Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
File: qlemjwii4wun1z1EyabiQA_Qo7E.mft (raw, json)
Hash identifier: cTXLO5UIZV6yRNwEddhhgv0pqvl1W2r26cIcbV3JXFg=
Subject key identifier: 6C:52:E6:E0:8D:A6:BF:44:50:8E:4F:69:69:F9:DA:02:54:7E:B1:4C
Authority key identifier: AA:57:A6:8F:08:A2:E3:0B:A7:D7:3D:44:C9:A6:E2:40:0F:D0:A3:B1
Certificate issuer: /CN=aa57a68f08a2e30ba7d73d44c9a6e2400fd0a3b1
Certificate serial: 019A54C03B021B12535D6E5DDBDD4CC3B4D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
Manifest number: 08E7
Signing time: Wed 05 Nov 2025 16:01:15 +0000
Manifest this update: Wed 05 Nov 2025 16:01:15 +0000
Manifest next update: Thu 06 Nov 2025 16:01:15 +0000
Files and hashes: 1: _uIcjPbTo2tZZuPbQQgAGU6uFaU.roa (hash: mFbVT5EqFo/vqgifNq4fzGvwXcCU4t6Rafq12c4CSak=)
2: qlemjwii4wun1z1EyabiQA_Qo7E.crl (hash: 7VdLeqPCaT7xp+VxyjvMuXx/nmJ2tjEwTmNqEmcby6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 16:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:c0:3b:02:1b:12:53:5d:6e:5d:db:dd:4c:c3:b4:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa57a68f08a2e30ba7d73d44c9a6e2400fd0a3b1
Validity
Not Before: Nov 5 16:01:15 2025 GMT
Not After : Nov 6 16:01:15 2025 GMT
Subject: CN=6c52e6e08da6bf44508e4f6969f9da02547eb14c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8c:86:84:17:0b:56:8b:22:a3:cc:89:12:73:
ed:75:6b:4a:d4:64:57:b2:28:2d:53:01:c0:dd:b3:
0a:c4:a1:95:64:5c:53:32:ab:5f:de:41:bb:d3:42:
ff:68:de:11:cc:6a:a2:52:04:fa:81:29:0b:45:5f:
87:77:09:94:1d:dd:2c:7a:f8:70:11:ad:11:8c:62:
90:8d:06:26:65:96:b1:ae:7b:5f:5b:21:44:fd:b0:
5e:50:97:57:75:9a:ff:88:25:56:d8:7a:8e:af:02:
e2:d9:6d:26:19:25:3c:77:57:ba:90:64:93:0f:41:
bd:a6:9e:e7:04:81:85:ad:46:d1:21:59:80:57:69:
5b:fe:d5:e1:36:6d:b1:5b:75:d6:87:d9:1f:f7:2d:
fe:5c:6f:7c:79:c8:e6:f9:ff:18:76:84:d8:a7:6d:
0d:eb:84:5c:85:a9:58:ae:4d:ac:de:0d:5e:2a:88:
f4:be:28:ed:96:c2:fb:38:fa:e7:f6:83:21:1e:16:
8e:7f:5e:c6:7c:e3:38:bf:36:f7:cf:07:bd:43:e6:
93:eb:b7:4e:86:a8:85:9c:19:1c:a7:c8:2d:fa:64:
67:e8:98:88:59:cb:34:c4:dd:e6:9d:ce:8c:ae:f6:
9c:25:15:d3:b4:93:c1:28:74:6d:3e:90:5f:92:5b:
5c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:52:E6:E0:8D:A6:BF:44:50:8E:4F:69:69:F9:DA:02:54:7E:B1:4C
X509v3 Authority Key Identifier:
keyid:AA:57:A6:8F:08:A2:E3:0B:A7:D7:3D:44:C9:A6:E2:40:0F:D0:A3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:39:e6:30:ca:4a:b8:ad:d8:fe:42:d6:0e:2e:96:a9:d8:09:
57:81:8b:96:60:f9:33:68:7d:90:54:b2:eb:8c:b8:62:aa:d5:
38:02:03:76:20:25:ce:91:6d:28:09:72:52:eb:74:57:c0:22:
20:c6:34:de:0e:84:f1:07:c0:75:03:61:17:f9:80:67:89:d5:
71:19:dd:cf:5b:3d:12:8c:27:b9:06:b5:0a:c8:b9:60:61:33:
fa:ee:d1:5c:c9:2e:2d:0e:89:07:39:3b:39:cf:30:8e:28:e8:
2f:8c:4a:93:dd:32:2a:01:53:58:8d:f0:62:39:8f:15:29:c5:
44:17:21:87:4b:2a:8c:7d:18:87:db:d2:1f:c5:a9:54:8e:1c:
e1:c7:68:7d:ba:bc:af:52:39:0d:2b:b5:37:f2:ab:b0:1b:44:
cc:e7:af:36:0e:bc:85:49:d0:48:8a:fb:d5:91:58:b3:3a:38:
cb:63:cc:dc:ed:69:56:ba:93:29:28:d4:63:7a:a1:2d:57:0a:
de:53:2c:1d:94:28:ad:03:0e:11:d9:5b:b9:9c:07:e8:e7:65:
a1:ee:a0:fe:b6:c2:53:73:a7:fd:34:40:d3:d4:08:4b:b8:07:
f5:6d:a6:24:a1:a9:a1:32:d2:e9:68:5f:f2:8b:f8:56:d2:0b:
c6:fa:54:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:05:57 2025 by rpki-client