Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft
File: qlPNLFhKPcFiCLqTsNt0dzs_I74.mft (raw, json)
Hash identifier: 8hhz+4YtM+sUIO7dw3wMjpuhTM/JUXTZpsTvxuFLDis=
Subject key identifier: C3:3A:A0:58:A5:75:9A:80:A8:70:2B:22:48:E2:39:84:14:5F:BA:24
Authority key identifier: AA:53:CD:2C:58:4A:3D:C1:62:08:BA:93:B0:DB:74:77:3B:3F:23:BE
Certificate issuer: /CN=aa53cd2c584a3dc16208ba93b0db74773b3f23be
Certificate serial: 01993124CD006D635968AD890ED172B06FD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlPNLFhKPcFiCLqTsNt0dzs_I74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft
Manifest number: 1679
Signing time: Wed 10 Sep 2025 01:01:59 +0000
Manifest this update: Wed 10 Sep 2025 01:01:59 +0000
Manifest next update: Thu 11 Sep 2025 01:01:59 +0000
Files and hashes: 1: eIuvCKiUKqnjxChjtjEAvL7JvnI.roa (hash: wyV3lMaUUP7vVQqM6FlcaWTPKvU8kW+p1xMsgVv6OJA=)
2: qlPNLFhKPcFiCLqTsNt0dzs_I74.crl (hash: s3pWgukUGlvrDz1Mi3PcDULkG+O3yBKgwPiMu+KXmY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlPNLFhKPcFiCLqTsNt0dzs_I74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:24:cd:00:6d:63:59:68:ad:89:0e:d1:72:b0:6f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa53cd2c584a3dc16208ba93b0db74773b3f23be
Validity
Not Before: Sep 10 01:01:59 2025 GMT
Not After : Sep 11 01:01:59 2025 GMT
Subject: CN=c33aa058a5759a80a8702b2248e23984145fba24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:94:1b:e1:0c:e8:ef:20:62:b5:48:76:9e:9e:
c9:09:9d:a7:5c:66:9c:55:7c:15:68:24:7f:e7:40:
aa:01:ed:2f:fa:f4:35:0a:71:3d:a4:3d:d3:6b:71:
8f:33:95:b5:68:05:44:7e:c0:1a:76:96:46:5b:5c:
50:59:ac:22:64:2b:d4:c8:d1:37:8c:7c:b0:20:bd:
ff:e8:1e:62:f3:5a:a9:d0:a2:77:ae:b9:89:4a:e7:
6d:8b:25:2c:df:12:0a:a0:bc:0d:00:d6:da:43:f9:
62:c8:9f:31:56:e5:c0:6e:9b:0f:07:f2:4b:a8:c4:
8c:e0:e8:5d:39:a0:aa:a0:dc:7e:00:9e:b5:63:d5:
bf:63:f2:97:f0:53:ec:ce:de:5d:b6:34:37:56:9b:
8b:a2:c8:29:ef:f7:6c:0b:e9:75:ed:af:20:d4:1d:
ed:b0:41:fe:a3:9c:0e:4e:52:7c:3a:62:44:44:53:
01:30:88:4e:5c:7a:aa:1e:34:b4:eb:1e:60:d5:c2:
cc:bb:8f:b8:af:ee:14:5b:f9:47:ec:36:d2:80:bc:
8d:0f:3b:a1:0e:c0:88:29:d9:8f:84:c4:b4:24:e3:
46:9d:cc:50:ab:34:89:d0:bd:a1:ac:31:eb:8b:f2:
09:05:e7:6c:60:47:9b:ae:b2:ca:04:0f:b9:52:fd:
ae:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:3A:A0:58:A5:75:9A:80:A8:70:2B:22:48:E2:39:84:14:5F:BA:24
X509v3 Authority Key Identifier:
keyid:AA:53:CD:2C:58:4A:3D:C1:62:08:BA:93:B0:DB:74:77:3B:3F:23:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlPNLFhKPcFiCLqTsNt0dzs_I74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:70:b4:5c:dd:74:b2:c9:96:27:0b:03:a3:e9:b1:88:6c:c2:
ff:82:ac:0e:88:4b:75:b9:7b:4d:5b:8b:14:d6:70:f5:e4:7a:
b7:ef:66:d2:0b:eb:78:dc:21:77:71:86:54:e6:4f:2c:e5:78:
2d:77:7a:a2:17:7e:9a:c8:52:a4:c5:41:ac:40:17:64:e7:ff:
91:bd:9d:9e:c7:38:38:04:9d:39:f0:f9:c7:6a:1b:d3:f5:8f:
95:de:e1:1d:c0:5c:60:f2:8c:8a:1a:48:42:bc:60:aa:5a:d2:
6f:2a:bb:b5:8b:d6:b1:cd:40:52:a1:5b:b6:4c:83:a1:b7:8b:
85:45:48:8f:4a:db:0e:1e:03:5b:6c:b2:25:fe:6c:09:aa:37:
07:98:28:8d:d5:7c:dd:a4:77:f4:b3:ee:e3:03:cc:e9:c9:1c:
4c:8b:ee:82:b2:b2:db:2f:5c:48:65:ab:95:3b:84:72:39:63:
af:0e:c8:43:6e:14:f1:84:50:b6:29:55:5e:04:44:49:4c:f2:
df:0f:f8:da:17:f5:cd:24:a6:e6:f6:3f:55:23:24:af:a2:e1:
e6:20:57:6d:f2:b9:56:0a:c5:a4:3f:72:33:9c:1e:9d:0c:a1:
10:11:c5:32:8c:c8:96:d2:ad:7c:95:24:80:d9:69:cf:52:03:
5d:bd:f5:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 03:53:06 2025 by rpki-client