Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.mft
File: qlfg60pFBqGasu_5iaZ9VZuYzBo.mft (raw, json)
Hash identifier: QdfaeNpdwbPfbiyh4WrZwy4XSriIvLZ+22Xca2o21hE=
Subject key identifier: B3:BF:A7:F6:22:F2:6A:A1:6F:8F:8D:A3:B8:61:77:45:81:2E:AF:E8
Authority key identifier: AA:57:E0:EB:4A:45:06:A1:9A:B2:EF:F9:89:A6:7D:55:9B:98:CC:1A
Certificate issuer: /CN=aa57e0eb4a4506a19ab2eff989a67d559b98cc1a
Certificate serial: 0197C9F06365334345543179AC2C533C7C0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlfg60pFBqGasu_5iaZ9VZuYzBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.mft
Manifest number: 15C2
Signing time: Wed 02 Jul 2025 07:01:03 +0000
Manifest this update: Wed 02 Jul 2025 07:01:03 +0000
Manifest next update: Thu 03 Jul 2025 07:01:03 +0000
Files and hashes: 1: qlMDWlG-JNx16-NWJFTyN9idn8E.roa (hash: E945kOZUUQnkihDV8A7yVqNkz5KAfzQzs4QO1zB4q98=)
2: qlfg60pFBqGasu_5iaZ9VZuYzBo.crl (hash: tFo2jfPMwNHu653+69gclYQc7JL6wGEvRNNcnF87GTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlfg60pFBqGasu_5iaZ9VZuYzBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 07:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:f0:63:65:33:43:45:54:31:79:ac:2c:53:3c:7c:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa57e0eb4a4506a19ab2eff989a67d559b98cc1a
Validity
Not Before: Jul 2 07:01:03 2025 GMT
Not After : Jul 3 07:01:03 2025 GMT
Subject: CN=b3bfa7f622f26aa16f8f8da3b8617745812eafe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:54:96:3f:e8:b6:e0:56:a6:c4:1f:bf:bc:55:
3b:d4:a7:ef:0e:0f:7a:a0:af:5b:48:b8:08:eb:2f:
53:e2:bf:be:62:57:37:d9:65:a5:d0:77:1f:b0:ce:
d0:26:18:de:03:c6:6f:72:21:11:1d:b3:e3:ef:33:
f8:5d:a2:2b:ab:bd:cc:48:36:59:7f:e7:18:6b:54:
01:a5:ce:8d:f3:82:e7:01:13:fe:82:fb:20:c5:84:
22:39:63:5d:4e:73:a6:97:f3:66:d0:42:0b:ba:63:
c8:ff:ab:4c:88:78:48:35:c8:b6:ab:dd:c2:83:36:
e0:8c:7e:d6:ee:62:4c:1e:e6:1b:72:26:78:62:14:
13:46:ef:2e:fa:5c:4c:0c:cc:d6:32:a6:58:8d:a9:
15:44:a6:27:b9:67:3b:2a:18:44:07:db:fc:46:a5:
46:59:38:8b:1d:6a:af:94:d9:c5:cf:01:29:cd:5d:
77:9a:28:87:20:7b:1c:f7:3e:ed:8d:6e:10:d0:b0:
c6:76:99:78:44:95:21:32:b5:a8:8b:a6:bb:94:7b:
b4:69:e6:39:30:c9:39:c4:37:bf:f0:64:45:f1:a5:
65:e5:c5:08:42:2a:0a:92:ad:50:23:3a:6f:fa:ca:
b4:61:3f:ee:b8:d2:3b:2c:9c:af:fd:aa:85:db:13:
5b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:BF:A7:F6:22:F2:6A:A1:6F:8F:8D:A3:B8:61:77:45:81:2E:AF:E8
X509v3 Authority Key Identifier:
keyid:AA:57:E0:EB:4A:45:06:A1:9A:B2:EF:F9:89:A6:7D:55:9B:98:CC:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlfg60pFBqGasu_5iaZ9VZuYzBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:49:51:29:1d:dc:20:e1:2f:cd:41:73:50:0d:c3:21:17:48:
3c:45:a8:94:df:5a:34:29:39:02:56:6e:8f:96:52:9d:72:5f:
5a:65:8c:b6:75:a5:a6:0a:de:da:40:dc:7f:bc:3e:ed:bc:89:
e3:99:63:87:4d:9b:bd:71:cd:2e:e1:44:25:35:20:98:da:bb:
8b:bd:6d:59:91:9f:e5:27:14:2a:5a:7d:de:1c:68:7b:34:2e:
7b:47:17:87:75:78:ea:94:25:3a:10:36:e6:01:ba:e9:dd:ae:
8d:77:9f:0d:04:5e:9b:99:00:73:08:ea:00:c4:47:f2:04:b5:
c0:36:80:45:46:76:46:72:c2:90:f3:67:51:f2:8a:ca:ee:dc:
7c:76:46:0f:8f:99:6b:a5:bb:88:c1:e5:f4:1d:6a:c5:89:da:
6e:8e:b2:1c:da:ff:bd:d6:0d:8e:4f:d5:cb:96:05:50:44:1e:
93:fe:93:27:40:e3:e8:a7:b2:26:4f:ff:fb:12:97:58:6a:f0:
90:65:f3:25:03:c7:d7:68:e9:8d:fd:1f:97:ad:de:a4:c2:3f:
ba:af:33:c5:75:82:3d:8a:95:52:13:ae:18:99:9d:b5:85:ee:
23:47:cf:c5:47:0d:54:53:3a:b8:2b:36:58:5c:ab:17:b1:68:
ee:08:90:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 14:36:26 2025 by rpki-client