Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/2b136f-0041-4dc4-ac7b-43ecdc3f4bef/1/QAlHG9muvWlFaoNaP7CjUbBSZgI.mft
File: QAlHG9muvWlFaoNaP7CjUbBSZgI.mft (raw, json)
Hash identifier: /ORUXRhIifpsBQneVw8PzqgsKeYb4WoJsFXFe8++GZI=
Subject key identifier: 6F:2C:B3:3D:76:E7:83:5B:89:D9:7B:D2:3F:4E:74:FB:F4:CC:BB:7E
Authority key identifier: 40:09:47:1B:D9:AE:BD:69:45:6A:83:5A:3F:B0:A3:51:B0:52:66:02
Certificate issuer: /CN=4009471bd9aebd69456a835a3fb0a351b0526602
Certificate serial: 0198D4A822CD93A618E3DB0C66A7C54A0B23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QAlHG9muvWlFaoNaP7CjUbBSZgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/2b136f-0041-4dc4-ac7b-43ecdc3f4bef/1/QAlHG9muvWlFaoNaP7CjUbBSZgI.mft
Manifest number: 65
Signing time: Sat 23 Aug 2025 02:00:45 +0000
Manifest this update: Sat 23 Aug 2025 02:00:45 +0000
Manifest next update: Sun 24 Aug 2025 02:00:45 +0000
Files and hashes: 1: QAlHG9muvWlFaoNaP7CjUbBSZgI.crl (hash: U4XPQ3F1fYojmowcZF5BdOZJzbrbH3MO0GS8B7A1RSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/2b136f-0041-4dc4-ac7b-43ecdc3f4bef/1/QAlHG9muvWlFaoNaP7CjUbBSZgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/2b136f-0041-4dc4-ac7b-43ecdc3f4bef/1/QAlHG9muvWlFaoNaP7CjUbBSZgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QAlHG9muvWlFaoNaP7CjUbBSZgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:22:cd:93:a6:18:e3:db:0c:66:a7:c5:4a:0b:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4009471bd9aebd69456a835a3fb0a351b0526602
Validity
Not Before: Aug 23 02:00:45 2025 GMT
Not After : Aug 24 02:00:45 2025 GMT
Subject: CN=6f2cb33d76e7835b89d97bd23f4e74fbf4ccbb7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f7:df:e2:8e:32:ab:10:a0:8e:b8:34:38:05:
1a:49:06:8c:0c:57:ac:ae:33:01:ad:97:72:13:b9:
13:7b:ec:6c:e8:a1:3e:6f:a7:b8:42:8f:67:38:bd:
49:e3:e8:2d:f9:b0:8c:3c:30:7e:82:c8:fd:7d:e8:
32:27:c9:9e:c4:15:8d:c8:4b:03:97:e0:96:f5:12:
b1:d1:cc:87:00:a7:9a:aa:fb:2b:d9:98:69:fb:4e:
c7:44:f1:2c:97:1d:89:45:11:29:b6:90:11:f8:be:
98:95:98:60:d4:59:6b:8a:31:ef:73:06:a1:48:52:
28:48:9c:3f:50:2b:22:f7:8c:fd:3b:27:9b:a6:00:
66:27:04:e4:4e:84:bb:fd:27:01:87:e1:6d:00:0a:
81:c4:62:25:95:6c:59:ca:4e:d9:0e:b5:c6:f8:19:
8b:18:c6:e1:25:ea:28:98:dd:15:06:2e:6b:35:15:
af:40:f6:67:ad:9d:ba:db:63:be:40:12:c4:12:21:
94:61:ac:90:b9:b6:7c:a5:3c:e7:3d:0d:1a:99:c1:
7b:8a:67:fa:b9:18:c5:53:80:35:63:7f:cb:81:5f:
89:f6:0f:95:d6:da:a1:14:30:7f:6e:f7:30:23:21:
e3:eb:ce:f1:1c:38:30:02:ef:fb:4d:6e:82:56:db:
5e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:2C:B3:3D:76:E7:83:5B:89:D9:7B:D2:3F:4E:74:FB:F4:CC:BB:7E
X509v3 Authority Key Identifier:
keyid:40:09:47:1B:D9:AE:BD:69:45:6A:83:5A:3F:B0:A3:51:B0:52:66:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QAlHG9muvWlFaoNaP7CjUbBSZgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/2b136f-0041-4dc4-ac7b-43ecdc3f4bef/1/QAlHG9muvWlFaoNaP7CjUbBSZgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/2b136f-0041-4dc4-ac7b-43ecdc3f4bef/1/QAlHG9muvWlFaoNaP7CjUbBSZgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:80:f9:14:ef:74:ac:d7:db:bc:8a:80:bf:86:5e:13:fe:2a:
91:08:c9:d0:5c:f2:ec:63:6a:90:08:6f:41:68:d1:e9:61:95:
f9:a4:a5:1f:fe:e1:75:2e:c8:df:c7:6a:0b:7e:9f:8e:37:43:
08:17:38:8d:25:dd:6c:f9:c1:ee:09:33:96:e3:1d:54:08:5e:
d5:00:71:89:15:44:91:21:77:cf:3d:34:75:18:d8:d9:43:b9:
c8:e8:8e:0b:8b:67:3e:f8:6a:c6:d4:59:73:7f:d4:2a:f6:d8:
a0:b6:b3:d1:17:57:f6:73:b5:52:03:f4:c3:a9:00:da:8a:2a:
0b:36:1c:1a:83:d3:cf:d8:45:83:6c:c5:b6:54:d4:97:45:00:
00:8f:9e:57:95:af:05:73:a8:0e:59:e6:7c:49:b5:48:4d:f2:
c5:d1:39:50:0c:54:f3:a0:1a:05:4f:6b:5c:84:53:e1:6b:8c:
7d:74:77:16:94:cb:35:a0:92:f5:d8:56:6b:2e:28:5c:49:c9:
ee:dd:e5:c7:dd:2c:76:e4:4e:44:32:db:5e:9f:54:8b:3f:10:
4d:9f:d7:ee:9a:06:53:91:c7:72:11:2c:23:d2:c4:ea:d7:9c:
30:9d:64:82:47:8d:6e:72:be:76:30:74:30:6a:dd:48:e9:84:
37:e2:79:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:17 2025 by rpki-client