Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.mft
File: qlfg60pFBqGasu_5iaZ9VZuYzBo.mft (raw, json)
Hash identifier: JWwup0nxpZ2jhf7pKi0lRM7yZ2wHbeI4rDekN1P3Ko8=
Subject key identifier: 71:D3:03:44:97:A2:D0:20:18:99:0C:2F:CC:38:1E:78:91:D4:A9:9C
Authority key identifier: AA:57:E0:EB:4A:45:06:A1:9A:B2:EF:F9:89:A6:7D:55:9B:98:CC:1A
Certificate issuer: /CN=aa57e0eb4a4506a19ab2eff989a67d559b98cc1a
Certificate serial: 0198D65F6EBF71A8260AEB2869AA86000EE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlfg60pFBqGasu_5iaZ9VZuYzBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 10:00:34 +0000
Manifest this update: Sat 23 Aug 2025 10:00:34 +0000
Manifest next update: Sun 24 Aug 2025 10:00:34 +0000
Files and hashes: 1: qlMDWlG-JNx16-NWJFTyN9idn8E.roa (hash: E945kOZUUQnkihDV8A7yVqNkz5KAfzQzs4QO1zB4q98=)
2: qlfg60pFBqGasu_5iaZ9VZuYzBo.crl (hash: 0jYTZp5xYBI5yzUNBu9vZf+c0ozMFFE2HsA/yhd+3KQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlfg60pFBqGasu_5iaZ9VZuYzBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:6e:bf:71:a8:26:0a:eb:28:69:aa:86:00:0e:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa57e0eb4a4506a19ab2eff989a67d559b98cc1a
Validity
Not Before: Aug 23 10:00:34 2025 GMT
Not After : Aug 24 10:00:34 2025 GMT
Subject: CN=71d3034497a2d02018990c2fcc381e7891d4a99c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:97:af:7f:53:36:c3:87:d8:aa:ab:ee:4b:a6:
c3:d5:78:c6:0f:da:55:c5:60:7e:73:5d:a9:c2:e4:
8d:e0:33:cd:15:e3:d2:00:2b:aa:b3:b9:55:2d:b2:
86:8e:0f:d3:78:11:56:d3:e1:23:60:b1:27:8c:0f:
47:95:45:c0:13:0e:28:ff:24:69:de:a2:e7:bd:06:
76:67:f5:90:a0:cb:17:f8:fc:d3:b1:28:b1:af:79:
4c:60:84:9e:15:4d:5e:e1:dd:ee:31:ca:14:4f:77:
09:de:ec:49:fb:65:76:a1:3b:a1:99:f4:dd:34:a0:
a8:1d:91:82:9f:c4:a7:52:49:ad:c4:de:72:60:22:
63:54:54:15:d4:ec:87:87:11:25:ed:27:6c:31:bd:
39:ed:01:07:15:93:04:58:80:d3:6a:eb:f5:70:46:
87:a5:af:92:45:5a:d2:24:00:c8:7b:00:53:6e:2c:
5b:8a:74:9e:d4:74:56:67:e8:c0:3e:b2:bd:ea:50:
83:ae:59:91:93:c4:b8:3e:41:33:c4:84:cc:64:cf:
d4:1f:f9:71:68:17:3a:bd:b3:f7:2f:69:9a:10:54:
4f:fe:2f:a9:93:19:83:08:3d:91:4a:11:12:8c:09:
4c:a1:30:fe:0b:12:b9:ea:4a:e4:83:d9:25:47:b8:
65:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D3:03:44:97:A2:D0:20:18:99:0C:2F:CC:38:1E:78:91:D4:A9:9C
X509v3 Authority Key Identifier:
keyid:AA:57:E0:EB:4A:45:06:A1:9A:B2:EF:F9:89:A6:7D:55:9B:98:CC:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlfg60pFBqGasu_5iaZ9VZuYzBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:5e:a5:f6:72:6f:85:04:5a:87:fa:3b:34:7c:3f:e9:77:f2:
22:80:ea:b9:b9:4d:31:81:c8:26:5f:e1:93:28:07:5c:e6:39:
8c:78:e6:cc:86:30:44:9b:db:eb:26:4c:1f:e1:cb:40:2d:16:
41:e4:bf:b4:f6:88:87:b9:23:6b:a6:71:77:bd:da:f2:aa:2c:
3d:fa:e3:bf:59:bc:13:26:96:5b:39:6c:d4:6f:4e:09:c8:75:
ec:cc:8e:58:97:d9:d0:3a:ef:2c:f4:28:36:64:66:db:5f:08:
a3:ef:12:98:19:a1:32:7c:e5:1a:be:b9:44:b1:2a:9f:43:7b:
d8:5e:82:92:71:74:03:2f:2a:8c:40:cf:b2:bb:86:be:21:b5:
a8:ca:b9:a3:b2:4c:3a:90:2d:2d:78:70:b3:73:69:9b:cf:ae:
ae:4c:3b:e6:38:4f:7b:1e:9e:f2:9f:b7:c7:a2:fb:2d:4f:4c:
13:aa:84:e3:72:10:f7:9b:7c:04:85:85:ef:a6:e3:62:a8:4c:
70:75:f9:d9:5a:08:16:9b:94:03:c3:fd:20:e0:de:c5:70:62:
3d:6e:e3:3e:5b:d6:20:85:4d:8f:1d:3b:07:0d:16:26:c5:e4:
6f:8b:ac:59:7a:2e:b7:aa:c1:11:85:6a:58:1b:70:c3:c0:7e:
55:fe:21:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX26/cagmCusoaaqGAA7hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNTdlMGViNGE0NTA2YTE5YWIyZWZmOTg5YTY3ZDU1OWI5
OGNjMWEwHhcNMjUwODIzMTAwMDM0WhcNMjUwODI0MTAwMDM0WjAzMTEwLwYDVQQD
Eyg3MWQzMDM0NDk3YTJkMDIwMTg5OTBjMmZjYzM4MWU3ODkxZDRhOTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Zevf1M2w4fYqqvuS6bD1XjGD9pV
xWB+c12pwuSN4DPNFePSACuqs7lVLbKGjg/TeBFW0+EjYLEnjA9HlUXAEw4o/yRp
3qLnvQZ2Z/WQoMsX+PzTsSixr3lMYISeFU1e4d3uMcoUT3cJ3uxJ+2V2oTuhmfTd
NKCoHZGCn8SnUkmtxN5yYCJjVFQV1OyHhxEl7SdsMb057QEHFZMEWIDTauv1cEaH
pa+SRVrSJADIewBTbixbinSe1HRWZ+jAPrK96lCDrlmRk8S4PkEzxITMZM/UH/lx
aBc6vbP3L2maEFRP/i+pkxmDCD2RShESjAlMoTD+CxK56krkg9klR7hl7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHHTA0SXotAgGJkML8w4HniR1KmcMB8GA1UdIwQY
MBaAFKpX4OtKRQahmrLv+YmmfVWbmMwaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWxmZzYwcEZCcUdhc3VfNWlhWjlWWnVZekJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS83ZmFmZGItZjc0YS00YmExLTk3MDIt
MGZkMDJjNDQyNTNiLzEvcWxmZzYwcEZCcUdhc3VfNWlhWjlWWnVZekJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS83ZmFmZGItZjc0YS00YmExLTk3MDItMGZkMDJjNDQyNTNi
LzEvcWxmZzYwcEZCcUdhc3VfNWlhWjlWWnVZekJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmV6l9nJv
hQRah/o7NHw/6XfyIoDqublNMYHIJl/hkygHXOY5jHjmzIYwRJvb6yZMH+HLQC0W
QeS/tPaIh7kja6Zxd73a8qosPfrjv1m8EyaWWzls1G9OCch17MyOWJfZ0DrvLPQo
NmRm218Io+8SmBmhMnzlGr65RLEqn0N72F6CknF0Ay8qjEDPsruGviG1qMq5o7JM
OpAtLXhws3Npm8+urkw75jhPex6e8p+3x6L7LU9ME6qE43IQ95t8BIWF76bjYqhM
cHX52VoIFpuUA8P9IODexXBiPW7jPlvWIIVNjx07Bw0WJsXkb4usWXout6rBEYVq
WBtww8B+Vf4hOw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:23:58 2025 by rpki-client