Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.mft
File: qlfg60pFBqGasu_5iaZ9VZuYzBo.mft (raw, json)
Hash identifier: 555oc1OtGmimwSMxZDCupN0Lex/XrPTAQK+7Nwy5Qow=
Subject key identifier: F9:EC:C7:D1:2A:FC:16:76:4C:C3:AF:59:E9:88:E6:22:87:E1:41:50
Authority key identifier: AA:57:E0:EB:4A:45:06:A1:9A:B2:EF:F9:89:A6:7D:55:9B:98:CC:1A
Certificate issuer: /CN=aa57e0eb4a4506a19ab2eff989a67d559b98cc1a
Certificate serial: 019A2A43A28CBE1BE3781329E16CD6EDFC06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlfg60pFBqGasu_5iaZ9VZuYzBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.mft
Manifest number: 16FD
Signing time: Tue 28 Oct 2025 10:01:06 +0000
Manifest this update: Tue 28 Oct 2025 10:01:06 +0000
Manifest next update: Wed 29 Oct 2025 10:01:06 +0000
Files and hashes: 1: qlMDWlG-JNx16-NWJFTyN9idn8E.roa (hash: E945kOZUUQnkihDV8A7yVqNkz5KAfzQzs4QO1zB4q98=)
2: qlfg60pFBqGasu_5iaZ9VZuYzBo.crl (hash: hYNvIY2CGSLWhkZ2223t8H1Sp+udijWkrdfnRGhBraU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlfg60pFBqGasu_5iaZ9VZuYzBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:43:a2:8c:be:1b:e3:78:13:29:e1:6c:d6:ed:fc:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa57e0eb4a4506a19ab2eff989a67d559b98cc1a
Validity
Not Before: Oct 28 10:01:06 2025 GMT
Not After : Oct 29 10:01:06 2025 GMT
Subject: CN=f9ecc7d12afc16764cc3af59e988e62287e14150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6d:ac:d5:d9:d4:c4:76:84:de:dd:4c:23:89:
fe:12:04:59:e6:e6:23:a5:b9:0e:13:cb:da:12:76:
9a:9d:7c:49:d6:7b:22:7c:dd:7c:cc:a0:28:b0:a7:
91:1c:9e:18:2c:9c:29:c7:ab:a4:f3:0c:62:e3:ad:
ec:5d:46:65:e6:2f:cb:a9:8d:b7:89:37:de:fd:8d:
c9:40:35:79:48:c8:04:91:3e:22:70:c4:11:9d:47:
d9:72:82:51:54:0d:5b:c1:56:4c:e8:3c:bc:72:0e:
9b:9d:1c:d6:ce:99:27:a4:52:1a:60:9f:aa:e1:bd:
9a:86:93:ce:1e:20:d7:19:14:96:c6:27:ce:79:0d:
cf:79:85:ce:e9:74:b5:49:7b:48:07:d1:50:60:74:
8b:16:7a:c0:18:01:bf:df:86:ab:a4:e1:db:05:7a:
48:b2:ea:55:80:56:bb:2a:f9:6f:c2:d5:bd:56:84:
ac:5b:88:39:07:d7:56:63:bc:40:44:55:cc:80:17:
6f:e8:08:83:32:88:5a:71:8c:bd:16:3a:db:59:27:
14:1f:f9:c9:db:10:6a:0b:14:80:0a:5e:20:0b:04:
1c:24:d7:58:bd:3d:ff:1d:78:eb:44:de:b7:08:8f:
3f:27:c9:af:cd:7a:53:04:a8:f1:8f:31:b4:c9:f4:
4c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:EC:C7:D1:2A:FC:16:76:4C:C3:AF:59:E9:88:E6:22:87:E1:41:50
X509v3 Authority Key Identifier:
keyid:AA:57:E0:EB:4A:45:06:A1:9A:B2:EF:F9:89:A6:7D:55:9B:98:CC:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlfg60pFBqGasu_5iaZ9VZuYzBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:ae:44:90:fe:5b:52:db:4c:af:85:6c:8c:ae:f2:e3:1a:be:
88:99:b7:79:c4:42:33:91:a9:47:be:a3:b9:59:b7:34:f7:41:
fb:5f:88:b8:c8:69:66:12:50:9b:40:6f:b7:f7:e0:56:f5:71:
b6:fd:bb:45:91:f7:f2:0d:77:cb:20:78:1c:f6:d3:8c:3c:08:
db:29:6b:59:b7:c3:f1:7e:4e:2d:9e:16:9e:90:fc:c9:e5:0a:
87:35:f6:75:fe:6f:18:6d:23:16:05:73:4e:d6:1d:b5:38:30:
af:29:17:39:65:fe:db:6e:cd:bb:3d:90:c6:c2:64:37:3b:90:
61:8a:f1:c9:f0:61:72:1b:39:65:99:f5:c4:86:0b:dd:34:42:
f4:ed:5b:b9:da:d0:10:e0:27:a1:eb:c5:6e:3f:c0:fe:3e:f7:
35:5d:1a:4a:bc:f0:44:2d:42:25:a1:05:ed:cd:4d:25:06:85:
0c:a3:cc:db:48:f6:70:50:c3:1e:32:86:1b:2e:82:48:eb:7f:
8f:8e:98:2d:6f:da:cf:b6:2b:b1:09:0d:47:a9:81:0e:03:98:
1a:34:8a:c8:01:1f:86:1f:67:70:57:4b:33:12:94:10:2c:5d:
80:66:c9:65:97:9e:5a:94:4e:89:81:35:af:32:55:58:cb:24:
a1:9a:4f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 14:50:42 2025 by rpki-client