Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
File: qlemjwii4wun1z1EyabiQA_Qo7E.mft (raw, json)
Hash identifier: snB1sTiQHigsV9DD7Y7LHJ/2T0NxsAqGe0SXWkC70SM=
Subject key identifier: DC:A0:62:80:D4:03:D6:56:C0:AE:94:73:90:16:63:31:2A:F9:AD:0F
Authority key identifier: AA:57:A6:8F:08:A2:E3:0B:A7:D7:3D:44:C9:A6:E2:40:0F:D0:A3:B1
Certificate issuer: /CN=aa57a68f08a2e30ba7d73d44c9a6e2400fd0a3b1
Certificate serial: 0197B88FCAAD2699CEE0DF2D74DED3AF5FFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
Manifest number: 078D
Signing time: Sat 28 Jun 2025 22:02:00 +0000
Manifest this update: Sat 28 Jun 2025 22:02:00 +0000
Manifest next update: Sun 29 Jun 2025 22:02:00 +0000
Files and hashes: 1: _uIcjPbTo2tZZuPbQQgAGU6uFaU.roa (hash: mFbVT5EqFo/vqgifNq4fzGvwXcCU4t6Rafq12c4CSak=)
2: qlemjwii4wun1z1EyabiQA_Qo7E.crl (hash: 2xIWn6Cu1qCkhZnWEpbDCv/0SmmEx69z+rDv3PcU+u8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:ca:ad:26:99:ce:e0:df:2d:74:de:d3:af:5f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa57a68f08a2e30ba7d73d44c9a6e2400fd0a3b1
Validity
Not Before: Jun 28 22:02:00 2025 GMT
Not After : Jun 29 22:02:00 2025 GMT
Subject: CN=dca06280d403d656c0ae9473901663312af9ad0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b5:c2:4a:52:9c:f3:01:11:62:b3:da:b5:21:
cb:40:22:f1:46:b1:77:cb:de:53:63:f1:58:04:d6:
6c:23:8b:00:d3:a2:07:23:88:47:8a:05:f5:83:ef:
16:93:be:42:5c:1d:c0:2e:7b:83:40:8b:cc:f7:ac:
af:fe:a0:17:81:1e:a9:ef:1f:c2:fa:07:8b:b6:90:
f9:37:47:ee:26:7d:69:55:58:ed:7f:2e:a1:c1:18:
5f:6a:1d:3e:0f:3b:58:b0:0b:90:08:25:2d:e8:ef:
23:1f:ce:d0:5e:ec:ed:36:66:ef:83:3d:fe:a9:13:
99:c8:e2:64:a8:0b:f2:23:b1:72:99:f4:6a:2d:70:
50:38:92:82:8d:e8:0e:10:0c:1f:0c:c0:36:2c:80:
a0:71:55:de:31:a3:2d:3c:68:9f:2c:9c:1f:25:9d:
06:4a:3a:6e:08:b0:e4:2b:df:3a:21:d1:cb:1b:68:
f7:36:17:53:fe:43:49:d0:c4:bb:fe:40:03:5d:35:
ca:32:78:96:40:f2:10:85:a2:8a:c3:6d:d6:ee:bf:
e3:16:62:f5:a0:13:e3:de:91:6b:b2:33:f8:53:06:
4e:1a:c2:02:10:0c:64:56:ba:f8:29:45:55:ec:ab:
e8:bb:ed:6a:99:8b:65:28:83:c7:fa:10:d9:62:73:
cf:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A0:62:80:D4:03:D6:56:C0:AE:94:73:90:16:63:31:2A:F9:AD:0F
X509v3 Authority Key Identifier:
keyid:AA:57:A6:8F:08:A2:E3:0B:A7:D7:3D:44:C9:A6:E2:40:0F:D0:A3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:65:49:2f:a2:58:31:d3:d5:d8:3e:51:94:c5:9b:1e:e4:7e:
65:c3:3b:e6:90:59:6a:39:d2:8f:44:be:f9:61:d9:dc:ee:69:
13:67:4c:b4:a3:c7:8d:57:f9:22:c6:88:41:6d:54:ef:75:b1:
32:71:f8:ee:bf:4f:0d:e6:e0:bc:9b:d7:78:6a:82:85:00:79:
75:35:82:0b:d7:73:0d:c4:37:b5:80:f4:ea:0f:e3:ca:99:87:
25:a7:47:75:f5:c2:b3:b1:f8:7b:7c:10:77:e9:d7:8f:c1:fd:
91:e7:ed:2f:f9:8d:27:a2:79:b9:0d:3c:60:e7:3a:23:ce:7e:
1a:58:95:80:65:20:e0:b5:e1:16:11:39:00:db:80:96:e5:a2:
c9:c9:41:95:8b:32:a8:0a:06:91:46:f0:ba:6a:40:5e:a9:8d:
69:0b:01:46:6a:d0:af:4f:eb:62:76:a2:c0:6b:90:8d:7e:c2:
36:29:11:fe:b3:1c:47:e4:24:0f:3a:a6:fd:61:72:9d:24:20:
6a:07:08:b9:92:6e:a5:8f:c3:c5:0d:ce:9d:6d:f6:fc:ec:77:
7b:88:7c:91:0c:9e:3f:79:ce:3d:c0:1d:09:56:b7:31:15:35:
4b:88:80:c4:db:1b:01:01:34:5d:27:b2:d7:e5:ad:c8:a2:be:
6f:9e:51:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:16:25 2025 by rpki-client