Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
File: qlemjwii4wun1z1EyabiQA_Qo7E.mft (raw, json)
Hash identifier: emtt2/QI9yeqq3e4j2EQy048OQgq0Csllq6VOM/7KKk=
Subject key identifier: FB:E9:3F:1D:F2:39:A8:A4:75:54:01:15:FA:F5:D3:31:DC:CA:56:DC
Authority key identifier: AA:57:A6:8F:08:A2:E3:0B:A7:D7:3D:44:C9:A6:E2:40:0F:D0:A3:B1
Certificate issuer: /CN=aa57a68f08a2e30ba7d73d44c9a6e2400fd0a3b1
Certificate serial: 0199FDDA2D3980E13E4EE6FD4B00426C974A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
Manifest number: 08BA
Signing time: Sun 19 Oct 2025 19:02:37 +0000
Manifest this update: Sun 19 Oct 2025 19:02:37 +0000
Manifest next update: Mon 20 Oct 2025 19:02:37 +0000
Files and hashes: 1: _uIcjPbTo2tZZuPbQQgAGU6uFaU.roa (hash: mFbVT5EqFo/vqgifNq4fzGvwXcCU4t6Rafq12c4CSak=)
2: qlemjwii4wun1z1EyabiQA_Qo7E.crl (hash: fYhoPqZ2+mQRHioPHZcQO0AZOH09AXsPJm1rc9HFtIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:2d:39:80:e1:3e:4e:e6:fd:4b:00:42:6c:97:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa57a68f08a2e30ba7d73d44c9a6e2400fd0a3b1
Validity
Not Before: Oct 19 19:02:37 2025 GMT
Not After : Oct 20 19:02:37 2025 GMT
Subject: CN=fbe93f1df239a8a475540115faf5d331dcca56dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7f:5e:2e:0a:de:a2:e6:e9:60:bb:87:3a:36:
74:0e:0e:7a:71:30:15:0f:ca:98:0f:ab:f7:85:8e:
32:34:8c:33:bc:19:c8:55:66:36:7c:d1:92:45:07:
3d:81:ac:ad:e3:20:1b:0a:0d:fb:34:65:aa:8b:c7:
10:27:0f:36:8b:28:c0:d1:f5:7d:64:7b:c3:93:ea:
0c:3f:f4:07:d4:7a:53:31:a1:1b:02:67:3a:7f:69:
21:78:06:dd:61:ee:b2:e9:6a:17:91:16:88:ce:d2:
9b:ee:65:5f:bf:2d:09:20:f1:71:9c:f4:3a:1a:54:
75:41:e3:85:73:5f:4e:02:77:a1:44:93:56:d7:cc:
3b:d7:07:96:1b:dc:4c:03:eb:09:32:a7:53:11:8b:
17:ff:c5:6b:fa:70:46:b2:cf:b3:cb:a0:5b:df:b1:
17:ce:bb:b9:de:30:35:a3:83:1f:58:42:98:cd:98:
69:aa:3e:2d:50:26:6a:5b:bb:24:68:49:7c:f2:16:
9c:93:36:38:70:01:16:9f:3d:76:c5:8e:c6:35:6f:
b3:e5:79:bd:34:f7:97:40:97:4c:13:5b:0a:60:87:
eb:12:27:c0:bd:5e:94:c0:8e:ae:30:99:35:73:c5:
7a:a9:34:07:ee:4d:53:20:5b:bc:16:d0:d8:35:ab:
1b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E9:3F:1D:F2:39:A8:A4:75:54:01:15:FA:F5:D3:31:DC:CA:56:DC
X509v3 Authority Key Identifier:
keyid:AA:57:A6:8F:08:A2:E3:0B:A7:D7:3D:44:C9:A6:E2:40:0F:D0:A3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:cc:d5:fe:49:7f:c2:01:d5:3e:01:b5:04:0c:e0:55:fa:a0:
25:4a:80:8d:f1:4f:54:b5:bd:f0:04:cb:53:ca:9a:fc:19:96:
be:de:0a:d3:ef:16:18:79:03:c5:37:4b:0d:38:e7:9e:4a:c9:
66:14:a2:aa:9e:d3:83:ed:da:81:b5:67:be:29:4a:b9:d3:cc:
5d:7f:8c:98:c0:fa:cd:b2:a1:b9:85:9c:09:8b:a4:41:69:fc:
d3:62:f4:dd:d1:be:b6:da:67:fb:22:a0:e6:fe:c9:f2:40:8d:
35:2a:d2:44:c7:c3:dc:9c:f2:1c:b6:06:e4:a2:18:ec:c2:92:
3b:7a:48:bd:91:f2:4c:5c:b4:4d:1f:b6:6a:67:d9:32:63:78:
3d:63:db:dc:ce:0d:77:a3:fe:ec:ca:88:c1:d0:7e:43:04:9e:
da:c2:4f:74:58:3a:04:f3:87:5a:81:4c:e8:da:97:dc:dc:c3:
d1:58:4b:15:af:10:6c:21:4b:e4:71:45:f2:70:ff:60:69:5a:
0f:15:c9:96:6e:96:ee:7b:fa:d0:96:19:12:8b:a4:68:b7:99:
cd:1b:68:e8:17:d0:27:c4:66:37:78:b7:7e:14:ed:02:97:dc:
91:43:52:f0:1a:a9:08:5f:a3:2c:31:21:09:9b:c0:46:c0:1a:
47:52:74:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:42:28 2025 by rpki-client