Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
File: qlemjwii4wun1z1EyabiQA_Qo7E.mft (raw, json)
Hash identifier: Gumyd7ZaMnQ4nawegCDYVhaToXgRdYtqD+mG6ydRSxw=
Subject key identifier: 17:19:CA:66:61:55:3D:35:05:2E:5D:3D:5B:E7:5D:5F:74:1F:AD:E7
Authority key identifier: AA:57:A6:8F:08:A2:E3:0B:A7:D7:3D:44:C9:A6:E2:40:0F:D0:A3:B1
Certificate issuer: /CN=aa57a68f08a2e30ba7d73d44c9a6e2400fd0a3b1
Certificate serial: 019A56AD998A14363EDB31BC555C32AAAD7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
Manifest number: 08E8
Signing time: Thu 06 Nov 2025 01:00:08 +0000
Manifest this update: Thu 06 Nov 2025 01:00:08 +0000
Manifest next update: Fri 07 Nov 2025 01:00:08 +0000
Files and hashes: 1: _uIcjPbTo2tZZuPbQQgAGU6uFaU.roa (hash: mFbVT5EqFo/vqgifNq4fzGvwXcCU4t6Rafq12c4CSak=)
2: qlemjwii4wun1z1EyabiQA_Qo7E.crl (hash: 0E1YSDw1eACiUXp6yRMRM9K3T/4eZQCC64UEFgsgAZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:56:ad:99:8a:14:36:3e:db:31:bc:55:5c:32:aa:ad:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa57a68f08a2e30ba7d73d44c9a6e2400fd0a3b1
Validity
Not Before: Nov 6 01:00:08 2025 GMT
Not After : Nov 7 01:00:08 2025 GMT
Subject: CN=1719ca6661553d35052e5d3d5be75d5f741fade7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bf:26:66:55:4d:d5:36:dd:c3:26:32:37:ec:
f9:6b:78:ae:76:68:ff:b1:8b:d6:f5:9f:3c:92:a8:
10:06:94:39:07:85:11:5a:33:7f:b6:66:9a:0a:a0:
68:1e:0a:85:58:47:63:df:98:6d:91:04:18:b5:19:
1e:46:7e:ef:46:25:37:2d:df:97:19:c4:b6:31:9e:
4e:45:4f:f4:f1:8c:99:70:24:c6:ed:9a:23:bb:9f:
15:2b:96:98:b0:a8:c1:b2:f4:2d:96:d6:ed:a9:d2:
a8:57:54:6c:1b:e9:05:fd:79:9e:d8:42:45:61:67:
ff:00:e6:c8:77:89:11:58:f5:38:da:8f:21:70:ea:
5c:86:e8:ab:d1:35:e7:db:16:03:da:a0:37:1d:c9:
1b:04:2d:59:22:62:d7:83:8b:ce:e0:8c:39:98:a9:
88:9e:59:33:9b:72:5b:04:47:5a:50:5e:15:1d:bd:
8f:27:14:dd:df:f8:84:1e:d9:9c:a4:63:c5:3d:ec:
dd:b4:3d:e1:72:a3:42:23:87:42:71:19:a0:f6:af:
ad:28:8d:4c:68:f0:3c:6f:57:13:29:b6:5b:8e:03:
09:f5:b9:1e:90:29:65:7d:be:ce:de:e5:27:bc:bf:
a0:20:29:bd:1d:56:ac:ff:df:a4:f8:3c:0c:81:0d:
7b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:19:CA:66:61:55:3D:35:05:2E:5D:3D:5B:E7:5D:5F:74:1F:AD:E7
X509v3 Authority Key Identifier:
keyid:AA:57:A6:8F:08:A2:E3:0B:A7:D7:3D:44:C9:A6:E2:40:0F:D0:A3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:ff:98:89:de:65:18:42:94:2b:51:81:b3:2a:5b:6a:93:c2:
ba:c5:45:1f:16:1a:9d:77:83:4d:44:20:f6:4a:5a:63:58:f3:
62:78:b9:26:43:5d:ed:f4:eb:2c:a9:0f:8f:01:f9:72:27:6f:
f0:a6:61:97:c7:eb:bb:64:1c:29:85:44:12:d4:a1:57:53:1f:
ed:9c:93:bb:e7:d4:53:b3:71:43:e9:da:07:64:06:7a:ab:bb:
27:a3:93:11:96:fd:0a:d1:73:ce:43:b6:06:b6:a8:01:ce:d1:
f8:e5:72:65:21:d5:ea:69:ed:55:5a:7b:9c:01:7c:67:9d:52:
60:37:0c:1b:19:48:6d:77:d3:dd:42:74:84:8f:12:13:33:b6:
a7:d6:08:ac:5c:99:ad:59:29:7d:db:71:95:27:c6:f3:d7:21:
eb:5a:64:cf:12:1e:2c:5f:58:4e:c5:f6:bd:72:fa:ec:89:64:
95:3d:1e:48:2e:b9:ac:14:25:e4:be:43:10:09:5b:42:47:8b:
2b:60:d6:bc:5c:e9:ae:3c:1e:99:5c:d3:0f:c0:bd:5e:65:69:
f2:1f:d5:1b:c6:55:01:9f:44:80:d3:1c:aa:d7:c3:10:d4:33:
fc:20:6a:11:67:3b:e1:d9:4d:6e:7f:70:06:17:96:5c:d1:3b:
e8:e6:53:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpWrZmKFDY+2zG8VVwyqq17MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNTdhNjhmMDhhMmUzMGJhN2Q3M2Q0NGM5YTZlMjQwMGZk
MGEzYjEwHhcNMjUxMTA2MDEwMDA4WhcNMjUxMTA3MDEwMDA4WjAzMTEwLwYDVQQD
EygxNzE5Y2E2NjYxNTUzZDM1MDUyZTVkM2Q1YmU3NWQ1Zjc0MWZhZGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwb8mZlVN1TbdwyYyN+z5a3iudmj/
sYvW9Z88kqgQBpQ5B4URWjN/tmaaCqBoHgqFWEdj35htkQQYtRkeRn7vRiU3Ld+X
GcS2MZ5ORU/08YyZcCTG7Zoju58VK5aYsKjBsvQtltbtqdKoV1RsG+kF/Xme2EJF
YWf/AObId4kRWPU42o8hcOpchuir0TXn2xYD2qA3HckbBC1ZImLXg4vO4Iw5mKmI
nlkzm3JbBEdaUF4VHb2PJxTd3/iEHtmcpGPFPezdtD3hcqNCI4dCcRmg9q+tKI1M
aPA8b1cTKbZbjgMJ9bkekCllfb7O3uUnvL+gICm9HVas/9+k+DwMgQ17IQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBcZymZhVT01BS5dPVvnXV90H63nMB8GA1UdIwQY
MBaAFKpXpo8IouMLp9c9RMmm4kAP0KOxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWxlbWp3aWk0d3VuMXoxRXlhYmlRQV9RbzdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC85YjczNzctZDQ2NS00NmI5LWE1NjMt
ODQ2OGU0OWYwMGVkLzEvcWxlbWp3aWk0d3VuMXoxRXlhYmlRQV9RbzdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC85YjczNzctZDQ2NS00NmI5LWE1NjMtODQ2OGU0OWYwMGVk
LzEvcWxlbWp3aWk0d3VuMXoxRXlhYmlRQV9RbzdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAef+Yid5l
GEKUK1GBsypbapPCusVFHxYanXeDTUQg9kpaY1jzYni5JkNd7fTrLKkPjwH5cidv
8KZhl8fru2QcKYVEEtShV1Mf7ZyTu+fUU7NxQ+naB2QGequ7J6OTEZb9CtFzzkO2
BraoAc7R+OVyZSHV6mntVVp7nAF8Z51SYDcMGxlIbXfT3UJ0hI8SEzO2p9YIrFyZ
rVkpfdtxlSfG89ch61pkzxIeLF9YTsX2vXL67IlklT0eSC65rBQl5L5DEAlbQkeL
K2DWvFzprjwemVzTD8C9XmVp8h/VG8ZVAZ9EgNMcqtfDENQz/CBqEWc74dlNbn9w
BheWXNE76OZTmg==
-----END CERTIFICATE-----
Generated at Thu Nov 6 02:40:32 2025 by rpki-client