Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
File: qlemjwii4wun1z1EyabiQA_Qo7E.mft (raw, json)
Hash identifier: X/DfqdGs4X2h3ydP3fCRlGphG4+UGuj8+h5ncIjm5/U=
Subject key identifier: 0E:6C:06:AF:9F:B3:DD:68:A6:CA:51:16:20:EA:EB:02:A8:EF:20:6C
Authority key identifier: AA:57:A6:8F:08:A2:E3:0B:A7:D7:3D:44:C9:A6:E2:40:0F:D0:A3:B1
Certificate issuer: /CN=aa57a68f08a2e30ba7d73d44c9a6e2400fd0a3b1
Certificate serial: 0199239EA7EC3E28ED7E9FBD68ACEDE8DAAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
Manifest number: 0849
Signing time: Sun 07 Sep 2025 10:00:23 +0000
Manifest this update: Sun 07 Sep 2025 10:00:23 +0000
Manifest next update: Mon 08 Sep 2025 10:00:23 +0000
Files and hashes: 1: _uIcjPbTo2tZZuPbQQgAGU6uFaU.roa (hash: mFbVT5EqFo/vqgifNq4fzGvwXcCU4t6Rafq12c4CSak=)
2: qlemjwii4wun1z1EyabiQA_Qo7E.crl (hash: uSTTteM4FiVPzAPBHly++/6ZIY2LGXtjjJqBR1EJ9QY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9e:a7:ec:3e:28:ed:7e:9f:bd:68:ac:ed:e8:da:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa57a68f08a2e30ba7d73d44c9a6e2400fd0a3b1
Validity
Not Before: Sep 7 10:00:23 2025 GMT
Not After : Sep 8 10:00:23 2025 GMT
Subject: CN=0e6c06af9fb3dd68a6ca511620eaeb02a8ef206c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8c:db:8e:c6:ef:54:1f:e4:17:3f:78:bd:45:
9d:e1:e0:dc:5f:02:c9:1f:f1:50:84:72:3b:45:05:
ce:96:48:b5:ce:d6:91:80:9e:b5:01:0f:1d:18:b0:
6b:78:9a:2f:bd:39:f3:f6:fd:db:08:d4:33:7c:6e:
87:b5:17:8c:cb:44:10:5d:9a:19:5a:9c:ca:c7:c5:
58:85:95:e9:49:b3:ab:e8:d1:7d:d1:5d:ce:74:bc:
fd:c5:0c:5b:65:30:95:a6:b6:3d:9e:d2:7b:2a:23:
7e:9e:e9:32:9e:ef:b7:2e:77:1c:62:13:6f:b0:9f:
c3:36:b1:54:87:fa:36:5a:0e:7c:d1:43:50:f6:a9:
f0:6d:c8:00:dc:c1:9b:dc:56:84:de:c1:5d:67:20:
57:e0:8c:a9:2c:dc:40:c4:3b:e2:e9:fc:75:46:bf:
f6:1c:2f:1f:db:5e:b1:cb:aa:3a:ce:72:d0:0c:cb:
86:3b:49:56:2d:02:83:94:38:d8:e8:09:de:b2:a6:
88:6a:42:85:66:03:f3:b0:a6:e9:94:5f:8d:6f:59:
a3:19:18:ae:d7:61:01:13:68:ec:30:db:da:bb:04:
c1:9e:e6:d9:52:ac:93:0b:4d:86:7e:05:59:d6:4e:
7e:cb:01:ce:f5:ba:9a:11:a8:87:69:b8:01:7d:e5:
14:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:6C:06:AF:9F:B3:DD:68:A6:CA:51:16:20:EA:EB:02:A8:EF:20:6C
X509v3 Authority Key Identifier:
keyid:AA:57:A6:8F:08:A2:E3:0B:A7:D7:3D:44:C9:A6:E2:40:0F:D0:A3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ed:fd:d6:21:21:53:40:2a:62:2e:78:5c:62:06:ca:22:89:
9e:44:61:91:d0:ac:a1:2e:61:9e:f6:c5:f3:15:1e:bb:bc:11:
d9:49:6b:a9:25:4b:0d:36:8f:af:51:ed:75:47:15:85:ba:6f:
c1:d2:d3:b2:95:bc:6f:57:6a:b4:46:02:c8:b4:0b:c6:cb:5b:
ef:76:f8:56:66:2e:2b:4b:ff:60:dc:29:b2:76:3a:f5:98:33:
72:6a:2a:c4:89:4e:42:8b:aa:95:30:d2:b2:79:a5:36:39:0b:
b3:0d:de:61:7e:ff:86:83:af:5d:79:e6:8e:4f:97:9d:b1:51:
49:51:e0:80:13:92:0d:f0:f7:71:d9:2f:c3:e9:96:4e:19:c2:
e5:38:cd:b7:a5:35:1e:e3:4c:c4:a9:b4:75:86:78:ad:8a:1b:
57:2a:62:20:28:71:df:39:4f:4d:7c:69:a8:59:28:e9:c7:c4:
8a:1b:78:79:f6:ea:4a:38:87:8e:39:26:4a:22:cb:3a:ce:b2:
06:65:bb:0e:15:ab:b4:df:30:c2:61:1a:13:6a:70:f1:65:67:
99:46:36:ba:aa:c7:f9:5c:b4:f7:a5:1b:e0:35:66:57:1c:ab:
ed:fc:8e:de:6a:60:66:9b:c3:20:f6:a9:56:4f:e1:6b:82:83:
46:1f:14:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:18:37 2025 by rpki-client