Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/qTThBr5Thu0QZ17g3jNtx34gDVk.mft
File: qTThBr5Thu0QZ17g3jNtx34gDVk.mft (raw, json)
Hash identifier: HK8oanYSPu34nuQjRFZ/ZzQOjvwmcZiO6ibxg5TIfKM=
Subject key identifier: 81:F3:83:46:CA:28:04:36:7C:EF:A0:C7:45:0F:16:D5:A0:5E:36:90
Authority key identifier: A9:34:E1:06:BE:53:86:ED:10:67:5E:E0:DE:33:6D:C7:7E:20:0D:59
Certificate issuer: /CN=a934e106be5386ed10675ee0de336dc77e200d59
Certificate serial: 0198D5BBE91EC4DB3562B0CAB422BCF33B3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTThBr5Thu0QZ17g3jNtx34gDVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/qTThBr5Thu0QZ17g3jNtx34gDVk.mft
Manifest number: 049B
Signing time: Sat 23 Aug 2025 07:01:58 +0000
Manifest this update: Sat 23 Aug 2025 07:01:58 +0000
Manifest next update: Sun 24 Aug 2025 07:01:58 +0000
Files and hashes: 1: qTThBr5Thu0QZ17g3jNtx34gDVk.crl (hash: g6gJhwGtUPSWXtB9AWDljdyyBkCT3x4/tWa29GIisgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/qTThBr5Thu0QZ17g3jNtx34gDVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/qTThBr5Thu0QZ17g3jNtx34gDVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qTThBr5Thu0QZ17g3jNtx34gDVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:e9:1e:c4:db:35:62:b0:ca:b4:22:bc:f3:3b:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a934e106be5386ed10675ee0de336dc77e200d59
Validity
Not Before: Aug 23 07:01:58 2025 GMT
Not After : Aug 24 07:01:58 2025 GMT
Subject: CN=81f38346ca2804367cefa0c7450f16d5a05e3690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:44:4d:2a:af:86:6d:8a:89:8d:34:27:b7:f3:
3b:06:38:f1:b4:5b:fe:62:c0:87:50:25:eb:e5:3a:
6a:40:72:2d:22:c5:70:77:30:1a:c1:42:e7:df:fd:
c2:f9:8e:12:2f:1f:b1:a2:c8:d1:7b:9f:ad:96:b3:
46:2c:b0:5e:de:e6:3b:6e:dd:3b:f4:07:1e:9a:e8:
77:1e:f3:e7:23:aa:02:e8:84:3a:f1:3d:03:fa:16:
2d:fa:12:3e:60:6c:e4:58:55:77:2a:5f:38:0d:37:
db:cc:77:2a:fe:21:7e:ef:d8:9a:39:d6:5c:a0:2d:
f8:0b:cc:b2:c9:a7:2a:6a:c4:5a:7d:88:61:2d:a5:
88:6c:75:25:f8:53:d9:28:6f:d2:f6:d7:97:07:38:
2b:15:be:e5:ac:c3:5a:b4:ef:3f:04:16:9e:b8:68:
fd:85:44:c5:58:0f:f1:ee:06:2a:f4:c5:ed:7e:de:
a9:f5:d6:03:1b:c5:64:cb:a5:79:e8:8d:59:6c:c9:
27:05:39:01:63:af:7f:73:a9:d8:b3:ab:af:e1:26:
78:f2:26:51:98:10:9c:36:3f:75:c2:bf:91:64:d6:
0a:39:59:73:50:37:16:3e:77:41:b3:11:4d:f5:7a:
ff:06:79:05:8c:9c:b7:61:66:cd:b9:9d:b9:07:5f:
eb:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F3:83:46:CA:28:04:36:7C:EF:A0:C7:45:0F:16:D5:A0:5E:36:90
X509v3 Authority Key Identifier:
keyid:A9:34:E1:06:BE:53:86:ED:10:67:5E:E0:DE:33:6D:C7:7E:20:0D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTThBr5Thu0QZ17g3jNtx34gDVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/qTThBr5Thu0QZ17g3jNtx34gDVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/qTThBr5Thu0QZ17g3jNtx34gDVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:99:96:42:17:dc:23:7b:e0:09:4e:4e:3d:33:e0:d8:fd:fc:
fb:33:7b:aa:f8:f7:be:a9:73:d7:15:d3:28:0c:6f:d0:7d:2b:
3d:6e:77:d5:85:22:33:4a:76:d1:2d:3f:cc:35:76:ba:4f:5c:
f2:33:2d:26:dc:96:cc:36:f5:8b:3f:18:ec:a7:0d:ff:16:e1:
dc:c7:e6:ff:aa:64:ec:18:aa:aa:69:05:cd:5c:62:8e:af:10:
60:69:7a:fb:14:18:bd:d9:b3:9d:73:02:0d:d7:56:54:e3:07:
4a:da:dc:19:61:b5:20:28:7e:4d:85:a3:84:93:b3:da:24:8e:
f0:cb:03:f0:3a:1e:af:5b:9e:0a:8c:50:ac:eb:d4:32:aa:4e:
c8:23:43:57:cf:23:ff:a8:a3:64:88:ac:e1:ae:e1:67:dd:ab:
a1:cf:8d:12:5b:0b:07:85:a6:3e:59:94:bf:bc:fb:65:38:ef:
18:20:1e:ef:07:db:87:10:e1:a9:35:f9:d8:b7:f0:1b:6b:ef:
0c:4f:da:1a:a0:a7:b2:ff:fb:3d:a9:20:c8:70:be:46:09:00:
f8:e8:c5:82:b6:c8:6e:1a:c0:08:db:3f:af:f7:49:d8:8a:3e:
40:60:3d:4e:e9:4e:c5:49:6f:bf:35:b1:29:44:8e:0a:f4:00:
eb:1b:4c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:39:57 2025 by rpki-client