Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.mft
File: qlfg60pFBqGasu_5iaZ9VZuYzBo.mft (raw, json)
Hash identifier: RziCfhRxslabReqIvXx+V2voHpp4mUUljq/q2p1x9uY=
Subject key identifier: 11:35:44:E3:46:CD:A0:13:7E:F7:1F:C6:01:FE:A4:49:1C:E4:6D:9E
Authority key identifier: AA:57:E0:EB:4A:45:06:A1:9A:B2:EF:F9:89:A6:7D:55:9B:98:CC:1A
Certificate issuer: /CN=aa57e0eb4a4506a19ab2eff989a67d559b98cc1a
Certificate serial: 019921B27E97540EDBBF1C630AB9C40DF72E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlfg60pFBqGasu_5iaZ9VZuYzBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.mft
Manifest number: 1674
Signing time: Sun 07 Sep 2025 01:02:49 +0000
Manifest this update: Sun 07 Sep 2025 01:02:49 +0000
Manifest next update: Mon 08 Sep 2025 01:02:49 +0000
Files and hashes: 1: qlMDWlG-JNx16-NWJFTyN9idn8E.roa (hash: E945kOZUUQnkihDV8A7yVqNkz5KAfzQzs4QO1zB4q98=)
2: qlfg60pFBqGasu_5iaZ9VZuYzBo.crl (hash: P2ISwukSSwJpg9WhME5sAxkKaTMscdOURXNR6AgJV24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlfg60pFBqGasu_5iaZ9VZuYzBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:7e:97:54:0e:db:bf:1c:63:0a:b9:c4:0d:f7:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa57e0eb4a4506a19ab2eff989a67d559b98cc1a
Validity
Not Before: Sep 7 01:02:49 2025 GMT
Not After : Sep 8 01:02:49 2025 GMT
Subject: CN=113544e346cda0137ef71fc601fea4491ce46d9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:41:3f:c6:63:4c:28:ad:29:27:83:5d:1e:63:
d4:d8:0e:5f:56:8a:ee:3c:9e:60:61:29:34:05:46:
40:85:9b:0e:d5:65:b1:35:0e:f4:3e:54:02:13:17:
00:c5:91:75:42:08:bd:ea:ca:8a:ac:f1:21:04:86:
9f:bd:2d:71:69:49:66:27:45:dc:a3:3c:4d:d3:41:
24:66:dd:94:64:cf:7e:13:3e:59:7e:b8:d4:a6:f3:
60:06:b5:06:0b:e0:3e:31:33:f0:1c:e9:14:95:98:
5e:28:09:42:b7:87:66:95:d3:44:a5:9f:fb:59:cf:
9b:6a:a0:37:84:9a:4a:e7:0c:24:92:16:33:65:a4:
53:77:fe:02:f8:ef:07:3e:d6:01:eb:f8:ca:2d:8a:
2f:d2:3c:5d:8e:ec:7d:8a:f2:66:fa:fb:ea:cb:bf:
5e:a0:8e:ed:5f:1f:ea:4f:15:29:a4:0d:b9:81:e8:
63:42:02:e9:4a:66:c5:a9:20:db:01:d3:4e:b5:b7:
f1:df:31:b8:b2:88:af:5b:4c:7c:e4:aa:58:eb:26:
8f:bf:30:61:e2:e1:45:70:e0:88:2a:cb:bc:d5:35:
83:c8:28:61:fe:b2:e1:fd:e5:74:0a:df:97:c3:20:
75:ac:97:36:db:a9:76:f2:11:7c:17:5a:c9:f8:ff:
d4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:35:44:E3:46:CD:A0:13:7E:F7:1F:C6:01:FE:A4:49:1C:E4:6D:9E
X509v3 Authority Key Identifier:
keyid:AA:57:E0:EB:4A:45:06:A1:9A:B2:EF:F9:89:A6:7D:55:9B:98:CC:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlfg60pFBqGasu_5iaZ9VZuYzBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:d3:5a:f5:d2:e6:d4:a3:3e:7a:99:a4:7b:08:78:dc:bc:2c:
56:8e:c7:37:6f:e3:1b:30:72:cc:17:62:20:4d:47:55:7d:e7:
5d:ef:e0:c9:32:7f:c3:b7:b7:c1:a4:39:c3:cb:5b:db:e9:42:
d7:5d:6f:d7:a0:5e:42:4d:91:16:10:f0:80:a0:d0:f0:2b:1b:
1b:d0:4a:7e:2b:1a:d3:9b:f7:8e:3a:4c:7b:12:6e:25:e7:4f:
44:c7:8c:68:a8:1d:f3:ed:90:45:e1:b9:e0:8d:04:82:fd:a0:
93:7b:15:0a:bd:3c:0b:c1:19:1e:c1:17:66:75:02:88:37:89:
53:fd:f6:10:9f:8b:db:22:66:e0:1c:eb:a8:9e:83:ed:b7:13:
0a:7e:fa:0e:1e:1b:3a:7a:83:b7:0e:f7:23:1d:10:1e:ce:21:
74:30:75:7a:32:29:b8:f6:ab:33:72:5e:bc:02:e9:df:ea:5d:
30:de:21:51:cf:23:48:2e:78:83:3b:62:36:82:56:8c:0b:a6:
fa:e5:5a:2d:f8:74:a7:c2:09:fe:0e:44:87:ad:37:8e:04:80:
00:31:b5:2f:d1:e9:28:b9:7b:d7:3c:59:d0:6c:b4:a9:96:f1:
12:be:17:52:ed:46:12:70:21:fc:43:02:41:4a:45:f6:7b:d2:
55:f8:0d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:05:49 2025 by rpki-client