Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.mft
File: qlfg60pFBqGasu_5iaZ9VZuYzBo.mft (raw, json)
Hash identifier: xk/ehF21FrM9lP/6siaA+PZzGJWVlX8vvOuDhqh+vjM=
Subject key identifier: 92:EE:DC:77:9F:89:A6:7F:2D:AF:D0:4D:11:4D:28:69:DC:72:E0:62
Authority key identifier: AA:57:E0:EB:4A:45:06:A1:9A:B2:EF:F9:89:A6:7D:55:9B:98:CC:1A
Certificate issuer: /CN=aa57e0eb4a4506a19ab2eff989a67d559b98cc1a
Certificate serial: 0199FBEAA0EEFDC60A541BA926838102F12B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlfg60pFBqGasu_5iaZ9VZuYzBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 10:01:21 +0000
Manifest this update: Sun 19 Oct 2025 10:01:21 +0000
Manifest next update: Mon 20 Oct 2025 10:01:21 +0000
Files and hashes: 1: qlMDWlG-JNx16-NWJFTyN9idn8E.roa (hash: E945kOZUUQnkihDV8A7yVqNkz5KAfzQzs4QO1zB4q98=)
2: qlfg60pFBqGasu_5iaZ9VZuYzBo.crl (hash: ySa20/6YeqML4gE3IBLdcpJ33JG0LtiWLQ66tuXKyUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlfg60pFBqGasu_5iaZ9VZuYzBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:a0:ee:fd:c6:0a:54:1b:a9:26:83:81:02:f1:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa57e0eb4a4506a19ab2eff989a67d559b98cc1a
Validity
Not Before: Oct 19 10:01:21 2025 GMT
Not After : Oct 20 10:01:21 2025 GMT
Subject: CN=92eedc779f89a67f2dafd04d114d2869dc72e062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b1:55:0e:6f:46:62:c6:16:ff:9b:3d:55:f4:
16:2b:de:38:eb:db:b4:77:73:ac:45:90:da:52:d4:
5f:c4:c1:e7:4b:ac:d0:c0:53:67:44:d1:cc:19:97:
6b:d2:36:f1:0f:ea:9e:90:01:fe:e8:9a:43:f3:1f:
ad:09:99:e9:52:51:7d:06:d5:bd:a2:b8:18:03:cb:
36:9a:9f:a1:d4:af:41:83:3a:bc:4e:99:db:8d:7c:
8b:6a:8d:b9:b7:5d:38:6c:60:9d:ba:c2:f1:19:08:
9a:43:29:c1:07:2a:ee:97:bb:d6:61:af:4c:9b:04:
4f:fe:d7:0d:19:ac:d0:1b:16:18:52:75:9b:79:53:
fb:2f:02:d6:5b:a5:8a:72:a0:af:b0:e6:75:58:87:
33:71:69:93:fa:f8:30:b2:b2:86:ad:75:9c:0d:7a:
a3:7e:7c:5c:10:b1:99:b8:6b:4f:74:f0:cf:20:4e:
fc:b5:c9:01:37:d0:fa:d8:7c:19:d1:34:42:0d:2d:
4f:3a:2d:dc:81:1f:c6:1f:d8:65:aa:c2:ba:6e:3c:
e6:d2:d2:60:b1:de:0b:95:ee:f7:d2:3c:48:b5:c3:
b3:db:a0:ee:d2:82:cd:92:cf:db:ea:28:11:8f:02:
8c:12:cb:65:54:ee:85:83:ce:2f:df:64:5b:26:d4:
ad:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:EE:DC:77:9F:89:A6:7F:2D:AF:D0:4D:11:4D:28:69:DC:72:E0:62
X509v3 Authority Key Identifier:
keyid:AA:57:E0:EB:4A:45:06:A1:9A:B2:EF:F9:89:A6:7D:55:9B:98:CC:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlfg60pFBqGasu_5iaZ9VZuYzBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:36:fc:13:ab:6f:5c:8a:89:ad:53:6c:09:70:7c:3e:cb:59:
ef:e5:73:89:7e:c1:01:32:8d:e0:61:60:10:e8:02:e7:79:ea:
cd:e3:9b:05:68:1d:51:bc:71:4b:fb:23:b4:f9:0b:5b:ea:0f:
d7:1a:77:44:16:e8:95:dd:2d:b9:14:3c:65:73:59:ab:5e:cf:
10:f3:31:1f:4d:a6:e1:a3:0c:b5:c3:30:07:6d:88:b6:f4:09:
bf:7d:f6:37:85:a2:5a:34:c5:d6:0e:ce:d4:22:30:79:9d:13:
a6:22:a1:fa:f6:ff:d3:aa:de:46:5e:93:80:7c:37:eb:dc:b8:
a5:57:1d:2f:24:5a:82:8e:90:5c:78:65:79:d7:ed:e6:43:7c:
44:19:d2:e5:94:30:83:86:9d:27:e0:ff:1f:9e:75:aa:5e:0f:
60:2e:65:58:6b:27:78:91:51:bc:44:86:c2:35:20:c7:9b:fa:
08:d6:81:59:3c:a9:78:c0:ae:6b:59:18:7d:0f:24:71:8c:1d:
60:ca:14:a3:82:87:c7:aa:27:da:ea:0c:5a:8a:22:8b:61:11:
55:11:46:ab:61:bf:a7:ac:9b:21:4a:2a:0e:19:4a:61:62:20:
55:9e:1c:68:82:32:ea:d8:83:52:f6:4c:c7:e9:51:ae:e5:20:
03:2a:1e:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76qDu/cYKVBupJoOBAvErMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNTdlMGViNGE0NTA2YTE5YWIyZWZmOTg5YTY3ZDU1OWI5
OGNjMWEwHhcNMjUxMDE5MTAwMTIxWhcNMjUxMDIwMTAwMTIxWjAzMTEwLwYDVQQD
Eyg5MmVlZGM3NzlmODlhNjdmMmRhZmQwNGQxMTRkMjg2OWRjNzJlMDYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLFVDm9GYsYW/5s9VfQWK94469u0
d3OsRZDaUtRfxMHnS6zQwFNnRNHMGZdr0jbxD+qekAH+6JpD8x+tCZnpUlF9BtW9
orgYA8s2mp+h1K9Bgzq8TpnbjXyLao25t104bGCdusLxGQiaQynBByrul7vWYa9M
mwRP/tcNGazQGxYYUnWbeVP7LwLWW6WKcqCvsOZ1WIczcWmT+vgwsrKGrXWcDXqj
fnxcELGZuGtPdPDPIE78tckBN9D62HwZ0TRCDS1POi3cgR/GH9hlqsK6bjzm0tJg
sd4Lle730jxItcOz26Du0oLNks/b6igRjwKMEstlVO6Fg84v32RbJtStxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJLu3HefiaZ/La/QTRFNKGnccuBiMB8GA1UdIwQY
MBaAFKpX4OtKRQahmrLv+YmmfVWbmMwaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWxmZzYwcEZCcUdhc3VfNWlhWjlWWnVZekJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS83ZmFmZGItZjc0YS00YmExLTk3MDIt
MGZkMDJjNDQyNTNiLzEvcWxmZzYwcEZCcUdhc3VfNWlhWjlWWnVZekJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS83ZmFmZGItZjc0YS00YmExLTk3MDItMGZkMDJjNDQyNTNi
LzEvcWxmZzYwcEZCcUdhc3VfNWlhWjlWWnVZekJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOzb8E6tv
XIqJrVNsCXB8PstZ7+VziX7BATKN4GFgEOgC53nqzeObBWgdUbxxS/sjtPkLW+oP
1xp3RBbold0tuRQ8ZXNZq17PEPMxH02m4aMMtcMwB22ItvQJv332N4WiWjTF1g7O
1CIweZ0TpiKh+vb/06reRl6TgHw369y4pVcdLyRago6QXHhledft5kN8RBnS5ZQw
g4adJ+D/H551ql4PYC5lWGsneJFRvESGwjUgx5v6CNaBWTypeMCua1kYfQ8kcYwd
YMoUo4KHx6on2uoMWooii2ERVRFGq2G/p6ybIUoqDhlKYWIgVZ4caIIy6tiDUvZM
x+lRruUgAyoetg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:30:34 2025 by rpki-client