Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft
File: qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft (raw, json)
Hash identifier: hGOGGTEdpd9jxxLEYcY3DHpedNFdd1OnC5Zm1RlzP9M=
Subject key identifier: 79:AE:8E:A6:EB:B4:ED:D6:DE:8C:E6:00:5D:07:6B:04:21:D9:A1:D7
Authority key identifier: AA:52:12:95:8D:8E:1B:AA:14:4A:82:A8:21:F9:3A:89:0D:CB:A4:9A
Certificate issuer: /CN=aa5212958d8e1baa144a82a821f93a890dcba49a
Certificate serial: 019827B56DB49D5C38CE46E35B6AF27E8C36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlISlY2OG6oUSoKoIfk6iQ3LpJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft
Manifest number: 37
Signing time: Sun 20 Jul 2025 12:00:58 +0000
Manifest this update: Sun 20 Jul 2025 12:00:58 +0000
Manifest next update: Mon 21 Jul 2025 12:00:58 +0000
Files and hashes: 1: FeEiiWjAdJKymNjox7n7zCUc9Wk.roa (hash: dzt2dxmN6m2Hyo/H9hlkWWL7XeHHBgERvBsbJJztvYI=)
2: XBjHbo-JikUirnDC9mDO-NUnYF0.roa (hash: Kq6nw7oAp8kgVGJWvOFausntjkcQVXP1uvqCb3Bz6XI=)
3: qlISlY2OG6oUSoKoIfk6iQ3LpJo.crl (hash: XbKurU3F75JGVe4PPf5M7296eS9ybVDw6Qni/zgOSxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlISlY2OG6oUSoKoIfk6iQ3LpJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 12:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:b5:6d:b4:9d:5c:38:ce:46:e3:5b:6a:f2:7e:8c:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa5212958d8e1baa144a82a821f93a890dcba49a
Validity
Not Before: Jul 20 12:00:58 2025 GMT
Not After : Jul 21 12:00:58 2025 GMT
Subject: CN=79ae8ea6ebb4edd6de8ce6005d076b0421d9a1d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:28:dd:36:85:c0:a6:7a:d6:d4:54:43:07:9c:
b6:1f:39:b6:35:3c:9f:f1:77:6a:5a:dd:94:5b:0b:
89:2d:2a:5b:5a:10:e8:47:97:97:f2:32:38:1f:bc:
be:26:a6:f5:0c:37:fa:a8:6e:9e:f3:25:e3:aa:03:
b3:22:9a:fe:9f:7a:1e:70:85:ce:8d:80:1f:31:02:
43:c9:c9:38:fe:37:f6:41:29:53:37:f4:2e:c9:98:
e8:63:6f:ff:34:aa:c3:69:18:48:aa:2e:ca:da:a1:
b2:cd:5a:5b:d1:fc:88:97:27:b5:db:19:00:34:f2:
23:d7:55:f0:4a:d1:bb:90:e6:19:38:da:01:c1:4b:
94:bd:4e:f1:fc:9b:7a:86:c6:3a:9f:1c:3b:7c:2a:
76:99:61:d2:9e:e9:03:a1:aa:e8:65:94:69:5a:80:
18:f9:18:9a:30:e8:6a:12:50:52:e9:57:c8:ab:7e:
3c:1f:9e:fa:14:a7:9a:57:a2:fd:d2:46:d3:0a:67:
df:f4:92:77:11:15:38:93:0a:1a:43:15:25:00:ba:
15:0f:68:5b:71:45:3d:2a:9a:5d:44:47:d5:d7:15:
29:32:55:1e:46:f5:d6:98:bb:a0:93:81:7d:dc:2d:
14:ea:1f:53:a1:19:c0:24:0d:cb:2b:87:ca:8f:5a:
b2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:AE:8E:A6:EB:B4:ED:D6:DE:8C:E6:00:5D:07:6B:04:21:D9:A1:D7
X509v3 Authority Key Identifier:
keyid:AA:52:12:95:8D:8E:1B:AA:14:4A:82:A8:21:F9:3A:89:0D:CB:A4:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlISlY2OG6oUSoKoIfk6iQ3LpJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:ec:48:a2:22:d4:26:f4:6c:0b:27:ef:45:d0:83:61:81:9a:
97:0f:2d:ff:ca:37:ea:f6:82:07:63:5e:21:14:62:63:78:81:
ff:72:8a:ce:05:0e:89:18:0a:ad:3d:f9:48:23:71:2a:ef:0f:
43:a7:9c:df:b9:82:46:f4:48:51:70:a8:05:cd:a4:b7:c8:dc:
d1:54:4d:5d:75:e2:8c:02:0c:42:7f:6b:c9:39:8b:7a:ae:e9:
03:d6:19:d4:ce:76:12:90:da:9e:b9:2f:d7:f1:1c:a0:78:a2:
d5:8b:67:ba:7f:b1:57:58:01:79:4e:31:d2:6e:32:5c:ec:a8:
a5:ad:4c:c3:00:98:8f:c6:3f:4d:df:0a:c4:8f:59:6e:94:30:
7d:70:64:fe:ba:3e:28:71:9c:6d:d9:45:c5:74:c5:8a:1d:f9:
72:9f:30:2d:bb:cc:87:d1:f5:f9:63:f2:82:a1:b8:9b:9b:26:
3f:26:ec:51:86:ac:cc:d6:cf:0a:2b:6e:63:9b:ea:07:a3:09:
a0:a4:8e:20:ef:23:20:65:fa:63:f2:f5:28:16:de:d4:78:d3:
d8:f6:20:d5:b2:7a:fa:80:1c:bf:07:37:b4:22:e9:62:6d:4e:
91:0c:89:fb:6c:83:98:37:39:83:33:73:a1:79:fd:01:34:44:
cc:87:0b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:21:29 2025 by rpki-client