Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft
File: qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft (raw, json)
Hash identifier: DkCbjqvDpgxmCSqxNAZLKb8pF0lcr6umXPX11YwjRxE=
Subject key identifier: CF:CF:C7:79:AE:D6:8E:A0:55:19:4D:D5:2C:09:22:0C:07:6A:17:4B
Authority key identifier: A8:B5:FE:67:C2:07:97:D3:94:15:55:55:4F:8C:98:8C:A2:F7:C1:7B
Certificate issuer: /CN=a8b5fe67c20797d3941555554f8c988ca2f7c17b
Certificate serial: 0197B7EA3BA2A63E6855497C1F2547CAC8D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft
Manifest number: 15BC
Signing time: Sat 28 Jun 2025 19:01:10 +0000
Manifest this update: Sat 28 Jun 2025 19:01:10 +0000
Manifest next update: Sun 29 Jun 2025 19:01:10 +0000
Files and hashes: 1: 4b-QnhZG2HZCZ361-cHusX-pjXk.roa (hash: j7SZly2Vh9/97I+L9CrIza0RGFP+q4iam4ta+RVbZYI=)
2: qLX-Z8IHl9OUFVVVT4yYjKL3wXs.crl (hash: JBKcjL/gXbF6eWotWANMdkshxHlV7T5e+gKm1iOsY14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:3b:a2:a6:3e:68:55:49:7c:1f:25:47:ca:c8:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8b5fe67c20797d3941555554f8c988ca2f7c17b
Validity
Not Before: Jun 28 19:01:10 2025 GMT
Not After : Jun 29 19:01:10 2025 GMT
Subject: CN=cfcfc779aed68ea055194dd52c09220c076a174b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:4f:66:22:c3:92:37:7b:20:13:04:a5:85:2e:
d1:d5:bd:d6:08:ba:ab:cd:bd:dd:82:ec:6b:22:a3:
0c:2a:8c:4c:fc:f9:13:20:ae:08:cc:98:27:a4:e8:
cf:2a:e6:aa:22:0c:d1:d6:fe:e9:b3:92:32:ac:f7:
e7:98:5d:49:19:e7:17:b0:78:63:f7:06:1a:c4:5b:
6a:a0:98:0d:95:57:f2:c3:7a:f4:b5:61:2f:dc:f7:
ef:5d:33:19:f4:ea:f8:12:36:2b:4f:9f:e6:21:1b:
f7:db:00:b5:74:0c:3b:b7:79:4d:b6:90:f1:17:6c:
4d:b7:98:e4:da:79:f2:2a:f1:dd:fb:fa:d8:a0:90:
2c:9d:76:fd:5d:c0:3b:22:42:61:be:b0:31:f6:f2:
a0:ec:46:05:39:fa:36:1b:63:95:0a:53:36:48:4b:
b9:e3:99:f3:28:2b:a8:b4:e8:2e:0d:05:78:54:d0:
d6:cd:1c:8e:7b:6d:74:d0:30:f8:90:81:3f:96:fb:
b1:dc:1f:4f:7a:44:9a:31:f6:7d:95:d9:95:e6:09:
77:00:2d:8d:5e:14:6c:dc:c8:9c:d6:e0:d8:18:34:
ff:43:fe:28:8e:fe:57:d7:1a:7e:93:9b:6e:ba:b4:
0d:77:04:42:bb:a6:fb:11:75:d0:03:2b:21:0f:b8:
70:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:CF:C7:79:AE:D6:8E:A0:55:19:4D:D5:2C:09:22:0C:07:6A:17:4B
X509v3 Authority Key Identifier:
keyid:A8:B5:FE:67:C2:07:97:D3:94:15:55:55:4F:8C:98:8C:A2:F7:C1:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:b7:5c:b8:82:c2:2c:43:f8:04:4b:19:d3:ef:72:1d:d1:4d:
c0:e3:ec:8d:78:c1:a5:ad:d5:18:63:b2:14:16:48:bb:da:83:
7d:1b:b1:42:2e:15:3a:d8:a1:81:39:17:93:ef:88:3f:ba:11:
f5:e3:b3:4a:8f:04:73:ac:7e:57:3d:a4:ab:1f:be:ba:97:28:
c0:f1:e7:e4:a8:58:2f:c6:5f:c5:69:ab:65:6d:99:8e:7c:af:
a4:9f:10:15:4e:1e:1f:07:90:bf:a3:c8:f4:f2:b6:08:83:37:
b6:b0:c9:5e:c4:90:af:45:2d:fd:17:fb:4b:71:c1:e0:d0:37:
26:2c:a3:20:27:91:b0:b7:8a:16:3e:c8:51:40:77:28:3a:44:
a4:00:d4:37:cf:ef:26:2a:64:a1:24:99:b5:4a:18:c4:ba:9c:
f8:82:47:a4:94:1d:82:66:58:6c:96:f9:b8:d3:a9:d4:77:cb:
76:24:84:02:ac:82:63:f6:3b:ef:23:57:5b:2a:d8:b7:70:cd:
a9:e6:0d:bb:c1:24:95:db:97:ab:ed:db:74:33:39:dd:7e:1b:
05:53:03:9a:87:d5:17:a8:2d:34:01:d3:77:b5:2f:00:59:6b:
2d:cc:fa:45:f4:a2:15:da:79:50:70:34:28:12:11:85:4a:b4:
ef:98:d9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:57 2025 by rpki-client