4:
98:a0:a4:87:e9:28:c0:e3:db:36:2b:ff:4b:75:33:
37:6a:78:03:37:37:80:4f:b4:1e:26:e0:d7:b8:1f:
7d:44:2c:21:4e:2f:6c:f8:c5:32:42:a6:1a:f8:24:
63:56:00:a0:f6:fc:62:2d:ce:0d:c6:ee:62:ca:c0:
c6:e6:14:26:98:d4:54:ff:97:9a:7a:ab:1c:1a:3c:
2d:78:04:9e:ac:2e:de:4e:d3:42:ff:3d:7e:94:88:
6f:32:98:aa:44:8c:2e:98:cb:4f:0e:40:57:30:93:
df:a8:0a:15:3b:44:22:50:d7:94:b4:d5:72:01:c5:
85:c4:76:f1:e9:a9:cc:d9:09:7a:74:ca:f3:16:0c:
04:52:f1:c6:e2:0c:47:5d:92:0b:34:4c:f8:49:f2:
06:31:14:49:b4:2c:6b:68:37:78:e2:59:74:ff:1b:
50:3f:3b:19:b0:a8:30:b3:a7:a2:7e:66:dc:bb:0e:
e0:ab:3e:e6:33:f2:73:d9:24:e5:85:72:40:de:0e:
2e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:2F:7A:48:20:5B:32:95:FF:68:C0:11:FA:53:AC:49:2B:A3:E2:9D
X509v3 Authority Key Identifier:
keyid:AA:53:CD:2C:58:4A:3D:C1:62:08:BA:93:B0:DB:74:77:3B:3F:23:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlPNLFhKPcFiCLqTsNt0dzs_I74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:bf:a6:a1:84:a8:4c:3a:14:5a:bf:2b:1c:3c:c9:3f:1c:79:
d0:d5:3d:2d:b7:ab:dc:b3:48:72:e1:fe:02:6a:50:0e:cf:8e:
6a:69:d2:ff:fd:87:03:66:3c:05:78:d5:b0:76:cf:75:5a:7a:
c1:fa:79:f5:62:5a:cb:1f:be:41:f7:6d:59:ea:a5:de:69:d4:
e8:32:d9:27:50:06:04:28:e1:06:f5:0d:eb:96:d2:75:b8:dd:
55:dc:68:b1:91:44:78:9f:1c:4e:f2:ff:91:87:79:58:33:f0:
2a:db:98:74:b3:e2:c2:83:93:62:16:76:74:ed:42:68:74:d6:
89:44:bb:88:eb:92:aa:81:8e:1e:94:65:b2:2f:f8:a3:0b:55:
e3:83:7b:ac:5c:56:14:29:e5:41:0b:cd:bd:3f:0c:05:29:2c:
91:da:e2:2a:c6:cb:8e:6d:e2:84:69:12:40:18:d6:e4:db:75:
2b:26:5e:98:2a:f9:13:fa:50:1f:5d:8b:ab:2e:7c:3d:4a:00:
cd:27:e8:b3:96:6c:dd:56:d5:0c:cf:08:d1:c5:c5:4b:4f:bc:
2e:72:a4:75:8f:9b:3a:37:4b:27:0f:4c:47:79:b9:b4:ef:77:
0f:21:f4:f6:17:14:cc:95:e3:0f:44:8a:81:c1:8b:4e:54:24:
6e:95:cb:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:54:13 2025 by rpki-client