Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
File: qlemjwii4wun1z1EyabiQA_Qo7E.mft (raw, json)
Hash identifier: pZzUmFRVRWnCvPl4rIYHOAtxSE6rKN/Ax+I8VzjqWkA=
Subject key identifier: E7:01:DC:F0:FB:9D:70:D1:36:1D:01:22:99:BE:93:61:B8:23:E3:19
Authority key identifier: AA:57:A6:8F:08:A2:E3:0B:A7:D7:3D:44:C9:A6:E2:40:0F:D0:A3:B1
Certificate issuer: /CN=aa57a68f08a2e30ba7d73d44c9a6e2400fd0a3b1
Certificate serial: 0198D47424DC764F2E13846EA18419514DB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
Manifest number: 0820
Signing time: Sat 23 Aug 2025 01:03:58 +0000
Manifest this update: Sat 23 Aug 2025 01:03:58 +0000
Manifest next update: Sun 24 Aug 2025 01:03:58 +0000
Files and hashes: 1: _uIcjPbTo2tZZuPbQQgAGU6uFaU.roa (hash: mFbVT5EqFo/vqgifNq4fzGvwXcCU4t6Rafq12c4CSak=)
2: qlemjwii4wun1z1EyabiQA_Qo7E.crl (hash: 9UW6hE2JUxG9db0hOG9fjkenkm9nioly2eGGKEAcPmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:24:dc:76:4f:2e:13:84:6e:a1:84:19:51:4d:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa57a68f08a2e30ba7d73d44c9a6e2400fd0a3b1
Validity
Not Before: Aug 23 01:03:58 2025 GMT
Not After : Aug 24 01:03:58 2025 GMT
Subject: CN=e701dcf0fb9d70d1361d012299be9361b823e319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1b:79:87:e9:94:7f:5c:c7:fb:e5:06:84:65:
ad:9b:34:af:4b:0d:5c:7e:7c:aa:fb:46:62:ef:3e:
24:14:dd:f8:99:1c:73:8d:4e:32:f3:55:98:cd:a4:
54:ea:46:10:60:68:d0:85:dd:38:3b:1a:0d:2e:2c:
96:55:78:e4:aa:70:8c:eb:13:aa:24:7c:51:2e:7b:
4b:f3:73:bc:a1:5c:a3:aa:b0:4b:38:ce:d4:44:1b:
5c:aa:e3:17:c8:48:18:56:87:1f:78:fb:2e:b9:b2:
02:b4:03:e5:58:a4:05:64:01:2f:26:46:ec:01:ff:
ea:2c:b6:4b:55:bc:ee:42:5a:d2:e3:78:24:88:61:
75:30:ae:1d:b3:d0:1d:94:fd:97:ba:ce:63:74:b6:
69:02:4a:e4:af:bc:ff:0d:0f:70:bc:d7:5d:d7:b5:
5c:85:1f:25:61:d3:74:f2:dd:7b:62:58:46:cf:cf:
14:47:2a:b7:70:ca:51:ce:16:2f:75:e1:d8:96:d6:
94:fc:10:60:dd:68:07:3f:23:ec:5e:f0:53:e7:d5:
e4:ca:a5:4a:47:4e:af:17:e9:c9:9a:d7:e0:85:e0:
3f:9b:51:56:46:6d:37:cc:55:89:93:48:ca:b2:54:
75:e1:af:5e:3a:0d:8c:ba:3c:9d:0d:a1:07:15:12:
71:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:01:DC:F0:FB:9D:70:D1:36:1D:01:22:99:BE:93:61:B8:23:E3:19
X509v3 Authority Key Identifier:
keyid:AA:57:A6:8F:08:A2:E3:0B:A7:D7:3D:44:C9:A6:E2:40:0F:D0:A3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:6f:75:31:12:eb:9c:48:10:7a:1f:3d:fb:91:e5:cf:54:cf:
27:98:8d:3b:38:7b:41:eb:8d:27:6c:98:29:9e:1f:cb:ba:a1:
df:60:a0:eb:11:6c:ef:ac:e4:20:ef:5a:aa:be:0a:d3:5c:1c:
5f:0d:ef:5e:ff:62:3a:11:66:7d:9a:72:1d:b6:f6:e8:dd:7c:
a2:a5:c1:b2:48:f4:1b:c8:8d:68:91:a6:a8:c9:26:72:9e:53:
c8:79:a2:b7:de:4e:c6:7e:df:97:e1:a1:7d:77:6b:23:47:c2:
22:7e:e4:6e:2b:d4:25:16:1f:9e:3d:ed:0c:a0:ea:c8:86:80:
2a:48:8d:92:d7:21:b0:14:55:d3:3d:cf:87:07:f4:95:75:b8:
37:ef:33:c3:d8:00:b5:f1:42:22:c8:be:ed:80:d4:c6:69:41:
44:cf:c7:4e:b2:66:29:2a:0e:8c:fd:20:58:50:bf:a2:63:71:
bc:0d:f5:53:4c:40:c1:d8:02:5a:ed:8e:9e:9c:56:2b:26:f6:
99:36:1d:b2:30:24:39:a2:e4:d0:5b:fd:2e:86:ff:3e:0a:1c:
92:8f:4f:24:e1:7d:1b:95:19:35:0a:ab:0b:fe:1b:73:71:2d:
6e:51:1d:b0:c1:ac:68:73:e5:c8:1b:2d:90:d5:f7:02:43:72:
f8:cb:c5:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:10 2025 by rpki-client